last executing test programs: 1m48.478199362s ago: executing program 4 (id=493): umount2(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x18000000000002a0, 0x86, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0080000000000002177fbac141516e000030a94070203b180008902020000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc", 0x0, 0xf9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffd}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c0008"], 0x178}}, 0x0) r6 = dup(r4) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110700000000fcffffff04000000080005000106000d000000080005008ab9ffff"], 0x34}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x1c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x8, 0x18, 0x0, 0x1, [@generic="01ac0f00"]}]}, 0x1c}], 0x1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(r4, &(0x7f0000000500)="7bd1e1e6eb2e7e3968ed82f61135496ffe6822691887e08fd08f24337c5dd483832047529c83c4bfe2eff1b54bddb6278495c9de9ca0076f704760d549386f1fb9264301be45ded3ee5a842365e860ab1da3ec5f358415cf0382ffe7515970b8fe704f96b42b7f1ef03bcfc92ad838cc342ecf0b9cc173593c322b0cf95d6c5bacb90909a9e2d3a868baf13e7b6e1236378d224ac1b7f38a6a64654bf8b50bb49e42789d08ea64077cad46fb0d8ed17ce785fb1bb58288dc1a7c", 0xba) r9 = socket(0x11, 0x80a, 0x0) io_uring_enter(r2, 0x213a, 0x3b8, 0x8, &(0x7f00000003c0)={[0xfffffffffffffff4]}, 0x8) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r10, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280080000000000000008000900"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e846000040000900ffffffff000000000200000004001f00d04601"], 0x46e8}, 0x1, 0x0, 0x0, 0x4040040}, 0xc000) 1m47.195570169s ago: executing program 4 (id=503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0xa00) 1m46.824896672s ago: executing program 4 (id=505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) unshare(0xc000600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r4, 0xc1007c00, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r7}, 0x10) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000000)={0xa0000001}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x612600, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0xbb8) 1m45.192619789s ago: executing program 4 (id=509): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0xb, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) userfaultfd(0x1) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) sendfile(r5, r5, 0x0, 0x7f03) syz_io_uring_setup(0xcd6, &(0x7f0000000000)={0x0, 0x4c0d, 0x200, 0x2, 0x236}, &(0x7f0000000100), &(0x7f0000000140)) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r6) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000500)={0x50, 0x0, r8, {0x7, 0x1f, 0xffffffff, 0x8000000049311d70, 0x8000, 0x401, 0x8, 0x4000008, 0x0, 0x0, 0x0, 0x200}}, 0x50) fstatfs(r0, &(0x7f0000000280)=""/46) 1m44.035182092s ago: executing program 4 (id=511): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}]}, 0x24}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 1m43.60966508s ago: executing program 4 (id=514): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) get_mempolicy(0x0, &(0x7f00000000c0), 0x7, &(0x7f0000ffb000/0x3000)=nil, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00'}, 0x10) r4 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, &(0x7f0000000080)={0x6, "96ab3f272339cf3935a8824943478cb18a5722d2da3a03f39b5eaee25558f362e7"}}) 1m42.836498861s ago: executing program 32 (id=514): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) get_mempolicy(0x0, &(0x7f00000000c0), 0x7, &(0x7f0000ffb000/0x3000)=nil, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00'}, 0x10) r4 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, &(0x7f0000000080)={0x6, "96ab3f272339cf3935a8824943478cb18a5722d2da3a03f39b5eaee25558f362e7"}}) 12.444611552s ago: executing program 1 (id=803): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xc, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000072c0)=[{{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040), 0x0, &(0x7f00000024c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x28, 0x1, 0x1, [r1, r4, r3, r6, r4, r0]}}], 0x58, 0x24000011}}, {{&(0x7f0000006780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006cc0), 0x0, &(0x7f00000071c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x1c, 0x1, 0x1, [r7, r0, r3]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x2c, 0x1, 0x1, [r7, r4, r3, r3, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}], 0x2, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r8, 0x4008f50a, &(0x7f00000000c0)={0xe, 0x4}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) read$FUSE(r10, &(0x7f0000000480)={0x2020}, 0x2020) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000400)={0xafe, {{0xa, 0x4e21, 0x14e5, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xec1c}}}, 0x88) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r12, @ANYBLOB="00000000000000001c002b8008000100", @ANYRES32, @ANYBLOB="080003001900000008000800", @ANYRES32=r3, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='u', 0x1, 0x24000010, 0x0, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r13, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) 10.654995595s ago: executing program 1 (id=810): socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x4d}, {0x6}]}) sched_setscheduler(0x0, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340), &(0x7f0000000280)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) fchdir(r4) close(r4) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='nilfs2\x00', 0x0, 0x0) 10.5472384s ago: executing program 0 (id=812): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x48}}, 0x4) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000000008000000000300000000014060000020a0500000000000000000000000004140000008300010000000000000400000000000aee149b77e50a6d11621db29622d96105355568dba03f8055e92c5bf49e1d020000000ded17d42c083d7a5bc53bf99cc0f0d19007e845de90e9fffbeab7d5ac91714d73eaef5f5eadbf9db5fe01efbe34ce742e14"], 0x5c}}, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async, rerun: 32) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) (async, rerun: 32) r4 = socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}) r7 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x64, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x9, 0x2}, {0x10, 0xffff}, {0xf}}}, 0x24}}, 0x1000000) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) (async, rerun: 64) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) (async, rerun: 64) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f00000007c0)=""/237, 0xed}, 0x1000}, {{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000680), 0x0, &(0x7f00000006c0)=""/94, 0x5e}, 0x80}], 0x2, 0x120, 0x0) (async, rerun: 64) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x8ef, @mcast1}, 0x1c) (rerun: 64) mount$9p_fd(0x0, 0x0, 0x0, 0x80000, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000077e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) io_uring_setup(0x4279, &(0x7f00000002c0)={0x0, 0xb25f, 0x2, 0x1, 0x32e, 0x0, r0}) (async) r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r10, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)=""/216, 0xd8}], 0x1}, 0xc4}], 0x1, 0x1, 0x0) 10.424406032s ago: executing program 2 (id=814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ac0)=""/241, 0xf1}], 0x1}, 0x800000}, {{0x0, 0x0, 0x0}, 0xb6}], 0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$media(&(0x7f0000000000), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000340)={0x80000000, 0x0, &(0x7f00000002c0)=[{{}, {0x80000000}}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000480)={r6, 0x0, &(0x7f0000000400)=[{{0x80000000, 0x0}, {0x80000000}}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000001040)={{r9, r10, 0x1}, {r7, r8, 0x1, [0x0, 0x4]}, 0x2, [0x0, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7a10df2281e8d21910e8"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x90}}, 0x0) 10.223943458s ago: executing program 5 (id=816): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000300)={{0x0, 0x0, 0x1, 0xfffffffe, 'syz0\x00', 0xffffffff}, 0x3, 0x0, 0x21, r2, 0x1, 0x80080000, 'syz0\x00', &(0x7f00000000c0)=['\xc1\x14\xc1>\xd3i\x93Cc\xbf\xa6(Y\xd6\xb7\x82\x9b\xb1H\xc4\xba\xbe\xfax.\x06\xd8:\b\xf6\xa0\x9b&=\xb78\xa9Vd'], 0x27}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r7}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000780)="cb"}) 10.131358306s ago: executing program 0 (id=817): ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000340)={0x3, "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"}) unshare(0x24020400) socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xa, @remote, 0x4}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x459302, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000300)={@private2, 0x800, 0x2, 0x103, 0x3, 0xc}, 0x20) getrusage(0x8000000000000000, &(0x7f0000000240)) r5 = socket$packet(0x11, 0x2, 0x300) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="120000000a0000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000540)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000740)) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) 10.06702752s ago: executing program 3 (id=818): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_create1(0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x70, 0x30, 0x20, 0x0, 0x400, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}}, 0x4040800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x7c, 0xfffffffffffffff0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) 9.292581678s ago: executing program 3 (id=819): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x43ac00, 0x0) r0 = socket(0x23, 0x5, 0x0) setsockopt$inet6_udp_int(r0, 0x113, 0x66, 0x0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x40000000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9b0902, 0x0, '\x00', @value64}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000000c0)) ppoll(&(0x7f0000000000)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r4, 0x800c5011, &(0x7f00000001c0)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000040000700000000000000000000000000000000090300000000000000000000010500000008000000000000000000000d0000000000000000000000e2ffffff000100000002800000000000000000"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="1bff0102"], 0x4) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r5, @ANYRES32], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x457) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000740)=[@in6={0xa, 0x4e23, 0xf4, @private1, 0x7}, @in6={0xa, 0x4e23, 0x10001, @loopback, 0x4}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, @in={0x2, 0x4e24, @multicast1}], 0x84) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x58100}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="00012bbd7000fddbdf256000000008000300", @ANYRES32=r9, @ANYBLOB="0c009900020000006c000000a5002a008278410902050000000802110000000b000000ffffffffffff00020000100000000804ffffffffffff8c0f00000408021100000003000000050802110000000200000004ffffffffffff0800000001ffffffffffff06000000010802110000000600000001ffffffffffffffff000005080211000001ffff00000301a1831f000980ffffffffffff040000002efa00000100000008021100000189e4bb0a3e01010000000600b100008000000600b1000900000089182a00057aff83046938ddf042484d84865be2ecaa022e7dd4227b8d229d39b3392328fee69b743aa02d493a12973fd79485eee3c04fe86124d1c2c86eb05bc03801515b74546b21a5eba8a0454b2aad129f32d44ac3e8e6fabaaa7e180dff0b9ad2b664ddbedef9b29431d66443f858d45672f70734c501e8ba91a60448393c04000140052a01010000000600b10001000000"], 0x174}, 0x1, 0x0, 0x0, 0xa0}, 0x4000004) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) writev(r8, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 9.199865959s ago: executing program 5 (id=820): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xc, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000072c0)=[{{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040), 0x0, &(0x7f00000024c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x28, 0x1, 0x1, [r1, r4, r3, r6, r4, r0]}}], 0x58, 0x24000011}}, {{&(0x7f0000006780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006cc0), 0x0, &(0x7f00000071c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x1c, 0x1, 0x1, [r7, r0, r3]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x2c, 0x1, 0x1, [r7, r4, r3, r3, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}], 0x2, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r8, 0x4008f50a, &(0x7f00000000c0)={0xe, 0x4}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) read$FUSE(r10, &(0x7f0000000480)={0x2020}, 0x2020) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000400)={0xafe, {{0xa, 0x4e21, 0x14e5, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xec1c}}}, 0x88) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r12, @ANYBLOB="00000000000000001c002b8008000100", @ANYRES32, @ANYBLOB="080003001900000008000800", @ANYRES32=r3, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='u', 0x1, 0x24000010, 0x0, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r13, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) 9.050507642s ago: executing program 2 (id=821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x1, 0x1, 0x3}, &(0x7f0000000680)=[{}, {}, {}]) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf5) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={0x12c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_PROBE_RESP={0xc7, 0x91, "bf9536ad8c421f3c4dd5ec26282688f4f3e40fc2082e3e85cf42b7e62b6c4f65e35a9d67320652f9b135b051cd1bc596f5e48c6cbcd709e48f32b2eb97d15b816681e1191da0787f6a661f7f6cec85dae6ea82b34a28222d9dd9e5e0c1399519a23b43d9c08adba6d3e2821073d0cceb005b405be302502aec87128ddff3eed38716e99ffe45536b40182ba1bb27aaff93b35d7f75d545c7764addf0e504af9257d4ebf866107ea47e3f7babee6540e593f484ecf4912dc5000775a61d487ce27a6a8e"}]]}, 0x12c}}, 0x20000880) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES64=r3], 0x7c}}, 0x2000a800) unshare(0x22000600) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 8.383033272s ago: executing program 3 (id=822): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x0, 0xbdff, 0x0, "fdffffffffffffff"}) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x90, 0x1b, "00bf46f8bbde7047bcd4a280000400"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000000)={0x4, r1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@delneigh={0x44, 0x1a, 0x1, 0x400000, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x5}}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x44}}, 0x4800) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000280)={{0x0, 0x100}, 0x78}, 0x10) 8.192573915s ago: executing program 0 (id=823): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xdc, 0xb4, 0x40, 0x41e, 0x4011, 0xaf98, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x82, 0xdd, 0x97}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000200)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000040)={r9}) (async) close_range(r2, 0xffffffffffffffff, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) (async) r11 = socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) (rerun: 64) r13 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r13, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r13, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r12, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7ece1e40ad8871461ab0800", @ANYRES64=r10, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r11, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) (async) sendmsg$can_bcm(r13, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r12, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 8.160773828s ago: executing program 1 (id=824): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='maps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x0, 0x0) r4 = socket(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x4e23, 0x0, 'none\x00', 0x4, 0x80000}, 0x6) r5 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x300}, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) readv(r6, &(0x7f0000000480)=[{&(0x7f0000000400)=""/83, 0x53}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x5, 0x0, &(0x7f0000000000)) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001480), 0x8000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000000c0)=@l={0x92, 0x9, 0xe0, 0x3, 0x7, 0x6, 0x8}) write$smackfs_ipv6host(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='0x0000000000000002:0x0000000000000{O6:0x00000000000000ff:0x0000000000000002:0x0000000000000002:0x0000000000000000:0x0000000100000000:0x0000000000000004 attr/current\x00\x00'], 0xa6) writev(r0, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000076000d2b000000006849dfd053689c21"], 0x18}}, 0x0) 7.883026928s ago: executing program 2 (id=825): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20202abd7000fddbdf252e00000008002c000101000005002e00090000000c002d000203aaaaaaaaaaaa0c0005000202aaaaaaaaaaaa"], 0x3c}}, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r6) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r7, 0xc8036ab6d6cbef07, 0x4000}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="05d9b04ba2db4d3921de8978e605b65be01d", @ANYRES16=r7, @ANYBLOB="020027bd7000fedbdf250700000005000100000000003500070073797374656d5f753a6f626a6563745f723a73797374656d645f7061737377645f6167656e745f657865635f743a733000000000"], 0x54}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4050) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r4, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x3000000}, 0x0) 7.044838016s ago: executing program 3 (id=826): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open(&(0x7f0000000340)='./file0\x00', 0x367142, 0x69) pwrite64(r1, 0x0, 0x0, 0x10000000005) ptrace(0x10, r0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) ptrace$setsig(0x4203, r0, 0x3, &(0x7f0000000080)={0x41, 0x0, 0x9}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 7.011516835s ago: executing program 1 (id=827): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @dev, @rose, 0x1, @netrom}, &(0x7f00000000c0)=0x1c, 0x0) ioctl$SIOCRSACCEPT(r1, 0x89e3) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) recvfrom$inet_nvme(r4, &(0x7f0000000200)=""/180, 0xb4, 0x2000, &(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x2, @multicast, 'veth0_macvtap\x00'}}, 0x80) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x3) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000340)=0x7) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r6) tkill(r6, 0x12) tkill(r6, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ptrace(0x4208, r6) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r7, 0x89e0, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0, 0x101}) 6.913724278s ago: executing program 5 (id=828): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x158, 0x2a8, 0x2a8, 0x158, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000000, 0x8}}}, {{@ip={@loopback, @loopback, 0xff000000, 0xff, 'hsr0\x00', 'pimreg\x00', {}, {0xff}, 0x4, 0x2, 0xb}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) listen(0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000ac0)="b0", 0x1}], 0x1}}], 0x2, 0x2000c001) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000001580), r7) sendmsg$NFC_CMD_DEP_LINK_DOWN(r7, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001680)={0x1c, r8, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x90) 6.893929384s ago: executing program 2 (id=829): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80182) write$sndseq(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x4072, &(0x7f0000000200)={0x0, 0xfffffffc, 0x10100, 0x3}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000900)=@framed={{0x18, 0x8, 0x0, 0x0, 0x400000}, [@generic={0xf, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x69, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = epoll_create1(0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) ioctl$RTC_PIE_ON(r5, 0x7005) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000600)={0x7, 0xfffffffffffffffe}, 0x0, &(0x7f0000000680)={0x7ff, 0x2, 0x0, 0xfffffffffffff7ff, 0x8}, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x565, 0x0, 0x0, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="000f0001"], 0x0, 0x0}) 6.656699793s ago: executing program 3 (id=830): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000300)={{0x0, 0x0, 0x1, 0xfffffffe, 'syz0\x00', 0xffffffff}, 0x3, 0x0, 0x21, r2, 0x1, 0x80080000, 'syz0\x00', &(0x7f00000000c0)=['\xc1\x14\xc1>\xd3i\x93Cc\xbf\xa6(Y\xd6\xb7\x82\x9b\xb1H\xc4\xba\xbe\xfax.\x06\xd8:\b\xf6\xa0\x9b&=\xb78\xa9Vd'], 0x27}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r7}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000780)="cb"}) 6.635087085s ago: executing program 1 (id=831): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000100)={0x1, 0x8, 0xa5, &(0x7f0000000040)=""/165}) io_setup(0x8, &(0x7f0000000140)=0x0) ftruncate(r0, 0x401) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f00000002c0), &(0x7f0000000340)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002500)={r5, 0x0, 0x1000, 0xf5, &(0x7f00000003c0)="8d09b41a7d18a6301687c4105d35347558f231cf26f5d73a283da2a309f80ae21d9500bd0136ce16c18603fee331e5c7522081cdf52d8d1eb97ec46aa4f60e15c9bbd175e189e66bda3393dd42a59272abd16b73c9f86d26e3e3979e4db833c3bc78fbb5e78c9098e66873c6256f8d72df32b92d39315f0dac6dac61c54ea44406736c7abf67929577e6ea43b18fb0e483b31c547ce8c9238e9d24e338af91eac8d38aecf40bea746399e78c9b8ca674ca73af5c2642c4ce32c9d9afe4462ffae033c9dd284301184fee8673b2b8429e2643bef45f63ca724af4bfa8534d00c471f2471f9065b3d8c0fe37424792bc57df2ed149ab691b5c5bb5cd9dbc38324fd6cbc1b71788ba16a7cdd8c4cd24a178f427fefb4c64a0a88e53cddc117973ed1c840bdc80517662e8b27a47c1ae016854839d3d1a28292f3341caaf164575641101e11c327e8a05a2e759f78765b90adfa060ff39ea121039b4f4bed9ae99bba2394a2de6ff7a35e367a451cbe3f5c114cebc2428fe4d7ff1042754114862ca1c713bd20a8459d31b482ac027a0b523315ad77895af84ccf6aa38842d591cd7f482a47b96a25a53ad94f5bf6268f4815606e13eff7c95be02c2c40335f08d9e542a8855c6b8517075c6ea4a84807ab5f857da22a3d8c9d094f94de38f6cf659f0f541007bc76d603926d7c24b7514534f9c29fd6bdf0b480061f6a922db379bbd04c8218d2e6cb5d005fbb8264b9156b433b971252aea2f05d9635e69ea2aee6a14e4d1dd2601aea1378dc3a53db13ccdf85f5e6bf504c08acd80beb5013cee66f3fd6db3681a4b65bc2ff42301d48bd127fcea6886b061af5c9a4d138264471494bbde17df1a2998fec452f40e24f1add4097122bd39a272860bad49d6c61357148bbe5bf7150f06f4030a85f710b4eb9d3e300097a21351dfb2ceb635b57fdf02d0b9017c1b5eff8a887b29c0ccc8a960f56d7304c83e3744334378962cb0f952bbc9ca8f157b267589ea73c3626cd10e58c18725c5fedd2227b09928c4802864d1998a366e40b77e3cfe7340507a0d0c49bde944ebfcfe5e0a0f71dc5fdc26d9891e0856536fe2e8ed9135c84f020e6c60ee6451fd9f7faab5dffe554571897d11e2b526423a1e8c4c1617ab88513229084435a7984ca360e0e011a502232e1418efc31fcec4bfc20fc85172581b1c383ca8d6cfc575013359eb2d5551ab5693df1473239d572f88216772b4fa586e138f0843b788a87d66dbd5cb67fb4176b9b089c398202255edcecd5c4b3e1a97f552a5e685264850d0a31a50fb5c21b5cdba70af8b9d45faabd73a347040951f400109a3138d5512f348612ac37b6e01f48ddb6cee39aba6db95fe266d58417eb676e3c8180f06804dca9a32d58d7fdd0de16245e0f8e04607e24e504e4cf5db00dc67490e0264eaf0026a588f1845fcb288df5f43989891f31d6d78655eb6e20817889a9d155632a7ec2381c367a42c96c227a7b5c1736569f43960790b3ec964a0b5bb7ef7d6336b6fdc820d0578467329840ba308d1727a232b5625f851bf581183cfcf68ce25b56b32a3880d1620e55acad74384957bfdeb8037beac06df1005043e5d52a23092e68a519ca3646c53e46c2e446629e00a2980137ca4c939d5181c7fc759aaefd6ac83ce9939a50d9462060d01d08b047fc5c61c24862e49b2b823f75fec4ca195f9eabc98b7542ada1e19e9bd3d2554d7463d6f4eb529420a65af99a691ac31b189dfd4ec81af560975d2dbdd2715fa83584f924389791d1c3ee1fae8f44ac0f9d6998406cd2cf8abbadee3656d02ee736b2c2a2458c1a5f21ffbe42881cfddc4379503a51658089ed1e218b0193bcbbb915fe6e43039b28458494d6cb49f958d1a8e6124f934a39bfd2beb29beaf557069e21dd38713858f3013c8f79f06307d8a9508b6011f2b49761ada223e4ab71346a1fbf28b1b8380d3be1cd4e2034030ddead57d2f3684f0f2ba2b8197702e7da9fd36daeed58d75971a14c690098ac0eb3a26159fd3de52c5db3b4d8c186cff9efdf527b455de4a3c39d5d376d1bf5e6bf21c6dd0dcc229c62b4794b71bd5c3fc6b9eb6f12568b9e261d17166ba8c2fac11a46b902be3f3942948b9c8e699007ee62a130618a4a9ae5c57012677e69d9ea94bef653f47d88ced6c982deef597330b09c59ced6cfab55df270ba80f637d496efa69359b633ce8cea1ed427ab72c25d035ce6940e7f819afb27b699899556c43474640d4693e79e2a454dfba677dc6adcad1ad4358002473aee8ea9a058dac272351884c50d6f9056618f30fa4dea02fa666ce42743d211b8ef7870f1a337c8646297b7b245a87b74de47486d35693d63e1bbf99a24a5ad382358cbdb9e592b0b3c523448b7f9a3bd1c980384adeb42601f665f2bf0d695aba41cb2cdd8314186023ed53a3915137c5969f2cfaadea3b0c873afecc72d05899a37e8aebb4d4e08411a5e784c2610a6379a46c5b5b0bf8e4935c901fb1013f0a164b8bc45834d7f64b914ac07afbc5d288d2af7ab64baced11daef1fffb834d59e5cf84ee81efa3c019c6c78b139f1b2f960e573c7444e4a4d0d6641ce367337bca06d93452974a840b3c9e84515d78223db11de2e5e807bdee81298475e2871e900df47d116171aad91380ef5ee6aca7f07d1c0c8504e7cbf7be76e40953b9d8306cf431e3eea811be7582f925eac1d12b442c83021ead949b493c0a8ff5e7297ddcd587c3cb625d165e94985091d7f7d2ae3c458176fe934fd7c379cac29a5c22c8800e42f3f8623e92a9a20ab0b7eaeed3c614792c34111ec1560ef731e85f5da922ac95b420e0fef79fdf825886210b666558b98428f617a8d30f673ad637412506b1f0d7d52e1d131cc7d74b607dbad1b75b43787534ba985ee940848fd4f94c89639d80279eaedfd7b82a43180575ba92805a20a595e6827fa9ede41081ea223e034e19b075d0b3caf8452b21fb626406581a7dab519db0e64ce0a95e9e9a234fbb8b30d86cfd3559b672e27ab40d85a427881a260d97460d364c50566727e7b5f1a275ab7a24adf14471f3728d00dcdfb78fe74a8ea5cdf404932012786bb4da8247369311a2e2dd24a8b93b34242454b1f2a0787d324bdf97df8a8066a073071607f4ac171714e4330a2123298d1c166a113d5a654665d57bb3c2a0305be076fdddde8fccc9d106fe896c0f2fa7cade8be9f896dbd9981c458dbb7bdfece605bf83c4c07a2b5f60cdb224576f3ac5d2f2f350f63c8d4904f25c83f07d2f87a9e99dc97bb309f4d173fdbddef8c6c8f767064d499b4d9ba705bdb4dd4fed2475e0ce6262c0f35ecea6ba941cabc8b0d8efc3dd63e53ed2afda0c36cd85b41faa89a69ae1646649b795093ed1ecc991cfb3755901f51bef34553abf3c5f84917426172cdb3fd35fd221d56880ed757e23293687197b5189cad4aca46f3c93da10314eda6c56cb435246610c43502a8996bf6b4ef48193cc6653062fd8cb4218a16612634a5290b23b3d7d8c3271e3bd7f8c1beebfa3d58df9ed87c3fa5496814df959b94e19dac95ffa667594cb748763781c8a732b1606db96f371958c0c7c52a2564b56ac3a6e316cd665b24e8d292c863582570f52efd92b8f4c817937bad415e6ecb235ce36eb0fa2146dde50f69c2316d2da9a745f03c9a5e51c3ca2e8758c1c262e4792ed7a295e43d5e8b5537c2e64f7597969c66e36e191cb5ed0cf61c8c6980b80f95b9a86266db387566b7aed021bce9bfdc432f71a9912cb3852f56c349df8afd5f3a75f9852c5b1191712cf46bdc1c2c25309bf06e5ea6a0fb3827243e6fcea2e1c820f00cda0d1a199322baffa2b0906b19032efc0aadd74794521f043baf1b7ec83d83681e4e651e74029803871e2999de8878ed4f35a5898af2101c669e451c7d26ae1f950fa307638dde1a348f4e6cecef21b78edff7f4e09aaaeaf9b150df42a84502ea6b9b1612e4442cfc888f71a0510f757cb53c19440347be1996f243722e34cb3760e964d25e5524051f99ba3b29ed24344c8bfc6f37901a59ea36b7b5d8d35b415c30681745e85b20207e0af3208e4da23c2cfbb1200f3257185d9c993215b38000524a3c15519bdd599c9fd4df60916eae30f005417b67ecfd890ce382fb4f992d89430bafcba7d38454a7df8641475a2b2d68ff7e132a87eb42090fac3532291b21be7a3464fa6cc3bbcddf68e46ce5354f14b23d9c5905f9153bd479a70c0ac746f432dba7bf139d5e0ec42bd9872e16977c60d57555c7845426bbfbef00ec169d97bc2e5a91b41bb6d1b9c7e0f5035e3d541a787b74df91337381430ff5fc91789160e74f9a3312fe2744731b428fae8d252c741a88d22593a3257829d2ac8ae1041205b233b856ffd1d25a9a647070d90e4477e9fa1592bc3fa9e1813660eb950233f0f0374d1b4a9471151fecb4122405923cbaadb5e3d75111b096d9728b0ebfb4247824b35c474b2f5236edcb137c0f8b8a741ccf2a3d0b40df00b77f53ad9ab236be9901943379397dd15d13534c109bcd623e8c5cb33c5a656a8e95e580553be5cd88c22e77a8fc7db541e8161817cb069df5a26c69657641dfbf955a9c06b3826f4942c5c5685b56133838ce5c764af615873a10ec8884cdb105d24fa808a955415161e3a994b2ac5a3da79d11d5bee06cca50570d7f02b9c4cb022d67d076c5681e25600c5c86b04f0a93c3d90ce38feb8b395e81b654d7db3990e4bcf127b48791970bbf723bae65790842047bf6322228c1fd737cf8806a2f6413883c9c12822e79540f991edba9101668e0759cdeebf9f8adfa8d3cb6180a484f2836e9d659b736356577b22136038eaea442b30bd291cba59fc979541d6e4eb4885e5de0be792c58d478253df334f40b401cd252410873384bf9521cc922a953cb53668428926f0a57a65cd8b30cbab2d131753b2824a11fbb10eb022135424a50543d1ca26b4f4f0c4e34e6e33e6dd65aa1583efa4c36cbc2a8fb5695ac55c201581616adf91b9ec8cc1ec6051b210fa8a786bc7fd93ca3fcb930e7ee7358d94b9c0a23dac98e1c24ece7e716a9f051322a0e032e7e074a9bd0c62dcc59d1eab80bd89b3f0f18975d45e23e6f094028611dd6ad0a5f25eb226b6e1abf518f95d9c0aa50c3d64478df3d34e9757d8da17792b5078751cfbcc780ec1ec195a18efa415cec691f0ce6d53f005808a7a8d56454baf45f2bdcc9e88affebf3d28e7fa2b658753f8af8cb77621413b88def27c2ccc647eac41bd8987e59b6645410890d740dd2899e23cddccd0e72097d44cd595d802121de76366b7966f3b22597b9729555fd5fdb70e86ada6321effc58ce49dbdea12961858c4a4d1d459e52920b711cd806c7fbd07a350c16dca3b8ffa1d29d2588452a45cecb232179549af0b164d48d543531f7a45ce936e639d68960f1169298198d35f771ab3eb7a6bc049c57f5bc7d5c6133ccb2f726d955f5183e5102f1fe127910052fe20393344148e8310a7317fe7c32df7fd517b85856fe916b98a1071b243d51f7d1e709a487aaf581ee582d25bcc1cc095e412b2965597a9bddc14867a26d8ead2a06db81999c65d69c093295f6379c3c24395554fc2492fba8e87aadf1886c387ff28e432ca167545edf487654181b71a749f2c68accf10eaa52e9cc823c1e4b1983267c41cc7d044323e9e85813dbbe1d9aacf740c43c0c2591389f2b7100a1d43e80803ea0d11ca7cc8d2a55ca69f46f7b007a825dd228436f291f4b342c63971", &(0x7f00000013c0)=""/245, 0x7, 0x0, 0x1000, 0x1f, &(0x7f00000014c0)="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", &(0x7f00000024c0)="ee42a1dba9c4724aa6b95c5536bc2eec75c3945d370eedf95e625c162b4f53", 0x1, 0x0, 0x200}, 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000002580)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc-aes-ce\x00'}, 0x58) getsockname$tipc(r3, &(0x7f0000002600)=@name, &(0x7f0000002640)=0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002680)={0x0, 0x0}) prlimit64(r7, 0x1, &(0x7f0000002700)={0x9, 0x1}, &(0x7f0000002740)) r8 = openat2(0xffffffffffffffff, &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)={0x480043, 0x2, 0x8}, 0x18) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000002840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000002980)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002880)={0x8c, r9, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x1084) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f00000029c0)={0x1, 0x2, 0x4, 0x1, 0x0}, &(0x7f0000002a00)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000002a40)={r10, 0x9085}, &(0x7f0000002a80)=0x8) io_cancel(r1, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f0000002ac0)="138c789ec70374", 0x7, 0x80, 0x0, 0x0, r8}, &(0x7f0000002b40)) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002bc0), r8) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f0000002e80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002e40)={&(0x7f0000002c00)={0x20c, r11, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x4}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x7}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xc59}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x16, 0x3767}, {0x5}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x90}, 0x40) r12 = openat$cgroup_ro(r8, &(0x7f0000002ec0)='cgroup.kill\x00', 0x0, 0x0) sched_setscheduler(r7, 0x5, &(0x7f0000002f00)=0x1) connect$inet6(r12, &(0x7f0000002f40)={0xa, 0x4e23, 0x4, @private0, 0x2}, 0x1c) r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002f80)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r14 = bpf$TOKEN_CREATE(0x24, &(0x7f0000002fc0)={0x0, r13}, 0x8) fdatasync(r14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003000), 0x200, 0x0) 4.703343558s ago: executing program 5 (id=832): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000140)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) 4.534430163s ago: executing program 0 (id=833): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) setns(r1, 0x8000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) 4.529203884s ago: executing program 3 (id=834): socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0x4d}, {0x6}]}) sched_setscheduler(0x0, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340), &(0x7f0000000280)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) fchdir(r4) close(r4) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='nilfs2\x00', 0x0, 0x0) 4.406993738s ago: executing program 1 (id=835): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x2d, &(0x7f0000001780)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYRES16=r0], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r3, 0x4068aea3, &(0x7f0000001700)={0x9f, 0x0, 0x1}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) bind$inet(r1, &(0x7f00000017c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0xfffffffffffffda7) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000040)={0x8, '\x00', {'wlan0\x00'}, 0x5}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x417, 0x4) writev(r1, &(0x7f0000001640)=[{&(0x7f0000000180)="9fd50f14fb279f30847af8c3f14b91612a0fbdd1868d26ec2ec7df94c31d6c1020bf370f42fd880d9bdc95211743a3a6a9e97a90b7dd077921eeaaf82e50eda6bcac73d2bd098bdd42c974118dee7340e809b219121070e4671b96cb5b561af48046ef1a537f3e7dfe74fefb64a14e17841f35b25e6e7c514624ac8ae7a64aa071bb1696183fe68149b789f16d1570bc280e5ce1476f4e69500cf0d08073c0c416c1cb5975e7ff13e7272bf8ea4a304f1e8c24", 0xb3}, {&(0x7f0000000380)="6e50a99a4b80afe4d3ba4c90f37c12f818d0d205c11841466759057c094f14db5647c485c47c4b1e0bc5254614470d8923adaa296c9bae4af3a7a24eab9627d4b18b28f462879aa211224bc8c92116557e56626b6e874e549fad75ecd82ec9b4e863cc0475e4c84d40058b504e1b8f298933d051405e8d93154ab0d225ef619269fb09ae82803396985fd9d4222c28e5e14b183c06c14910e2bd39c4c23b829864bc2b8a096cb9c6a33ded1989dca45e6289125f14bc533756de8b0f1554a281c06f7dff5ed92f11d5582305e6f136915c59d4fe0f2213c2a36c01d124b5668f059e", 0xe2}, {&(0x7f0000000240)="1ad6242f2b77395502e84d4284d6c085ec0bea636a78ac4e3f28c32f3c49370fd470e1d96fe85a33ddea5f3dd7ee1cb4c693b011467bf7bdb6e85f2c3d408155630f029278cc5f5fa652d51943f537", 0x4f}, {&(0x7f0000000080)="efce165a", 0x4}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001c40)="91b9a1552a1fc3862e6572900874c6f3081ffe82022cd35e893f70d3e39645ef3dc043cc665a6bff4bd7a130103ccfe53db8b1ce06ec237cbaf88a7886f27207f378d9d5e51c347ca8d36f6384d80dfcee0fe1803c9a19eb5270f225843cbf13d4974e0694b5169dca399a1835cd53fb5fa38f257f5dbb1e0d7a513d89209cd320c6fe94414605258811d924ba1fcf410b6e114fdfd1135326b9e9f95f24301e302889f2d7590227420bd550209722c0de6a1eb01491236db15bbc2d1e20fdca17d1001e96efad9637593b01d37c98b15bcb4cedbca1e9482d990f0fe6d4ed7c962815250b98e8cb0182351fba77bfbcb47b127c7fa5c38e9993b1178ff2f09a3e2810c8fa6d82e2efe0e73719c1523306b59d469f75e9225879608222693d86da76dbd74a189ae40f38b1396ee23143cbc17e8c645e3894f58e93f16ed9679a4bb98790a14d976e5211e02e0c6b75892f27c78d3d4ff68292e237919e65c9d3bc41e3258e489b31638a7a5f6e777c87992c93d0ecbb6ad9643222df36aacc3d5d63254cda567ae8f3453650deedab8f63b7e81faab50ce1ee6df13f58389f623279bdcbe0c1de7efe40ef30542207a43310a2cbfd7f5988085087f4115df13ab603d04c818ee48811e3d3047c2d9ef4e5c72ee7dce4b00bbbc1cbac42b4dfdaf3c9e866e7e7d92b0146600bbc3c0ae8828a526dca338dc7aa0692bdaf3c6ef705b8f1c441f37a74878ccd432c69b03c6c9578a09f350ac2b677c28b466b3a26108a3f9622192ef2966c06e388cc5c54bb04ef72f0f611f14379b7ef091a557f8a1cdade426c2a643e4d4d59d049bdbde1bfe8c40540321061af719b6776260642d07cf1ac01d525e705733f066458d2f3bac4e65262a72570d45e5ef5b366b948dcf9f92b57bab6b00562331c069009f50f312b39fed334e07ebdbc4251f59e073d8cce3bdf32b5b45ed1761766348e7113f9fa65faac31eef166746c1436db3c82163781141d23c1a268bcc2645950de452950a93cacf20263205d251801bfbbe45b702de10a381c95e585cb11f6ea480518c737fb3a00e4ea3fbf2fec5b3b100c7d2ac7cd5bd0d38057b254d1fc4d622368055665602bd044baec642a33c70e6db40f904ccc421cf1799508df1d95f15c78fc380b625c8ba57becb87549f27cd129fa0ad8c1127479997167c9d609fa9d98598406fbc3f8f064dc4bc1e3fce5f187e331872321f148e68b5cbaaa2dbbdf161c6695232e9f478795a944eb3348ce910effec47b65e220ecd4127f7327bc6685e5764ecb04543f7d10c83a0dcc37da0d278d06c2646c1adc928b8da24c5cecaca1d3161c497ebf06fdbe13af0cf55398743002b10bc6850d4ece89ccf08cf5203f3ebed8156e4829f678fa1b7b4039203a62424a03738b3ff4bd0a76476a304062639c2f8a60ed43ebd6b73286405d0f98915793940d41a94e237908f4bb3d77aa9205563205a756810460cb350326fea933aed720ea4483619031f198e3d5490f440578803e79dbb49e8b9115ed9c360e4123763a2ecb13829c35dcc7dcf3ff32e98a06c19073748aed5c0dbc1ec61da4dfe7a8250c5349146fbfd50925e9226183c4ad998b3d42df797e0bab7fb7639369588ba9aa52b0f610698a7373840820410de8b30151117e796a6824e55a4abcb81c82afd929dc71bca41819bab41a513aae0cdd5b85d15404fbe1cf442c076ccf35749ca0b2bf6d434b32dab933c8ceaeb269ce41ac7468852a2e4ac01c87e5bada19d87b8179ea5f79997c6e52ecb017a59051ff5f5f651406eafa203723fe558ee77567784eca4f1f9e53c5d0035f33547682aa74887a81912cc1162ea588ec7441706881737cc6a97eaf979821926402cefd52f016e4e1bc2dafeeaad8172fe79731de86d69cd3fd3011677a1fa5b1f121b4de2ace12584ff6ed8fafa06c1896874ec70ba8c1aab2322ff2af1b83fae294bc70ab298bb7ac30cbd466d2372e57e67ca1248dc0d142dd2172ff8af4598f113601692e485abf9157960334b5bc5225205c98778e0bea0a120e7af29b1c645c01a616fe888ffc62673228e732c36cbd115bc44bacfea7c7afc0b5e260cf021f69052a0d43ac067fcfc3da23b7931a184bef2e8086d7f851daa15601fe2475de7e17e8a242245d35c1466b8a69c6da09fc7cdbe1dae2b64347e6ccd9071471d866246e760cddee2c93b76e444361f4603d07b7b347045e91a9b6465de437b489afc88277ec66d214bed8b7d293e4be16428892f4c3ef67f387e02f1d3bb34f71f82f2262ad441683707e6712a10d55853ef68768f18b5144b21af75a32717ec89ce61d9cad2265e74556f1485f22c2038ef1040cc9bda94524912d66263ca6d814f67ce91c4c6258cacda90dcc17cfb9400114ebba7e37777e5b85461e3fc323c593c12354ea09a628d82c1fd272b4995864ef2b5e4864f58840649a7b077106485eaea3b51b0a53475734495bb94aabc9cbc6102dbd3679f343cbfa64c57bcd29acf0ad09e1402d3724fc02ba1aa715b797e45a5ee63c66e07560bcc517d3b765724e2ff6c6c4859763ee29983c990e7918d3cbb95800c8d5d7702ce2f5cbb2a1e97c104871229951c64e2c08be518cf531327cc765f05e7311c577fa4975000591d7f808dada6213cf042d72caaab4e9707deca1cce26a494081b6560573d83fa38ef1fa82a8225ad0c08046a6b2ef211e598a5356a1057eed8893bc51f1cf667f07e8fe75eb4923df7934860dc3e8a6abcd19bd198c83b044ed4ebfcd3984976acf37340a7514f72dfbe15eb4c701ead13c82ce071c39a8c7f3a00ab517711a038e7ae30a7920d9ff229bb8c2fdedb76cdc7f74f7e83bc646e228a2dada80ad22ea0e7add4e8e00067881b6c6ea9c19b2148ea8e3fb622bb227871f2e76b8cbce866cea4b5893a9196ca38031c4e51329bdfb2eae9e64465d565ef89a4bf21393262777cfd7d08cbffb37b00d1e17a1d06a02f840c2fd3aa7c84c407e9ccfa4dde37491249bc194eeac3f3ec443718cd183a2dabf2e1248e0980b41e49310e947e67aba9ff98611a794c5185a65b0efe766d5f6491451e8912ea4c7fb3062b7b39645f1356b6fee36b02c786a784447f973dbd86669732952ecb4f7d58fcc07d90e7a5dc39cfd0227578e5c1552788b1ed3b0b2954f272fee783e52dd8d53e8086de9b523fe51909a1042c2dcc8a6621e1048388c4fadc1f76548c86f9b12d43445f8cbe750b2f96f44ae3062841a91c21ea48ca244bce9954c96c179eab03fdad57978b28a143a47d1fa09d3b7df2daaf9e4a54f30e0e40da3d7bb01380d43b1dd630638f1d5cb7aa6a208434615bdd9b353d4ae49cb2458aa6ffd3bca37b4a27d63f4386e0a2236ba7256f79444678938326add9b8c37059b7147027ba8e3cb017a79af34b586371a3037dae30c29bd13afc2cb58df6d91d487bae40d179a6c07af5718e2762836bd3763198835a3ea306dabf183de81a3beaa65fd7a7dd61fe17ca6a2c88d323d805f7f929a694c75b5b047403de63d83edbd93cffd822c0a00de436ac7aa07e06ebee515bcae724182c13066297d3f193ddca4c49c2f2579f71ece13d5638d4b2beb569c4841be914df312487b10f7d6be047b79e71b8560f952aef1b73bdad576ab4b887bd5816c6da38084fc22ec3de7ecaf2144d1d2bc25dcef2e700ad006996c9aa8eeef6a1021526afe64c82cada3497cd2d3e338a7e82e21233c59c1acda5136e7c7e3f9d9211657ef9a89cc49cdc9a0ddb05012ede6127db36134a593b92ba30bf78ed2a1b6202908138b12ec8602da83dd06af5fe49b6faa9bd58f68c98484d8fbbee8046effe02a062d2de0730db60fe92d13876ed18247b328bd3de2ed7eb96f075f69c2cc3bc4c5116dca38c24402a373b132e0604030d65f8dc2490607f980ed7982e0072757cca03b369536ba15886462189784069bc617b3ff35b6472d08d4289955cf7527870ec669f023c0d668401acd1babc6af357d484f651a29cde2623a6921abe7fe18e72a4303d978c8ec63ddff4622c77ee68ccd0c80bab977d7b6eff3045e692edc41f2355f61cc35cbc323b018ed39cba16e37715bd3bc00fd65a5574c64d075d015ef1e339bdb1197f7bedf4299d8d1f3d4d1ae43d7ad68acee0b0cd29b61be945542497b642ceb193b40a014cc591aedef05c98e9e5610a98ae062a3c939a965b03e39c8c6b04f00b051557853284e343853d862d9f54a4450b65bc9c9af1dc3ea3e58af29fffa6252d260e43c7b708a4b5877fa70ad371edd30d4e2b32ba90033f1625a03ea15011b498122371009dde4d6f86df840325b3c5e927633758a7a57bb6299aba3c19aeef40a15fc723db4b93c46c96fc65b4fb4b5d07d52fc049572f1260cf8da17500e7c3b376516af9810d79901e8ff35776eb560b08688f0fc1595fad9358f5596fd20d701c2623e92598d2e20a60e04877a6461b32b25a4ec9944f575c75da32c72c6aea9fb5697b1aaeb65c98f2446f729642c72d32ec504e002b98af2f8f23a8f9a20e9b1c9e1c9746bdbb6161d1bda835b62028fcacde30a8ca9030b712a03e232c880d4ec75f3276d089b0fae8822fa89727bc042c2d7f07211a203a7a5aa674e9c7e378d1052698df7844235f78934f498810d348f0bad37de8ac5047a3dce3d2560525dc77e9faccaf6dedcd5c3f92fb87112612626fbd559f613f8396f6eb3cd64087b28b33785ae40186512c8fa48c6d651c1375f227365190d7279def0e7a630bd83c25423454a2c04f26af4d9915c425eccd35fd3476ccfbc0e77a9e9774ce4b7125f08a004dba110528839bf9676a676f9e94d58c37d41f18c7644a237700d89da6b1224e8aa0f9f95400556dbe84a91e97f7eebfdff3f425810aac518ba5f4a520551c1ec9374446ac0a91a72ae8f52e09623bbb9bb4d824bd8defe33645f3c4b6c2c1a7be88ccf1c6e9fa9397f2d614abc8be24590a46621468fe1d9dc1c54a236a7b9aec5e94f6c5483a5741137dff6216594b2f95bb12d5f32c9e50954ea18226e0166b67cd0e5ae051e20d0eeaa0bc387bcc97581b72ddd86154e981ba950955e7ac43823eb6e4c8a15ba7d9713264f12f18034c84002c7659b5b3cf341c25b82a7aa7de5b64481471fd5ca696c66940655859f4e062a03864e5ab39352589ab836cbb5651ffe59a4088bfd805a419cb6c402ae8754e1fd773dc9ac7318b4bea2799f8ced185ccc2b0a72b4c2f98e6fde134af5a2e9b6e55e8192035d6141718056750fd83e77df8f6025c930d83b4e2ae7ccb5c8f399f1cdd9f17460f19172ffb0e9ea615b86d353335ff69f84e12805610fe1bfda6238e16657d36a83f8fc6777480f2fd8ad186fe41e4caf4b19a726ba7329b8e241a6d42dd66dd301c1bfa5c170690f78ccf7d28e2bf7891fb80b2cfaba79c1edfae98047e6a1b5cb100efae4b55475203f50d81f97ba585e6c3895d09c664bcb9108a3d8b228b5142378b890e904770e378c0c5a23ec3a37d0ddf8ba862542ea30824f8435361cc723d523a3107c6e1aebedfca606cbc5f4887f868d80b1c96d596db867c5fff60b8304c43c6252b6ec67aae7cff4a00e445003d125eea89a5f823bcd02a0a37256cbe283135d66faa544abbeefedd4621a349144d7c344bbd6b621c906bd0a80533733ee3fc37dd61b8bd3b1545097fb6aeadecbb32e3bdbedc1db759aa36d7069e0034cfe1b0f81551a679fbd4e927543f377d86566874187e957dd889e6d86f1506b79034", 0x1000}, {&(0x7f0000001480)="3b2eab156cc65b0b3a7e57b5f8cbdfb5b41abe615f27b23d48bd415a8e33738ee5c8a92b9b71412f0879be1308569ca9676cf42b1ebb40efa9503e2349685b5b81024ae17e9fa08ab45891d6b9a44c5a45d7a45f16388d6525a3edf5f70f2f628884590606513d0288abb81fd1892239bf871f33b4e12652699e6fa4ac5b4ad27a9e37372e56d032c4a95f644613aa2c9b3dd4642fcf7f1d09fd2bb7ba3c46eded0c94b92dd1a1fd8fac23808a2ab7d14a8cafa19a37136caa4ecd8109d2864ba205a3a44f43d64c1efee07f0ee5ac2b808f3018b00c3b0a0198d486b401b4438b", 0xe1}, {&(0x7f0000001580)="84f7666fec9be1687e3cde9383a68f931c0abf3b6c583de5d654eb5c96779c80351df45c24f8b5335b906eb081580c4a2db3d57423697965549ee09722145159aa3119b173de0ea9d21a80bfcff13293fb53267aee000000000000000000", 0x5e}, {&(0x7f0000002c40)="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", 0x1000}, {&(0x7f0000001600)="0bb55927b9ec817130dd2f8c606a419593f3a1590e648fe324395053d4e536f3a69d6f87003a9c03756fbd9a49623d233818", 0x32}], 0xf) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000080)}, 0x10) ioctl$sock_ifreq(r1, 0x8946, &(0x7f0000000000)={'ip_vti0\x00', @ifru_addrs=@l2={0x1f, 0x0, @any, 0x5, 0x1}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20044081) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 4.321878594s ago: executing program 5 (id=836): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="aa00000000000000"], 0x14}}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_SRC={0x8, 0x2, @multicast2}, @RTA_DST={0x8, 0x1, @empty}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509011f00000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000018120000", @ANYRES32, @ANYBLOB="000000e8ff000000b703000000000000850000020c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000050000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') 3.233072702s ago: executing program 0 (id=837): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='maps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x0, 0x0) r4 = socket(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x4e23, 0x0, 'none\x00', 0x4, 0x80000}, 0x6) r5 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x300}, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) readv(r6, &(0x7f0000000480)=[{&(0x7f0000000400)=""/83, 0x53}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x5, 0x0, &(0x7f0000000000)) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001480), 0x8000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000000c0)=@l={0x92, 0x9, 0xe0, 0x3, 0x7, 0x6, 0x8}) write$smackfs_ipv6host(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='0x0000000000000002:0x0000000000000{O6:0x00000000000000ff:0x0000000000000002:0x0000000000000002:0x0000000000000000:0x0000000100000000:0x0000000000000004 attr/current\x00\x00'], 0xa6) writev(r0, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000076000d2b000000006849dfd053689c21"], 0x18}}, 0x0) 1.768632355s ago: executing program 0 (id=838): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xc, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000072c0)=[{{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040), 0x0, &(0x7f00000024c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x28, 0x1, 0x1, [r1, r4, r3, r6, r4, r0]}}], 0x58, 0x24000011}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}}, {{&(0x7f0000006780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006cc0), 0x0, &(0x7f00000071c0)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x1c, 0x1, 0x1, [r7, r0, r3]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x2c, 0x1, 0x1, [r7, r4, r3, r3, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}], 0x3, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r8, 0x4008f50a, &(0x7f00000000c0)={0xe, 0x4}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) read$FUSE(r10, &(0x7f0000000480)={0x2020}, 0x2020) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000400)={0xafe, {{0xa, 0x4e21, 0x14e5, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xec1c}}}, 0x88) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r12, @ANYBLOB="00000000000000001c002b8008000100", @ANYRES32, @ANYBLOB="080003001900000008000800", @ANYRES32=r3, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='u', 0x1, 0x24000010, 0x0, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r13, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) 1.768145462s ago: executing program 2 (id=839): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20202abd7000fddbdf252e00000008002c000101000005002e00090000000c002d000203aaaaaaaaaaaa0c0005000202aaaaaaaaaaaa"], 0x3c}}, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r6) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r7, 0xc8036ab6d6cbef07, 0x4000}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="05d9b04ba2db4d3921de8978e605b65be01d", @ANYRES16=r7, @ANYBLOB="020027bd7000fedbdf250700000005000100000000003500070073797374656d5f753a6f626a6563745f723a73797374656d645f7061737377645f6167656e745f657865635f743a733000000000"], 0x54}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4050) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r4, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x3000000}, 0x0) 1.477778474s ago: executing program 2 (id=840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000002180), 0x0, 0x40) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000003400)={&(0x7f00000033c0)=[{0x5, 0xa800, 0x0, 0x0}, {0xd9, 0x8400, 0x0, 0x0}], 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f00000005c0), &(0x7f0000048000), 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x7}}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$l2tp(0x2, 0x2, 0x73) connect$qrtr(r4, &(0x7f0000000b40)={0x2a, 0xffffffff, 0x3fff}, 0xc) connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @none}, 0x8) shutdown(r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xa9, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_MTU={0x8, 0x4, 0x7f}]}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x7, 0x1, 0x0, 0x9, 0x2, 0x8, 0x1}, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x2, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 5 (id=841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='bcache_btree_insert_key\x00', r2, 0x0, 0x2d9}, 0x18) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x8, 0x59f}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) kernel console output (not intermixed with test programs): T9] usb 2-1: SerialNumber: syz [ 200.636882][ T9] usb 2-1: config 0 descriptor?? [ 200.652352][ T5899] usb 3-1: device descriptor read/8, error -71 [ 200.710856][ T46] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 200.758952][ T46] usb 4-1: device descriptor read/8, error -71 [ 200.871945][ T9] usb-storage 2-1:0.0: USB Mass Storage device detected [ 200.890546][ T5899] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 200.964129][ T5899] usb 3-1: device descriptor read/8, error -71 [ 201.010567][ T46] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 201.032252][ T9] usb 2-1: USB disconnect, device number 22 [ 201.233525][ T46] usb 4-1: device descriptor read/8, error -71 [ 201.241083][ T5899] usb usb3-port1: unable to enumerate USB device [ 201.292312][ T7059] netlink: 40 bytes leftover after parsing attributes in process `syz.2.328'. [ 201.401766][ T46] usb usb4-port1: unable to enumerate USB device [ 201.660137][ T5130] Bluetooth: hci2: command 0x0406 tx timeout [ 202.379945][ T5130] Bluetooth: hci4: command 0x0406 tx timeout [ 202.379961][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 202.492313][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'. [ 202.533232][ T5130] Bluetooth: hci1: command 0x0c1a tx timeout [ 202.811859][ T5899] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 202.969566][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 202.986159][ T5899] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.020761][ T5899] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.038190][ T7079] tipc: Started in network mode [ 203.047997][ T7079] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 203.056990][ T5899] usb 1-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 203.091016][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.106177][ T7079] tipc: Enabled bearer , priority 0 [ 203.153231][ T5899] usb 1-1: config 0 descriptor?? [ 203.440097][ T25] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 203.449471][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 203.579186][ T25] usb 4-1: device descriptor read/64, error -71 [ 203.615928][ T5899] logitech-djreceiver 0003:046D:C517.000B: unknown main item tag 0x0 [ 203.625848][ T5899] logitech-djreceiver 0003:046D:C517.000B: unknown main item tag 0x0 [ 203.634878][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 203.647412][ T5899] logitech-djreceiver 0003:046D:C517.000B: unknown main item tag 0x0 [ 203.656039][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 203.666596][ T5899] logitech-djreceiver 0003:046D:C517.000B: unknown main item tag 0x0 [ 203.675112][ T5899] logitech-djreceiver 0003:046D:C517.000B: unknown main item tag 0x0 [ 203.685416][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 203.696949][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.705270][ T5868] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 203.725834][ T7079] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 203.745820][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 203.819069][ T25] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 203.862259][ T7093] vlan2: entered promiscuous mode [ 203.867361][ T7093] veth1_to_batadv: entered promiscuous mode [ 203.879228][ T46] usb 1-1: USB disconnect, device number 15 [ 203.935837][ T7093] veth1_to_batadv: left promiscuous mode [ 204.026629][ T25] usb 4-1: device descriptor read/64, error -71 [ 204.149591][ T25] usb usb4-port1: attempt power cycle [ 204.220481][ T46] tipc: Node number set to 10136234 [ 204.238897][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 204.249639][ T5868] usb 2-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 204.266837][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.276261][ T5868] usb 2-1: Product: syz [ 204.290343][ T5868] usb 2-1: Manufacturer: syz [ 204.296667][ T5868] usb 2-1: SerialNumber: syz [ 204.330673][ T5868] usb 2-1: config 0 descriptor?? [ 204.348326][ T5868] usb 2-1: bad CDC descriptors [ 204.355278][ T5868] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 204.371753][ T5868] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 204.378615][ T5868] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 204.546356][ T5130] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.548777][ T25] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 204.579308][ T25] usb 4-1: device descriptor read/8, error -71 [ 205.054398][ T5914] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 205.062364][ T25] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 205.153483][ T25] usb 4-1: device descriptor read/8, error -71 [ 205.250374][ T5914] usb 5-1: device descriptor read/64, error -71 [ 205.412302][ T25] usb usb4-port1: unable to enumerate USB device [ 205.658331][ T5914] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 205.772037][ T25] usb 2-1: USB disconnect, device number 23 [ 205.864547][ T5914] usb 5-1: device descriptor read/64, error -71 [ 205.984003][ T5914] usb usb5-port1: attempt power cycle [ 206.443360][ T5899] usb 3-1: USB disconnect, device number 24 [ 206.618746][ T5914] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 206.632977][ T7117] syz.1.349: attempt to access beyond end of device [ 206.632977][ T7117] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 206.665191][ T5914] usb 5-1: device descriptor read/8, error -71 [ 207.136111][ T7132] netlink: 36 bytes leftover after parsing attributes in process `syz.0.353'. [ 207.153346][ T7132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.353'. [ 207.165631][ T7132] netlink: 36 bytes leftover after parsing attributes in process `syz.0.353'. [ 207.174889][ T5914] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 207.188536][ T7132] netlink: 36 bytes leftover after parsing attributes in process `syz.0.353'. [ 207.203520][ T5914] usb 5-1: device descriptor read/8, error -71 [ 207.215895][ T7141] netlink: 296 bytes leftover after parsing attributes in process `syz.3.355'. [ 207.226948][ T7141] unsupported nlmsg_type 40 [ 207.234745][ T7130] XFS (nullb0): Invalid superblock magic number [ 207.295876][ T7141] netlink: 36 bytes leftover after parsing attributes in process `syz.3.355'. [ 207.554368][ T7143] netlink: 'syz.3.355': attribute type 4 has an invalid length. [ 207.562677][ T7143] netlink: 17 bytes leftover after parsing attributes in process `syz.3.355'. [ 207.678315][ T5914] usb usb5-port1: unable to enumerate USB device [ 207.807174][ T5917] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 208.156303][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 208.171838][ T5917] usb 3-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 208.181037][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.192669][ T5917] usb 3-1: Product: syz [ 208.196958][ T5917] usb 3-1: Manufacturer: syz [ 208.201598][ T5917] usb 3-1: SerialNumber: syz [ 209.132685][ T5917] usb 3-1: config 0 descriptor?? [ 209.144374][ T5917] usb 3-1: bad CDC descriptors [ 209.149772][ T5917] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 209.157830][ T5917] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 209.164320][ T5917] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 209.466277][ T5870] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 210.368875][ T25] usb 3-1: USB disconnect, device number 25 [ 210.529248][ T7169] FAULT_INJECTION: forcing a failure. [ 210.529248][ T7169] name failslab, interval 1, probability 0, space 0, times 0 [ 210.551442][ T7169] CPU: 1 UID: 0 PID: 7169 Comm: syz.2.366 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 210.562108][ T7169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 210.572198][ T7169] Call Trace: [ 210.575504][ T7169] [ 210.578463][ T7169] dump_stack_lvl+0x241/0x360 [ 210.583188][ T7169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.588428][ T7169] ? __pfx__printk+0x10/0x10 [ 210.593078][ T7169] should_fail_ex+0x3b0/0x4e0 [ 210.597797][ T7169] should_failslab+0xac/0x100 [ 210.602531][ T7169] ? skb_clone+0x20c/0x390 [ 210.606989][ T7169] kmem_cache_alloc_noprof+0x70/0x380 [ 210.612413][ T7169] skb_clone+0x20c/0x390 [ 210.616699][ T7169] __netlink_deliver_tap+0x3cc/0x7f0 [ 210.622028][ T7169] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.627262][ T7169] netlink_deliver_tap+0x19d/0x1b0 [ 210.632408][ T7169] netlink_unicast+0x7c4/0x990 [ 210.637217][ T7169] ? __pfx_netlink_unicast+0x10/0x10 [ 210.642543][ T7169] ? __virt_addr_valid+0x45f/0x530 [ 210.647697][ T7169] ? __phys_addr_symbol+0x2f/0x70 [ 210.652755][ T7169] ? __check_object_size+0x47a/0x730 [ 210.658090][ T7169] netlink_sendmsg+0x8e4/0xcb0 [ 210.662903][ T7169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.668273][ T7169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.673781][ T7169] __sock_sendmsg+0x221/0x270 [ 210.678509][ T7169] ____sys_sendmsg+0x52a/0x7e0 [ 210.683319][ T7169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.688647][ T7169] ? __fget_files+0x2a/0x410 [ 210.693268][ T7169] ? __fget_files+0x2a/0x410 [ 210.697900][ T7169] __sys_sendmsg+0x269/0x350 [ 210.702530][ T7169] ? __pfx_lock_release+0x10/0x10 [ 210.707592][ T7169] ? __pfx___sys_sendmsg+0x10/0x10 [ 210.712752][ T7169] ? __pfx_vfs_write+0x10/0x10 [ 210.717699][ T7169] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 210.724069][ T7169] ? do_syscall_64+0x100/0x230 [ 210.728874][ T7169] ? do_syscall_64+0xb6/0x230 [ 210.733589][ T7169] do_syscall_64+0xf3/0x230 [ 210.738128][ T7169] ? clear_bhb_loop+0x35/0x90 [ 210.742942][ T7169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.748882][ T7169] RIP: 0033:0x7f2aae185d29 [ 210.753327][ T7169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.773012][ T7169] RSP: 002b:00007f2aabff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.781479][ T7169] RAX: ffffffffffffffda RBX: 00007f2aae375fa0 RCX: 00007f2aae185d29 [ 210.789508][ T7169] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 210.797529][ T7169] RBP: 00007f2aabff6090 R08: 0000000000000000 R09: 0000000000000000 [ 210.805616][ T7169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.813617][ T7169] R13: 0000000000000000 R14: 00007f2aae375fa0 R15: 00007ffc1333ec68 [ 210.821846][ T7169] [ 210.867630][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 210.915509][ T5870] usb 2-1: device descriptor read/64, error -71 [ 211.254473][ T5870] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 212.270387][ T7183] loop7: detected capacity change from 0 to 16384 [ 212.724291][ T7194] FAULT_INJECTION: forcing a failure. [ 212.724291][ T7194] name failslab, interval 1, probability 0, space 0, times 0 [ 212.738951][ T7194] CPU: 0 UID: 0 PID: 7194 Comm: syz.4.374 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 212.749607][ T7194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 212.759741][ T7194] Call Trace: [ 212.763058][ T7194] [ 212.766025][ T7194] dump_stack_lvl+0x241/0x360 [ 212.770760][ T7194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.776008][ T7194] ? __pfx__printk+0x10/0x10 [ 212.780645][ T7194] ? fs_reclaim_acquire+0x93/0x130 [ 212.785803][ T7194] ? __pfx___might_resched+0x10/0x10 [ 212.791147][ T7194] should_fail_ex+0x3b0/0x4e0 [ 212.795872][ T7194] should_failslab+0xac/0x100 [ 212.800604][ T7194] __kmalloc_noprof+0xdd/0x4c0 [ 212.805404][ T7194] ? p9_client_prepare_req+0x583/0xf30 [ 212.810921][ T7194] p9_client_prepare_req+0x583/0xf30 [ 212.816315][ T7194] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 212.822189][ T7194] p9_client_rpc+0x19d/0xac0 [ 212.826832][ T7194] ? __pfx_lock_acquire+0x10/0x10 [ 212.831914][ T7194] ? __pfx_p9_client_rpc+0x10/0x10 [ 212.837086][ T7194] ? down_write+0x18c/0x220 [ 212.841632][ T7194] ? __pfx_down_write+0x10/0x10 [ 212.846524][ T7194] p9_client_wstat+0x202/0x290 [ 212.851339][ T7194] v9fs_file_fsync+0x16a/0x1d0 [ 212.856143][ T7194] ? __pfx_v9fs_file_fsync+0x10/0x10 [ 212.861475][ T7194] ? __fget_files+0x395/0x410 [ 212.866189][ T7194] ? __fget_files+0x2a/0x410 [ 212.870827][ T7194] ? __pfx_v9fs_file_fsync+0x10/0x10 [ 212.876153][ T7194] __x64_sys_fdatasync+0xb6/0x110 [ 212.881215][ T7194] do_syscall_64+0xf3/0x230 [ 212.885756][ T7194] ? clear_bhb_loop+0x35/0x90 [ 212.890658][ T7194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.896604][ T7194] RIP: 0033:0x7f3d1f585d29 [ 212.901061][ T7194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.920891][ T7194] RSP: 002b:00007f3d202e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000004b [ 212.929359][ T7194] RAX: ffffffffffffffda RBX: 00007f3d1f775fa0 RCX: 00007f3d1f585d29 [ 212.937381][ T7194] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 212.945398][ T7194] RBP: 00007f3d202e3090 R08: 0000000000000000 R09: 0000000000000000 [ 212.953408][ T7194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.961462][ T7194] R13: 0000000000000000 R14: 00007f3d1f775fa0 R15: 00007ffe58145f28 [ 212.969483][ T7194] [ 213.064578][ T5917] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 214.223888][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 214.243558][ T5917] usb 3-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 214.253848][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.261898][ T5917] usb 3-1: Product: syz [ 214.275163][ T5917] usb 3-1: Manufacturer: syz [ 214.280147][ T5917] usb 3-1: SerialNumber: syz [ 214.363479][ T5917] usb 3-1: config 0 descriptor?? [ 214.383613][ T5917] usb 3-1: bad CDC descriptors [ 214.417042][ T5917] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 214.457743][ T5917] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 214.488125][ T5917] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 214.892730][ T7206] syz.3.375: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 214.893868][ T7213] xt_ecn: cannot match TCP bits for non-tcp packets [ 214.910989][ T7206] CPU: 0 UID: 0 PID: 7206 Comm: syz.3.375 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 214.911027][ T7206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 214.911042][ T7206] Call Trace: [ 214.911053][ T7206] [ 214.911064][ T7206] dump_stack_lvl+0x241/0x360 [ 214.911105][ T7206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.911137][ T7206] ? __pfx__printk+0x10/0x10 [ 214.911170][ T7206] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 214.965495][ T7206] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 214.972029][ T7206] warn_alloc+0x278/0x410 [ 214.976385][ T7206] ? __pfx_warn_alloc+0x10/0x10 [ 214.981257][ T7206] ? translate_table+0x174/0x2260 [ 214.986386][ T7206] ? __get_vm_area_node+0x1c8/0x2d0 [ 214.991601][ T7206] ? __get_vm_area_node+0x25c/0x2d0 [ 214.996821][ T7206] __vmalloc_node_range_noprof+0x62f/0x1380 [ 215.002734][ T7206] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 215.008493][ T7206] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 215.014850][ T7206] ? rcu_is_watching+0x15/0xb0 [ 215.019664][ T7206] ? trace_kmalloc+0x1f/0xd0 [ 215.024290][ T7206] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 215.029780][ T7206] ? __kvmalloc_node_noprof+0x72/0x190 [ 215.035263][ T7206] __kvmalloc_node_noprof+0x142/0x190 [ 215.040658][ T7206] ? translate_table+0x174/0x2260 [ 215.045704][ T7206] translate_table+0x174/0x2260 [ 215.050600][ T7206] ? __pfx_translate_table+0x10/0x10 [ 215.055901][ T7206] ? __might_fault+0xaa/0x120 [ 215.060599][ T7206] ? __pfx_lock_release+0x10/0x10 [ 215.065646][ T7206] ? __might_fault+0xaa/0x120 [ 215.070339][ T7206] ? __might_fault+0xc6/0x120 [ 215.075032][ T7206] ? _copy_from_user+0x99/0xc0 [ 215.079822][ T7206] ? copy_from_sockptr_offset+0x6b/0xb0 [ 215.085386][ T7206] do_ipt_set_ctl+0xe3d/0x1250 [ 215.090176][ T7206] ? __pfx___mutex_trylock_common+0x10/0x10 [ 215.096094][ T7206] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 215.101312][ T7206] ? __pfx_lock_release+0x10/0x10 [ 215.106350][ T7206] ? rcu_is_watching+0x15/0xb0 [ 215.111134][ T7206] ? trace_contention_end+0x3c/0x120 [ 215.116449][ T7206] ? __mutex_unlock_slowpath+0x21e/0x790 [ 215.122109][ T7206] ? __pfx___mutex_lock+0x10/0x10 [ 215.127158][ T7206] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 215.133168][ T7206] ? irqentry_exit+0x63/0x90 [ 215.137815][ T7206] nf_setsockopt+0x295/0x2c0 [ 215.142427][ T7206] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 215.148351][ T7206] do_sock_setsockopt+0x3af/0x720 [ 215.153409][ T7206] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 215.159015][ T7206] ? __fget_files+0x395/0x410 [ 215.163722][ T7206] ? __fget_files+0x2a/0x410 [ 215.168344][ T7206] __x64_sys_setsockopt+0x1ee/0x280 [ 215.173570][ T7206] do_syscall_64+0xf3/0x230 [ 215.178109][ T7206] ? clear_bhb_loop+0x35/0x90 [ 215.182819][ T7206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.188752][ T7206] RIP: 0033:0x7fc85c185d29 [ 215.193192][ T7206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.212846][ T7206] RSP: 002b:00007fc85cf34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 215.221305][ T7206] RAX: ffffffffffffffda RBX: 00007fc85c376160 RCX: 00007fc85c185d29 [ 215.229290][ T7206] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 215.237272][ T7206] RBP: 00007fc85c201b08 R08: 0000000000000270 R09: 0000000000000000 [ 215.245260][ T7206] R10: 0000000020002ac0 R11: 0000000000000246 R12: 0000000000000000 [ 215.253250][ T7206] R13: 0000000000000000 R14: 00007fc85c376160 R15: 00007fff03cc81a8 [ 215.261261][ T7206] [ 215.334065][ T7206] Mem-Info: [ 215.337263][ T7206] active_anon:3190 inactive_anon:8114 isolated_anon:0 [ 215.337263][ T7206] active_file:18629 inactive_file:41957 isolated_file:0 [ 215.337263][ T7206] unevictable:768 dirty:220 writeback:0 [ 215.337263][ T7206] slab_reclaimable:10213 slab_unreclaimable:100885 [ 215.337263][ T7206] mapped:32562 shmem:7156 pagetables:896 [ 215.337263][ T7206] sec_pagetables:0 bounce:0 [ 215.337263][ T7206] kernel_misc_reclaimable:0 [ 215.337263][ T7206] free:1274967 free_pcp:6893 free_cma:0 [ 215.383865][ T7206] Node 0 active_anon:12760kB inactive_anon:32456kB active_file:74440kB inactive_file:167828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130248kB dirty:876kB writeback:0kB shmem:27088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:11620kB pagetables:3584kB sec_pagetables:0kB all_unreclaimable? no [ 215.417970][ T7206] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 215.449052][ T7206] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.476945][ T7206] lowmem_reserve[]: 0 2492 2493 0 0 [ 215.482265][ T7206] Node 0 DMA32 free:1173316kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:12756kB inactive_anon:37324kB active_file:73668kB inactive_file:167776kB unevictable:1536kB writepending:876kB present:3129332kB managed:2552772kB mlocked:0kB bounce:0kB free_pcp:29988kB local_pcp:25800kB free_cma:0kB [ 215.513292][ T7206] lowmem_reserve[]: 0 0 0 0 0 [ 215.518077][ T7206] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:772kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 215.545065][ T7206] lowmem_reserve[]: 0 0 0 0 0 [ 215.549939][ T7206] Node 1 Normal free:3902692kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:860kB local_pcp:860kB free_cma:0kB [ 215.580560][ T7206] lowmem_reserve[]: 0 0 0 0 0 [ 215.585414][ T7206] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 215.598253][ T7206] Node 0 DMA32: 0*4kB 6*8kB (ME) 9*16kB (E) 1*32kB (E) 276*64kB (ME) 51*128kB (M) 28*256kB (UME) 10*512kB (M) 10*1024kB (UME) 4*2048kB (UME) 271*4096kB (M) = 1165152kB [ 215.616967][ T7206] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 215.629201][ T7206] Node 1 Normal: 232*4kB (UME) 55*8kB (UME) 22*16kB (UME) 193*32kB (UME) 91*64kB (UME) 23*128kB (UME) 12*256kB (UM) 12*512kB (UME) 4*1024kB (UME) 5*2048kB (UME) 943*4096kB (M) = 3902744kB [ 215.648223][ T7206] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.659198][ T7206] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 215.668674][ T7206] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.678333][ T7206] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 215.687705][ T7206] 70592 total pagecache pages [ 215.692407][ T7206] 0 pages in swap cache [ 215.696629][ T7206] Free swap = 124604kB [ 215.700809][ T7206] Total swap = 124996kB [ 215.705084][ T7206] 2097051 pages RAM [ 215.708914][ T7206] 0 pages HighMem/MovableOnly [ 215.713765][ T7206] 427006 pages reserved [ 215.717961][ T7206] 0 pages cma reserved [ 216.207126][ T5899] usb 3-1: USB disconnect, device number 26 [ 216.382957][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.383'. [ 216.391961][ T7223] netlink: 20 bytes leftover after parsing attributes in process `syz.2.383'. [ 217.142411][ T5917] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 217.272329][ T5917] usb 1-1: device descriptor read/64, error -71 [ 217.382387][ T5899] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 217.665818][ T25] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 217.673856][ T5917] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 217.812142][ T5917] usb 1-1: device descriptor read/64, error -71 [ 217.832034][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 217.841338][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.854108][ T25] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 217.880547][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.922922][ T5917] usb usb1-port1: attempt power cycle [ 218.100713][ T25] usb 4-1: config 0 descriptor?? [ 218.282078][ T5917] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 218.334297][ T5917] usb 1-1: device descriptor read/8, error -71 [ 218.561319][ T25] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 218.599215][ T5917] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 218.671562][ T5917] usb 1-1: device descriptor read/8, error -71 [ 218.711629][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 218.724771][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 218.736417][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 218.757033][ T5899] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 218.771525][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.779668][ T5899] usb 3-1: Product: syz [ 218.782211][ T5917] usb usb1-port1: unable to enumerate USB device [ 218.791253][ T25] usb 4-1: USB disconnect, device number 22 [ 218.810057][ T5899] usb 3-1: Manufacturer: syz [ 218.815474][ T5899] usb 3-1: SerialNumber: syz [ 218.842537][ T5899] usb 3-1: config 0 descriptor?? [ 218.894973][ T5899] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 218.914939][ T5899] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 220.082461][ T5899] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 220.089327][ T5899] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 220.311020][ T6454] bridge_slave_1: left allmulticast mode [ 220.317107][ T6454] bridge_slave_1: left promiscuous mode [ 220.352318][ T6454] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.364457][ T5870] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 220.381425][ T6454] bridge_slave_0: left allmulticast mode [ 220.387141][ T6454] bridge_slave_0: left promiscuous mode [ 220.393075][ T6454] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.473779][ T7258] ptrace attach of "./syz-executor exec"[5820] was attempted by ""[7258] [ 220.682474][ T5870] usb 1-1: Using ep0 maxpacket: 8 [ 220.718339][ T5899] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 220.805711][ T5870] usb 1-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 220.905039][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.052149][ T5899] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 221.072642][ T5899] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 221.082814][ T5870] usb 1-1: Product: syz [ 221.087050][ T5870] usb 1-1: Manufacturer: syz [ 221.100489][ T5870] usb 1-1: SerialNumber: syz [ 221.105440][ T5899] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 221.113129][ T5899] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 221.120079][ T5899] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 221.120409][ T25] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 221.134975][ T5899] usb 3-1: USB disconnect, device number 27 [ 221.142740][ T5870] usb 1-1: config 0 descriptor?? [ 221.161700][ T5870] usb 1-1: bad CDC descriptors [ 221.167381][ T5870] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 221.176121][ T5870] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 221.189300][ T5870] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 221.310309][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 221.320504][ T25] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 221.352946][ T25] usb 2-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=85.bd [ 221.370268][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=254 [ 221.378505][ T25] usb 2-1: Product: syz [ 221.400229][ T25] usb 2-1: Manufacturer: syz [ 221.404908][ T25] usb 2-1: SerialNumber: syz [ 221.422012][ T25] usb 2-1: config 0 descriptor?? [ 221.591513][ T7261] capability: warning: `syz.2.395' uses 32-bit capabilities (legacy support in use) [ 221.869823][ T5899] usb 1-1: USB disconnect, device number 20 [ 222.565274][ T6454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.586638][ T6454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.605816][ T6454] bond0 (unregistering): Released all slaves [ 222.643674][ T7258] pimreg: entered allmulticast mode [ 222.712572][ T7266] smc: net device bond0 applied user defined pnetid SYZ2 [ 222.727023][ T5917] usb 2-1: USB disconnect, device number 26 [ 222.746323][ T7268] smc: net device bond0 erased user defined pnetid SYZ2 [ 225.020215][ T7305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.034854][ T7305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.054699][ T7302] netlink: 830 bytes leftover after parsing attributes in process `syz.1.406'. [ 226.337866][ T5899] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 226.461060][ T7326] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 226.467965][ T7326] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 226.540911][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 226.552575][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.563869][ T7326] vhci_hcd vhci_hcd.0: Device attached [ 226.598226][ T6454] hsr_slave_0: left promiscuous mode [ 226.616760][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.634770][ T6454] hsr_slave_1: left promiscuous mode [ 226.641698][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 226.667897][ T6454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.675532][ T6454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.683562][ T5899] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 226.694478][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.708791][ T6454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.730291][ T6454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.737675][ T25] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 226.749898][ T5899] usb 5-1: config 0 descriptor?? [ 227.038055][ T5868] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 227.158500][ T6454] veth1_macvtap: left promiscuous mode [ 227.166290][ T6454] veth0_macvtap: left promiscuous mode [ 227.177994][ T6454] veth1_vlan: left promiscuous mode [ 227.194416][ T6454] veth0_vlan: left promiscuous mode [ 228.051892][ T5899] usb 5-1: can't set config #0, error -71 [ 228.063717][ T5899] usb 5-1: USB disconnect, device number 23 [ 229.841136][ T6454] team0 (unregistering): Port device team_slave_1 removed [ 230.210456][ T6454] team0 (unregistering): Port device team_slave_0 removed [ 230.247430][ T7327] vhci_hcd: connection reset by peer [ 230.277412][ T768] vhci_hcd: stop threads [ 230.282763][ T768] vhci_hcd: release socket [ 230.302468][ T768] vhci_hcd: disconnect device [ 231.275384][ T5914] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 231.306115][ T7389] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 231.455330][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 231.475906][ T5914] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 231.494974][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.515636][ T5914] usb 5-1: config 0 descriptor?? [ 231.921755][ T25] vhci_hcd: vhci_device speed not set [ 233.032794][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'. [ 233.114476][ T5914] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 233.124890][ T5914] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 233.138263][ T5914] asix 5-1:0.0: probe with driver asix failed with error -71 [ 233.360335][ T5914] usb 5-1: USB disconnect, device number 24 [ 233.870688][ T7431] sctp: [Deprecated]: syz.0.438 (pid 7431) Use of int in maxseg socket option. [ 233.870688][ T7431] Use struct sctp_assoc_value instead [ 233.903422][ T7394] netlink: 32 bytes leftover after parsing attributes in process `syz.2.434'. [ 234.909933][ T7436] FAULT_INJECTION: forcing a failure. [ 234.909933][ T7436] name failslab, interval 1, probability 0, space 0, times 0 [ 234.922976][ T7436] CPU: 0 UID: 0 PID: 7436 Comm: syz.4.442 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 234.933614][ T7436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 234.943717][ T7436] Call Trace: [ 234.947070][ T7436] [ 234.950033][ T7436] dump_stack_lvl+0x241/0x360 [ 234.954768][ T7436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.960107][ T7436] ? __pfx__printk+0x10/0x10 [ 234.964757][ T7436] should_fail_ex+0x3b0/0x4e0 [ 234.969478][ T7436] should_failslab+0xac/0x100 [ 234.974201][ T7436] ? skb_clone+0x20c/0x390 [ 234.978651][ T7436] kmem_cache_alloc_noprof+0x70/0x380 [ 234.984078][ T7436] skb_clone+0x20c/0x390 [ 234.988371][ T7436] __netlink_deliver_tap+0x3cc/0x7f0 [ 234.993713][ T7436] ? netlink_deliver_tap+0x2e/0x1b0 [ 234.998951][ T7436] netlink_deliver_tap+0x19d/0x1b0 [ 235.004110][ T7436] netlink_unicast+0x7c4/0x990 [ 235.008915][ T7436] ? __pfx_netlink_unicast+0x10/0x10 [ 235.014220][ T7436] ? __virt_addr_valid+0x45f/0x530 [ 235.019378][ T7436] ? __phys_addr_symbol+0x2f/0x70 [ 235.024447][ T7436] ? __check_object_size+0x47a/0x730 [ 235.029774][ T7436] netlink_sendmsg+0x8e4/0xcb0 [ 235.034573][ T7436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.039916][ T7436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.045244][ T7436] __sock_sendmsg+0x221/0x270 [ 235.049968][ T7436] ____sys_sendmsg+0x52a/0x7e0 [ 235.054784][ T7436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.060113][ T7436] ? __fget_files+0x2a/0x410 [ 235.064750][ T7436] ? __fget_files+0x2a/0x410 [ 235.069379][ T7436] __sys_sendmsg+0x269/0x350 [ 235.073992][ T7436] ? __pfx_lock_release+0x10/0x10 [ 235.079059][ T7436] ? __pfx___sys_sendmsg+0x10/0x10 [ 235.084226][ T7436] ? __pfx_vfs_write+0x10/0x10 [ 235.089061][ T7436] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.095442][ T7436] ? do_syscall_64+0x100/0x230 [ 235.100255][ T7436] ? do_syscall_64+0xb6/0x230 [ 235.104972][ T7436] do_syscall_64+0xf3/0x230 [ 235.109506][ T7436] ? clear_bhb_loop+0x35/0x90 [ 235.114218][ T7436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.120160][ T7436] RIP: 0033:0x7f3d1f585d29 [ 235.124610][ T7436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.144261][ T7436] RSP: 002b:00007f3d202e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.152732][ T7436] RAX: ffffffffffffffda RBX: 00007f3d1f775fa0 RCX: 00007f3d1f585d29 [ 235.160749][ T7436] RDX: 0000000020004000 RSI: 0000000020000040 RDI: 0000000000000003 [ 235.168761][ T7436] RBP: 00007f3d202e3090 R08: 0000000000000000 R09: 0000000000000000 [ 235.176786][ T7436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.184808][ T7436] R13: 0000000000000000 R14: 00007f3d1f775fa0 R15: 00007ffe58145f28 [ 235.193476][ T7436] [ 235.203758][ T7436] netlink: 212 bytes leftover after parsing attributes in process `syz.4.442'. [ 235.229793][ T7442] FAULT_INJECTION: forcing a failure. [ 235.229793][ T7442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.248875][ T7442] CPU: 1 UID: 0 PID: 7442 Comm: syz.0.444 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 235.259540][ T7442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 235.269639][ T7442] Call Trace: [ 235.272961][ T7442] [ 235.275928][ T7442] dump_stack_lvl+0x241/0x360 [ 235.280663][ T7442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.285912][ T7442] ? __pfx__printk+0x10/0x10 [ 235.290543][ T7442] ? __pfx_lock_release+0x10/0x10 [ 235.295615][ T7442] should_fail_ex+0x3b0/0x4e0 [ 235.300337][ T7442] _copy_to_iter+0x1f8/0x1c50 [ 235.305066][ T7442] ? __virt_addr_valid+0x183/0x530 [ 235.310234][ T7442] ? __pfx_lock_release+0x10/0x10 [ 235.315319][ T7442] ? __pfx__copy_to_iter+0x10/0x10 [ 235.316711][ T7446] FAULT_INJECTION: forcing a failure. [ 235.316711][ T7446] name failslab, interval 1, probability 0, space 0, times 0 [ 235.320464][ T7442] ? __virt_addr_valid+0x183/0x530 [ 235.320520][ T7442] ? __virt_addr_valid+0x183/0x530 [ 235.320543][ T7442] ? __virt_addr_valid+0x45f/0x530 [ 235.320569][ T7442] ? __phys_addr_symbol+0x2f/0x70 [ 235.320593][ T7442] ? __check_object_size+0x47a/0x730 [ 235.320628][ T7442] __skb_datagram_iter+0x107/0x900 [ 235.320660][ T7442] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 235.320688][ T7442] ? do_raw_spin_lock+0x14f/0x370 [ 235.320726][ T7442] skb_copy_datagram_iter+0xd1/0x250 [ 235.320758][ T7442] unix_stream_read_actor+0x70/0xb0 [ 235.320786][ T7442] unix_stream_read_generic+0xc47/0x26b0 [ 235.320844][ T7442] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 235.320870][ T7442] ? __pfx_lock_release+0x10/0x10 [ 235.363814][ T5868] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 235.364405][ T7442] ? rcu_is_watching+0x15/0xb0 [ 235.414640][ T7442] ? trace_contention_end+0x3c/0x120 [ 235.419996][ T7442] __unix_stream_recvmsg+0x194/0x220 [ 235.425330][ T7442] ? __pfx___unix_stream_recvmsg+0x10/0x10 [ 235.431167][ T7442] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 235.437102][ T7442] unix_bpf_recvmsg+0xd12/0xef0 [ 235.441992][ T7442] ? unix_bpf_recvmsg+0xcf/0xef0 [ 235.446964][ T7442] ? mark_lock+0x9a/0x360 [ 235.451327][ T7442] ? __pfx_unix_bpf_recvmsg+0x10/0x10 [ 235.456757][ T7442] unix_stream_recvmsg+0x212/0x2c0 [ 235.461902][ T7442] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 235.467562][ T7442] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 235.473486][ T7442] ? __pfx___might_resched+0x10/0x10 [ 235.478817][ T7442] ? __might_fault+0xaa/0x120 [ 235.483525][ T7442] ? __pfx_lock_release+0x10/0x10 [ 235.488570][ T7442] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 235.493884][ T7442] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 235.499544][ T7442] sock_recvmsg+0x22f/0x280 [ 235.504100][ T7442] ____sys_recvmsg+0x1c6/0x480 [ 235.508905][ T7442] ? __pfx_____sys_recvmsg+0x10/0x10 [ 235.514261][ T7442] __sys_recvmsg+0x291/0x390 [ 235.518904][ T7442] ? __pfx___sys_recvmsg+0x10/0x10 [ 235.524059][ T7442] ? __mutex_unlock_slowpath+0x21e/0x790 [ 235.529756][ T7442] ? __fget_files+0x2a/0x410 [ 235.534397][ T7442] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.540754][ T7442] ? do_syscall_64+0x100/0x230 [ 235.545546][ T7442] ? do_syscall_64+0xb6/0x230 [ 235.550252][ T7442] do_syscall_64+0xf3/0x230 [ 235.554779][ T7442] ? clear_bhb_loop+0x35/0x90 [ 235.559478][ T7442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.565411][ T7442] RIP: 0033:0x7ff1acb85d29 [ 235.569864][ T7442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.589507][ T7442] RSP: 002b:00007ff1ad8dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 235.597949][ T7442] RAX: ffffffffffffffda RBX: 00007ff1acd75fa0 RCX: 00007ff1acb85d29 [ 235.605944][ T7442] RDX: 0000000000000002 RSI: 0000000020000480 RDI: 0000000000000003 [ 235.613948][ T7442] RBP: 00007ff1ad8dd090 R08: 0000000000000000 R09: 0000000000000000 [ 235.617901][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 235.621931][ T7442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.621952][ T7442] R13: 0000000000000000 R14: 00007ff1acd75fa0 R15: 00007ffde8e25928 [ 235.621989][ T7442] [ 235.639622][ T5868] usb 4-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 235.750015][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.759850][ T7446] CPU: 0 UID: 0 PID: 7446 Comm: syz.4.446 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 235.770503][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 235.780599][ T7446] Call Trace: [ 235.783911][ T7446] [ 235.786868][ T7446] dump_stack_lvl+0x241/0x360 [ 235.791596][ T7446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.796843][ T7446] ? __pfx__printk+0x10/0x10 [ 235.801483][ T7446] ? fs_reclaim_acquire+0x93/0x130 [ 235.806645][ T7446] ? __pfx___might_resched+0x10/0x10 [ 235.811975][ T7446] ? __get_acl+0x9f/0x480 [ 235.816349][ T7446] should_fail_ex+0x3b0/0x4e0 [ 235.821072][ T7446] should_failslab+0xac/0x100 [ 235.825806][ T7446] __kmalloc_noprof+0xdd/0x4c0 [ 235.830606][ T7446] ? security_inode_init_security+0x126/0x480 [ 235.836745][ T7446] security_inode_init_security+0x126/0x480 [ 235.842697][ T7446] ? __pfx_shmem_initxattrs+0x10/0x10 [ 235.848114][ T7446] ? __pfx_security_inode_init_security+0x10/0x10 [ 235.854577][ T7446] ? shmem_get_inode+0xc37/0xf20 [ 235.859560][ T7446] shmem_mknod+0x1ff/0x3d0 [ 235.864022][ T7446] shmem_mkdir+0x33/0x70 [ 235.868303][ T7446] vfs_mkdir+0x2f9/0x4f0 [ 235.872589][ T7446] do_mkdirat+0x264/0x3a0 [ 235.876957][ T7446] ? __check_object_size+0x47a/0x730 [ 235.882308][ T7446] ? __pfx_do_mkdirat+0x10/0x10 [ 235.887188][ T7446] ? getname_flags+0x1e3/0x540 [ 235.891998][ T7446] __x64_sys_mkdirat+0x87/0xa0 [ 235.896823][ T7446] do_syscall_64+0xf3/0x230 [ 235.901373][ T7446] ? clear_bhb_loop+0x35/0x90 [ 235.906097][ T7446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.912042][ T7446] RIP: 0033:0x7f3d1f585d29 [ 235.916492][ T7446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.936142][ T7446] RSP: 002b:00007f3d202e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 235.944613][ T7446] RAX: ffffffffffffffda RBX: 00007f3d1f775fa0 RCX: 00007f3d1f585d29 [ 235.952625][ T7446] RDX: 0000000000000000 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 235.960633][ T7446] RBP: 00007f3d202e3090 R08: 0000000000000000 R09: 0000000000000000 [ 235.968633][ T7446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 235.976633][ T7446] R13: 0000000000000000 R14: 00007f3d1f775fa0 R15: 00007ffe58145f28 [ 235.984674][ T7446] [ 235.988869][ T5868] usb 4-1: Product: syz [ 235.994021][ T5868] usb 4-1: Manufacturer: syz [ 235.999151][ T5868] usb 4-1: SerialNumber: syz [ 236.043080][ T5868] usb 4-1: config 0 descriptor?? [ 236.053102][ T5868] usb 4-1: bad CDC descriptors [ 236.059426][ T5868] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 236.067564][ T5868] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 236.074646][ T5868] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 236.699048][ C0] Illegal XDP return value 16128 on prog (id 128) dev veth1_to_team, expect packet loss! [ 236.961395][ T8] usb 4-1: USB disconnect, device number 24 [ 237.130018][ T7480] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20000 [ 237.183729][ T7481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.454'. [ 239.471454][ T5917] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 240.416932][ T7513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.465'. [ 240.428819][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.465'. [ 240.865973][ T7513] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 241.570170][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 241.644115][ T5917] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 241.655077][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.692219][ T5917] usb 1-1: Product: syz [ 241.696456][ T5917] usb 1-1: Manufacturer: syz [ 241.748486][ T5917] usb 1-1: SerialNumber: syz [ 241.789432][ T5917] usb 1-1: config 0 descriptor?? [ 241.920051][ T5914] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 242.023495][ T5917] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 242.220522][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 242.250181][ T5914] usb 2-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 243.259537][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.267609][ T5914] usb 2-1: Product: syz [ 243.272083][ T5914] usb 2-1: Manufacturer: syz [ 243.276799][ T5914] usb 2-1: SerialNumber: syz [ 243.293305][ T5914] usb 2-1: config 0 descriptor?? [ 243.318410][ T5914] usb 2-1: bad CDC descriptors [ 244.001187][ T5917] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 244.065378][ T5917] usb 1-1: USB disconnect, device number 21 [ 244.532151][ T5914] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 244.540386][ T5914] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 244.547471][ T5914] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 245.313007][ T8] usb 2-1: USB disconnect, device number 27 [ 245.415853][ T7543] misc userio: No port type given on /dev/userio [ 246.716128][ T7565] Bluetooth: MGMT ver 1.23 [ 247.627665][ T25] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 247.900670][ T7588] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_virt_wifi, syncid = 2, id = 0 [ 247.941657][ T25] usb 1-1: config 255 has an invalid interface number: 242 but max is 0 [ 247.950786][ T25] usb 1-1: config 255 has no interface number 0 [ 247.970961][ T25] usb 1-1: config 255 interface 242 altsetting 6 endpoint 0x5 has invalid maxpacket 1023, setting to 8 [ 247.987782][ T25] usb 1-1: config 255 interface 242 has no altsetting 0 [ 248.006707][ T25] usb 1-1: string descriptor 0 read error: -22 [ 248.013139][ T25] usb 1-1: New USB device found, idVendor=8569, idProduct=ee9d, bcdDevice=7f.9f [ 248.027910][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.037551][ T5899] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 248.082139][ T25] rndis_host 1-1:255.242: invalid descriptor buffer length [ 248.107326][ T25] usb 1-1: bad CDC descriptors [ 248.286960][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 248.296090][ T5899] usb 2-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 248.307095][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.315211][ T5899] usb 2-1: Product: syz [ 248.356760][ T5899] usb 2-1: Manufacturer: syz [ 248.371748][ T5899] usb 2-1: SerialNumber: syz [ 248.392390][ T5899] usb 2-1: config 0 descriptor?? [ 248.407529][ T5899] usb 2-1: bad CDC descriptors [ 248.420357][ T5899] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 248.444307][ T5899] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 248.454122][ T5899] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 248.460292][ T7574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.470730][ T7574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.696177][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'. [ 249.351744][ T5899] usb 1-1: USB disconnect, device number 22 [ 249.411745][ T7610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.494'. [ 249.421055][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'. [ 249.609915][ T7613] bond0: option arp_validate: invalid value (18446744073288143227) [ 249.618813][ T7613] netlink: zone id is out of range [ 249.624001][ T7613] netlink: zone id is out of range [ 249.631701][ T7613] netlink: zone id is out of range [ 249.642516][ T7613] netlink: zone id is out of range [ 249.654458][ T7613] netlink: zone id is out of range [ 249.693815][ T7613] netlink: zone id is out of range [ 249.719132][ T5868] usb 2-1: USB disconnect, device number 28 [ 249.756189][ T7613] netlink: zone id is out of range [ 249.761476][ T7613] netlink: zone id is out of range [ 249.782067][ T7613] netlink: zone id is out of range [ 249.796238][ T7613] netlink: zone id is out of range [ 249.817507][ T7623] FAULT_INJECTION: forcing a failure. [ 249.817507][ T7623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.826090][ T5899] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 249.830925][ T7623] CPU: 1 UID: 0 PID: 7623 Comm: syz.1.498 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 249.848825][ T7623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 249.858928][ T7623] Call Trace: [ 249.862253][ T7623] [ 249.865303][ T7623] dump_stack_lvl+0x241/0x360 [ 249.870046][ T7623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.875295][ T7623] ? __pfx__printk+0x10/0x10 [ 249.879949][ T7623] ? snprintf+0xda/0x120 [ 249.884243][ T7623] should_fail_ex+0x3b0/0x4e0 [ 249.888972][ T7623] _copy_to_user+0x31/0xb0 [ 249.893447][ T7623] simple_read_from_buffer+0xca/0x150 [ 249.898877][ T7623] proc_fail_nth_read+0x1e9/0x250 [ 249.903959][ T7623] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.909560][ T7623] ? rw_verify_area+0x55e/0x6f0 [ 249.914461][ T7623] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.920054][ T7623] vfs_read+0x1fc/0xb70 [ 249.924239][ T7623] ? __pfx___mutex_lock+0x10/0x10 [ 249.929289][ T7623] ? __pfx_vfs_read+0x10/0x10 [ 249.933985][ T7623] ? __fget_files+0x2a/0x410 [ 249.938590][ T7623] ? __fget_files+0x395/0x410 [ 249.943282][ T7623] ? __fget_files+0x2a/0x410 [ 249.947897][ T7623] ksys_read+0x18f/0x2b0 [ 249.952164][ T7623] ? __pfx_ksys_read+0x10/0x10 [ 249.956946][ T7623] ? do_syscall_64+0x100/0x230 [ 249.961724][ T7623] ? do_syscall_64+0xb6/0x230 [ 249.966420][ T7623] do_syscall_64+0xf3/0x230 [ 249.970938][ T7623] ? clear_bhb_loop+0x35/0x90 [ 249.975629][ T7623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.981549][ T7623] RIP: 0033:0x7f485f58473c [ 249.985980][ T7623] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 250.005600][ T7623] RSP: 002b:00007f485d3f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 250.014038][ T7623] RAX: ffffffffffffffda RBX: 00007f485f775fa0 RCX: 00007f485f58473c [ 250.022022][ T7623] RDX: 000000000000000f RSI: 00007f485d3f60a0 RDI: 0000000000000003 [ 250.030003][ T7623] RBP: 00007f485d3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 250.037984][ T7623] R10: 0000000000002127 R11: 0000000000000246 R12: 0000000000000001 [ 250.045976][ T7623] R13: 0000000000000000 R14: 00007f485f775fa0 R15: 00007ffc6b1f3d98 [ 250.053988][ T7623] [ 250.057116][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.086007][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 250.093218][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 250.105986][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 250.128277][ T5899] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 250.147785][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.166013][ T5899] usb 3-1: Product: syz [ 250.190820][ T5899] usb 3-1: Manufacturer: syz [ 250.195494][ T5899] usb 3-1: SerialNumber: syz [ 250.218073][ T5899] usb 3-1: config 0 descriptor?? [ 250.244459][ T5899] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 250.256209][ T5899] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 250.271491][ T7627] netlink: 1788 bytes leftover after parsing attributes in process `syz.1.500'. [ 250.845798][ T5868] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 251.095924][ T5868] usb 2-1: config 0 has an invalid interface number: 39 but max is 0 [ 251.113547][ T5868] usb 2-1: config 0 has no interface number 0 [ 251.125594][ T5868] usb 2-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 251.148069][ T5868] usb 2-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 251.165792][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.189508][ T5868] usb 2-1: Product: syz [ 251.198168][ T5899] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 251.208168][ T5899] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 251.229332][ T5868] usb 2-1: Manufacturer: syz [ 251.507291][ T5868] usb 2-1: SerialNumber: syz [ 251.526075][ T5868] usb 2-1: config 0 descriptor?? [ 251.743118][ T7632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.752078][ T7632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.753652][ T7642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.506'. [ 251.761648][ T7632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.778408][ T7632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.789419][ T7632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.798598][ T7632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.807231][ T7632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.816216][ T7632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.826187][ T7632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.837611][ T7632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.893255][ T5868] usb 2-1: USB disconnect, device number 29 [ 252.115114][ T5914] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 252.134900][ T25] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 252.162833][ T5899] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 252.173134][ T5899] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 252.183762][ T5899] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 252.202960][ T5899] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 252.212646][ T5899] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 252.254826][ T5914] usb 1-1: device descriptor read/64, error -71 [ 252.264882][ T25] usb 4-1: device descriptor read/64, error -71 [ 252.450424][ T7617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.489136][ T7617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.504872][ T5914] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 252.530516][ T25] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 252.733384][ T7617] binder: 7615:7617 ioctl 541b 0 returned -22 [ 252.804692][ T5868] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 252.862549][ T25] usb 4-1: device descriptor read/64, error -71 [ 252.869496][ T5914] usb 1-1: device descriptor read/64, error -71 [ 253.044658][ T25] usb usb4-port1: attempt power cycle [ 253.051865][ T5914] usb usb1-port1: attempt power cycle [ 253.444463][ T5914] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 253.561732][ T25] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 253.595169][ T5914] usb 1-1: device descriptor read/8, error -71 [ 253.607705][ T25] usb 4-1: device descriptor read/8, error -71 [ 253.763635][ T5899] usb 3-1: USB disconnect, device number 28 [ 253.774524][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 253.834778][ T5868] usb 2-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 253.846457][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.854859][ T5914] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 253.856565][ T5868] usb 2-1: Product: syz [ 253.866467][ T25] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 253.869044][ T5868] usb 2-1: Manufacturer: syz [ 253.875152][ T5914] usb 1-1: device descriptor read/8, error -71 [ 253.882556][ T5868] usb 2-1: SerialNumber: syz [ 253.912733][ T5868] usb 2-1: config 0 descriptor?? [ 253.936707][ T5868] usb 2-1: bad CDC descriptors [ 253.936850][ T25] usb 4-1: device descriptor read/8, error -71 [ 253.941952][ T5868] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 253.956533][ T5868] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 253.963423][ T5868] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 254.024592][ T5914] usb usb1-port1: unable to enumerate USB device [ 254.065341][ T25] usb usb4-port1: unable to enumerate USB device [ 254.475213][ T6457] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.766892][ T6457] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.825868][ T5914] usb 2-1: USB disconnect, device number 30 [ 254.888406][ T6457] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.959866][ T6457] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.313418][ T8] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 255.702072][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.743091][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.770279][ T6457] bridge_slave_1: left allmulticast mode [ 255.782410][ T8] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 256.025562][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.031998][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.057928][ T6457] bridge_slave_1: left promiscuous mode [ 256.093102][ T6457] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.364647][ T6457] bridge_slave_0: left allmulticast mode [ 256.385940][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 256.412400][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.419775][ T6457] bridge_slave_0: left promiscuous mode [ 256.420888][ T6457] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.432662][ T8] usb 1-1: SerialNumber: syz [ 256.440050][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.465996][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.493468][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.507919][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 256.515523][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.707068][ T7675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.520'. [ 256.731659][ T8] usb 1-1: 0:2 : does not exist [ 256.809828][ T8] usb 1-1: USB disconnect, device number 27 [ 257.127114][ T6457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.138989][ T6457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.149568][ T6457] bond0 (unregistering): Released all slaves [ 258.592737][ T5833] Bluetooth: hci2: command tx timeout [ 259.217739][ T7711] fuse: Bad value for 'group_id' [ 259.229622][ T7711] fuse: Bad value for 'group_id' [ 259.237767][ T7711] fuse: Unknown parameter 'KÅc{iyA' [ 259.895857][ T5868] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 260.106096][ T6457] hsr_slave_0: left promiscuous mode [ 260.136600][ T6457] hsr_slave_1: left promiscuous mode [ 260.143020][ T6457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.150601][ T6457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.165695][ T6457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.178855][ T6457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.215362][ T6457] veth1_macvtap: left promiscuous mode [ 260.340614][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 261.208582][ T6457] veth0_macvtap: left promiscuous mode [ 261.215665][ T5833] Bluetooth: hci2: command tx timeout [ 261.248721][ T6457] veth1_vlan: left promiscuous mode [ 261.254208][ T6457] veth0_vlan: left promiscuous mode [ 261.303445][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 261.330347][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 261.350354][ T5916] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 261.387800][ T5868] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 261.424626][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.435243][ T5868] usb 3-1: Product: syz [ 261.439471][ T5868] usb 3-1: Manufacturer: syz [ 261.445480][ T5868] usb 3-1: SerialNumber: syz [ 261.510545][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 261.529934][ T5916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.532093][ T5868] usb 3-1: config 0 descriptor?? [ 261.939482][ T5916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.965346][ T5868] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 261.974426][ T5916] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.990920][ T5868] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 261.998132][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.017584][ T5916] usb 4-1: Product: syz [ 262.025880][ T5916] usb 4-1: Manufacturer: syz [ 262.035848][ T5916] usb 4-1: SerialNumber: syz [ 262.260792][ T5916] usb 4-1: 0:2 : does not exist [ 262.296438][ T5916] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 262.364209][ T5916] usb 4-1: USB disconnect, device number 29 [ 262.556456][ T5868] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 262.578254][ T5868] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 262.607632][ T5868] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 262.629366][ T5868] em28xx 3-1:0.0: No AC97 audio processor [ 263.006952][ T6457] team0 (unregistering): Port device team_slave_1 removed [ 263.095828][ T6457] team0 (unregistering): Port device team_slave_0 removed [ 263.239824][ T5833] Bluetooth: hci2: command tx timeout [ 263.664588][ T8] usb 3-1: USB disconnect, device number 29 [ 263.677750][ T8] em28xx 3-1:0.0: Disconnecting em28xx [ 263.704493][ T8] em28xx 3-1:0.0: Freeing device [ 263.802164][ T7677] chnl_net:caif_netlink_parms(): no params data found [ 264.298830][ T7677] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.363402][ T7677] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.433126][ T7677] bridge_slave_0: entered allmulticast mode [ 264.600347][ T7677] bridge_slave_0: entered promiscuous mode [ 264.658272][ T7677] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.689032][ T7677] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.708783][ T7677] bridge_slave_1: entered allmulticast mode [ 264.735645][ T7677] bridge_slave_1: entered promiscuous mode [ 264.868560][ T7677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.944909][ T7677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.330727][ T5833] Bluetooth: hci2: command tx timeout [ 265.570047][ T7677] team0: Port device team_slave_0 added [ 265.921033][ T7677] team0: Port device team_slave_1 added [ 266.135611][ T7677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.305078][ T7677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.335509][ T7677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.518303][ T7677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.529144][ T7677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.567309][ T7677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.752549][ T5868] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 266.905602][ T7677] hsr_slave_0: entered promiscuous mode [ 266.920038][ T7677] hsr_slave_1: entered promiscuous mode [ 266.927508][ T5868] usb 4-1: device descriptor read/64, error -71 [ 267.167499][ T5868] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 267.319260][ T5868] usb 4-1: device descriptor read/64, error -71 [ 267.380693][ T7677] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 267.413501][ T7677] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 267.427416][ T5868] usb usb4-port1: attempt power cycle [ 267.439745][ T7677] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 267.447243][ T8] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 267.466427][ T7677] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 267.609178][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 267.632742][ T8] usb 3-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 267.651803][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.661736][ T8] usb 3-1: Product: syz [ 267.672297][ T8] usb 3-1: Manufacturer: syz [ 267.676670][ T7677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.678661][ T8] usb 3-1: SerialNumber: syz [ 267.697599][ T8] usb 3-1: config 0 descriptor?? [ 267.705811][ T8] usb 3-1: bad CDC descriptors [ 267.721395][ T7677] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.722295][ T8] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 267.743137][ T8] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 267.754211][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.761422][ T6452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.769298][ T5868] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 267.783499][ T8] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 267.807846][ T5868] usb 4-1: device descriptor read/8, error -71 [ 267.825282][ T6457] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.832493][ T6457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.923448][ T8] usb 3-1: USB disconnect, device number 30 [ 268.067108][ T5868] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 268.085880][ T7801] netlink: 'syz.0.549': attribute type 4 has an invalid length. [ 268.161660][ T5868] usb 4-1: device descriptor read/8, error -71 [ 268.307388][ T5868] usb usb4-port1: unable to enumerate USB device [ 268.834900][ T7677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.027177][ T5914] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 269.264810][ T5914] usb 3-1: config 162 has an invalid interface descriptor of length 8, skipping [ 269.355391][ T5914] usb 3-1: config 162 has an invalid descriptor of length 91, skipping remainder of the config [ 269.426323][ T5914] usb 3-1: config 162 has 0 interfaces, different from the descriptor's value: 2 [ 269.448250][ T5914] usb 3-1: New USB device found, idVendor=0557, idProduct=2008, bcdDevice=cf.0b [ 269.470120][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.479121][ T5914] usb 3-1: Product: syz [ 269.483397][ T5914] usb 3-1: Manufacturer: syz [ 269.522454][ T5914] usb 3-1: SerialNumber: syz [ 269.688334][ T7815] netlink: 'syz.3.552': attribute type 21 has an invalid length. [ 269.721237][ T7815] netlink: 128 bytes leftover after parsing attributes in process `syz.3.552'. [ 269.814842][ T7815] netlink: 'syz.3.552': attribute type 5 has an invalid length. [ 269.823010][ T7815] netlink: 'syz.3.552': attribute type 6 has an invalid length. [ 269.830964][ T7815] netlink: 3 bytes leftover after parsing attributes in process `syz.3.552'. [ 270.910232][ T7677] veth0_vlan: entered promiscuous mode [ 270.921129][ T7677] veth1_vlan: entered promiscuous mode [ 270.945644][ T7677] veth0_macvtap: entered promiscuous mode [ 270.948132][ T7829] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.555'. [ 270.954908][ T7677] veth1_macvtap: entered promiscuous mode [ 270.981631][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.992277][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.002174][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.012768][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.022679][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.035058][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.048151][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.065370][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.129756][ T7677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.467503][ T7677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.483493][ T7677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.508498][ T7677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.584895][ T7677] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.596177][ T7677] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.676106][ T7677] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.741367][ T7677] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.186824][ T2132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.397898][ T6455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.405949][ T6455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.415599][ T2132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.424633][ T5868] usb 3-1: USB disconnect, device number 31 [ 273.476856][ T5914] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 273.784493][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 273.795610][ T5914] usb 4-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 273.805160][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.813311][ T5914] usb 4-1: Product: syz [ 274.556057][ T5868] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 274.611420][ T5914] usb 4-1: Manufacturer: syz [ 274.621601][ T5914] usb 4-1: SerialNumber: syz [ 274.631832][ T5914] usb 4-1: config 0 descriptor?? [ 274.638877][ T5914] usb 4-1: bad CDC descriptors [ 274.644646][ T5914] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 274.652607][ T5914] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 274.673892][ T5914] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 274.683837][ T5900] IPVS: starting estimator thread 0... [ 274.783688][ T7853] IPVS: using max 20 ests per chain, 48000 per kthread [ 274.814097][ T5868] usb 3-1: device descriptor read/64, error -71 [ 274.976858][ T9] usb 4-1: USB disconnect, device number 34 [ 275.083567][ T5868] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 275.223899][ T5868] usb 3-1: device descriptor read/64, error -71 [ 275.346953][ T5868] usb usb3-port1: attempt power cycle [ 276.524210][ T5868] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 276.554259][ T5868] usb 3-1: device descriptor read/8, error -71 [ 276.714137][ T5914] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 276.764495][ T7873] tmpfs: Unknown parameter 'siz>' [ 277.046360][ T9] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 277.173571][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.189951][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.210271][ T5914] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 277.254260][ T9] usb 2-1: config 0 has an invalid descriptor of length 5, skipping remainder of the config [ 277.258348][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.271566][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 277.283282][ T5914] usb 4-1: config 0 descriptor?? [ 277.331513][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 277.357881][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.394892][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 277.593109][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 278.340365][ T9] usb 2-1: Manufacturer: syz [ 278.533480][ T9] usb 2-1: config 0 descriptor?? [ 278.647414][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 279.155661][ T7888] dvmrp0: entered allmulticast mode [ 279.173662][ T7888] pimreg: entered allmulticast mode [ 279.533689][ T7895] net_ratelimit: 17 callbacks suppressed [ 279.533770][ T7895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.796023][ T9] usb 2-1: USB disconnect, device number 31 [ 280.422731][ T7869] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 280.558218][ T7869] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 280.670931][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 280.788636][ T7869] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 280.797987][ T7869] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 280.806842][ T7869] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 280.814637][ T7869] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 280.939906][ T7869] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 281.097979][ T5914] usbhid 4-1:0.0: can't add hid device: -71 [ 281.106311][ T5914] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 281.119059][ T5914] usb 4-1: USB disconnect, device number 35 [ 281.240308][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 281.320441][ T5899] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 281.400349][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 281.413529][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 281.431012][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 281.447234][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 281.456478][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.465063][ T9] usb 3-1: Product: ဉ [ 281.469981][ T9] usb 3-1: Manufacturer: 뇾漞븥愆鱸肧굲白ᑫᜍଋ绺㲈꜍䅔짥腂ﵖ阋䠇矹랭턔췟꥟멥憷ꦽ⏯㥙槂䁺荗谽᎑乞侚ꏘ [ 281.485079][ T9] usb 3-1: SerialNumber: 䕒伳띑ᇒ⎜⦯↡簏ꃨ紦앗☮ㆶűꈑ枩籍싖훷뇽䴷럴쾡ᶆ剕妭岤ꝷ옒挶蕡䠨⃡㢺䮍ᆏﲴ与㯇癿꾤ⸯ蹵䮀⳽봄鸒藰钶豸爄蓫ₕ㑙灿홒戀떰࿕좾ᡪၴ糅☉᢬く胵ߔ瀋쒬韣盭ㄍ몋ꖅ憐⺩ﱔ嫇㿩ꇭꤐ僈࿸振쭐宂ウ輨뿳⯷䴖鵓쏇濝꽴쭴ꆤ婗 [ 281.984002][ T5914] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 282.220169][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 282.235422][ T5914] usb 4-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 282.263443][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.277904][ T5914] usb 4-1: Product: syz [ 282.283966][ T5914] usb 4-1: Manufacturer: syz [ 282.288612][ T5914] usb 4-1: SerialNumber: syz [ 282.318056][ T5914] usb 4-1: config 0 descriptor?? [ 282.345212][ T5914] usb 4-1: bad CDC descriptors [ 282.348114][ T8] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 282.359800][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 282.365298][ T9] usb 3-1: can't set config #1, error -71 [ 282.370234][ T5914] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 282.375082][ T9] usb 3-1: USB disconnect, device number 36 [ 282.388585][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 282.399730][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 282.409742][ T5914] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 282.411681][ T5899] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 282.425336][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.435194][ T5914] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 282.438529][ T5899] usb 1-1: Product: syz [ 282.449237][ T5899] usb 1-1: Manufacturer: syz [ 282.457547][ T5899] usb 1-1: SerialNumber: syz [ 282.500439][ T8] usb 2-1: device descriptor read/64, error -71 [ 282.581907][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 282.605610][ T5899] usb 1-1: config 0 descriptor?? [ 282.841860][ T5899] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 282.919622][ T5130] Bluetooth: hci1: command 0x0c1a tx timeout [ 282.924132][ T8] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 282.925987][ T5130] Bluetooth: hci4: command 0x0406 tx timeout [ 282.941592][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 283.057610][ T5914] usb 4-1: USB disconnect, device number 36 [ 283.097621][ T7918] netlink: 628 bytes leftover after parsing attributes in process `syz.2.581'. [ 283.148981][ T8] usb 2-1: device descriptor read/64, error -71 [ 283.185067][ T5900] usb 1-1: USB disconnect, device number 28 [ 283.281221][ T8] usb usb2-port1: attempt power cycle [ 283.839020][ T29] audit: type=1326 audit(1737219188.841:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7927 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85c185d29 code=0x7ffc0000 [ 283.893110][ T29] audit: type=1326 audit(1737219188.881:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7927 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85c185d29 code=0x7ffc0000 [ 283.918970][ T8] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 283.928368][ T29] audit: type=1326 audit(1737219188.881:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7927 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc85c185d29 code=0x7ffc0000 [ 283.959734][ T8] usb 2-1: device descriptor read/8, error -71 [ 283.994030][ T29] audit: type=1326 audit(1737219188.881:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7927 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85c185d29 code=0x7ffc0000 [ 284.027280][ T29] audit: type=1326 audit(1737219188.881:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7927 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85c185d29 code=0x7ffc0000 [ 284.052913][ T29] audit: type=1326 audit(1737219188.881:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7927 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc85c185d29 code=0x7ffc0000 [ 284.091725][ T29] audit: type=1326 audit(1737219188.881:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7927 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85c185d29 code=0x7ffc0000 [ 284.148871][ T29] audit: type=1326 audit(1737219188.881:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7927 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85c185d29 code=0x7ffc0000 [ 284.170194][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.182721][ T29] audit: type=1326 audit(1737219188.881:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7927 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc85c185d29 code=0x7ffc0000 [ 284.200110][ T8] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 284.203861][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.204471][ T29] audit: type=1326 audit(1737219188.881:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7927 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc85c185d29 code=0x7ffc0000 [ 284.248896][ T5900] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 284.301992][ T8] usb 2-1: device descriptor read/8, error -71 [ 284.412760][ T8] usb usb2-port1: unable to enumerate USB device [ 284.458810][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 284.467203][ T5900] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 284.718477][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 284.735384][ T5900] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 284.824921][ T7962] binder: BINDER_SET_CONTEXT_MGR already set [ 284.831572][ T7962] binder: 7950:7962 ioctl 4018620d 200002c0 returned -16 [ 284.978426][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 285.429768][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.438010][ T5900] usb 6-1: Product: syz [ 285.442372][ T5900] usb 6-1: Manufacturer: syz [ 285.451157][ T5900] usb 6-1: SerialNumber: syz [ 285.584998][ T5900] usb 6-1: config 0 descriptor?? [ 286.080783][ T5900] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 286.143802][ T5900] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 286.198307][ T7966] netlink: 'syz.0.597': attribute type 10 has an invalid length. [ 286.214055][ T7966] macvlan0: entered promiscuous mode [ 286.224434][ T7966] macvlan0: entered allmulticast mode [ 286.233815][ T7966] veth1_vlan: entered allmulticast mode [ 286.243058][ T7966] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 286.256333][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.597'. [ 286.287242][ T7969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.597'. [ 286.303286][ T7968] sp0: Synchronizing with TNC [ 286.506660][ T7979] netlink: 16 bytes leftover after parsing attributes in process `syz.3.600'. [ 286.655759][ T7978] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 286.681636][ T5900] em28xx 6-1:0.0: unknown em28xx chip ID (214) [ 286.807563][ T8] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 287.059443][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 287.190321][ T7985] input: syz1 as /devices/virtual/input/input34 [ 287.220420][ T7987] netlink: 24 bytes leftover after parsing attributes in process `syz.1.601'. [ 287.697922][ T5900] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 287.821818][ T5900] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 287.849406][ T5900] em28xx 6-1:0.0: No AC97 audio processor [ 288.036962][ T8] usb 4-1: device descriptor read/64, error -71 [ 288.288028][ T8] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 288.436763][ T8] usb 4-1: device descriptor read/64, error -71 [ 288.561551][ T8] usb usb4-port1: attempt power cycle [ 288.902260][ T9] usb 6-1: USB disconnect, device number 2 [ 288.977348][ T8011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.979147][ T9] em28xx 6-1:0.0: Disconnecting em28xx [ 289.021638][ T8] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 289.126473][ T9] em28xx 6-1:0.0: Freeing device [ 289.147304][ T8011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.184757][ T8] usb 4-1: device descriptor read/8, error -71 [ 289.558615][ T8020] 9pnet_fd: Insufficient options for proto=fd [ 290.066891][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 290.238839][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 290.248847][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.268688][ T9] usb 6-1: config 0 descriptor?? [ 290.318223][ T5868] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 290.496181][ T5868] usb 3-1: Using ep0 maxpacket: 8 [ 290.706126][ T5868] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 290.715316][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.725794][ T5868] usb 3-1: Product: syz [ 290.730330][ T5868] usb 3-1: Manufacturer: syz [ 290.734973][ T5868] usb 3-1: SerialNumber: syz [ 290.749188][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'. [ 290.773832][ T5868] usb 3-1: config 0 descriptor?? [ 290.785584][ T9] ath6kl: Failed to submit usb control message: -71 [ 290.792299][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 290.800078][ T9] ath6kl: Unable to send get target info: -71 [ 290.811025][ T5868] gspca_main: sq930x-2.14.0 probing 2770:930c [ 290.817828][ T9] ath6kl: Failed to init ath6kl core: -71 [ 290.829767][ T9] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 290.845519][ T9] usb 6-1: USB disconnect, device number 3 [ 291.515733][ T5868] gspca_sq930x: ucbus_write failed -110 [ 291.897352][ T8057] FAULT_INJECTION: forcing a failure. [ 291.897352][ T8057] name failslab, interval 1, probability 0, space 0, times 0 [ 291.911079][ T8057] CPU: 1 UID: 0 PID: 8057 Comm: syz.2.614 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 291.921725][ T8057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 291.931823][ T8057] Call Trace: [ 291.935143][ T8057] [ 291.938090][ T8057] dump_stack_lvl+0x241/0x360 [ 291.942781][ T8057] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.948000][ T8057] ? __pfx__printk+0x10/0x10 [ 291.952605][ T8057] ? __kmalloc_cache_noprof+0x48/0x390 [ 291.958102][ T8057] ? __pfx___might_resched+0x10/0x10 [ 291.963434][ T8057] should_fail_ex+0x3b0/0x4e0 [ 291.968122][ T8057] should_failslab+0xac/0x100 [ 291.972818][ T8057] __kmalloc_cache_noprof+0x70/0x390 [ 291.978108][ T8057] ? fuse_dev_alloc+0x92/0x250 [ 291.982973][ T8057] fuse_dev_alloc+0x92/0x250 [ 291.987596][ T8057] fuse_fill_super_common+0x4ea/0x1100 [ 291.993067][ T8057] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 291.998987][ T8057] ? __init_swait_queue_head+0xae/0x150 [ 292.004551][ T8057] ? shrinker_register+0x160/0x230 [ 292.009681][ T8057] ? sget_fc+0x909/0x9c0 [ 292.013938][ T8057] fuse_fill_super+0x173/0x1e0 [ 292.018717][ T8057] ? __pfx_fuse_fill_super+0x10/0x10 [ 292.024010][ T8057] get_tree_nodev+0xb7/0x140 [ 292.028611][ T8057] fuse_get_tree+0x347/0x4b0 [ 292.033215][ T8057] vfs_get_tree+0x90/0x2b0 [ 292.037645][ T8057] do_new_mount+0x2be/0xb40 [ 292.042164][ T8057] ? __pfx_do_new_mount+0x10/0x10 [ 292.047209][ T8057] __se_sys_mount+0x2d6/0x3c0 [ 292.051898][ T8057] ? __pfx___se_sys_mount+0x10/0x10 [ 292.057098][ T8057] ? do_syscall_64+0x100/0x230 [ 292.061881][ T8057] ? __x64_sys_mount+0x20/0xc0 [ 292.066655][ T8057] do_syscall_64+0xf3/0x230 [ 292.071161][ T8057] ? clear_bhb_loop+0x35/0x90 [ 292.075844][ T8057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.081749][ T8057] RIP: 0033:0x7f2aae185d29 [ 292.086167][ T8057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.105785][ T8057] RSP: 002b:00007f2aabfd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 292.114224][ T8057] RAX: ffffffffffffffda RBX: 00007f2aae376080 RCX: 00007f2aae185d29 [ 292.122202][ T8057] RDX: 0000000020002100 RSI: 0000000020000000 RDI: 0000000000000000 [ 292.130176][ T8057] RBP: 00007f2aabfd5090 R08: 0000000020000080 R09: 0000000000000000 [ 292.138152][ T8057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 292.146316][ T8057] R13: 0000000000000000 R14: 00007f2aae376080 R15: 00007ffc1333ec68 [ 292.154321][ T8057] [ 293.659139][ T8078] netlink: 'syz.5.628': attribute type 4 has an invalid length. [ 293.897993][ T5868] gspca_sq930x: Unknown sensor [ 293.902933][ T5868] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 293.921685][ T5868] usb 3-1: USB disconnect, device number 37 [ 296.549470][ T8095] netlink: 16 bytes leftover after parsing attributes in process `syz.3.634'. [ 296.887185][ T8] IPVS: starting estimator thread 0... [ 296.983387][ T8114] IPVS: using max 17 ests per chain, 40800 per kthread [ 297.098311][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'. [ 297.427778][ T8123] xt_connbytes: Forcing CT accounting to be enabled [ 297.436009][ T8123] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 297.448224][ T8123] xt_bpf: check failed: parse error [ 298.137095][ T8136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.192215][ T8140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.647'. [ 300.084989][ T8138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.131555][ T8138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.328242][ T8166] netlink: 16 bytes leftover after parsing attributes in process `syz.5.654'. [ 301.670246][ T5916] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 301.841450][ T5916] usb 6-1: device descriptor read/64, error -71 [ 302.200341][ T5916] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 302.645713][ T5916] usb 6-1: device descriptor read/64, error -71 [ 303.601634][ T5916] usb usb6-port1: attempt power cycle [ 304.219173][ T5916] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 304.363979][ T5916] usb 6-1: device descriptor read/8, error -71 [ 304.388807][ T8] IPVS: starting estimator thread 0... [ 304.488950][ T8201] IPVS: using max 17 ests per chain, 40800 per kthread [ 306.238754][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 306.269455][ T8225] xt_recent: Unsupported userspace flags (000000da) [ 306.291466][ T8224] binder: 8221:8224 ioctl c0306201 20000680 returned -14 [ 306.377766][ T9] usb 3-1: device descriptor read/64, error -71 [ 306.677937][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 306.905174][ T9] usb 3-1: device descriptor read/64, error -71 [ 307.062593][ T9] usb usb3-port1: attempt power cycle [ 307.447386][ T5868] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 307.477190][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 307.499944][ T9] usb 3-1: device descriptor read/8, error -71 [ 307.577404][ T5868] usb 1-1: device descriptor read/64, error -71 [ 308.626619][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 308.634327][ T5868] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 308.721115][ T8264] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 308.729387][ T8264] FAULT_INJECTION: forcing a failure. [ 308.729387][ T8264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.743857][ T8264] CPU: 0 UID: 0 PID: 8264 Comm: syz.2.682 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 308.754516][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 308.764630][ T8264] Call Trace: [ 308.767919][ T8264] [ 308.770885][ T8264] dump_stack_lvl+0x241/0x360 [ 308.775704][ T8264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.780924][ T8264] ? __pfx__printk+0x10/0x10 [ 308.785545][ T8264] ? snprintf+0xda/0x120 [ 308.789824][ T8264] should_fail_ex+0x3b0/0x4e0 [ 308.794523][ T8264] _copy_to_user+0x31/0xb0 [ 308.798984][ T8264] simple_read_from_buffer+0xca/0x150 [ 308.804427][ T8264] proc_fail_nth_read+0x1e9/0x250 [ 308.809504][ T8264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 308.815074][ T8264] ? rw_verify_area+0x55e/0x6f0 [ 308.819953][ T8264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 308.825551][ T8264] vfs_read+0x1fc/0xb70 [ 308.829774][ T8264] ? __pfx___mutex_lock+0x10/0x10 [ 308.834860][ T8264] ? __pfx_vfs_read+0x10/0x10 [ 308.839660][ T8264] ? __fget_files+0x2a/0x410 [ 308.844557][ T8264] ? __fget_files+0x395/0x410 [ 308.849251][ T8264] ? __fget_files+0x2a/0x410 [ 308.853869][ T8264] ksys_read+0x18f/0x2b0 [ 308.858134][ T8264] ? __pfx_ksys_read+0x10/0x10 [ 308.862913][ T8264] ? do_syscall_64+0x100/0x230 [ 308.867715][ T8264] ? do_syscall_64+0xb6/0x230 [ 308.872406][ T8264] do_syscall_64+0xf3/0x230 [ 308.876919][ T8264] ? clear_bhb_loop+0x35/0x90 [ 308.881615][ T8264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.887528][ T8264] RIP: 0033:0x7f2aae18473c [ 308.891957][ T8264] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 308.911591][ T8264] RSP: 002b:00007f2aabff6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 308.920029][ T8264] RAX: ffffffffffffffda RBX: 00007f2aae375fa0 RCX: 00007f2aae18473c [ 308.928014][ T8264] RDX: 000000000000000f RSI: 00007f2aabff60a0 RDI: 0000000000000003 [ 308.935994][ T8264] RBP: 00007f2aabff6090 R08: 0000000000000000 R09: 0000000000000000 [ 308.943973][ T8264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 308.951956][ T8264] R13: 0000000000000000 R14: 00007f2aae375fa0 R15: 00007ffc1333ec68 [ 308.959957][ T8264] [ 308.966480][ T9] usb 3-1: device not accepting address 41, error -71 [ 308.974985][ T9] usb usb3-port1: unable to enumerate USB device [ 308.981896][ T5868] usb 1-1: device descriptor read/64, error -71 [ 309.096530][ T5870] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 309.105834][ T5868] usb usb1-port1: attempt power cycle [ 309.118235][ T5899] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 309.276397][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 309.287474][ T5870] usb 6-1: unable to get BOS descriptor or descriptor too short [ 309.308972][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.328444][ T5899] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 309.329531][ T5870] usb 6-1: config 14 has an invalid interface number: 3 but max is 1 [ 309.347847][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.393097][ T5899] usb 4-1: config 0 descriptor?? [ 309.426300][ T5870] usb 6-1: config 14 has an invalid interface number: 240 but max is 1 [ 309.475637][ T5870] usb 6-1: config 14 has no interface number 0 [ 309.485916][ T5868] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 309.493897][ T5870] usb 6-1: config 14 has no interface number 1 [ 309.516352][ T5870] usb 6-1: config 14 interface 3 has no altsetting 0 [ 309.533766][ T5870] usb 6-1: config 14 interface 240 has no altsetting 0 [ 309.549946][ T5868] usb 1-1: device descriptor read/8, error -71 [ 309.571868][ T5870] usb 6-1: New USB device found, idVendor=05c6, idProduct=9222, bcdDevice=3c.9b [ 309.596260][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.646266][ T5870] usb 6-1: Product: syz [ 309.665258][ T5870] usb 6-1: Manufacturer: syz [ 309.680421][ T5870] usb 6-1: SerialNumber: syz [ 309.806264][ T5868] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 309.849628][ T5868] usb 1-1: device descriptor read/8, error -71 [ 309.966432][ T5868] usb usb1-port1: unable to enumerate USB device [ 310.003945][ T8275] kvm: user requested TSC rate below hardware speed [ 310.246912][ T5899] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 310.479726][ T5899] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 310.505603][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.519929][ T5899] usb 2-1: Product: syz [ 310.535060][ T5899] usb 2-1: Manufacturer: syz [ 310.540841][ T5899] usb 2-1: SerialNumber: syz [ 310.564638][ T5899] usb 2-1: config 0 descriptor?? [ 311.641512][ T5899] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 311.655460][ T5899] usb 2-1: USB disconnect, device number 36 [ 311.671572][ T5870] usb 6-1: unknown number of interfaces: 2 [ 311.679582][ T5870] usb 6-1: USB disconnect, device number 8 [ 312.393001][ T25] usb 4-1: USB disconnect, device number 41 [ 313.383470][ T5899] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 313.528281][ T8304] tmpfs: Bad value for 'mpol' [ 313.645199][ T8301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.320955][ T8315] vlan2: entered promiscuous mode [ 314.363294][ T8315] vlan2: entered allmulticast mode [ 314.388706][ T8315] hsr_slave_1: entered allmulticast mode [ 314.448730][ T8322] sg_read: process 496 (syz.3.699) changed security contexts after opening file descriptor, this is not allowed. [ 315.393320][ T5868] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 315.593641][ T8333] random: crng reseeded on system resumption [ 315.648497][ T5868] usb 6-1: device descriptor read/64, error -71 [ 315.945359][ T5868] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 316.184106][ T5868] usb 6-1: device descriptor read/64, error -71 [ 316.481789][ T5868] usb usb6-port1: attempt power cycle [ 317.060163][ T5868] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 317.087212][ T5868] usb 6-1: device descriptor read/8, error -71 [ 317.373047][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.379843][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.482276][ T5868] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 317.516280][ T5868] usb 6-1: device descriptor read/8, error -71 [ 317.669820][ T5868] usb usb6-port1: unable to enumerate USB device [ 317.892228][ T5914] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 318.103454][ T5914] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 318.121943][ T5914] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.141921][ T5914] usb 2-1: config 0 interface 0 has no altsetting 0 [ 318.155982][ T5914] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 318.176457][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.200969][ T5914] usb 2-1: config 0 descriptor?? [ 318.850589][ T8363] FAULT_INJECTION: forcing a failure. [ 318.850589][ T8363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.881411][ T8363] CPU: 1 UID: 0 PID: 8363 Comm: syz.2.711 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 318.892169][ T8363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 318.902267][ T8363] Call Trace: [ 318.905577][ T8363] [ 318.908520][ T8363] dump_stack_lvl+0x241/0x360 [ 318.913394][ T8363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.918632][ T8363] ? __pfx__printk+0x10/0x10 [ 318.923255][ T8363] ? __pfx_lock_release+0x10/0x10 [ 318.928328][ T8363] should_fail_ex+0x3b0/0x4e0 [ 318.933116][ T8363] _copy_from_user+0x2f/0xc0 [ 318.937730][ T8363] do_sock_getsockopt+0x1d1/0x7e0 [ 318.942775][ T8363] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 318.948332][ T8363] ? __fget_files+0x2a/0x410 [ 318.952934][ T8363] ? __fget_files+0x395/0x410 [ 318.957620][ T8363] ? __fget_files+0x2a/0x410 [ 318.962225][ T8363] __x64_sys_getsockopt+0x2a1/0x370 [ 318.967443][ T8363] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 318.973180][ T8363] ? do_syscall_64+0x100/0x230 [ 318.977956][ T8363] ? do_syscall_64+0xb6/0x230 [ 318.982674][ T8363] do_syscall_64+0xf3/0x230 [ 318.987798][ T8363] ? clear_bhb_loop+0x35/0x90 [ 318.992492][ T8363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.998407][ T8363] RIP: 0033:0x7f2aae185d29 [ 319.002833][ T8363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.022454][ T8363] RSP: 002b:00007f2aabff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 319.030888][ T8363] RAX: ffffffffffffffda RBX: 00007f2aae375fa0 RCX: 00007f2aae185d29 [ 319.038876][ T8363] RDX: 0000000000000011 RSI: 0000000000000001 RDI: 0000000000000003 [ 319.046860][ T8363] RBP: 00007f2aabff6090 R08: 0000000020cab000 R09: 0000000000000000 [ 319.054843][ T8363] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 319.062827][ T8363] R13: 0000000000000000 R14: 00007f2aae375fa0 R15: 00007ffc1333ec68 [ 319.070912][ T8363] [ 319.211635][ T5914] saitek 0003:06A3:0621.000D: bogus close delimiter [ 319.218472][ T5914] saitek 0003:06A3:0621.000D: item 0 4 2 10 parsing failed [ 319.226332][ T5914] saitek 0003:06A3:0621.000D: parse failed [ 319.232887][ T5914] saitek 0003:06A3:0621.000D: probe with driver saitek failed with error -22 [ 319.437061][ T5899] usb 2-1: USB disconnect, device number 38 [ 319.881034][ T8384] netlink: 1192 bytes leftover after parsing attributes in process `syz.2.716'. [ 319.981179][ T5868] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 320.130874][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 320.140966][ T5868] usb 1-1: config 64 has an invalid interface number: 179 but max is 2 [ 320.154385][ T5868] usb 1-1: config 64 has an invalid interface number: 65 but max is 2 [ 320.177618][ T5868] usb 1-1: config 64 has an invalid interface number: 54 but max is 2 [ 320.190006][ T5868] usb 1-1: config 64 has no interface number 0 [ 320.203123][ T5868] usb 1-1: config 64 has no interface number 1 [ 320.209490][ T5868] usb 1-1: config 64 has no interface number 2 [ 320.228708][ T5868] usb 1-1: config 64 interface 65 altsetting 3 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 320.269677][ T5868] usb 1-1: config 64 interface 65 altsetting 3 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 320.304678][ T5868] usb 1-1: config 64 interface 65 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 320.338436][ T5868] usb 1-1: config 64 interface 65 altsetting 3 endpoint 0x8F has an invalid bInterval 113, changing to 7 [ 320.377308][ T5868] usb 1-1: config 64 interface 65 altsetting 3 endpoint 0x8F has invalid maxpacket 1200, setting to 1024 [ 320.424321][ T5899] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 320.436079][ T5868] usb 1-1: config 64 interface 65 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 320.864372][ T5868] usb 1-1: config 64 interface 65 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 320.875765][ T5868] usb 1-1: config 64 interface 65 altsetting 3 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 320.889439][ T5868] usb 1-1: config 64 interface 54 altsetting 13 has a duplicate endpoint with address 0x8, skipping [ 320.900571][ T5868] usb 1-1: config 64 interface 54 altsetting 13 has a duplicate endpoint with address 0xC, skipping [ 320.911808][ T5868] usb 1-1: config 64 interface 54 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 320.922918][ T5868] usb 1-1: config 64 interface 179 has no altsetting 0 [ 320.929824][ T5868] usb 1-1: config 64 interface 65 has no altsetting 0 [ 320.936735][ T5868] usb 1-1: config 64 interface 54 has no altsetting 0 [ 320.999199][ T5868] usb 1-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=e9.39 [ 321.018883][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.037633][ T5868] usb 1-1: Product: Д [ 321.047840][ T5868] usb 1-1: Manufacturer: 㣝䡣簶图卛ஶ틫䬾玿⌜⭏욃ㇱᬦ瑃깿 [ 321.077719][ T5868] usb 1-1: SerialNumber: ᰊ [ 321.170587][ T5899] usb 6-1: device descriptor read/64, error -71 [ 321.514886][ T5868] ax88179_178a 1-1:64.179: probe with driver ax88179_178a failed with error -22 [ 321.550262][ T5899] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 321.644502][ T5868] usb 1-1: USB disconnect, device number 33 [ 321.667588][ T8408] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 321.720149][ T5899] usb 6-1: device descriptor read/64, error -71 [ 321.800405][ T8412] FAULT_INJECTION: forcing a failure. [ 321.800405][ T8412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.827021][ T8412] CPU: 0 UID: 0 PID: 8412 Comm: syz.2.724 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 321.837705][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 321.847814][ T8412] Call Trace: [ 321.851206][ T8412] [ 321.854145][ T8412] dump_stack_lvl+0x241/0x360 [ 321.858841][ T8412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.864139][ T8412] ? __pfx__printk+0x10/0x10 [ 321.868758][ T8412] should_fail_ex+0x3b0/0x4e0 [ 321.873453][ T8412] _copy_to_user+0x31/0xb0 [ 321.877899][ T8412] bpf_verifier_vlog+0x46d/0x860 [ 321.882861][ T8412] __btf_verifier_log+0xd5/0x120 [ 321.887813][ T8412] ? __kmalloc_node_noprof+0x290/0x4d0 [ 321.893288][ T8412] ? btf_parse_type_sec+0x61d/0x2620 [ 321.898588][ T8412] ? btf_new_fd+0x43f/0xd30 [ 321.903196][ T8412] ? __pfx___btf_verifier_log+0x10/0x10 [ 321.908768][ T8412] __btf_verifier_log_type+0x389/0x640 [ 321.914249][ T8412] ? btf_enum_check_meta+0x5ec/0xdb0 [ 321.919555][ T8412] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 321.925566][ T8412] btf_enum_check_meta+0xc96/0xdb0 [ 321.930731][ T8412] btf_parse_type_sec+0x4d5/0x2620 [ 321.935864][ T8412] ? btf_check_sec_info+0x379/0x4f0 [ 321.941075][ T8412] ? __pfx_btf_parse_type_sec+0x10/0x10 [ 321.946635][ T8412] ? btf_parse_str_sec+0x21f/0x2b0 [ 321.951760][ T8412] btf_new_fd+0x43f/0xd30 [ 321.956108][ T8412] ? __pfx_btf_new_fd+0x10/0x10 [ 321.960973][ T8412] ? bpf_btf_load+0xcf/0x1a0 [ 321.965577][ T8412] __sys_bpf+0x6ef/0x810 [ 321.969835][ T8412] ? __pfx___sys_bpf+0x10/0x10 [ 321.974630][ T8412] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 321.980623][ T8412] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 321.986965][ T8412] ? do_syscall_64+0x100/0x230 [ 321.991743][ T8412] __x64_sys_bpf+0x7c/0x90 [ 321.996210][ T8412] do_syscall_64+0xf3/0x230 [ 322.000732][ T8412] ? clear_bhb_loop+0x35/0x90 [ 322.005422][ T8412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.011334][ T8412] RIP: 0033:0x7f2aae185d29 [ 322.015762][ T8412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.035382][ T8412] RSP: 002b:00007f2aabff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 322.043831][ T8412] RAX: ffffffffffffffda RBX: 00007f2aae375fa0 RCX: 00007f2aae185d29 [ 322.051811][ T8412] RDX: 0000000000000028 RSI: 0000000020000180 RDI: 0000000000000012 [ 322.059790][ T8412] RBP: 00007f2aabff6090 R08: 0000000000000000 R09: 0000000000000000 [ 322.067764][ T8412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 322.075742][ T8412] R13: 0000000000000000 R14: 00007f2aae375fa0 R15: 00007ffc1333ec68 [ 322.083737][ T8412] [ 322.086888][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.138236][ T5899] usb usb6-port1: attempt power cycle [ 322.196639][ T8416] netlink: 'syz.1.726': attribute type 3 has an invalid length. [ 322.206768][ T8416] netlink: 666 bytes leftover after parsing attributes in process `syz.1.726'. [ 322.482311][ T5899] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 322.510795][ T5899] usb 6-1: device descriptor read/8, error -71 [ 322.800054][ T5914] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 322.834964][ T8436] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 322.847382][ T5899] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 322.872060][ T5899] usb 6-1: device descriptor read/8, error -71 [ 322.981165][ T5899] usb usb6-port1: unable to enumerate USB device [ 323.611207][ T8442] tty tty26: ldisc open failed (-12), clearing slot 25 [ 323.745636][ T5914] usb 1-1: config 0 has no interfaces? [ 323.752389][ T5914] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 323.769148][ T5914] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 323.777211][ T5914] usb 1-1: Manufacturer: syz [ 323.813834][ T5914] usb 1-1: config 0 descriptor?? [ 324.076603][ T8432] unknown channel width for channel at 909000KHz? [ 324.889941][ T5868] usb 1-1: USB disconnect, device number 34 [ 325.588145][ T5868] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 325.743375][ T5868] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 325.756381][ T5868] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 325.768186][ T5899] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 325.797592][ T5868] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 325.811216][ T5868] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 325.835881][ T5868] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 325.846529][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 325.856421][ T5868] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 325.872718][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 325.881571][ T5868] usb 4-1: Product: syz [ 325.928817][ T5899] usb 6-1: Using ep0 maxpacket: 16 [ 325.953157][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 325.967544][ T5868] usb 4-1: Manufacturer: syz [ 325.975831][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 326.018636][ T5868] cdc_wdm 4-1:1.0: skipping garbage [ 326.028343][ T5868] cdc_wdm 4-1:1.0: skipping garbage [ 326.056651][ T5899] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 326.066631][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.074900][ T5899] usb 6-1: Product: syz [ 326.098150][ T5899] usb 6-1: Manufacturer: syz [ 326.116913][ T5868] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 326.141720][ T5899] usb 6-1: SerialNumber: syz [ 326.147319][ T5868] cdc_wdm 4-1:1.0: Unknown control protocol [ 326.156074][ T5899] usb 6-1: config 0 descriptor?? [ 326.241367][ T5899] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 326.285470][ T5899] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 326.449959][ T8459] 9pnet: Could not find request transport: rdra82 [ 326.644112][ T8489] sp0: Synchronizing with TNC [ 326.700845][ T8489] netlink: 20 bytes leftover after parsing attributes in process `syz.0.749'. [ 326.878913][ T5899] em28xx 6-1:0.0: chip ID is em2870 [ 327.029198][ T8] usb 4-1: USB disconnect, device number 42 [ 327.083213][ T25] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 327.103839][ T5899] usb 6-1: USB disconnect, device number 17 [ 327.111998][ T5899] em28xx 6-1:0.0: Disconnecting em28xx [ 327.135052][ T5899] em28xx 6-1:0.0: Freeing device [ 327.230900][ T25] usb 2-1: device descriptor read/64, error -71 [ 327.574012][ T8500] netlink: 'syz.3.753': attribute type 1 has an invalid length. [ 327.582300][ T8500] netlink: 224 bytes leftover after parsing attributes in process `syz.3.753'. [ 327.657220][ T25] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 327.838171][ T25] usb 2-1: device descriptor read/64, error -71 [ 327.947529][ T25] usb usb2-port1: attempt power cycle [ 328.316891][ T25] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 328.522682][ T25] usb 2-1: device descriptor read/8, error -71 [ 328.857240][ T25] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 328.986616][ T25] usb 2-1: device descriptor read/8, error -71 [ 329.101837][ T25] usb usb2-port1: unable to enumerate USB device [ 329.142647][ T5899] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 329.216319][ T5868] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 329.437956][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.448367][ T5899] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 329.463509][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.474988][ T5899] usb 3-1: config 0 descriptor?? [ 329.487542][ T5899] pwc: Askey VC010 type 2 USB webcam detected. [ 329.496328][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 329.885037][ T5868] usb 1-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=23.74 [ 329.923990][ T8510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.136167][ T8510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.156853][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.184434][ T5899] pwc: recv_control_msg error -32 req 02 val 2b00 [ 330.195896][ T5868] usb 1-1: Product: syz [ 330.200124][ T5868] usb 1-1: Manufacturer: syz [ 330.264254][ T5868] usb 1-1: SerialNumber: syz [ 330.981046][ T5899] pwc: recv_control_msg error -71 req 02 val 2c00 [ 330.988935][ T5868] usb 1-1: config 0 descriptor?? [ 330.994460][ T5899] pwc: recv_control_msg error -71 req 04 val 1000 [ 331.002558][ T5899] pwc: recv_control_msg error -71 req 04 val 1300 [ 331.848779][ T5868] usb 1-1: bad CDC descriptors [ 331.854099][ T5868] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 331.862546][ T5868] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 331.871216][ T5868] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 331.964418][ T5899] pwc: recv_control_msg error -71 req 04 val 1400 [ 332.051356][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.763'. [ 332.085064][ T5899] pwc: recv_control_msg error -71 req 02 val 2000 [ 332.108554][ T5899] pwc: recv_control_msg error -71 req 02 val 2100 [ 332.115502][ T5868] usb 1-1: USB disconnect, device number 35 [ 332.140073][ T8538] qnx6: unable to read the first superblock [ 332.142037][ T5899] pwc: recv_control_msg error -71 req 04 val 1500 [ 332.155793][ T5899] pwc: recv_control_msg error -71 req 02 val 2500 [ 332.163323][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 332.163342][ T29] audit: type=1326 audit(1737219237.195:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8541 comm="syz.0.768" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1acb85d29 code=0x0 [ 332.190624][ T5899] pwc: recv_control_msg error -71 req 02 val 2400 [ 332.198241][ T5899] pwc: recv_control_msg error -71 req 02 val 2600 [ 332.205682][ T5899] pwc: recv_control_msg error -71 req 02 val 2900 [ 332.213152][ T5899] pwc: recv_control_msg error -71 req 02 val 2800 [ 332.220246][ T5899] pwc: recv_control_msg error -71 req 04 val 1100 [ 332.270144][ T5899] pwc: recv_control_msg error -71 req 04 val 1200 [ 332.766005][ T5899] pwc: Registered as video103. [ 332.772150][ T5899] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input42 [ 333.856761][ T5899] usb 3-1: USB disconnect, device number 42 [ 334.761194][ T25] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 334.913539][ T25] usb 4-1: device descriptor read/64, error -71 [ 335.343048][ T25] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 335.694899][ T25] usb 4-1: device descriptor read/64, error -71 [ 336.021538][ T25] usb usb4-port1: attempt power cycle [ 337.279254][ T8582] input: syz0 as /devices/virtual/input/input44 [ 338.448379][ T8599] binder: 8592:8599 ioctl 4018620d 0 returned -22 [ 340.292161][ T25] IPVS: starting estimator thread 0... [ 340.580791][ T8614] IPVS: using max 17 ests per chain, 40800 per kthread [ 340.875376][ T8617] geneve0: entered allmulticast mode [ 340.970840][ T29] audit: type=1326 audit(1737219246.009:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8620 comm="syz.2.789" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2aae185d29 code=0x0 [ 341.690761][ T5916] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 343.367383][ T5916] usb 1-1: device descriptor read/64, error -71 [ 343.974008][ T8643] netlink: 36 bytes leftover after parsing attributes in process `syz.1.795'. [ 343.983740][ T8643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.795'. [ 344.014515][ T8643] netlink: 36 bytes leftover after parsing attributes in process `syz.1.795'. [ 344.037287][ T8643] netlink: 36 bytes leftover after parsing attributes in process `syz.1.795'. [ 344.915094][ T8664] binder: 8648:8664 ioctl c0306201 0 returned -14 [ 345.600799][ T8669] netlink: 96 bytes leftover after parsing attributes in process `syz.3.805'. [ 345.872372][ T8677] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 346.685537][ T8690] FAULT_INJECTION: forcing a failure. [ 346.685537][ T8690] name failslab, interval 1, probability 0, space 0, times 0 [ 346.717612][ T8690] CPU: 0 UID: 0 PID: 8690 Comm: syz.5.809 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 346.728298][ T8690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 346.738402][ T8690] Call Trace: [ 346.741719][ T8690] [ 346.744686][ T8690] dump_stack_lvl+0x241/0x360 [ 346.749408][ T8690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.754633][ T8690] ? __pfx__printk+0x10/0x10 [ 346.759244][ T8690] ? __kmalloc_cache_noprof+0x48/0x390 [ 346.764717][ T8690] ? __pfx___might_resched+0x10/0x10 [ 346.770034][ T8690] should_fail_ex+0x3b0/0x4e0 [ 346.774731][ T8690] should_failslab+0xac/0x100 [ 346.779433][ T8690] __kmalloc_cache_noprof+0x70/0x390 [ 346.784735][ T8690] ? binder_ioctl_write_read+0xe84/0xb620 [ 346.790482][ T8690] binder_ioctl_write_read+0xe84/0xb620 [ 346.796057][ T8690] ? preempt_count_add+0x93/0x190 [ 346.801113][ T8690] ? __kernel_text_address+0xd/0x40 [ 346.806329][ T8690] ? unwind_get_return_address+0x4d/0x90 [ 346.812003][ T8690] ? stack_trace_save+0x118/0x1d0 [ 346.817050][ T8690] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 346.823051][ T8690] ? __pfx_stack_trace_save+0x10/0x10 [ 346.828445][ T8690] ? mark_lock+0x9a/0x360 [ 346.832795][ T8690] ? __lock_acquire+0x1397/0x2100 [ 346.837840][ T8690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.843944][ T8690] ? binder_get_thread+0x16e/0x6c0 [ 346.849078][ T8690] ? __pfx_lock_release+0x10/0x10 [ 346.854119][ T8690] ? do_raw_spin_unlock+0x13c/0x8b0 [ 346.859342][ T8690] ? _raw_spin_unlock+0x28/0x50 [ 346.864219][ T8690] ? binder_get_thread+0x178/0x6c0 [ 346.869380][ T8690] binder_ioctl+0x436/0x1cb0 [ 346.873996][ T8690] ? tomoyo_path_number_perm+0x6f9/0x860 [ 346.879646][ T8690] ? __lock_acquire+0x1397/0x2100 [ 346.884691][ T8690] ? tomoyo_path_number_perm+0x206/0x860 [ 346.890340][ T8690] ? smack_log+0x123/0x540 [ 346.894771][ T8690] ? __pfx_binder_ioctl+0x10/0x10 [ 346.899815][ T8690] ? __pfx_smack_log+0x10/0x10 [ 346.904595][ T8690] ? smk_access+0x4ab/0x4e0 [ 346.909122][ T8690] ? smk_tskacc+0x300/0x370 [ 346.913644][ T8690] ? smack_file_ioctl+0x2f7/0x3a0 [ 346.918687][ T8690] ? __pfx_smack_file_ioctl+0x10/0x10 [ 346.924077][ T8690] ? __fget_files+0x2a/0x410 [ 346.928691][ T8690] ? __fget_files+0x2a/0x410 [ 346.933297][ T8690] ? __pfx_binder_ioctl+0x10/0x10 [ 346.938343][ T8690] __se_sys_ioctl+0xf5/0x170 [ 346.942951][ T8690] do_syscall_64+0xf3/0x230 [ 346.947467][ T8690] ? clear_bhb_loop+0x35/0x90 [ 346.952157][ T8690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.958074][ T8690] RIP: 0033:0x7fea0e785d29 [ 346.962506][ T8690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.982136][ T8690] RSP: 002b:00007fea0c5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 346.990569][ T8690] RAX: ffffffffffffffda RBX: 00007fea0e975fa0 RCX: 00007fea0e785d29 [ 346.998550][ T8690] RDX: 0000000020000140 RSI: 00000000c0306201 RDI: 0000000000000003 [ 347.006552][ T8690] RBP: 00007fea0c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 347.014532][ T8690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.022515][ T8690] R13: 0000000000000000 R14: 00007fea0e975fa0 R15: 00007ffeddd26558 [ 347.030509][ T8690] [ 347.164077][ T8690] binder: 8689:8690 ioctl c0306201 20000140 returned -12 [ 347.397766][ T8697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.812'. [ 347.427860][ T5868] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 347.454697][ T29] audit: type=1326 audit(1737219252.492:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8700 comm="syz.1.810" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f485f585d29 code=0x0 [ 347.506437][ T8697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.812'. [ 348.297872][ T8719] binder: 8712:8719 ioctl c0306201 0 returned -14 [ 349.856252][ T5868] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 350.808110][ T5868] usb 1-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 350.818405][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.855512][ T5868] usb 1-1: config 0 descriptor?? [ 350.873883][ T5868] pwc: Creative Labs Webcam Pro Ex detected. [ 352.846854][ T8777] binder: 8765:8777 ioctl c0306201 0 returned -14 [ 352.855142][ T5899] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 353.260538][ T5868] pwc: recv_control_msg error -71 req 02 val 2b00 [ 353.277044][ T5868] pwc: recv_control_msg error -71 req 02 val 2700 [ 353.283935][ T5868] pwc: recv_control_msg error -71 req 04 val 1600 [ 353.290900][ T5868] pwc: recv_control_msg error -71 req 02 val 2c00 [ 353.303322][ T5868] pwc: recv_control_msg error -71 req 04 val 1000 [ 353.333707][ T5868] pwc: recv_control_msg error -71 req 04 val 1300 [ 353.340709][ T5868] pwc: recv_control_msg error -71 req 04 val 1400 [ 353.347835][ T5868] pwc: recv_control_msg error -71 req 02 val 2000 [ 353.354720][ T5868] pwc: recv_control_msg error -71 req 02 val 2100 [ 353.361569][ T5868] pwc: recv_control_msg error -71 req 06 val 0600 [ 353.368711][ T5868] pwc: recv_control_msg error -71 req 04 val 1500 [ 353.375893][ T5868] pwc: recv_control_msg error -71 req 02 val 2500 [ 353.382808][ T5868] pwc: recv_control_msg error -71 req 02 val 2400 [ 353.406546][ T5868] pwc: recv_control_msg error -71 req 02 val 2600 [ 353.407234][ T29] audit: type=1326 audit(1737219258.455:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8782 comm="syz.3.834" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc85c185d29 code=0x0 [ 353.413530][ T5868] pwc: recv_control_msg error -71 req 02 val 2900 [ 353.447292][ T5868] pwc: recv_control_msg error -71 req 02 val 2800 [ 353.455062][ T5868] pwc: recv_control_msg error -71 req 04 val 1100 [ 353.476249][ T5899] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 353.486153][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.515377][ T5868] pwc: recv_control_msg error -71 req 04 val 1200 [ 353.538036][ T5899] usb 3-1: config 0 descriptor?? [ 353.546084][ T5899] cp210x 3-1:0.0: cp210x converter detected [ 354.324009][ T5868] pwc: Registered as video103. [ 354.330344][ T5868] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input45 [ 354.354836][ T5868] usb 1-1: USB disconnect, device number 38 [ 354.547200][ T5914] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 354.555223][ T25] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 354.873702][ T5914] usb 2-1: device descriptor read/64, error -71 [ 355.493520][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 355.524889][ T25] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 355.543726][ T25] usb 6-1: config 179 has no interface number 0 [ 355.550112][ T25] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 355.583355][ T25] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 355.600670][ T5899] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 355.610497][ T5899] cp210x 3-1:0.0: querying part number failed [ 355.700137][ T25] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 355.711391][ T25] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 355.723040][ T25] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 355.736488][ T25] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 355.747055][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.750174][ T5899] usb 3-1: cp210x converter now attached to ttyUSB0 [ 355.758081][ T5914] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 355.771558][ T8793] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 355.772799][ T5899] usb 3-1: USB disconnect, device number 43 [ 355.818393][ T5899] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 355.862681][ T5899] cp210x 3-1:0.0: device disconnected [ 355.953712][ T5914] usb 2-1: device descriptor read/64, error -71 [ 356.094330][ T5914] usb usb2-port1: attempt power cycle [ 356.105175][ T5916] usb 6-1: USB disconnect, device number 18 [ 356.105256][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 356.105309][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 356.387592][ T3516] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 356.998244][ T8808] bridge_slave_0: left allmulticast mode [ 357.004070][ T8808] bridge_slave_0: left promiscuous mode [ 357.010529][ T8808] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.471997][ T5899] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 357.472252][ T5914] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 357.776634][ T5914] usb 2-1: device descriptor read/8, error -71 [ 357.781214][ T5899] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 357.899608][ T8808] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 358.010133][ T8814] [ 358.013299][ T8814] ====================================================== [ 358.020341][ T8814] WARNING: possible circular locking dependency detected [ 358.027401][ T8814] 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 Not tainted [ 358.034537][ T8814] ------------------------------------------------------ [ 358.041578][ T8814] syz.5.841/8814 is trying to acquire lock: [ 358.047490][ T8814] ffff88802bb54de0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaa/0x120 [ 358.056435][ T8814] [ 358.056435][ T8814] but task is already holding lock: [ 358.063825][ T8814] ffff888142bdc3c8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0xb0/0x1e0 [ 358.073198][ T8814] [ 358.073198][ T8814] which lock already depends on the new lock. [ 358.073198][ T8814] [ 358.083619][ T8814] [ 358.083619][ T8814] the existing dependency chain (in reverse order) is: [ 358.092639][ T8814] [ 358.092639][ T8814] -> #6 (&q->debugfs_mutex){+.+.}-{4:4}: [ 358.100478][ T8814] lock_acquire+0x1ed/0x550 [ 358.105518][ T8814] __mutex_lock+0x1ac/0xee0 [ 358.110557][ T8814] blk_mq_init_sched+0x3fa/0x830 [ 358.116020][ T8814] elevator_init_mq+0x20e/0x320 [ 358.121422][ T8814] add_disk_fwnode+0x10d/0xf80 [ 358.126750][ T8814] sd_probe+0xba6/0x1100 [ 358.131532][ T8814] really_probe+0x2b8/0xad0 [ 358.136578][ T8814] __driver_probe_device+0x1a2/0x390 [ 358.142406][ T8814] driver_probe_device+0x50/0x430 [ 358.147987][ T8814] __device_attach_driver+0x2d6/0x530 [ 358.153901][ T8814] bus_for_each_drv+0x24e/0x2e0 [ 358.159292][ T8814] __device_attach_async_helper+0x22d/0x300 [ 358.165723][ T8814] async_run_entry_fn+0xa8/0x420 [ 358.171204][ T8814] process_scheduled_works+0xa66/0x1840 [ 358.177297][ T8814] worker_thread+0x870/0xd30 [ 358.182429][ T8814] kthread+0x2f0/0x390 [ 358.187044][ T8814] ret_from_fork+0x4b/0x80 [ 358.191996][ T8814] ret_from_fork_asm+0x1a/0x30 [ 358.197301][ T8814] [ 358.197301][ T8814] -> #5 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 358.206204][ T8814] lock_acquire+0x1ed/0x550 [ 358.211329][ T8814] blk_queue_enter+0xe1/0x600 [ 358.216533][ T8814] blk_mq_alloc_request+0x4fa/0xaa0 [ 358.222263][ T8814] scsi_execute_cmd+0x16c/0x10e0 [ 358.227733][ T8814] read_capacity_16+0x2b4/0x1450 [ 358.233209][ T8814] sd_revalidate_disk+0x1013/0xbce0 [ 358.238940][ T8814] sd_probe+0x9fa/0x1100 [ 358.243718][ T8814] really_probe+0x2b8/0xad0 [ 358.248748][ T8814] __driver_probe_device+0x1a2/0x390 [ 358.254558][ T8814] driver_probe_device+0x50/0x430 [ 358.260111][ T8814] __device_attach_driver+0x2d6/0x530 [ 358.266012][ T8814] bus_for_each_drv+0x24e/0x2e0 [ 358.271393][ T8814] __device_attach_async_helper+0x22d/0x300 [ 358.277815][ T8814] async_run_entry_fn+0xa8/0x420 [ 358.283290][ T8814] process_scheduled_works+0xa66/0x1840 [ 358.289374][ T8814] worker_thread+0x870/0xd30 [ 358.294490][ T8814] kthread+0x2f0/0x390 [ 358.299089][ T8814] ret_from_fork+0x4b/0x80 [ 358.304035][ T8814] ret_from_fork_asm+0x1a/0x30 [ 358.309361][ T8814] [ 358.309361][ T8814] -> #4 (&q->limits_lock){+.+.}-{4:4}: [ 358.317041][ T8814] lock_acquire+0x1ed/0x550 [ 358.322085][ T8814] __mutex_lock+0x1ac/0xee0 [ 358.327222][ T8814] nbd_set_size+0x2e0/0x8f0 [ 358.332275][ T8814] nbd_ioctl+0x5dc/0xf40 [ 358.337053][ T8814] blkdev_ioctl+0x57d/0x6a0 [ 358.342087][ T8814] __se_sys_ioctl+0xf5/0x170 [ 358.347209][ T8814] do_syscall_64+0xf3/0x230 [ 358.352238][ T8814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.358671][ T8814] [ 358.358671][ T8814] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 358.367297][ T8814] lock_acquire+0x1ed/0x550 [ 358.372332][ T8814] blk_mq_submit_bio+0x1536/0x2390 [ 358.378000][ T8814] __submit_bio+0x2c6/0x560 [ 358.383050][ T8814] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 358.389215][ T8814] block_read_full_folio+0x9b3/0xae0 [ 358.395038][ T8814] filemap_read_folio+0x148/0x3b0 [ 358.400603][ T8814] filemap_get_pages+0x18ca/0x2080 [ 358.406256][ T8814] filemap_read+0x452/0xf50 [ 358.411303][ T8814] blkdev_read_iter+0x2d8/0x430 [ 358.416689][ T8814] vfs_read+0x991/0xb70 [ 358.421375][ T8814] ksys_read+0x18f/0x2b0 [ 358.426147][ T8814] do_syscall_64+0xf3/0x230 [ 358.431181][ T8814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.437619][ T8814] [ 358.437619][ T8814] -> #2 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 358.446183][ T8814] lock_acquire+0x1ed/0x550 [ 358.451227][ T8814] down_read+0xb1/0xa40 [ 358.455916][ T8814] filemap_fault+0xb3e/0x1490 [ 358.461125][ T8814] __do_fault+0x135/0x390 [ 358.465993][ T8814] handle_pte_fault+0xfcf/0x5ed0 [ 358.471470][ T8814] handle_mm_fault+0x1053/0x1ad0 [ 358.476942][ T8814] exc_page_fault+0x459/0x8b0 [ 358.482155][ T8814] asm_exc_page_fault+0x26/0x30 [ 358.487547][ T8814] [ 358.487547][ T8814] -> #1 (&vma->vm_lock->lock){++++}-{4:4}: [ 358.495565][ T8814] lock_acquire+0x1ed/0x550 [ 358.500724][ T8814] down_write+0x99/0x220 [ 358.505496][ T8814] vma_link+0x28c/0x500 [ 358.510190][ T8814] insert_vm_struct+0x2f7/0x410 [ 358.515576][ T8814] alloc_bprm+0x5a6/0xa30 [ 358.520458][ T8814] kernel_execve+0x99/0xa50 [ 358.525505][ T8814] kernel_init+0xed/0x2b0 [ 358.530384][ T8814] ret_from_fork+0x4b/0x80 [ 358.535331][ T8814] ret_from_fork_asm+0x1a/0x30 [ 358.540731][ T8814] [ 358.540731][ T8814] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 358.548312][ T8814] validate_chain+0x18ef/0x5920 [ 358.553712][ T8814] __lock_acquire+0x1397/0x2100 [ 358.559097][ T8814] lock_acquire+0x1ed/0x550 [ 358.564125][ T8814] __might_fault+0xc6/0x120 [ 358.569158][ T8814] _copy_from_user+0x2a/0xc0 [ 358.574294][ T8814] blk_trace_setup+0xd2/0x1e0 [ 358.579497][ T8814] sg_ioctl+0xa46/0x2e80 [ 358.584268][ T8814] __se_sys_ioctl+0xf5/0x170 [ 358.589403][ T8814] do_syscall_64+0xf3/0x230 [ 358.594435][ T8814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.600863][ T8814] [ 358.600863][ T8814] other info that might help us debug this: [ 358.600863][ T8814] [ 358.611089][ T8814] Chain exists of: [ 358.611089][ T8814] &mm->mmap_lock --> &q->q_usage_counter(queue)#50 --> &q->debugfs_mutex [ 358.611089][ T8814] [ 358.625476][ T8814] Possible unsafe locking scenario: [ 358.625476][ T8814] [ 358.632945][ T8814] CPU0 CPU1 [ 358.638311][ T8814] ---- ---- [ 358.643693][ T8814] lock(&q->debugfs_mutex); [ 358.648297][ T8814] lock(&q->q_usage_counter(queue)#50); [ 358.656470][ T8814] lock(&q->debugfs_mutex); [ 358.663589][ T8814] rlock(&mm->mmap_lock); [ 358.668011][ T8814] [ 358.668011][ T8814] *** DEADLOCK *** [ 358.668011][ T8814] [ 358.676155][ T8814] 1 lock held by syz.5.841/8814: [ 358.681092][ T8814] #0: ffff888142bdc3c8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0xb0/0x1e0 [ 358.690874][ T8814] [ 358.690874][ T8814] stack backtrace: [ 358.696759][ T8814] CPU: 1 UID: 0 PID: 8814 Comm: syz.5.841 Not tainted 6.13.0-rc7-syzkaller-00189-g595523945be0 #0 [ 358.707350][ T8814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 358.717499][ T8814] Call Trace: [ 358.720779][ T8814] [ 358.723804][ T8814] dump_stack_lvl+0x241/0x360 [ 358.728495][ T8814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.733707][ T8814] ? __pfx__printk+0x10/0x10 [ 358.738317][ T8814] print_circular_bug+0x13a/0x1b0 [ 358.743371][ T8814] check_noncircular+0x36a/0x4a0 [ 358.748332][ T8814] ? __pfx_check_noncircular+0x10/0x10 [ 358.753806][ T8814] ? lockdep_lock+0x123/0x2b0 [ 358.758492][ T8814] validate_chain+0x18ef/0x5920 [ 358.763355][ T8814] ? __pfx_lock_release+0x10/0x10 [ 358.768391][ T8814] ? 0xffffffffa0000958 [ 358.772555][ T8814] ? __pfx_validate_chain+0x10/0x10 [ 358.777769][ T8814] ? kernel_text_address+0xa7/0xe0 [ 358.782896][ T8814] ? __kernel_text_address+0xd/0x40 [ 358.788108][ T8814] ? mark_lock+0x9a/0x360 [ 358.792450][ T8814] ? __lock_acquire+0x1397/0x2100 [ 358.797492][ T8814] ? mark_lock+0x9a/0x360 [ 358.801831][ T8814] __lock_acquire+0x1397/0x2100 [ 358.806698][ T8814] lock_acquire+0x1ed/0x550 [ 358.811209][ T8814] ? __might_fault+0xaa/0x120 [ 358.815908][ T8814] ? __pfx_lock_acquire+0x10/0x10 [ 358.820940][ T8814] ? __pfx___might_resched+0x10/0x10 [ 358.826242][ T8814] ? blk_trace_setup+0xb0/0x1e0 [ 358.831106][ T8814] ? __pfx___mutex_lock+0x10/0x10 [ 358.836147][ T8814] ? __pfx_lock_release+0x10/0x10 [ 358.841182][ T8814] ? __might_fault+0xaa/0x120 [ 358.845876][ T8814] __might_fault+0xc6/0x120 [ 358.850390][ T8814] ? __might_fault+0xaa/0x120 [ 358.855080][ T8814] _copy_from_user+0x2a/0xc0 [ 358.859684][ T8814] blk_trace_setup+0xd2/0x1e0 [ 358.864393][ T8814] ? __lock_acquire+0x1397/0x2100 [ 358.869428][ T8814] ? __pfx_blk_trace_setup+0x10/0x10 [ 358.874722][ T8814] ? smack_log+0x123/0x540 [ 358.879155][ T8814] ? __pfx_smack_log+0x10/0x10 [ 358.883931][ T8814] ? smk_access+0x4ab/0x4e0 [ 358.888445][ T8814] sg_ioctl+0xa46/0x2e80 [ 358.892697][ T8814] ? smk_tskacc+0x300/0x370 [ 358.897218][ T8814] ? __pfx_sg_ioctl+0x10/0x10 [ 358.901904][ T8814] ? __fget_files+0x2a/0x410 [ 358.906496][ T8814] ? __fget_files+0x2a/0x410 [ 358.911090][ T8814] ? __pfx_sg_ioctl+0x10/0x10 [ 358.915777][ T8814] __se_sys_ioctl+0xf5/0x170 [ 358.920377][ T8814] do_syscall_64+0xf3/0x230 [ 358.924887][ T8814] ? clear_bhb_loop+0x35/0x90 [ 358.929576][ T8814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.935487][ T8814] RIP: 0033:0x7fea0e785d29 [ 358.939908][ T8814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.959530][ T8814] RSP: 002b:00007fea0c5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.967961][ T8814] RAX: ffffffffffffffda RBX: 00007fea0e975fa0 RCX: 00007fea0e785d29 [ 358.975939][ T8814] RDX: 0000000020000540 RSI: 00000000c0481273 RDI: 0000000000000007 [ 358.983918][ T8814] RBP: 00007fea0e801b08 R08: 0000000000000000 R09: 0000000000000000 [ 358.991894][ T8814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.999870][ T8814] R13: 0000000000000000 R14: 00007fea0e975fa0 R15: 00007ffeddd26558 [ 359.007855][ T8814] [ 359.010970][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.030025][ T5914] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 359.036374][ T5899] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 359.271414][ T5914] usb 2-1: device not accepting address 46, error -71 [ 359.281805][ T5914] usb usb2-port1: unable to enumerate USB device [ 359.581129][ T5130] Bluetooth: hci2: command 0x0c1a tx timeout [ 362.140399][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 366.618320][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 367.897262][ T2132] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration