last executing test programs: 1m52.30332673s ago: executing program 1 (id=1306): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0x541b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000003540), 0x0, 0x10) setsockopt$sock_int(r6, 0x1, 0x20, &(0x7f00000000c0)=0xcd5e, 0x4) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e06007c0c", @ANYRESHEX=r1, @ANYRES32=r2, @ANYRESOCT=0x0], 0x9) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000e80)=[{{&(0x7f0000000440)=@nfc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000ac0)=""/91, 0x5b}, {&(0x7f00000009c0)=""/75, 0x4b}, {&(0x7f0000000fc0)=""/185, 0xb9}], 0x3, &(0x7f0000001080)=""/197, 0xc5}, 0x6}, {{&(0x7f0000000f40)=@qipcrtr, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000000c80)=""/36, 0x24}], 0x2, &(0x7f0000000300)=""/61, 0x3d}, 0xf}, {{&(0x7f0000000a40)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000002380)=[{&(0x7f0000000dc0)=""/121, 0x79}, {&(0x7f0000000b40)=""/210, 0xd2}, {&(0x7f0000001180)=""/241, 0xf1}, {&(0x7f0000000940)=""/97, 0x61}, {&(0x7f0000002300)=""/77, 0x4d}, {&(0x7f0000001280)=""/83, 0x53}, {&(0x7f0000002400)=""/4098, 0x1002}], 0x7}, 0x3}], 0x3, 0x40000002, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x73, 0x0, &(0x7f0000000000)=0x1e) sendfile(r9, r8, 0x0, 0x80009) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x3f8, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 1m51.350053869s ago: executing program 1 (id=1308): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x4b) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) 1m50.795512565s ago: executing program 1 (id=1309): dup(0xffffffffffffffff) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x4cd) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x206e) write$FUSE_LK(r2, &(0x7f0000000340)={0x28, 0x0, r4, {{0x2, 0x0, 0x1}}}, 0x28) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_IOCTL(r5, &(0x7f0000000180)={0x20, 0xffffffffffffffda, 0x0, {0x6, 0x0, 0x8e4, 0x3}}, 0x20) 1m50.7430935s ago: executing program 1 (id=1310): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000140), 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000001c0)=0x2f) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000100)=0x8, 0x4) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0x0, 0xee00, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0], 0x30}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) stat(&(0x7f00000026c0)='./file1\x00', 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) 1m49.743955453s ago: executing program 1 (id=1313): mbind(&(0x7f0000c17000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000280)=0x1, 0x7f, 0xa) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) mremap(&(0x7f0000c19000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000c1a000/0x4000)=nil) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) fremovexattr(0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000140)) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r1}, './file0\x00'}) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r7, 0x80045518, &(0x7f0000002a40)) 1m48.861760393s ago: executing program 1 (id=1317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x12}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000f6ffffff00000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r3, 0x12}, 0x10) r4 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read(r4, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, 0x0, 0x0, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="18000000000000001001370065b100000e0000007a000000"], 0x18}, 0x0) recvmmsg(r6, &(0x7f0000004600)=[{{&(0x7f0000000440)=@alg, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000500)=""/181, 0xb5}, 0x8}, {{&(0x7f00000005c0)=@nfc, 0x80, &(0x7f0000001700)=[{&(0x7f0000000640)=""/16, 0x10}, {&(0x7f0000000680)=""/74, 0x4a}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x3}, 0x80000000}, {{&(0x7f0000001740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/53, 0x35}, {&(0x7f0000001800)=""/182, 0xb6}, {&(0x7f00000018c0)=""/121, 0x79}, {&(0x7f0000001940)=""/54, 0x36}], 0x5, &(0x7f0000001a00)=""/35, 0x23}, 0x10}, {{&(0x7f0000002ac0)=@xdp, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002b40)=""/144, 0x90}, {&(0x7f0000001a40)=""/36, 0x24}], 0x2, &(0x7f0000002c40)=""/14, 0xe}}, {{&(0x7f0000002c80)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002d00)=""/203, 0xcb}], 0x1, &(0x7f0000002e40)=""/5, 0x5}, 0x1}, {{&(0x7f0000002e80)=@tipc=@name, 0x80, &(0x7f0000003180)=[{&(0x7f0000002f00)=""/148, 0x94}, {&(0x7f0000002fc0)=""/158, 0x9e}, {&(0x7f0000003080)=""/246, 0xf6}], 0x3, &(0x7f00000031c0)=""/4096, 0x1000}, 0x4}, {{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f00000041c0)=""/137, 0x89}, {&(0x7f0000004280)=""/243, 0xf3}, {&(0x7f0000004380)=""/247, 0xf7}, {&(0x7f0000004480)=""/38, 0x26}, {&(0x7f00000044c0)=""/50, 0x32}], 0x5, &(0x7f0000004580)=""/113, 0x71}, 0x2}], 0x7, 0x40000042, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='sched_switch\x00', r9, 0x0, 0x7f}, 0x18) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ecebef6a740000fdffffffffffffff000095887e76761125995fb1aa3592973f100000000000000032f18ec15dfac2249e69d5ed9c7b7928131f02dd85fa724b4f332a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r10}, 0x10) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x40) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r11, 0xc0145401, &(0x7f00000000c0)={0x2, 0x0, 0x100, 0x0, 0x8}) socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="240040fb00ef", @ANYRES16=r13, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r14, @ANYBLOB="0800050008000000"], 0x24}}, 0x48000) 1m33.729834568s ago: executing program 32 (id=1317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x12}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000f6ffffff00000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r3, 0x12}, 0x10) r4 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read(r4, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, 0x0, 0x0, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="18000000000000001001370065b100000e0000007a000000"], 0x18}, 0x0) recvmmsg(r6, &(0x7f0000004600)=[{{&(0x7f0000000440)=@alg, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000500)=""/181, 0xb5}, 0x8}, {{&(0x7f00000005c0)=@nfc, 0x80, &(0x7f0000001700)=[{&(0x7f0000000640)=""/16, 0x10}, {&(0x7f0000000680)=""/74, 0x4a}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x3}, 0x80000000}, {{&(0x7f0000001740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/53, 0x35}, {&(0x7f0000001800)=""/182, 0xb6}, {&(0x7f00000018c0)=""/121, 0x79}, {&(0x7f0000001940)=""/54, 0x36}], 0x5, &(0x7f0000001a00)=""/35, 0x23}, 0x10}, {{&(0x7f0000002ac0)=@xdp, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002b40)=""/144, 0x90}, {&(0x7f0000001a40)=""/36, 0x24}], 0x2, &(0x7f0000002c40)=""/14, 0xe}}, {{&(0x7f0000002c80)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002d00)=""/203, 0xcb}], 0x1, &(0x7f0000002e40)=""/5, 0x5}, 0x1}, {{&(0x7f0000002e80)=@tipc=@name, 0x80, &(0x7f0000003180)=[{&(0x7f0000002f00)=""/148, 0x94}, {&(0x7f0000002fc0)=""/158, 0x9e}, {&(0x7f0000003080)=""/246, 0xf6}], 0x3, &(0x7f00000031c0)=""/4096, 0x1000}, 0x4}, {{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f00000041c0)=""/137, 0x89}, {&(0x7f0000004280)=""/243, 0xf3}, {&(0x7f0000004380)=""/247, 0xf7}, {&(0x7f0000004480)=""/38, 0x26}, {&(0x7f00000044c0)=""/50, 0x32}], 0x5, &(0x7f0000004580)=""/113, 0x71}, 0x2}], 0x7, 0x40000042, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='sched_switch\x00', r9, 0x0, 0x7f}, 0x18) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ecebef6a740000fdffffffffffffff000095887e76761125995fb1aa3592973f100000000000000032f18ec15dfac2249e69d5ed9c7b7928131f02dd85fa724b4f332a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r10}, 0x10) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x40) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r11, 0xc0145401, &(0x7f00000000c0)={0x2, 0x0, 0x100, 0x0, 0x8}) socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="240040fb00ef", @ANYRES16=r13, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r14, @ANYBLOB="0800050008000000"], 0x24}}, 0x48000) 13.44061689s ago: executing program 3 (id=1695): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89, 0x8}, &(0x7f00000000c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r5, 0x0, 0x0, 0x0, 0x12002, 0x1}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) 11.812140507s ago: executing program 5 (id=1700): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @loopback, @remote}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x270bd24, 0x25dfdbfc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x401}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000003800048034000180090001007866726d0000000024000280070003dd010000000500030001000000080002400000000108000140000000160900010073797a30000000000900020073797a3200004000050007"], 0x94}}, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="ee", 0x1}, {&(0x7f0000000380)="571abcceb363df45ea99ca30e8d199a954065ebefe85a116b18900413ca8b438319854d124289a9c8a009ad793a78b78c9fe051a5366cfcf5c1ad20a8e2ad199", 0x40}, {&(0x7f0000000580)="0f5f97c2b47a827ed540c68855e0bd7651a86705b4b36bbcea6dded9acfb60621345cb3e6a456cd09ece8a064c1bbd381c391fd9877fbf1af0983f4d7244d6c9b4fd04dc56e03bac97cf29ff0dbc7786417f98f82ebb19b75ddb1ec27accec79f7af302dd65155cd1bf73e515026b89f0e9d772c5771d1b7761d72b0b3a4f083cc8786a3abc5e7c249", 0x89}, {&(0x7f0000004680)="8113f9e16f7059151d62fb979118a04fe3c2adbed703acc219d6874e22d193c22e1467d9b4c6deaaac3962d8755b29f138e0f7d95cd9f546ddb6d8687f8967d988f245771a7ef477baaaa2a327a2e1b5a4655a1c8ff9ca9a7697f9ec196ac73499aceb5ab2939cfb4e6b37708bee13e366ed7d2f4e7e156531daa5e759b233b089517711d3f789d4e7855df6684e1766161a56993bc95a819163edcb612cd7bfc1287ed8ad014e824a7d05c70ddef1c3c49aa435421774b48d5a8c8510c1766996a2a818c2a8b2a9cc0d2085461a23b60e6151a77121b87f92e1af1cd168a42183c5addbd6643f7e5a53e727fe3f2c04b5aee89fc1a9aaee0c6f293791fa56e013911947d5ad3d4c64af209005208bc3576787c58f01f110c11f905a7fbfad93d4b9d1c9de6c4803ceaf83137e4d9e1683965b2943521e874186604f8795e778a75cfba7b947cc4eaf05ec3640674f5c8e8fa555f48d0f29ec716fb0080ebdb9771d40d5b7511046bc14aba67210360c742fd76970a5f79785d97c1c0b0e4bed8f56cb438af01c4e1c18bd2beab1f17408a40d46c537d6cfbe804f8dde39e8c1bb1c781597c06a70321b632e0809e110f0597c4ffcd69cea0c4b18dc5bb469698dc39fbe88a8e74310a72d97133b921076432bb778596a66244e8cf6c60ca27996ccd7a350d9266d32fd9d998aaf42511ce327c021a2a3aac3c62485f68946781f73e605d8e083326ecc8a1ad0d047c825e95ace45d98a932da05bb85f2e1f997fcfedc84527f920ccdbd7ee369e81285fc133c9780f991f54247c9e0abc9fee3c3c356ac7ba7e76f9123ed76cfa459a1c97e0c72e40ea781396c83624bcb8d06f877015c54da32c8be80801c9a95da17c25db18d96314291c4463ce7705d26421db098b2f4e4fa4d0e8b2f27734ff84ce8730271c7f36fa05f4813db5518a7a674e1c28c4b9af917960247730c0ee8c261539080f615be1082b077c99cf3d7abcdcb32fe399d1ea5644bba3ca6e97d0570af2ee3d9e0d191eb58e864a47ec1c61ee55ffae012d51ec8144f444de73b994ed65126caa5ab8d020c9ffc6626f03799abbd5c26f24ed28c98e3164e74c0a12c4a8281c4d94108cfa519adc4739dd6bce021c76f78356a14e26a1d283e42efad0765eeafea78c027bf8a856dbbf05ed0d9d092eb88df4723b4c7ade36c1549d25dbf71372a98be5234acfd1c3da582c36dfb5756b8d4f273426cd56b0801037f74dff16b75e654b1c4388c1763d325b4deeb9842266e3d99f57e21b151b55fb7d054cdd4dd6912b313739885eada6e0ca2eea6fe9cee5fff22ac1a504ae18090da311b6d3e29c02e9112d86ee7a66aa67ebf05a1fa718f6b3d1798dcfdcb2a9934524d4db3057c3d260c6b1165b2726224d7ddf5aed2931dbe179373bbbf4c16f341a3785d0ecd23c0f232e2c9f2ed50c02fdd3d71a8cd3344ed208a772605cf6eab8ab5e5a313840a5e9e5cd50d9ceb28331d10490a5b8ba9264d56e57b02196867a76e05ea7a52d44ecae75fc7bfbd274c737116bda89a0158258982cdbe815cebeabd16351bb97c0420324afe0c7842ab4d897a417576f3d1a9f198b00428604248effffbaf082ec85fc7649ffdf25c0922710d82a40230b7926429f9cf38e1766c81e41ba07553d629fba03589231e7cd075cc3cfa46a08a433cdf9c93ec0925d2a5a61e17cc7294f7e5ed51da07a22695e5a006e840beadad7e48ff68b857fc4546e49c45c5982487f5f34fe8eb21f7472247f013f76c5d8fbb09a2aaf574a6afd1554f31eb21996cbc2b52342de98f8d4e6164a4cf6b33fe41db9c6430e15115f2fb922b7dbb0e8a146212e3c1025cd517d48b076f4e470577d9ea8e3c1a0c0d0df1daf5b4740dcacc28bb99e7696357ca4324a29ea2289cb222e906860e5e17192ca3cfa539fdbe4c79ca576a4eb902dd0bf8b1a49c82429502fc1a570ac47016da73112a90a1a61d9f7f6ce44a37a1c1255a1091623bf08e1a543d05684ab90ce9cdaa639cb6154e5488daa9097451f5612b4f653d01c99600fa07e6d29fb40b0e8a9f2ee39da670e2625001d7507c9b8aa8816a3957f00fe6e0d15ed7a3921bdbf4c8bc794ab511416ea44793f03e7ba512263b43c9e5d9ab5307b94fffcc248b5ab3277af4d37a8577bf4de41ba53cbfb54e54974be9b79dbbe30e6ef4eccb78219335d233a2d5f83632d2ffe70310647afd689553eb87df9cbc28234faa982d40c83d6bb9586b3a4c5ca313e7f1bbd094f8b3cc0781768b64c28d291cdba4c900487380d51b56b50049d6b5eb8b98c1e9e704925a8825728f99c605d96ef8701f7ccc033adf27a29fe7328a27e4b92125feba40ee088b989188d54be1a5b7ab9fbce4d03d234055ca015441ebcbcfca8267abcbb23fa80c130a2794f431682a7cd4bb696d4414841d724a8220192e5c740193009d9f3f30f69ac04410406c9739a0a022992f649fe4e32d580a14af9e8006f9640baeef0b10a785be0082228755978a116db5961f347616361065985175a153a1ce31b3172953b863b6c15b4ad781c0f98f21c70977b39534f4da8cc2607251e38fb1ebd560fe9adf453de7acba40959d1d49eec7c877ee1f6a61f2883138248afb64621de541c159b3c9570b02701a4d38c3acd8bf92ac0cb65b4d197ddfb3a78f26f6f319412b27dbde872afd6792131c7efa4856409c12eae14383877ecb0308b2a90220dbf14e9725e69416da62c80baa21472288f24893abe8dc5e3e5f1d6cef46395c500fa268f4e8738a27a1a97a0eb962638d58d0a7d13d50dc21714dbc0247009e647d1f0246e3a16dae9244a6bb2eaeaddad4f7f5d165c6a7cb12ec232739b8dcea5b7801170e7d38e393af895a0367d5c9b10a0ff5e34dd6cad48bdaf3b680271b58a5fa2b7412f09484f1583f2425772b3b18d0424bf3cc31bb18e99f18b7dac69b38d700b6818b1cfb9ca890f34a79b8928b1db0d309d2e5845f72f6f541df71b7dddb9efd5d4b58b3295e65f9e9cd2325dcfee0791c4967176626e05158cbbdf190f971d36ebcb3b1f74a652f3d35fc31122aec43021865fcf5fe945e86f47e63ebbd731e845bc4ea745b73fcf55ed3ffe94042f67b8cda967a4982259609bfb20f144874f924c1bf3428c39446732305fb3df1c6c25a9eca0c21af71390c2993224f90414cdda824bc1ce3a4e6f7d0ee9503cb78099027ef704d3243c0377326c69dad8d05738c9b400f637d03ba313c3733d0d180d4e4af55ef315626720d5ea53b78206022923431cfef87c3f271ad88cf2877f81493a5128087701ab0377f4b694cd975947c6444385e2efd9b082e954d76af36887481074b879c13e20f66930d304838915d06e205190629b7f5b7d84373f072fe9f0a716b018d133d8596dcae4a3b409e0a50a687fdf9d91c50f2f67b864433e10e9731a9263a802bc0cb76401288fd52adf31a3fdd6c16fee29dde5db00b4fcc704fe5e8cd81d237202da3a2a74e08fb9717df3df66ad528a5cc686a5151f2c8d8794e5b1fb6bd97ae5ae1c9c51cb439fca1d67b1bf7d789983c7e138323d8cba8ab3d6ec5f5d5c2e91f75caea5f9ee402fffb2a7e79664929cbca628689db33c29a083f45acc953c9d3953c1c546bb8868e2954a893b9a3daddf67668d90c81a3dfe03416f026287f90bfcfa2c9e596b6d84bcdbf361df5853f652cdf037130a758876b7206fbe7f6703fac4be3d82a1c241a515eff71dd93097698f07e1ef375d8e1e5bb993d4510aba203b786e107738052b08f26f44e78ae672eea4df78259234a35a0a5d4afb789ca072207cf50dc9b3fc2ac70a438be4bd937231c5be2d6fd7601351f3b98b6c0796d4b0d46a88fa9ae4be2a75f056cfd2c942bb3977002fd4ecf8f5f26932a46b5ea3dc01ea68acfb3a37a4cfca9d8b085ce0cd7352a26f2a06ac9a2fc55fd73f9f132177f9db61d06a15bcb44a9b2d25fc8c165dc698a7d398d40047325fb28d002e78faeacf2f6c2cbc39c1ffc69b51186f2deaefa7282bfd8d5e1afd3370d2d86c7b5a6a4b65fecd3e8fde7f71714947b47bc6a0d7637157e118f6d912c5bcd12a9e4770dcbf767fad875b12d143da4108ddcc8bcd962034ba775717f2c4834feb950a0a137a7a8d16d7f9baef2a96ada7baf9b74bc9610da20a9d72bbdb407a3f85fe263e69d5b98549e40dcce4cd740a6688043d1d3e6c76eb062a3af5159197f6bbdb8f9c9028f176ed721409f03ed5dbdfbe5a2f104afc905e4d49c39ab76cf6c5191c0b9853cb9687b779620b23c3e61a11d3dbc68e9de0a68bd754f0098570a29d31d41327dd6d0a1dee3cbd1ba0c71e3ffed9c05c4333df274d75684f706ca51737159bb3fe8252d28e263833164da5887163151d2828123ce474b8ee6a3b718abac58fddbc0bd6b381fb510b0aaa0814f4fe3beb2c9bec0d1168cdf8ecad6906cfd715183e787d8875ce6ce53ac851849a7d426ad97a1c98b00a969b064f9954f4af2c6bbef61295c5d12ceadc7b5e2447117ebcfd183981b3fa2790d945136424cf863d0004eaf6c5b22d0d6b7799099cc7e08cdaf5076375d0df923348e82ac67ec2535c6e09e05bd25fa49978e6f2381dbbebe2844b3f7ccf292c", 0xcd3}], 0x4}}], 0x1, 0xc004) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000008c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r7, 0x0, 0x18, &(0x7f0000000000)=0x5a45, 0x4) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e22, 0x3, @private0, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "8a328d6999a423825f802dc064954acf3d26c000271edd540cee1c95e6b096b3bf3add26dfadb1b7a5e93246019eef34e7125980d749331d51ac86dd07d72d7a26c3b201e0b30fdceeee668dfbb68fb5"}, 0xd8) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) sendto(r0, &(0x7f0000000080)="fc1a357fdf94be794d5e541bddc474e42f6f63e1430e3e7cec6a779fdd0ad922843d147255508bd46f715c7e9f923bb54ebdf9ee551e097042ca65162677033641db4c243f9c748344ed680b2e649a0be18ac5aa46840f107176e40880fe391f8f0eab6905cf7844cd69b1a5b8", 0x6d, 0x1, 0x0, 0x0) 10.963456619s ago: executing program 0 (id=1703): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x9}, {}, {0x1c, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r1, @ANYBLOB='$\x00Z'], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 10.950992708s ago: executing program 5 (id=1704): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x207, 0x161a81) r1 = memfd_create(&(0x7f0000000840)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdc\xc0*rw[\r\x98\xf6\xd3\xbf\xa1\xcf\x8e\xc2\x8c\f\xee}g\xfe\xae\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\x01\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x1f\x88Z0\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdf\x00\x10\x00\x00\x00\x00\x00\x00\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r3, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') open(&(0x7f00000003c0)='./bus\x00', 0x2282, 0x80) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) recvmmsg(r5, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000480)=""/37, 0x25}], 0x1}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001c40)=""/4099, 0x1003}], 0x1}, 0xfffffffd}], 0x2, 0x40000000, 0x0) 8.868516427s ago: executing program 0 (id=1709): io_uring_setup(0x1fe6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}) (async) r0 = io_uring_setup(0x1fe6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}}, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x2000140d) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x9) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000100100000c000000fa000000000000ff"], 0x18}, 0x40) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x309, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_EXPIRES={0x0, 0x17, 0x40}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x9}}]}, 0x38}}, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) eventfd2(0x0, 0x0) (async) r9 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000100)={0x0, 0x6000, 0x0, r9}) (async) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000100)={0x0, 0x6000, 0x0, r9}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffc, 0x0, 0x0, r9}) (async) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffc, 0x0, 0x0, r9}) bind$xdp(r2, &(0x7f0000000140)={0x2c, 0x6, r4, 0x3b, r6}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000001580)={0x6, 0xb, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 8.021712422s ago: executing program 5 (id=1710): r0 = socket$inet6(0xa, 0x3, 0x8) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x44}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b7, 0x0, 0x2000, 0x2, 0x0, 0x0, 0x21, r2}, {0x0, 0x812a, 0x7, 0x4000000, 0x0, 0x0, 0xfffffffffffffffc}, {0xffffffffffffffff}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0xffffffff, 0x6c}, 0x2, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x0, 0x7ff}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 7.990946606s ago: executing program 3 (id=1711): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000580)={0x80, 0x9, 0x3ae, 0x5c, 0x10, "ac65864361da746b00e20204d5c17f3ffd2f37"}) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000300), 0x6) recvmmsg(r1, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0xa133c000) syz_open_dev$usbfs(0x0, 0xc6af, 0x105002) mincore(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9461a000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000300)=""/66, 0x42}, {&(0x7f0000000380)=""/211, 0xd3}, {&(0x7f0000000480)=""/177, 0xb1}, {&(0x7f00000005c0)=""/92, 0x5c}, {&(0x7f0000001280)=""/4096, 0x1000}], 0x5}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f0000000d80)=""/98, 0x62}, {&(0x7f0000003280)=""/4096, 0x1000}], 0x3, &(0x7f0000000e40)=""/256, 0x100}, 0x3}, {{&(0x7f00000008c0)=@alg, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000940)=""/224, 0xe0}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/131, 0x83}, {&(0x7f0000000b00)=""/209, 0xd1}], 0x4, &(0x7f0000000c40)=""/106, 0x6a}, 0xb2f5}], 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) 7.811014192s ago: executing program 5 (id=1712): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000280)={0x1d, r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x8000000000000000}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000000, {0x0, 0x0, 0x0, r1, {0x7}, {0x9}, {0x1}}}, 0x24}}, 0x40044) 7.741527679s ago: executing program 2 (id=1713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x4, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x7, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x7fff, 0x5a669be6, 0x7, 0x3, 0xe, 0x7, 0xffffffff, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xffffffd2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x4, 0x7, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x484d, 0x4, 0x7, 0x8, 0x40, 0xc0f, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0xfffffffd, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x401, 0x9, 0x2, 0x1000, 0x7, 0x4, 0xc, 0x7, 0x6, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x2, 0x1ff, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x6af5, 0x2, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x81, 0x8, 0x2, 0x7, 0x100, 0x2, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x7, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x200, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb756, 0x2, 0xb9, 0x4, 0x50, 0x8c1, 0x0, 0x5, 0x4, 0xf, 0x100, 0x400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) write(r5, &(0x7f0000000140)="24000000010006", 0x7) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x40, 0xf, 0x1c, 0x1, 0x2, 0x3e, 0x6, 0x2f0, 0x40, 0x13b, 0x7fffffff, 0x4, 0x38, 0x3, 0x3, 0x9}, [{0x70000000, 0x0, 0x5, 0x4, 0xbd7e, 0x6, 0x0, 0x3}, {0x6474e551, 0x7, 0x1, 0x2, 0xdeb3, 0x1, 0x7fff, 0x3}, {0x70000000, 0xf, 0x240000000000000, 0x8, 0x6177, 0x8, 0xfffffffffffffffa, 0x7}], "53383703bff62e752f8f880467df360c05b88139ecb91092aa29ad2c63dbd151bd712dc50600f68d7205033d5e4455076d16f897707a5e4ecae3f0e93bc6d7d9a7108abca46fff555a5be80c2d0482f3f62ebaed05eed463eb8f51021303a6ef8559507bc301e143c58d328eae3c7a0c35be4ddc12acb73e94ed0b26b75a9f762360184f47385da9cb4eaed235c6f02eb607efaeccafa234d94d206a546eaf99ca5286bf0d5ab5c781fb724d1ef8d80e65ba8c05c7064273af30b99b7c3ca70f5e3ef17ee71ea05aec2931afaece197f1f740a418b7e8012bb50c1e2448922105fddfdb04ab1ec206db2eef08d7a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8d6) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001540)=ANY=[], 0x18}}, 0x0) write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) socket$inet(0x2, 0x80001, 0x84) socket$inet(0x2, 0x3, 0x4) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040800) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000540)={0x7d36, 0x3, [{0x5, 0x1}, {0x1}, {0x3, 0x1}]}) 5.455805922s ago: executing program 5 (id=1714): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="0012ad"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) getresgid(&(0x7f0000004080), &(0x7f00000040c0), &(0x7f0000004100)) ioctl$EVIOCSCLOCKID(r1, 0x40084504, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 5.45418479s ago: executing program 2 (id=1715): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5.241507335s ago: executing program 2 (id=1717): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32, @ANYBLOB="5cd13d0fe6b9199733f8"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) sendmmsg(r2, &(0x7f0000002080)=[{{&(0x7f0000000600)=@nfc_llcp={0x27, 0x0, 0x0, 0x3, 0xb, 0x6, "45173b2ff6744c30bb2dd76d2f2c459858a49ae6282d3b6132139c129856cb19b5d4b61892ac31d4a9b998e1f9c70f466fad7c243615a64aedeab0accbaa9d", 0x19}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000680)="6243c2e0c19af25c901d00114e1e2f560a7f65e6b06a70245843ae2e6bd9196e", 0x20}, {&(0x7f00000006c0)="0e32abd55c17", 0x6}, {&(0x7f0000000700)="56e4e39c012afc5d59f8510606502c6348ba2411399299bf1d", 0x19}, {&(0x7f0000000740)="b3d926f1162d4dbb867b9670eda0a7cd44c92ff8957be1820e353bad4c2c1148f2f48b", 0x23}, {&(0x7f0000000780)="447c1b11cf89d770341ec99cf22e80b95e5209af7cc8b48b52c70f1bea9999a2b2deb84f925304764b67602162298d8a", 0x30}, {&(0x7f00000007c0)="197ff060653bf038460a9b4a766521e72d0a1ad53044d1628ba9ff60b3", 0x1d}, {&(0x7f0000000800)="05ef8fc662955b4d7906188700afddf899e4fd102df92b7b92c4f059babe5fcfb4967bf447db3a147a57", 0x2a}], 0x7, &(0x7f00000008c0)=[{0x48, 0x101, 0x8001, "d7c10b4162c4eecc6cde7d1a263536c520c4f6a588976a6912d577981863a04c395bb149f13bfa2cb53fda5f25d97e5218d944"}, {0xd8, 0x108, 0x1c, "306e48192a4840e46a3a7199ee2929e35d7c2d95c8365006a1cf657e7b1d9b18fe34bff4e0c00eaef0057766fb3c7a2940302de132bcf2b18a2cb3cb88f5ea04e213569a4300059d9c05b34aadbdbc534e107e7e97051d43510219695babff254d7fb4ee160480b9efcd81c94c056fc0be0658e04cf26a4d9a8774f6bc3678ff1fff23337e6e4db392d2d4d9617c67393590f5cf2ee64b484688cbd6a1609a2c08445c987463c580c7762837e2e3d4ab99c6798f94bc313375b65b41fe75a6e182b76f344af0bb0e"}, {0x60, 0x8f, 0x80000001, "f13c3ee13b044f3a02b2fa4b763c5ed2b17d63a610b04448ec0b34ce92173311a05364867e19f7242f3051f76879dc3af3b77baa4890e96b78a56be406ecc4379baae89993c881900070d7aeb8191082"}], 0x180}}, {{&(0x7f0000000a40)=@pppoe={0x18, 0x0, {0x4, @multicast, 'dummy0\x00'}}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000b00)="dcb8985e5fa1e40cdb53fc693a7de0012f9af95fac9cb4c30c80b25839a3a93eb0dc1020926d7e5ed94b3e95e23bd28bfb4f60bb22701a4938efb69bd4c1cf01a08947d4a00805296d8ac9175478fb895e821caa440e7f45042b6310af2d81effbc40e3c57296870b517a2ddfe4a531c15131b7a9f824944f60dc354030924d94bb26517c17ceeadedeb1d01e5996bd7e818f645a4fa42846019f9a0a390bca5adccb8c2c5e925985b6925b950a019367a20", 0xb2}, {&(0x7f0000000bc0)="fcde75dd3b2db88c70dc325ba62b388fc8454849e9a16d661c54752e792e2fce5e1b1a2a403be77b567c6976b56f66869fdba2a926b0badd24415202a69df92918d477fbf274c1cbcf5e32f64453b11508b09ee7d6b0b2b81ecb3d85cad22265691ead3d4a9c1594", 0x68}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="0a6b8791f5362e426bff558ef977cb006d9eef649b795f7c36696d55ca1fde3ac03c906544ae02284ff45136c0292fbecdc489fdcdd0bc1b2a52bec24ba31e3a5081dd2322f4a96efc918e", 0x4b}], 0x4, &(0x7f0000002100)=ANY=[@ANYBLOB="70000000000000001201000004000000e91a1e0df1435d30fdc63156ee0b148383d9617aad6e35768129cfc857852480a085fda0d1030fa27b0b4654d3d578bc69fb66a3dabf3f56216db9db571e604c92159a8a5b13ba91282f0e349912cc5f5a26e40e73168254b50170de1d724109c8000000000000000a0100000800000050556526527b9c63191925416443a5b6a374f52ea70a1f3cee9c88c31bbead8122ac14761d12473f92478b7b4b9269150bc4b0a0f14e748fa8d2a5a13a808a7d4288a81d76825128e63fe03720a4c4b85d0cb01f158b655fa4a8bff78139af2464d9d852e51ac66ded68814f99b01a1de29707fe7bbc0ae9629be9b0fc2f575b289d3e2c1fb7eb87495e4f4bd1f8e5527129dbc0448e820097ee4474de6fee68e382c6a761fbbdf7609186b2e69146dc30fe3220dd00000040000000000000002900000003000000cb73c1701fdc12e5e6a472d1fd166c9fa45903b47fb9a8dffa0163a8ba60fa8469cd46380422d8510e0000000000000050000000000000000f010000020000001d6195032939d4aafe58da5d9b3343ee1dfc8716dbb313317895475b8cc4fe8307a5cefe76c7899a555bcd9aed1caea77d058f960211acf9251f563e02000000900000000000000014010000050000008cd54599a06e8d213feaa320355c28d1b7b034b2cf121fb5af5700099abd44617fcc63f494f886765df8ad939c819992e1380d556a9eb2758d64e57529466cd5871437953088132e09f00f84413cc0e1cac25bcf364fcd631b353283fbb42f99e71aa7aa5ab7588adb889f6c46bf991c7b7862eeb113cdd38ae142fffd10ce50880098000000000000000100000000000000142f86f6dc22ce526a96e2f79f2fdd9a729ad43189c3ad227ff390c2980371b1104720b51f9963bfbd156b476c35af96640cf3701c93a26c79232c91002c4832e518dd8bb4811934ce5c876afb9a74427d279bd853e4348738c267d219d158806138f9dc6b635994b2ee07a6f805c5dd5221ac9c9b080de0b17e6e114843192bb700000000000000b8b3d870351aa554cc02ebc15e895c923b8eab68cea0b3e0c2f12839cea0b07690b14f899d67fd09b7d94ba5a3dd50f97e06587f26f5dfcafe7b11e7e739bf81d125f9c024375970ebc2f23863"], 0x2f0}}], 0x2, 0x59d27f0873d03e95) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r5, r5, r5) faccessat2(0xffffffffffffffff, 0x0, 0x7, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x80000000}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3c}, 0xa, @in6=@empty}}, 0xe8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54000400", @ANYRES16=r9, @ANYBLOB="010000000000000000001e0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008003e00000000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x84, r9, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040}, 0x8004) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x2f}}}, 0x4) r11 = socket(0x27, 0x5, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000080)) 5.157011302s ago: executing program 0 (id=1718): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='numa_maps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bind$alg(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, 0x0, &(0x7f0000000040)) read$FUSE(r0, &(0x7f0000006280)={0x2020}, 0x2020) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 5.138617532s ago: executing program 2 (id=1719): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) sendmsg$can_raw(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@can={{}, 0x0, 0x0, 0x4, 0x0, "1b2bd600c7ed2890"}, 0x10}, 0x2, 0x0, 0x0, 0x80}, 0x4000855) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200000000000000fd68000000", @ANYRES32=0x0, @ANYBLOB="05"], 0x1c}}, 0x0) recvmmsg(r5, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}}], 0x10, 0x200d0000, 0x0) 4.87575256s ago: executing program 2 (id=1721): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x207, 0x161a81) r1 = memfd_create(&(0x7f0000000840)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdc\xc0*rw[\r\x98\xf6\xd3\xbf\xa1\xcf\x8e\xc2\x8c\f\xee}g\xfe\xae\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\x01\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x1f\x88Z0\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdf\x00\x10\x00\x00\x00\x00\x00\x00\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0], 0x0, 0x0, 0x0, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), 0x0, 0x1, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000280)={0x0, r7, r2}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r8, 0x40044160, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) getpid() openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = semget(0x2, 0x1, 0x82) semop(r9, &(0x7f0000000100)=[{0x2, 0x9e7, 0x800}, {0x0, 0x802, 0x800}, {0x2, 0xd, 0x1000}, {0x0, 0x301, 0x800}, {0x2, 0x7, 0x1000}], 0x5) semget(0x2, 0x4, 0x4) 3.110099582s ago: executing program 0 (id=1726): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) write$FUSE_INIT(r0, &(0x7f0000000e80)={0x50}, 0x50) write$P9_RVERSION(r0, &(0x7f0000000000)={0x13, 0x65, 0xffff, 0x7b, 0x6, '9P2000'}, 0x13) fanotify_init(0x200, 0x0) r1 = syz_io_uring_setup(0xd3, &(0x7f00000000c0)={0x0, 0x2a6, 0x400}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) r4 = getpgid(0xffffffffffffffff) syz_open_procfs(r4, &(0x7f0000000140)='io\x00') 3.107989298s ago: executing program 2 (id=1727): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc4, 0xb8, 0x68, 0x8, 0x2357, 0x109, 0xbdda, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000200)={r3, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc") syz_usb_disconnect(r0) r5 = syz_usb_connect(0x3, 0x1cb, &(0x7f0000000400)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x20, 0xa, 0x1, "c3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) 2.336806391s ago: executing program 3 (id=1728): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000010180)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000000)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x34, r4, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x0) 1.786589651s ago: executing program 4 (id=1729): shmget(0x3, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) (async) r0 = shmget(0x3, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x1000) timer_create(0x0, &(0x7f0000000100)={0x0, 0x2b, 0x1, @thr={&(0x7f0000000000)="a89fa7a55343f06f771a3fa7209490768f53a3834aa0f6415a3fe017b707f3f69e1dc43534842c6133a7fa8f940ca171d642cb6ffe52716ca3040c25e88dd423621231f724c0bc4c695a0f51d47081e62db2a93a72d3b85a3f5e578261aadfa9bc16af78353f249416ce847c1fd765727690eae2087460a84f1d3832d81083e60fd6a9", &(0x7f00000000c0)="1e6a5f8d0f59125551"}}, &(0x7f0000000140)=0x0) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, &(0x7f00000001c0)) (async) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, &(0x7f00000001c0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x30, r3, 0x100000000) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r4 = syz_open_dev$vcsu(&(0x7f0000000200), 0x6000000, 0x4000) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000340)={r5, 0x3, 0x23f9865b, 0x3, &(0x7f0000000300)=[{0x81, 0xff, 0x6, 0xff}, {0xd6, 0x9, 0x9, 0x2}, {0xffff, 0x0, 0xf, 0x7}]}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000380)={0x0, 0x1, r4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000380)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f00000003c0)={0x0, 0x1, r4}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f00000003c0)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000400)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f00000004c0)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r4, 0xc01864cb, &(0x7f0000000580)={&(0x7f0000000500)=[r6, r7, r8, r9, 0x0, r10, 0x0, r11], &(0x7f0000000540)=[0x80], 0x8, 0x1}) r12 = openat$vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r12, 0xc01064c2, &(0x7f0000000600)={0x0, 0x1, r4}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000640)={0x1, 0x78, 0xd25}) bind$unix(r4, &(0x7f0000000680), 0x6e) (async) bind$unix(r4, &(0x7f0000000680), 0x6e) io_uring_enter(r4, 0x2a2f, 0xcff7, 0x4, &(0x7f0000000700)={[0x1]}, 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000740), 0x2000, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000780)={"412b36ddcac36d75a342d153e2eb73d8", 0x0, 0x0, {0x2, 0x9c}, {0x8, 0x8}, 0x4, [0x0, 0xed, 0xe6e, 0x4b, 0x8, 0x4, 0x100000000, 0x9735, 0x4, 0xb, 0x5, 0x6f0, 0x5, 0x3, 0x9, 0x7]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000780)={"412b36ddcac36d75a342d153e2eb73d8", 0x0, 0x0, {0x2, 0x9c}, {0x8, 0x8}, 0x4, [0x0, 0xed, 0xe6e, 0x4b, 0x8, 0x4, 0x100000000, 0x9735, 0x4, 0xb, 0x5, 0x6f0, 0x5, 0x3, 0x9, 0x7]}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000880)=r14) socket$inet_sctp(0x2, 0x1, 0x84) (async) r15 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r15, 0x0, 0x23, &(0x7f00000008c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) ioctl$SNDCTL_DSP_SETTRIGGER(r12, 0x40045010, &(0x7f0000000900)=0x2) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r12, 0x40045010, &(0x7f0000000900)=0x2) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r4, 0xc01064c1, &(0x7f0000000940)={r13}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r4, 0xc01064c1, &(0x7f0000000940)={r13}) 1.660451685s ago: executing program 4 (id=1730): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x4, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x7, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x7fff, 0x5a669be6, 0x7, 0x3, 0xe, 0x7, 0xffffffff, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xffffffd2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x4, 0x7, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x484d, 0x4, 0x7, 0x8, 0x40, 0xc0f, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0xfffffffd, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x401, 0x9, 0x2, 0x1000, 0x7, 0x4, 0xc, 0x7, 0x6, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x2, 0x1ff, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x6af5, 0x2, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x81, 0x8, 0x2, 0x7, 0x100, 0x2, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x7, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x200, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb756, 0x2, 0xb9, 0x4, 0x50, 0x8c1, 0x0, 0x5, 0x4, 0xf, 0x100, 0x400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) write(r5, &(0x7f0000000140)="24000000010006", 0x7) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x40, 0xf, 0x1c, 0x1, 0x2, 0x3e, 0x6, 0x2f0, 0x40, 0x13b, 0x7fffffff, 0x4, 0x38, 0x3, 0x3, 0x9}, [{0x70000000, 0x0, 0x5, 0x4, 0xbd7e, 0x6, 0x0, 0x3}, {0x6474e551, 0x7, 0x1, 0x2, 0xdeb3, 0x1, 0x7fff, 0x3}, {0x70000000, 0xf, 0x240000000000000, 0x8, 0x6177, 0x8, 0xfffffffffffffffa, 0x7}], "53383703bff62e752f8f880467df360c05b88139ecb91092aa29ad2c63dbd151bd712dc50600f68d7205033d5e4455076d16f897707a5e4ecae3f0e93bc6d7d9a7108abca46fff555a5be80c2d0482f3f62ebaed05eed463eb8f51021303a6ef8559507bc301e143c58d328eae3c7a0c35be4ddc12acb73e94ed0b26b75a9f762360184f47385da9cb4eaed235c6f02eb607efaeccafa234d94d206a546eaf99ca5286bf0d5ab5c781fb724d1ef8d80e65ba8c05c7064273af30b99b7c3ca70f5e3ef17ee71ea05aec2931afaece197f1f740a418b7e8012bb50c1e2448922105fddfdb04ab1ec206db2eef08d7a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8d6) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001540)=ANY=[], 0x18}}, 0x0) write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) socket$inet(0x2, 0x3, 0x4) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040800) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x8008551d, &(0x7f0000000540)={0x7d36, 0x3, [{0x5, 0x1}, {0x1}, {0x3, 0x1}]}) 1.089392684s ago: executing program 3 (id=1731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x4, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x7, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x7fff, 0x5a669be6, 0x7, 0x3, 0xe, 0x7, 0xffffffff, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xffffffd2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x4, 0x7, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x484d, 0x4, 0x7, 0x8, 0x40, 0xc0f, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0xfffffffd, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x401, 0x9, 0x2, 0x1000, 0x7, 0x4, 0xc, 0x7, 0x6, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x2, 0x1ff, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x6af5, 0x2, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x81, 0x8, 0x2, 0x7, 0x100, 0x2, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x7, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x200, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb756, 0x2, 0xb9, 0x4, 0x50, 0x8c1, 0x0, 0x5, 0x4, 0xf, 0x100, 0x400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) write(r5, &(0x7f0000000140)="24000000010006", 0x7) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x40, 0xf, 0x1c, 0x1, 0x2, 0x3e, 0x6, 0x2f0, 0x40, 0x13b, 0x7fffffff, 0x4, 0x38, 0x3, 0x3, 0x9}, [{0x70000000, 0x0, 0x5, 0x4, 0xbd7e, 0x6, 0x0, 0x3}, {0x6474e551, 0x7, 0x1, 0x2, 0xdeb3, 0x1, 0x7fff, 0x3}, {0x70000000, 0xf, 0x240000000000000, 0x8, 0x6177, 0x8, 0xfffffffffffffffa, 0x7}], "53383703bff62e752f8f880467df360c05b88139ecb91092aa29ad2c63dbd151bd712dc50600f68d7205033d5e4455076d16f897707a5e4ecae3f0e93bc6d7d9a7108abca46fff555a5be80c2d0482f3f62ebaed05eed463eb8f51021303a6ef8559507bc301e143c58d328eae3c7a0c35be4ddc12acb73e94ed0b26b75a9f762360184f47385da9cb4eaed235c6f02eb607efaeccafa234d94d206a546eaf99ca5286bf0d5ab5c781fb724d1ef8d80e65ba8c05c7064273af30b99b7c3ca70f5e3ef17ee71ea05aec2931afaece197f1f740a418b7e8012bb50c1e2448922105fddfdb04ab1ec206db2eef08d7a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8d6) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001540)=ANY=[], 0x18}}, 0x0) write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) socket$inet(0x2, 0x80001, 0x84) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040800) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x8008551d, &(0x7f0000000540)={0x7d36, 0x3, [{0x5, 0x1}, {0x1}, {0x3, 0x1}]}) 597.273476ms ago: executing program 4 (id=1732): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 341.848458ms ago: executing program 5 (id=1733): syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0xa8, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0xffffffffffffff56, 0x3, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x24004010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x4) 320.47918ms ago: executing program 4 (id=1734): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 2.810635ms ago: executing program 4 (id=1735): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) (async, rerun: 64) r1 = timerfd_create(0x0, 0x0) (rerun: 64) timerfd_settime(r1, 0x3, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) (async, rerun: 64) clock_gettime(0x6, &(0x7f0000000080)={0x0, 0x0}) (rerun: 64) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{}, {r2, r3+60000000}}, 0x0) (async) symlinkat(&(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') unshare(0x2c060000) (async) unshare(0x2c020400) r4 = landlock_create_ruleset(&(0x7f0000000280)={0xb2a1, 0x1}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) (async) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=1736): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0x541b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000003540), 0x0, 0x10) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f00000000c0)=0xcd5e, 0x4) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e06007c0c", @ANYRESHEX=r1, @ANYRES32=r2, @ANYRESOCT=0x0], 0x9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80009) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) kernel console output (not intermixed with test programs): ct, device number 35 [ 385.482081][T10596] input: syz0 as /devices/virtual/input/input18 [ 385.870050][T10606] netlink: 'syz.0.1337': attribute type 9 has an invalid length. [ 386.336329][T10608] kvm: pic: non byte write [ 386.349285][T10608] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194322 ns). Using initial count to start timer. [ 386.368636][T10608] kvm: pic: non byte write [ 386.735328][T10619] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1341'. [ 387.079541][T10614] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1340'. [ 387.459607][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1344'. [ 387.770585][T10630] vlan3: entered promiscuous mode [ 388.992761][ T46] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 389.698311][ T46] usb 5-1: unable to get BOS descriptor or descriptor too short [ 389.706971][ T46] usb 5-1: config 3 has an invalid interface number: 102 but max is 0 [ 389.717961][ T46] usb 5-1: config 3 has no interface number 0 [ 389.724262][ T46] usb 5-1: config 3 interface 102 has no altsetting 0 [ 389.759524][ T46] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 389.770876][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.779609][ T46] usb 5-1: Product: syz [ 389.783971][ T46] usb 5-1: Manufacturer: syz [ 389.792463][ T46] usb 5-1: SerialNumber: syz [ 389.954529][ T6494] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 390.012487][T10661] netlink: 'syz.3.1353': attribute type 8 has an invalid length. [ 390.774539][ T6494] usb 3-1: Using ep0 maxpacket: 16 [ 390.788216][ T6494] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.802911][ T6494] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.813221][ T6494] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 390.826109][ T6494] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 390.835206][ T6494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.850542][ T6494] usb 3-1: config 0 descriptor?? [ 390.861103][T10667] netlink: 'syz.3.1355': attribute type 1 has an invalid length. [ 390.879220][T10667] bond1: entered promiscuous mode [ 390.884315][T10667] bond1: entered allmulticast mode [ 390.905684][T10667] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 390.914215][T10667] bond1: (slave batadv1): making interface the new active one [ 390.921865][T10667] batadv1: entered promiscuous mode [ 390.927300][T10667] batadv1: entered allmulticast mode [ 390.933589][T10667] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 391.062334][ T6494] usbhid 3-1:0.0: can't add hid device: -71 [ 391.069060][ T6494] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 391.089378][ T6494] usb 3-1: USB disconnect, device number 36 [ 391.835939][ T46] ums-usbat 5-1:3.102: USB Mass Storage device detected [ 391.851565][ T46] ums-usbat 5-1:3.102: Quirks match for vid 0781 pid 0005: 1 [ 391.859912][ T46] ums-usbat 5-1:3.102: This device (0781,0005,0005 S 06 P 14) has an unneeded SubClass entry in unusual_devs.h (kernel 6.13.0-rc4-syzkaller-00004-gf07044dd0df0) [ 391.859912][ T46] Please send a copy of this message to and [ 392.077939][ T46] usb 5-1: USB disconnect, device number 44 [ 393.672978][ T46] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 394.225849][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.236253][ T46] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 394.598279][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 394.609355][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 394.619499][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 394.636064][ T46] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 394.656610][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 394.763889][ T46] usb 3-1: Product: syz [ 394.768243][ T46] usb 3-1: Manufacturer: syz [ 394.772933][ T46] usb 3-1: SerialNumber: syz [ 394.785962][ T46] usb 3-1: config 0 descriptor?? [ 395.187058][ T6494] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 395.247019][ T46] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 395.254178][ T46] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 395.321618][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 395.330668][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 395.338349][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 395.349886][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 395.358116][ T5836] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 395.365668][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 395.375128][T10724] netlink: 'syz.0.1371': attribute type 11 has an invalid length. [ 395.453988][ T46] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 395.462576][ T46] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 395.471425][ T46] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 395.482554][ T46] usb 3-1: USB disconnect, device number 37 [ 395.593238][T10729] program syz.0.1371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.808574][ T2132] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.356154][ T2132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.405762][T10722] chnl_net:caif_netlink_parms(): no params data found [ 396.464459][ T6494] usb 5-1: Using ep0 maxpacket: 16 [ 396.500557][ T6494] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.514620][ T6494] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.543092][ T6494] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 396.630192][ T6494] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 396.643503][ T6494] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.690743][ T6494] usb 5-1: config 0 descriptor?? [ 396.773318][ T2132] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.827222][T10734] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1372'. [ 396.893378][T10743] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1374'. [ 396.977352][ T6494] usbhid 5-1:0.0: can't add hid device: -71 [ 396.983370][ T6494] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 397.057962][ T6494] usb 5-1: USB disconnect, device number 45 [ 397.320939][ T2132] bond0: (slave netdevsim0): Releasing backup interface [ 397.353072][ T2132] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 397.368204][ T2132] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.390555][T10722] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.402067][T10722] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.410397][T10722] bridge_slave_0: entered allmulticast mode [ 397.420165][T10722] bridge_slave_0: entered promiscuous mode [ 397.450799][T10722] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.458735][T10722] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.466006][T10722] bridge_slave_1: entered allmulticast mode [ 397.476996][T10722] bridge_slave_1: entered promiscuous mode [ 397.492535][ T2132] team0: left allmulticast mode [ 397.497778][ T2132] team_slave_0: left allmulticast mode [ 397.498039][ T46] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 397.503353][ T2132] team_slave_1: left allmulticast mode [ 397.503506][ T2132] bridge0: port 3(team0) entered disabled state [ 397.524275][ T2132] bridge_slave_1: left allmulticast mode [ 397.525172][ T5836] Bluetooth: hci4: command tx timeout [ 397.535728][ T2132] bridge_slave_1: left promiscuous mode [ 397.541419][ T2132] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.557565][ T2132] bridge_slave_0: left allmulticast mode [ 397.563527][ T2132] bridge_slave_0: left promiscuous mode [ 397.569279][ T2132] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.584566][ T25] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 397.658641][ T2132] dvmrp0 (unregistering): left allmulticast mode [ 397.677333][ T2132] bridge0 (unregistering): left allmulticast mode [ 397.679446][ T46] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 397.693626][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.704984][ T46] usb 1-1: Product: syz [ 397.709310][ T46] usb 1-1: Manufacturer: syz [ 397.714171][ T46] usb 1-1: SerialNumber: syz [ 397.748543][ T2132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.748593][ T46] usb 1-1: config 0 descriptor?? [ 397.764072][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 397.769703][ T2132] bond_slave_0: left allmulticast mode [ 397.774174][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.787536][ T2132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.796597][ T2132] bond_slave_1: left allmulticast mode [ 397.802875][ T2132] bond0 (unregistering): Released all slaves [ 397.889275][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.899221][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 397.901273][T10722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.912185][ T25] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 397.912233][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.913771][ T25] usb 3-1: config 0 descriptor?? [ 397.961721][T10722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.018264][T10722] team0: Port device team_slave_0 added [ 398.032628][T10765] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1380'. [ 398.042780][T10722] team0: Port device team_slave_1 added [ 398.208222][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 398.214282][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 398.243924][ T25] usb 3-1: USB disconnect, device number 38 [ 398.277640][T10722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.304496][T10722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.366440][T10722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.423058][T10722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.446741][T10722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.472766][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.515497][T10722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.534484][ T7575] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 398.569396][ T2132] hsr_slave_0: left promiscuous mode [ 398.576488][ T2132] hsr_slave_1: left promiscuous mode [ 398.582707][ T2132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.594611][ T2132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.602532][ T2132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.610569][ T2132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.620263][ T2132] veth1_vlan: left promiscuous mode [ 398.625671][ T46] mos7840 1-1:0.0: required endpoints missing [ 398.626821][ T2132] veth0_vlan: left promiscuous mode [ 398.636552][ T46] usb 1-1: USB disconnect, device number 35 [ 398.644533][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 398.674373][ T2132] pim6reg (unregistering): left allmulticast mode [ 398.709091][ T7575] usb 5-1: Using ep0 maxpacket: 16 [ 398.723869][ T7575] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 398.733155][ T7575] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.741483][ T7575] usb 5-1: Product: syz [ 398.743666][ T2132] team_slave_1 (unregistering): left promiscuous mode [ 398.745694][ T7575] usb 5-1: Manufacturer: syz [ 398.745712][ T7575] usb 5-1: SerialNumber: syz [ 398.763043][ T7575] usb 5-1: config 0 descriptor?? [ 398.769118][ T2132] team0 (unregistering): Port device team_slave_1 removed [ 398.774253][ T7575] as10x_usb: device has been detected [ 398.783557][ T7575] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 398.792363][ T2132] team_slave_0 (unregistering): left promiscuous mode [ 398.795634][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 398.808422][ T2132] team0 (unregistering): Port device team_slave_0 removed [ 398.811907][ T7575] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 398.825270][ T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 398.835548][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 398.846432][ T7575] as10x_usb: error during firmware upload part1 [ 398.853007][ T7575] Registered device Sky IT Digital Key (green led) [ 398.855230][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 398.888047][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 398.903954][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 398.915953][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 398.928331][ T9] usb 4-1: Product: syz [ 398.932606][ T9] usb 4-1: Manufacturer: syz [ 398.953386][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 398.971435][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 398.997660][ T9] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 399.006829][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 399.031935][ T46] usb 5-1: USB disconnect, device number 46 [ 399.057282][ T46] Unregistered device Sky IT Digital Key (green led) [ 399.060662][ T46] as10x_usb: device has been disconnected [ 399.094391][T10722] hsr_slave_0: entered promiscuous mode [ 399.101600][T10722] hsr_slave_1: entered promiscuous mode [ 399.120423][T10722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.128523][T10722] Cannot create hsr debugfs directory [ 399.448991][ T9] usb 4-1: USB disconnect, device number 32 [ 399.523956][T10795] input: syz0 as /devices/virtual/input/input19 [ 399.604705][ T5836] Bluetooth: hci4: command tx timeout [ 399.756568][T10806] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1387'. [ 400.034614][T10722] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 400.073992][T10722] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 400.105904][T10722] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 400.147528][T10722] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 400.180527][T10818] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1389'. [ 400.336246][T10722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.350219][T10825] fuse: Unknown parameter 'L-lνg]T+W Dr{j#F/؄#c' [ 400.378120][T10722] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.691803][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.698976][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.812061][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.819171][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.007211][T10722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.204606][ T7575] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 401.226747][T10851] netlink: 'syz.0.1394': attribute type 11 has an invalid length. [ 401.377438][ T7575] usb 4-1: unable to get BOS descriptor or descriptor too short [ 401.394097][ T7575] usb 4-1: config 3 has an invalid interface number: 102 but max is 0 [ 401.461258][T10860] program syz.0.1394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 401.679334][ T7575] usb 4-1: config 3 has no interface number 0 [ 401.685956][ T5836] Bluetooth: hci4: command tx timeout [ 401.693398][ T7575] usb 4-1: config 3 interface 102 has no altsetting 0 [ 401.706478][ T7575] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 401.715860][ T7575] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.724157][ T7575] usb 4-1: Product: syz [ 401.731391][ T7575] usb 4-1: Manufacturer: ꉹ犙˹ [ 401.745685][ T7575] usb 4-1: SerialNumber: syz [ 402.609186][ T7575] ums-usbat 4-1:3.102: USB Mass Storage device detected [ 402.727694][ T7575] ums-usbat 4-1:3.102: Quirks match for vid 0781 pid 0005: 1 [ 402.895462][ T7575] ums-usbat 4-1:3.102: This device (0781,0005,0005 S 06 P 14) has an unneeded SubClass entry in unusual_devs.h (kernel 6.13.0-rc4-syzkaller-00004-gf07044dd0df0) [ 402.895462][ T7575] Please send a copy of this message to and [ 403.028421][ T7575] usb 4-1: USB disconnect, device number 33 [ 403.051721][T10722] veth0_vlan: entered promiscuous mode [ 403.347465][T10722] veth1_vlan: entered promiscuous mode [ 403.530439][T10722] veth0_macvtap: entered promiscuous mode [ 403.538712][T10722] veth1_macvtap: entered promiscuous mode [ 403.634950][T10722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.645488][T10722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.655419][T10722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.665943][T10722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.675867][T10722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.688526][T10722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.698702][T10722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.709448][T10722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.720246][T10722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.740178][T10722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.750900][T10722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.760845][T10722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.765737][ T5836] Bluetooth: hci4: command tx timeout [ 403.771408][T10722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.786641][T10722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.801981][T10722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.812077][T10722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.822565][T10722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.861365][T10722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.874982][T10722] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.883716][T10722] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.892534][T10722] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.901583][T10722] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.002146][T10226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.010272][T10226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.023798][T10891] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1400'. [ 404.355065][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.362948][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.624519][ T7575] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 404.642020][T10915] netlink: 'syz.5.1404': attribute type 1 has an invalid length. [ 404.666341][T10915] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1404'. [ 404.794780][ T7575] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 404.812426][ T7575] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 404.852473][ T7575] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 404.876183][ T7575] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 404.909741][ T7575] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 404.964016][ T7575] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 404.992635][ T7575] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 405.019630][ T7575] usb 3-1: Product: syz [ 405.035829][ T7575] usb 3-1: Manufacturer: syz [ 405.062048][ T7575] cdc_wdm 3-1:1.0: skipping garbage [ 405.082695][ T7575] cdc_wdm 3-1:1.0: skipping garbage [ 405.111435][ T7575] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 405.133834][T10929] FAULT_INJECTION: forcing a failure. [ 405.133834][T10929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.150203][ T7575] cdc_wdm 3-1:1.0: Unknown control protocol [ 405.164668][ T5870] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 405.175474][T10929] CPU: 0 UID: 0 PID: 10929 Comm: syz.4.1406 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 405.186279][T10929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 405.196354][T10929] Call Trace: [ 405.199656][T10929] [ 405.202601][T10929] dump_stack_lvl+0x241/0x360 [ 405.207307][T10929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.212549][T10929] ? __pfx__printk+0x10/0x10 [ 405.217175][T10929] ? snprintf+0xda/0x120 [ 405.221447][T10929] should_fail_ex+0x3b0/0x4e0 [ 405.226156][T10929] _copy_to_user+0x31/0xb0 [ 405.230619][T10929] simple_read_from_buffer+0xca/0x150 [ 405.236053][T10929] proc_fail_nth_read+0x1e9/0x250 [ 405.241111][T10929] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 405.246688][T10929] ? trace_contention_end+0x3c/0x120 [ 405.252009][T10929] ? bpf_lsm_file_permission+0x9/0x10 [ 405.257417][T10929] ? security_file_permission+0x74/0x280 [ 405.263081][T10929] ? rw_verify_area+0x55e/0x6f0 [ 405.267983][T10929] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 405.273575][T10929] vfs_read+0x1fc/0xb70 [ 405.277762][T10929] ? __pfx___mutex_lock+0x10/0x10 [ 405.282822][T10929] ? __pfx_vfs_read+0x10/0x10 [ 405.287523][T10929] ? __pfx_smc_setsockopt+0x10/0x10 [ 405.292727][T10929] ? __fget_files+0x2a/0x410 [ 405.297310][T10929] ? __fget_files+0x395/0x410 [ 405.301976][T10929] ? __fget_files+0x2a/0x410 [ 405.306560][T10929] ksys_read+0x18f/0x2b0 [ 405.310796][T10929] ? __pfx_ksys_read+0x10/0x10 [ 405.315550][T10929] ? rcu_is_watching+0x15/0xb0 [ 405.320308][T10929] ? rcu_is_watching+0x15/0xb0 [ 405.325070][T10929] do_syscall_64+0xf3/0x230 [ 405.329574][T10929] ? clear_bhb_loop+0x35/0x90 [ 405.334244][T10929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.340141][T10929] RIP: 0033:0x7f2510f8473c [ 405.344573][T10929] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 405.364193][T10929] RSP: 002b:00007f2511d2d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 405.372608][T10929] RAX: ffffffffffffffda RBX: 00007f2511175fa0 RCX: 00007f2510f8473c [ 405.380661][T10929] RDX: 000000000000000f RSI: 00007f2511d2d0a0 RDI: 0000000000000004 [ 405.388629][T10929] RBP: 00007f2511d2d090 R08: 0000000000000000 R09: 0000000000000000 [ 405.396598][T10929] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 405.404570][T10929] R13: 0000000000000000 R14: 00007f2511175fa0 R15: 00007ffceda6a478 [ 405.412543][T10929] [ 405.465844][ T5870] usb 6-1: unable to get BOS descriptor or descriptor too short [ 405.519223][ T25] usb 3-1: USB disconnect, device number 39 [ 405.537076][ T5870] usb 6-1: config 3 has an invalid interface number: 102 but max is 0 [ 405.649967][ T5870] usb 6-1: config 3 has no interface number 0 [ 405.658030][ T5870] usb 6-1: config 3 interface 102 has no altsetting 0 [ 405.666600][ T5836] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 405.677972][ T5870] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 405.691660][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.701805][ T5870] usb 6-1: Product: syz [ 405.707674][T10945] sctp: [Deprecated]: syz.4.1408 (pid 10945) Use of struct sctp_assoc_value in delayed_ack socket option. [ 405.707674][T10945] Use struct sctp_sack_info instead [ 405.731627][ T5870] usb 6-1: Manufacturer: ꉹ犙˹ [ 405.737607][ T5870] usb 6-1: SerialNumber: syz [ 405.950364][ T5870] ums-usbat 6-1:3.102: USB Mass Storage device detected [ 405.968273][ T5870] ums-usbat 6-1:3.102: Quirks match for vid 0781 pid 0005: 1 [ 405.978227][ T5870] ums-usbat 6-1:3.102: This device (0781,0005,0005 S 06 P 14) has an unneeded SubClass entry in unusual_devs.h (kernel 6.13.0-rc4-syzkaller-00004-gf07044dd0df0) [ 405.978227][ T5870] Please send a copy of this message to and [ 406.058671][ T5870] usb 6-1: USB disconnect, device number 2 [ 406.377258][T10969] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1411'. [ 407.194604][ T5873] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 407.275486][ T5870] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 407.340817][ T7575] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 407.406479][ T5873] usb 1-1: config 3 has an invalid interface number: 71 but max is 0 [ 407.418798][ T5873] usb 1-1: config 3 has no interface number 0 [ 407.427198][ T5873] usb 1-1: config 3 interface 71 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 407.438248][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 407.461196][ T5870] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 407.480687][ T5873] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=a7.ac [ 407.490877][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.499173][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.507419][ T5870] usb 4-1: Product: syz [ 407.511667][ T5870] usb 4-1: Manufacturer: syz [ 407.516883][ T5870] usb 4-1: SerialNumber: syz [ 407.526372][ T5873] ati_remote 1-1:3.71: ati_remote_probe: Unexpected endpoint_in [ 407.526404][ T7575] usb 3-1: Using ep0 maxpacket: 16 [ 407.543035][ T5870] usb 4-1: config 0 descriptor?? [ 407.559958][ T7575] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 407.569414][ T7575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.579131][ T7575] usb 3-1: Product: syz [ 407.580088][ T5870] as10x_usb: device has been detected [ 407.589708][ T7575] usb 3-1: Manufacturer: syz [ 407.592785][ T5870] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 407.605531][ T7575] usb 3-1: SerialNumber: syz [ 407.612497][ T7575] usb 3-1: config 0 descriptor?? [ 407.620622][ T5870] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 407.622642][ T7575] as10x_usb: device has been detected [ 407.641988][ T5870] as10x_usb: error during firmware upload part1 [ 407.642018][ T7575] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 407.649780][ T5870] Registered device Sky IT Digital Key (green led) [ 407.686936][ T7575] usb 3-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 407.706740][ T7575] as10x_usb: error during firmware upload part1 [ 407.713544][ T7575] Registered device Sky IT Digital Key (green led) [ 408.132097][ T7575] usb 4-1: USB disconnect, device number 34 [ 408.174653][ T5873] usb 3-1: USB disconnect, device number 40 [ 408.206705][ T7575] Unregistered device Sky IT Digital Key (green led) [ 408.207187][ T7575] as10x_usb: device has been disconnected [ 408.565489][ T5873] Unregistered device Sky IT Digital Key (green led) [ 408.566152][ T5873] as10x_usb: device has been disconnected [ 408.634565][ T8] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 408.756741][ T7575] usb 1-1: USB disconnect, device number 36 [ 408.794620][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 409.082140][T11041] netlink: 'syz.0.1425': attribute type 11 has an invalid length. [ 409.189821][ T8] usb 5-1: config 0 has an invalid interface number: 42 but max is 0 [ 409.198237][ T8] usb 5-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 409.209252][ T8] usb 5-1: config 0 has no interface number 0 [ 409.215776][ T8] usb 5-1: config 0 interface 42 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 409.230916][ T8] usb 5-1: config 0 interface 42 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 409.244304][ T8] usb 5-1: config 0 interface 42 has no altsetting 0 [ 409.539264][T11042] program syz.0.1425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 409.567387][ T8] usb 5-1: New USB device found, idVendor=0846, idProduct=9043, bcdDevice=10.b0 [ 409.576557][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.584649][ T8] usb 5-1: Product: syz [ 409.588822][ T8] usb 5-1: Manufacturer: syz [ 409.593421][ T8] usb 5-1: SerialNumber: syz [ 409.605474][ T8] usb 5-1: config 0 descriptor?? [ 409.780723][ T5836] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 409.789290][ T5836] Bluetooth: hci2: Injecting HCI hardware error event [ 409.796593][ T5836] Bluetooth: hci2: hardware error 0x00 [ 409.819097][T11014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.971101][T11060] netlink: 'syz.3.1426': attribute type 29 has an invalid length. [ 409.979068][T11060] netlink: 'syz.3.1426': attribute type 3 has an invalid length. [ 409.986954][T11060] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1426'. [ 410.219335][T11014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.322025][ T8] usb 5-1: USB disconnect, device number 47 [ 410.614497][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 410.767237][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=f8.e9 [ 410.777031][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.786687][ T9] usb 3-1: Product: syz [ 410.792122][ T9] usb 3-1: Manufacturer: syz [ 410.869069][ T9] usb 3-1: SerialNumber: syz [ 410.921552][ T9] usb 3-1: config 0 descriptor?? [ 411.036727][ T9] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected [ 411.047447][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 84 [ 411.094817][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 411.102652][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82 [ 411.114472][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 411.124767][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 411.145363][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 411.155952][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 411.189890][ T9] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 411.232073][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1433'. [ 411.329795][T11082] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 411.340390][T11082] TCP: tcp_parse_options: Illegal window scaling value 249 > 14 received [ 411.857037][ T5836] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 411.931598][T11087] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1436'. [ 411.993924][T11088] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 412.779988][T11100] FAULT_INJECTION: forcing a failure. [ 412.779988][T11100] name failslab, interval 1, probability 0, space 0, times 0 [ 412.792740][T11100] CPU: 1 UID: 0 PID: 11100 Comm: syz.4.1438 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 412.803522][T11100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 412.813598][T11100] Call Trace: [ 412.816897][T11100] [ 412.819841][T11100] dump_stack_lvl+0x241/0x360 [ 412.824545][T11100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.829756][T11100] ? __pfx__printk+0x10/0x10 [ 412.834354][T11100] ? __pfx___might_resched+0x10/0x10 [ 412.839661][T11100] should_fail_ex+0x3b0/0x4e0 [ 412.844353][T11100] should_failslab+0xac/0x100 [ 412.849041][T11100] ? ep_insert+0x4d7/0x1ab0 [ 412.853552][T11100] kmem_cache_alloc_noprof+0x70/0x380 [ 412.858943][T11100] ep_insert+0x4d7/0x1ab0 [ 412.863287][T11100] ? __pfx_ep_insert+0x10/0x10 [ 412.868064][T11100] ? __pfx___mutex_lock+0x10/0x10 [ 412.873113][T11100] do_epoll_ctl+0x8bc/0xf80 [ 412.877628][T11100] __x64_sys_epoll_ctl+0x161/0x1a0 [ 412.882747][T11100] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 412.888391][T11100] ? trace_irq_enable+0x2c/0x120 [ 412.893347][T11100] do_syscall_64+0xf3/0x230 [ 412.897865][T11100] ? clear_bhb_loop+0x35/0x90 [ 412.902548][T11100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.908461][T11100] RIP: 0033:0x7f2510f85d29 [ 412.912891][T11100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.932513][T11100] RSP: 002b:00007f2511ceb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 412.940919][T11100] RAX: ffffffffffffffda RBX: 00007f2511176160 RCX: 00007f2510f85d29 [ 412.948880][T11100] RDX: 0000000000000008 RSI: 0000000000000001 RDI: 0000000000000007 [ 412.956839][T11100] RBP: 00007f2511ceb090 R08: 0000000000000000 R09: 0000000000000000 [ 412.964834][T11100] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 412.972794][T11100] R13: 0000000000000000 R14: 00007f2511176160 R15: 00007ffceda6a478 [ 412.980775][T11100] [ 413.011953][T11102] program syz.0.1439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 413.069990][T11104] netlink: 'syz.0.1440': attribute type 11 has an invalid length. [ 413.267268][T11106] program syz.0.1440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 413.450137][ T46] usb 3-1: USB disconnect, device number 41 [ 413.498576][ T46] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 413.556230][ T46] keyspan 3-1:0.0: device disconnected [ 413.967089][ T5836] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 414.019559][T11115] netlink: 'syz.4.1442': attribute type 11 has an invalid length. [ 414.194486][T11117] program syz.4.1442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.319266][T11122] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1443'. [ 414.762408][T11131] input: syz0 as /devices/virtual/input/input20 [ 415.413120][T11141] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1446'. [ 415.854180][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 416.010118][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.036602][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 416.076443][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 416.091195][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 416.103109][ T9] usb 4-1: SerialNumber: syz [ 416.167931][T11161] openvswitch: netlink: IP tunnel dst address not specified [ 416.260876][T11164] [U] +P]TEH+;ےE=O_K؇ [ 416.317693][ T9] usb 4-1: 0:2 : does not exist [ 416.329908][ T9] usb 4-1: unit 255 not found! [ 416.342418][ T9] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 416.416183][T11171] dlm: plock device version mismatch: kernel (1.2.0), user (32769.0.0) [ 416.795810][ T9] usb 4-1: USB disconnect, device number 35 [ 417.064802][ T46] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 417.169114][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 417.623973][ T46] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 417.632286][ T46] usb 5-1: config 0 has no interface number 0 [ 417.638579][ T46] usb 5-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.650952][ T46] usb 5-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.723785][ T46] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 418.077243][ T5870] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 418.116715][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.142373][ T46] usb 5-1: config 0 descriptor?? [ 418.161814][T11192] netlink: 'syz.3.1461': attribute type 11 has an invalid length. [ 418.264978][ T5870] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 418.274146][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 418.282431][ T5870] usb 6-1: Product: syz [ 418.286681][ T5870] usb 6-1: Manufacturer: syz [ 418.291591][ T5870] usb 6-1: SerialNumber: syz [ 418.319783][ T5870] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 418.344701][T11196] program syz.3.1461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 418.456081][T11197] FAULT_INJECTION: forcing a failure. [ 418.456081][T11197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.481933][T11197] CPU: 1 UID: 0 PID: 11197 Comm: syz.2.1462 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 418.492745][T11197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 418.502985][T11197] Call Trace: [ 418.506275][T11197] [ 418.509214][T11197] dump_stack_lvl+0x241/0x360 [ 418.513908][T11197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.519116][T11197] ? __pfx__printk+0x10/0x10 [ 418.523741][T11197] should_fail_ex+0x3b0/0x4e0 [ 418.528450][T11197] _copy_from_user+0x2f/0xc0 [ 418.533063][T11197] sctp_setsockopt+0xcc/0x11c0 [ 418.537843][T11197] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 418.543770][T11197] do_sock_setsockopt+0x3af/0x720 [ 418.548817][T11197] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 418.554378][T11197] ? __fget_files+0x395/0x410 [ 418.559058][T11197] ? __fget_files+0x2a/0x410 [ 418.563655][T11197] __x64_sys_setsockopt+0x1ee/0x280 [ 418.568871][T11197] do_syscall_64+0xf3/0x230 [ 418.573486][T11197] ? clear_bhb_loop+0x35/0x90 [ 418.578175][T11197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.584089][T11197] RIP: 0033:0x7f0eb1585d29 [ 418.588707][T11197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.608342][T11197] RSP: 002b:00007f0eb241a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 418.616808][T11197] RAX: ffffffffffffffda RBX: 00007f0eb1775fa0 RCX: 00007f0eb1585d29 [ 418.624812][T11197] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003 [ 418.632808][T11197] RBP: 00007f0eb241a090 R08: 000000000000001c R09: 0000000000000000 [ 418.640808][T11197] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 418.648796][T11197] R13: 0000000000000000 R14: 00007f0eb1775fa0 R15: 00007ffda4d4baa8 [ 418.653898][ T29] audit: type=1400 audit(1735025539.986:80): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11181 comm="syz.0.1458" daddr=::ffff:172.20.20.0 [ 418.656804][T11197] [ 418.981318][T11203] gfs2: not a GFS2 filesystem [ 419.182836][ T46] usbhid 5-1:0.128: can't add hid device: -71 [ 419.189586][ T46] usbhid 5-1:0.128: probe with driver usbhid failed with error -71 [ 419.217917][ T46] usb 5-1: USB disconnect, device number 48 [ 419.615892][T11224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1470'. [ 419.734524][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 419.934939][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 419.948681][ T9] usb 3-1: config index 0 descriptor too short (expected 1121, got 110) [ 420.031888][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.343243][ T9] usb 3-1: config 0 has no interfaces? [ 420.389902][ T5870] vp7045: USB control message 'out' went wrong. [ 420.397312][ T5870] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 420.412353][ T5870] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 420.433551][ T5870] usb 6-1: USB disconnect, device number 3 [ 420.436716][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 420.498191][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.537263][ T9] usb 3-1: Product: я [ 420.563629][ T9] usb 3-1: config 0 descriptor?? [ 420.587539][T11248] netlink: 'syz.5.1475': attribute type 11 has an invalid length. [ 420.763945][T11252] program syz.5.1475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.523464][ T9] usb 3-1: USB disconnect, device number 42 [ 422.625610][T11293] netlink: 'syz.5.1486': attribute type 11 has an invalid length. [ 422.831077][T11298] program syz.5.1486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.160297][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 423.314725][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 423.323185][ T9] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 423.351469][ T9] usb 1-1: config 0 has no interface number 0 [ 423.382745][ T9] usb 1-1: config 0 interface 12 has no altsetting 0 [ 423.562542][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 423.578759][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.614553][ T9] usb 1-1: Product: syz [ 423.628946][ T9] usb 1-1: Manufacturer: syz [ 423.633547][ T9] usb 1-1: SerialNumber: syz [ 423.690025][ T9] usb 1-1: config 0 descriptor?? [ 424.119506][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'. [ 424.129243][T11326] openvswitch: netlink: Flow actions attr not present in new flow. [ 424.694553][ T8] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 424.846978][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 424.866303][ T8] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 424.881313][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.905189][ T8] usb 3-1: Product: syz [ 424.909386][ T8] usb 3-1: Manufacturer: syz [ 424.925858][ T8] usb 3-1: SerialNumber: syz [ 424.946867][ T8] usb 3-1: config 0 descriptor?? [ 424.961085][ T8] as10x_usb: device has been detected [ 424.976957][ T8] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 425.006785][ T8] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 425.031876][ T8] as10x_usb: error during firmware upload part1 [ 425.049144][ T8] Registered device Sky IT Digital Key (green led) [ 425.176089][ T8] usb 3-1: USB disconnect, device number 43 [ 425.202272][ T8] Unregistered device Sky IT Digital Key (green led) [ 425.203757][ T8] as10x_usb: device has been disconnected [ 425.549831][ T9] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 425.558539][ T9] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 425.569265][ T9] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 425.578583][ T9] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 425.599170][ T9] usb 1-1: USB disconnect, device number 37 [ 425.694469][ T5870] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 425.834556][ T5870] usb 6-1: device descriptor read/64, error -71 [ 426.094711][ T5870] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 426.244642][ T5870] usb 6-1: device descriptor read/64, error -71 [ 426.327527][T11403] netlink: 'syz.4.1501': attribute type 11 has an invalid length. [ 426.407495][ T5870] usb usb6-port1: attempt power cycle [ 426.518644][T11407] program syz.4.1501 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 427.346361][T11408] input: syz0 as /devices/virtual/input/input21 [ 427.677665][ T5870] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 427.726486][ T5870] usb 6-1: device descriptor read/8, error -71 [ 427.916142][T11425] netlink: 'syz.2.1506': attribute type 1 has an invalid length. [ 427.924006][T11425] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1506'. [ 427.974608][ T5870] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 428.038701][ T5870] usb 6-1: device descriptor read/8, error -71 [ 428.193691][ T5870] usb usb6-port1: unable to enumerate USB device [ 428.514609][ T5870] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 428.604511][ T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 428.673598][T11452] netlink: 'syz.0.1513': attribute type 11 has an invalid length. [ 428.746946][ T5870] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 428.762718][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.773006][ T5870] usb 3-1: config 0 descriptor?? [ 428.780893][ T5870] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 428.850772][T11454] program syz.0.1513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 429.222748][ T5870] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 429.615069][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 429.681201][ T5870] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 429.685451][T11459] input: syz0 as /devices/virtual/input/input22 [ 429.731547][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 429.955969][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 429.979841][T11437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.988520][T11437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.989038][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 430.013970][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.028469][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 430.041646][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.058061][ T5870] usb 3-1: USB disconnect, device number 44 [ 430.134689][ T29] audit: type=1800 audit(1735025551.466:81): pid=11469 uid=3327 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1518" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 430.262015][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 430.268501][ T9] usbtmc 5-1:16.0: can't read capabilities [ 430.468167][T11441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.478330][T11441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.533314][T11482] netlink: 'syz.0.1522': attribute type 8 has an invalid length. [ 430.829303][T11484] usb 5-1: usbtmc_ioctl_clear_out_halt returned -32 [ 430.890649][T11491] netlink: 'syz.2.1526': attribute type 11 has an invalid length. [ 431.079248][T11495] program syz.2.1526 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.044593][ T46] usb 5-1: USB disconnect, device number 49 [ 432.354732][ T5829] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 432.510988][T11505] netlink: 'syz.4.1530': attribute type 1 has an invalid length. [ 432.519659][T11505] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1530'. [ 432.532697][ T5829] usb 1-1: unable to get BOS descriptor or descriptor too short [ 432.549620][ T5829] usb 1-1: config 3 has an invalid interface number: 102 but max is 0 [ 432.560749][ T5829] usb 1-1: config 3 has no interface number 0 [ 432.567503][ T5829] usb 1-1: config 3 interface 102 has no altsetting 0 [ 432.574890][T11505] gfs2: not a GFS2 filesystem [ 432.586525][ T5829] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 432.595966][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.603983][ T5829] usb 1-1: Product: syz [ 432.635783][ T5829] usb 1-1: Manufacturer: ꉹ犙˹ [ 432.640895][ T5829] usb 1-1: SerialNumber: syz [ 432.648152][ T46] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 432.816192][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 432.824437][ T46] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 432.833536][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.841797][ T46] usb 3-1: Product: syz [ 432.846041][ T46] usb 3-1: Manufacturer: syz [ 432.850683][ T46] usb 3-1: SerialNumber: syz [ 432.861376][ T46] usb 3-1: config 0 descriptor?? [ 432.904987][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 432.927939][T11522] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1536'. [ 432.955365][ T5873] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 433.134900][ T5873] usb 6-1: Using ep0 maxpacket: 8 [ 433.159910][ T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=f8.e9 [ 433.160207][ T5873] usb 6-1: config index 0 descriptor too short (expected 1121, got 110) [ 433.197087][ T46] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 433.210812][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.214346][ T5873] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.242753][ T5873] usb 6-1: config 0 has no interfaces? [ 433.257411][ T9] usb 5-1: Product: syz [ 433.260985][ T5873] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 433.277452][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.294699][ T5873] usb 6-1: Product: я [ 433.437725][ T5873] usb 6-1: config 0 descriptor?? [ 433.438362][ T9] usb 5-1: Manufacturer: syz [ 433.453232][ T9] usb 5-1: SerialNumber: syz [ 433.460856][ T9] usb 5-1: config 0 descriptor?? [ 433.482847][ T9] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 433.495381][ T9] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 433.509725][ T9] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 433.521568][ T9] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 82 [ 433.530967][ T9] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 433.539677][ T9] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 433.550025][ T9] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 433.558816][ T9] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 433.569189][ T9] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 433.679382][ T5873] usb 6-1: USB disconnect, device number 9 [ 433.791963][T11528] netlink: 'syz.3.1537': attribute type 9 has an invalid length. [ 433.851250][ T29] audit: type=1400 audit(1735025555.186:82): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11507 comm="syz.2.1531" dest=20000 [ 434.673142][ T46] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 434.693552][ T46] usb 3-1: USB disconnect, device number 45 [ 434.823647][ T5829] ums-usbat 1-1:3.102: USB Mass Storage device detected [ 434.880187][ T5829] ums-usbat 1-1:3.102: Quirks match for vid 0781 pid 0005: 1 [ 434.897070][ T5829] ums-usbat 1-1:3.102: This device (0781,0005,0005 S 06 P 14) has an unneeded SubClass entry in unusual_devs.h (kernel 6.13.0-rc4-syzkaller-00004-gf07044dd0df0) [ 434.897070][ T5829] Please send a copy of this message to and [ 434.948127][ T5829] usb 1-1: USB disconnect, device number 38 [ 435.159699][T11544] netlink: 'syz.3.1540': attribute type 8 has an invalid length. [ 435.624578][ T5829] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 435.704943][ T46] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 435.729211][ T6494] usb 5-1: USB disconnect, device number 50 [ 435.742205][ T6494] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 435.753954][ T6494] keyspan 5-1:0.0: device disconnected [ 435.784701][ T5829] usb 1-1: Using ep0 maxpacket: 8 [ 435.856611][ T5829] usb 1-1: unable to get BOS descriptor or descriptor too short [ 435.864940][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1544'. [ 435.897216][ T5829] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 435.905061][ T5829] usb 1-1: can't read configurations, error -71 [ 435.906651][ T46] usb 6-1: Using ep0 maxpacket: 16 [ 435.939294][ T46] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 435.955159][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.969460][ T46] usb 6-1: Product: syz [ 435.973744][ T46] usb 6-1: Manufacturer: syz [ 435.979676][ T46] usb 6-1: SerialNumber: syz [ 435.994484][ T46] usb 6-1: config 0 descriptor?? [ 436.016205][ T46] as10x_usb: device has been detected [ 436.023981][ T46] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 436.093996][ T46] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 436.122451][ T46] as10x_usb: error during firmware upload part1 [ 436.132919][ T46] Registered device Sky IT Digital Key (green led) [ 436.253156][ T8] usb 6-1: USB disconnect, device number 10 [ 436.392090][T11560] input: syz0 as /devices/virtual/input/input23 [ 436.404613][T11561] FAULT_INJECTION: forcing a failure. [ 436.404613][T11561] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 436.443240][ T8] Unregistered device Sky IT Digital Key (green led) [ 436.444658][ T8] as10x_usb: device has been disconnected [ 436.585583][T11561] CPU: 1 UID: 0 PID: 11561 Comm: syz.4.1547 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 436.596390][T11561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 436.606461][T11561] Call Trace: [ 436.609731][T11561] [ 436.612643][T11561] dump_stack_lvl+0x241/0x360 [ 436.617311][T11561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.622497][T11561] ? __wake_up_klogd+0xcc/0x110 [ 436.627337][T11561] should_fail_ex+0x3b0/0x4e0 [ 436.632021][T11561] prepare_alloc_pages+0x1da/0x5b0 [ 436.637136][T11561] __alloc_pages_noprof+0x16f/0x710 [ 436.642350][T11561] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 436.648074][T11561] ? rcu_is_watching+0x15/0xb0 [ 436.652856][T11561] alloc_pages_mpol_noprof+0x3e8/0x680 [ 436.658317][T11561] ? rcu_is_watching+0x15/0xb0 [ 436.663081][T11561] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 436.669057][T11561] ? rcu_is_watching+0x15/0xb0 [ 436.673849][T11561] vma_alloc_folio_noprof+0x12e/0x230 [ 436.679222][T11561] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 436.685122][T11561] folio_prealloc+0x2e/0x170 [ 436.689707][T11561] handle_pte_fault+0x2c98/0x5ed0 [ 436.694739][T11561] ? __pfx_handle_pte_fault+0x10/0x10 [ 436.700108][T11561] ? rcu_is_watching+0x15/0xb0 [ 436.704898][T11561] ? trace_irq_disable+0x3b/0x120 [ 436.709912][T11561] ? preempt_schedule_irq+0x144/0x1c0 [ 436.715307][T11561] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 436.721019][T11561] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 436.727339][T11561] ? rcu_is_watching+0x15/0xb0 [ 436.732116][T11561] handle_mm_fault+0x1053/0x1ad0 [ 436.737056][T11561] ? __pfx_handle_mm_fault+0x10/0x10 [ 436.742334][T11561] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 436.747604][T11561] exc_page_fault+0x2b9/0x8b0 [ 436.752273][T11561] asm_exc_page_fault+0x26/0x30 [ 436.757122][T11561] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 436.762941][T11561] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 436.782547][T11561] RSP: 0018:ffffc9000b79f898 EFLAGS: 00050202 [ 436.788611][T11561] RAX: ffff888022f2a001 RBX: 0000000000000241 RCX: 0000000000000241 [ 436.796612][T11561] RDX: 0000000000000000 RSI: ffff888022f2a000 RDI: 0000000020000040 [ 436.804573][T11561] RBP: ffffc9000b79fa08 R08: ffff888022f2a240 R09: 1ffff110045e5448 [ 436.812561][T11561] R10: dffffc0000000000 R11: ffffed10045e5449 R12: 0000000000000000 [ 436.820528][T11561] R13: 1ffff920016f3f28 R14: ffff888022f2a000 R15: 0000000020000281 [ 436.828598][T11561] _copy_to_iter+0x4d5/0x1c50 [ 436.833274][T11561] ? __pfx__copy_to_iter+0x10/0x10 [ 436.838375][T11561] ? __virt_addr_valid+0x183/0x530 [ 436.843488][T11561] ? __virt_addr_valid+0x183/0x530 [ 436.848602][T11561] ? __virt_addr_valid+0x45f/0x530 [ 436.853708][T11561] ? __phys_addr_symbol+0x2f/0x70 [ 436.858719][T11561] ? __rcu_read_unlock+0xa1/0x110 [ 436.863749][T11561] seq_read_iter+0xb80/0xd70 [ 436.868333][T11561] seq_read+0x3a9/0x4f0 [ 436.872483][T11561] ? __pfx_seq_read+0x10/0x10 [ 436.877155][T11561] ? rcu_is_watching+0x15/0xb0 [ 436.881910][T11561] ? __pfx_proc_reg_read+0x10/0x10 [ 436.887010][T11561] ? proc_reg_read+0x96/0x2f0 [ 436.891696][T11561] ? __pfx_seq_read+0x10/0x10 [ 436.896360][T11561] proc_reg_read+0x201/0x2f0 [ 436.900958][T11561] ? __pfx_proc_reg_read+0x10/0x10 [ 436.906077][T11561] vfs_read+0x1fc/0xb70 [ 436.910229][T11561] ? __pfx___mutex_lock+0x10/0x10 [ 436.915247][T11561] ? __pfx_vfs_read+0x10/0x10 [ 436.919913][T11561] ? __fget_files+0x2a/0x410 [ 436.924489][T11561] ? __fget_files+0x395/0x410 [ 436.929151][T11561] ? __fget_files+0x2a/0x410 [ 436.933756][T11561] ksys_read+0x18f/0x2b0 [ 436.938017][T11561] ? __pfx_ksys_read+0x10/0x10 [ 436.942789][T11561] ? trace_irq_enable+0x2c/0x120 [ 436.947833][T11561] do_syscall_64+0xf3/0x230 [ 436.952336][T11561] ? clear_bhb_loop+0x35/0x90 [ 436.957020][T11561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.962913][T11561] RIP: 0033:0x7f2510f85d29 [ 436.967323][T11561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.986930][T11561] RSP: 002b:00007f2511d2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 436.995336][T11561] RAX: ffffffffffffffda RBX: 00007f2511175fa0 RCX: 00007f2510f85d29 [ 437.003301][T11561] RDX: 0000000000000ffa RSI: 0000000020000040 RDI: 0000000000000004 [ 437.011263][T11561] RBP: 00007f2511d2d090 R08: 0000000000000000 R09: 0000000000000000 [ 437.019225][T11561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.027188][T11561] R13: 0000000000000000 R14: 00007f2511175fa0 R15: 00007ffceda6a478 [ 437.035161][T11561] [ 437.366239][T11572] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1548'. [ 437.425108][ T29] audit: type=1400 audit(1735025558.766:83): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11565 comm="syz.0.1548" [ 438.004512][ T5829] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 438.242855][T11587] fuse: Unknown parameter 'L-lνg]T+W Dr{j#F/؄#c' [ 438.308190][ T5829] usb 5-1: unable to get BOS descriptor or descriptor too short [ 438.485353][ T5829] usb 5-1: config 3 has an invalid interface number: 102 but max is 0 [ 438.493657][ T5829] usb 5-1: config 3 has no interface number 0 [ 438.500035][ T5829] usb 5-1: config 3 interface 102 has no altsetting 0 [ 438.574436][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 438.641333][ T5829] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 438.653286][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.673178][ T5829] usb 5-1: Product: syz [ 438.678465][ T5829] usb 5-1: Manufacturer: ꉹ犙˹ [ 438.686427][ T5829] usb 5-1: SerialNumber: syz [ 438.774628][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 438.781222][ T9] usb 6-1: config index 0 descriptor too short (expected 1121, got 110) [ 438.791112][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.801599][ T9] usb 6-1: config 0 has no interfaces? [ 438.918185][T11594] mkiss: ax0: crc mode is auto. [ 439.079589][ T46] IPVS: starting estimator thread 0... [ 439.246547][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 439.256109][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.264184][ T9] usb 6-1: Product: я [ 439.270237][ T9] usb 6-1: config 0 descriptor?? [ 439.304520][T11596] IPVS: using max 46 ests per chain, 110400 per kthread [ 439.480476][ T9] usb 6-1: USB disconnect, device number 11 [ 439.494573][ T5873] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 439.663792][ T5873] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=35.36 [ 439.673347][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.682630][ T5873] usb 4-1: Product: syz [ 439.688033][ T5873] usb 4-1: Manufacturer: syz [ 439.693025][ T5873] usb 4-1: SerialNumber: syz [ 439.703262][ T5873] usb 4-1: config 0 descriptor?? [ 439.713888][ T5873] gspca_main: spca501-2.14.0 probing 0000:0000 [ 439.910648][ T5836] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 439.920053][T11598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.928743][T11598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.281707][ T5829] ums-usbat 5-1:3.102: USB Mass Storage device detected [ 440.290708][T11524] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 440.301158][ T5829] ums-usbat 5-1:3.102: Quirks match for vid 0781 pid 0005: 1 [ 440.312961][ T5829] ums-usbat 5-1:3.102: This device (0781,0005,0005 S 06 P 14) has an unneeded SubClass entry in unusual_devs.h (kernel 6.13.0-rc4-syzkaller-00004-gf07044dd0df0) [ 440.312961][ T5829] Please send a copy of this message to and [ 440.341829][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.348538][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.387720][T11598] tipc: Started in network mode [ 440.392720][T11598] tipc: Node identity ffff, cluster identity 4711 [ 440.401956][T11598] tipc: Node number set to 65535 [ 440.468151][ T5829] usb 5-1: USB disconnect, device number 51 [ 440.474584][T11524] usb 6-1: Using ep0 maxpacket: 32 [ 440.482081][T11524] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.497682][T11524] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 440.989826][T11524] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.997988][T11524] usb 6-1: Product: syz [ 441.002211][T11524] usb 6-1: Manufacturer: syz [ 441.006889][T11524] usb 6-1: SerialNumber: syz [ 441.013414][T11524] usb 6-1: config 0 descriptor?? [ 441.017940][T11618] FAULT_INJECTION: forcing a failure. [ 441.017940][T11618] name failslab, interval 1, probability 0, space 0, times 0 [ 441.021263][T11524] pvrusb2: Hardware description: Terratec Grabster AV400 [ 441.031526][T11618] CPU: 0 UID: 0 PID: 11618 Comm: syz.2.1563 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 441.040588][T11524] pvrusb2: ********** [ 441.048872][T11618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 441.048892][T11618] Call Trace: [ 441.048900][T11618] [ 441.048908][T11618] dump_stack_lvl+0x241/0x360 [ 441.048938][T11618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.048958][T11618] ? __pfx__printk+0x10/0x10 [ 441.054007][T11524] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 441.062986][T11618] ? af_alg_sendmsg+0x539/0x2650 [ 441.063023][T11618] ? __pfx___might_resched+0x10/0x10 [ 441.063046][T11618] ? lock_release+0xbf/0xa30 [ 441.063063][T11618] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 441.067114][T11524] pvrusb2: Important functionality might not be entirely working. [ 441.069247][T11618] should_fail_ex+0x3b0/0x4e0 [ 441.069280][T11618] should_failslab+0xac/0x100 [ 441.069305][T11618] __kmalloc_noprof+0xdd/0x4c0 [ 441.069321][T11618] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 441.069345][T11618] ? sock_kmalloc+0xd7/0x160 [ 441.069366][T11618] sock_kmalloc+0xd7/0x160 [ 441.069387][T11618] af_alg_sendmsg+0x1140/0x2650 [ 441.069421][T11618] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 441.069444][T11618] ? count_memcg_event_mm+0x94/0x420 [ 441.069465][T11618] ? count_memcg_event_mm+0x94/0x420 [ 441.069484][T11618] ? __fget_files+0x2a/0x410 [ 441.069502][T11618] ? __might_fault+0xaa/0x120 [ 441.069522][T11618] ? skcipher_sendmsg+0x28/0xf0 [ 441.069542][T11618] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 441.069559][T11618] __sock_sendmsg+0x221/0x270 [ 441.069584][T11618] __sys_sendto+0x363/0x4c0 [ 441.069605][T11618] ? __pfx___sys_sendto+0x10/0x10 [ 441.069639][T11618] ? __pfx_lock_acquire+0x10/0x10 [ 441.069665][T11618] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 441.079157][T11524] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 441.079482][T11618] ? __pfx___up_read+0x10/0x10 [ 441.084115][T11524] pvrusb2: ********** [ 441.094101][T11618] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 441.094124][T11618] ? rcu_is_watching+0x15/0xb0 [ 441.094146][T11618] __x64_sys_sendto+0xde/0x100 [ 441.094168][T11618] do_syscall_64+0xf3/0x230 [ 441.094199][T11618] ? clear_bhb_loop+0x35/0x90 [ 441.242676][ T2339] pvrusb2: Invalid write control endpoint [ 441.243842][T11618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.274497][T11618] RIP: 0033:0x7f0eb1587bbc [ 441.278937][T11618] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 441.298569][T11618] RSP: 002b:00007f0eb2418ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 441.307033][T11618] RAX: ffffffffffffffda RBX: 00007f0eb2418fc0 RCX: 00007f0eb1587bbc [ 441.307225][ T2339] pvrusb2: Invalid write control endpoint [ 441.315090][T11618] RDX: 0000000000000020 RSI: 00007f0eb2419010 RDI: 0000000000000004 [ 441.315106][T11618] RBP: 0000000000000000 R08: 00007f0eb2418f14 R09: 000000000000000c [ 441.315118][T11618] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 441.315129][T11618] R13: 00007f0eb2418f68 R14: 00007f0eb2419010 R15: 0000000000000000 [ 441.315150][T11618] [ 441.341082][T11598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.346472][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 441.378373][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 441.391304][T11598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.401721][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 441.414632][ T2339] pvrusb2: Device being rendered inoperable [ 441.420757][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 441.421830][T11618] trusted_key: syz.2.1563 sent an empty control message without MSG_MORE. [ 441.435928][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 441.449046][T11598] bridge3: entered allmulticast mode [ 441.459394][ T2339] pvrusb2: Attached sub-driver cx25840 [ 441.470260][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 441.480850][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 441.531530][ T5873] gspca_spca501: reg write: error -71 [ 441.538325][ T5873] spca501 4-1:0.0: Reg write failed for 0x01,0x00,0x12 [ 441.545340][ T5873] spca501 4-1:0.0: probe with driver spca501 failed with error -22 [ 441.566182][ T5873] usb 4-1: USB disconnect, device number 37 [ 442.103218][T11633] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1566'. [ 442.144529][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 442.446910][ T9] usb 5-1: config 0 has an invalid interface number: 154 but max is 0 [ 442.474175][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.498155][ T9] usb 5-1: config 0 has no interface number 0 [ 442.514197][ T9] usb 5-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 442.533987][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.611176][ T9] usb 5-1: config 0 descriptor?? [ 442.623475][ T9] qmi_wwan 5-1:0.154: bogus CDC Union: master=0, slave=0 [ 442.633256][T11638] fuse: Unknown parameter 'L-lνg]T+W Dr{j#F/؄#c' [ 442.634142][ T9] qmi_wwan 5-1:0.154: probe with driver qmi_wwan failed with error -22 [ 443.290201][T11640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1568'. [ 443.378771][ T5873] usb 6-1: USB disconnect, device number 12 [ 443.393289][T11623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.402181][T11623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.576952][ T9] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 443.627353][T11651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.638427][T11651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.736894][ T9] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 443.750058][ T9] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.795951][ T5829] usb 5-1: USB disconnect, device number 52 [ 443.798746][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 443.824987][ T7575] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 443.842462][ T9] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 443.853649][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.877640][ T9] usb 3-1: config 0 descriptor?? [ 443.924633][ T5836] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 443.932996][ T5836] Bluetooth: hci1: Injecting HCI hardware error event [ 443.940748][ T5836] Bluetooth: hci1: hardware error 0x00 [ 443.984478][ T7575] usb 4-1: Using ep0 maxpacket: 8 [ 443.994465][ T5873] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 443.996036][ T7575] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 444.014214][ T7575] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.024619][ T7575] usb 4-1: Product: syz [ 444.029079][ T7575] usb 4-1: Manufacturer: syz [ 444.037304][ T7575] usb 4-1: SerialNumber: syz [ 444.105459][ T7575] usb 4-1: config 0 descriptor?? [ 444.146400][ T5873] usb 6-1: unable to get BOS descriptor or descriptor too short [ 444.155219][ T5873] usb 6-1: config 3 has an invalid interface number: 102 but max is 0 [ 444.163435][ T5873] usb 6-1: config 3 has no interface number 0 [ 444.170223][ T5873] usb 6-1: config 3 interface 102 has no altsetting 0 [ 444.179029][ T5873] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 444.188183][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.196295][ T5873] usb 6-1: Product: syz [ 444.200477][ T5873] usb 6-1: Manufacturer: ꉹ犙˹ [ 444.205671][ T5873] usb 6-1: SerialNumber: syz [ 444.300365][ T9] saitek 0003:06A3:0621.000B: unknown main item tag 0x0 [ 444.307494][ T9] saitek 0003:06A3:0621.000B: unbalanced delimiter at end of report description [ 444.383023][ T9] saitek 0003:06A3:0621.000B: parse failed [ 444.389034][ T9] saitek 0003:06A3:0621.000B: probe with driver saitek failed with error -22 [ 444.399669][ T7575] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 444.506755][T11524] usb 3-1: USB disconnect, device number 47 [ 446.015367][ T5836] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 446.474248][T11689] netlink: 'syz.2.1579': attribute type 2 has an invalid length. [ 446.665527][ T5873] ums-usbat 6-1:3.102: USB Mass Storage device detected [ 446.714125][ T7575] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 446.726947][ T7575] usb 4-1: USB disconnect, device number 38 [ 446.742812][ T5873] ums-usbat 6-1:3.102: Quirks match for vid 0781 pid 0005: 1 [ 446.778360][ T5873] ums-usbat 6-1:3.102: This device (0781,0005,0005 S 06 P 14) has an unneeded SubClass entry in unusual_devs.h (kernel 6.13.0-rc4-syzkaller-00004-gf07044dd0df0) [ 446.778360][ T5873] Please send a copy of this message to and [ 446.846192][T11698] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.934750][ T5873] usb 6-1: USB disconnect, device number 13 [ 446.961504][T11699] fuse: Unknown parameter 'L-lνg]T+W Dr{j#F/؄#c' [ 447.389671][T11701] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1582'. [ 447.490053][T11706] netlink: 'syz.0.1584': attribute type 12 has an invalid length. [ 447.869510][T11718] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1587'. [ 448.044936][ T5873] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 448.056779][ T1206] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 448.088636][T11721] FAULT_INJECTION: forcing a failure. [ 448.088636][T11721] name failslab, interval 1, probability 0, space 0, times 0 [ 448.103429][T11721] CPU: 1 UID: 0 PID: 11721 Comm: syz.2.1588 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 448.114226][T11721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 448.124300][T11721] Call Trace: [ 448.127599][T11721] [ 448.130544][T11721] dump_stack_lvl+0x241/0x360 [ 448.135251][T11721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.140473][T11721] ? __pfx__printk+0x10/0x10 [ 448.145084][T11721] ? __pfx___might_resched+0x10/0x10 [ 448.150404][T11721] should_fail_ex+0x3b0/0x4e0 [ 448.155115][T11721] should_failslab+0xac/0x100 [ 448.159814][T11721] __kmalloc_noprof+0xdd/0x4c0 [ 448.164591][T11721] ? iter_file_splice_write+0x303/0x1510 [ 448.170238][T11721] ? __pfx_iter_file_splice_write+0x10/0x10 [ 448.176154][T11721] iter_file_splice_write+0x303/0x1510 [ 448.181629][T11721] ? shmem_get_folio_gfp+0xc63/0x1840 [ 448.187028][T11721] ? rcu_is_watching+0x15/0xb0 [ 448.191813][T11721] ? __pfx_iter_file_splice_write+0x10/0x10 [ 448.197725][T11721] ? __pfx___might_resched+0x10/0x10 [ 448.203037][T11721] ? preempt_count_add+0x93/0x190 [ 448.208092][T11721] ? __pfx_iter_file_splice_write+0x10/0x10 [ 448.214015][T11721] direct_splice_actor+0x11b/0x220 [ 448.219183][T11721] splice_direct_to_actor+0x586/0xc80 [ 448.224594][T11721] ? __pfx_direct_splice_actor+0x10/0x10 [ 448.230378][T11721] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 448.236293][T11721] ? __pfx_lock_release+0x10/0x10 [ 448.241330][T11721] ? rcu_is_watching+0x15/0xb0 [ 448.246114][T11721] do_splice_direct+0x289/0x3e0 [ 448.250989][T11721] ? __pfx_do_splice_direct+0x10/0x10 [ 448.256384][T11721] ? __fget_files+0x2a/0x410 [ 448.261000][T11721] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 448.266919][T11721] ? bpf_lsm_file_permission+0x9/0x10 [ 448.272309][T11721] ? security_file_permission+0x74/0x280 [ 448.277962][T11721] ? rw_verify_area+0x1c3/0x6f0 [ 448.282826][T11721] do_sendfile+0x564/0x8a0 [ 448.287261][T11721] ? __pfx_do_sendfile+0x10/0x10 [ 448.292211][T11721] ? __fget_files+0x2a/0x410 [ 448.296852][T11721] ? fput+0x21b/0x290 [ 448.301022][T11721] __se_sys_sendfile64+0x17c/0x1e0 [ 448.306157][T11721] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 448.311811][T11721] ? rcu_is_watching+0x15/0xb0 [ 448.316593][T11721] ? rcu_is_watching+0x15/0xb0 [ 448.321376][T11721] do_syscall_64+0xf3/0x230 [ 448.325902][T11721] ? clear_bhb_loop+0x35/0x90 [ 448.330597][T11721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.336510][T11721] RIP: 0033:0x7f0eb1585d29 [ 448.340940][T11721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.360568][T11721] RSP: 002b:00007f0eb241a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 448.369016][T11721] RAX: ffffffffffffffda RBX: 00007f0eb1775fa0 RCX: 00007f0eb1585d29 [ 448.377020][T11721] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 448.385009][T11721] RBP: 00007f0eb241a090 R08: 0000000000000000 R09: 0000000000000000 [ 448.393170][T11721] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000001 [ 448.401162][T11721] R13: 0000000000000000 R14: 00007f0eb1775fa0 R15: 00007ffda4d4baa8 [ 448.409160][T11721] [ 448.502432][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.502573][T11725] FAULT_INJECTION: forcing a failure. [ 448.502573][T11725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.513836][ T1206] usb 5-1: Using ep0 maxpacket: 16 [ 448.531757][T11725] CPU: 0 UID: 0 PID: 11725 Comm: syz.0.1589 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 448.534638][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.542561][T11725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 448.542582][T11725] Call Trace: [ 448.542591][T11725] [ 448.542600][T11725] dump_stack_lvl+0x241/0x360 [ 448.542630][T11725] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.573094][ T5873] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 448.573218][T11725] ? __pfx__printk+0x10/0x10 [ 448.583219][ T5873] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 448.591226][T11725] ? __pfx_lock_release+0x10/0x10 [ 448.591255][T11725] ? rcu_is_watching+0x15/0xb0 [ 448.591276][T11725] ? lock_release+0xbf/0xa30 [ 448.591300][T11725] should_fail_ex+0x3b0/0x4e0 [ 448.591327][T11725] _copy_from_user+0x2f/0xc0 [ 448.591349][T11725] copy_msghdr_from_user+0xae/0x680 [ 448.591371][T11725] ? kernel_text_address+0xa7/0xe0 [ 448.591391][T11725] ? __kernel_text_address+0xd/0x40 [ 448.591412][T11725] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 448.614369][ T1206] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 448.614838][T11725] ? __fget_files+0x2a/0x410 [ 448.619591][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.624080][T11725] ? __fget_files+0x2a/0x410 [ 448.624111][T11725] __sys_sendmmsg+0x32b/0x720 [ 448.636596][ T1206] usb 5-1: Product: syz [ 448.638936][T11725] ? __pfx___might_resched+0x10/0x10 [ 448.638973][T11725] ? __pfx___sys_sendmmsg+0x10/0x10 [ 448.644281][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.649921][T11725] ? rcu_is_watching+0x15/0xb0 [ 448.649956][T11725] ? __pfx_lock_release+0x10/0x10 [ 448.649974][T11725] ? kstrtouint_from_user+0x128/0x190 [ 448.649996][T11725] ? rcu_is_watching+0x15/0xb0 [ 448.650015][T11725] ? lock_release+0xbf/0xa30 [ 448.650034][T11725] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 448.650056][T11725] ? trace_contention_end+0x3c/0x120 [ 448.650075][T11725] ? __pfx_lock_release+0x10/0x10 [ 448.650093][T11725] ? preempt_count_add+0x93/0x190 [ 448.650117][T11725] ? sb_end_write+0xe9/0x1c0 [ 448.650135][T11725] ? vfs_write+0x730/0xd30 [ 448.650157][T11725] ? __mutex_unlock_slowpath+0x21e/0x790 [ 448.650190][T11725] ? ksys_write+0x251/0x2b0 [ 448.650209][T11725] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 448.650229][T11725] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 448.650247][T11725] ? rcu_is_watching+0x15/0xb0 [ 448.650270][T11725] __x64_sys_sendmmsg+0xa0/0xb0 [ 448.669818][ T1206] usb 5-1: Manufacturer: syz [ 448.671833][T11725] do_syscall_64+0xf3/0x230 [ 448.686375][ T1206] usb 5-1: SerialNumber: syz [ 448.690565][T11725] ? clear_bhb_loop+0x35/0x90 [ 448.690595][T11725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.690621][T11725] RIP: 0033:0x7fab9b585d29 [ 448.697765][ T5873] usb 6-1: config 0 descriptor?? [ 448.703746][T11725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.722409][ T1206] usb 5-1: config 0 descriptor?? [ 448.723592][T11725] RSP: 002b:00007fab993f6038 EFLAGS: 00000246 [ 448.749577][ T1206] as10x_usb: device has been detected [ 448.753700][T11725] ORIG_RAX: 0000000000000133 [ 448.753714][T11725] RAX: ffffffffffffffda RBX: 00007fab9b776080 RCX: 00007fab9b585d29 [ 448.764774][ T1206] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 448.768227][T11725] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000006 [ 448.768246][T11725] RBP: 00007fab993f6090 R08: 0000000000000000 R09: 0000000000000000 [ 448.807479][ T1206] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 448.808739][T11725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.808758][T11725] R13: 0000000000000000 R14: 00007fab9b776080 R15: 00007ffc0b7d85a8 [ 448.826406][ T1206] as10x_usb: error during firmware upload part1 [ 448.843559][T11725] [ 448.958092][ T1206] Registered device Sky IT Digital Key (green led) [ 449.492346][ T8] usb 5-1: USB disconnect, device number 53 [ 449.596860][ T8] Unregistered device Sky IT Digital Key (green led) [ 449.597572][ T8] as10x_usb: device has been disconnected [ 449.720825][ T5873] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 449.728713][ T5873] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 449.739632][ T5873] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 449.933473][T11524] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 450.117874][T11524] usb 4-1: unable to get BOS descriptor or descriptor too short [ 450.126998][T11524] usb 4-1: config 3 has an invalid interface number: 102 but max is 0 [ 450.164208][T11524] usb 4-1: config 3 has no interface number 0 [ 450.172007][T11524] usb 4-1: config 3 interface 102 has no altsetting 0 [ 450.181190][T11524] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 450.190938][T11524] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.199048][T11524] usb 4-1: Product: syz [ 450.203283][T11524] usb 4-1: Manufacturer: ꉹ犙˹ [ 450.208416][T11524] usb 4-1: SerialNumber: syz [ 450.412837][T11743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1594'. [ 450.837708][T11751] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1595'. [ 451.186137][ T5829] usb 6-1: reset high-speed USB device number 14 using dummy_hcd [ 451.422618][ T54] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 451.557887][T11760] netlink: 'syz.2.1599': attribute type 11 has an invalid length. [ 451.857030][T11764] program syz.2.1599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 453.030341][T11524] ums-usbat 4-1:3.102: USB Mass Storage device detected [ 453.177587][T11524] ums-usbat 4-1:3.102: Quirks match for vid 0781 pid 0005: 1 [ 453.179893][T11775] netlink: 'syz.4.1602': attribute type 2 has an invalid length. [ 453.190756][T11524] ums-usbat 4-1:3.102: This device (0781,0005,0005 S 06 P 14) has an unneeded SubClass entry in unusual_devs.h (kernel 6.13.0-rc4-syzkaller-00004-gf07044dd0df0) [ 453.190756][T11524] Please send a copy of this message to and [ 453.484967][T11524] usb 4-1: USB disconnect, device number 39 [ 453.560644][ T5829] usb 6-1: device descriptor read/64, error -32 [ 453.804647][ T5829] usb 6-1: reset high-speed USB device number 14 using dummy_hcd [ 453.966985][ T5829] usb 6-1: device firmware changed [ 453.980522][ T5870] usb 6-1: USB disconnect, device number 14 [ 454.116710][T11795] input: syz0 as /devices/virtual/input/input24 [ 454.324873][ T5870] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 454.495833][ T5870] usb 6-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 454.516279][ T5870] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 454.531704][ T5870] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 454.590492][ T5870] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 454.601675][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.619220][ T5870] usb 6-1: Product: syz [ 454.627115][ T5870] usb 6-1: Manufacturer: syz [ 454.631750][ T5870] usb 6-1: SerialNumber: syz [ 454.751097][T11770] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 455.483313][ T54] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 455.491818][ T54] Bluetooth: hci4: Injecting HCI hardware error event [ 455.679987][ T5870] usb 6-1: 0:2 : does not exist [ 455.699766][T11826] tipc: Started in network mode [ 455.718240][ T5870] usb 6-1: USB disconnect, device number 15 [ 455.729382][T11826] tipc: Node identity 72f7cd92ac25, cluster identity 4711 [ 455.748299][T11826] tipc: Enabled bearer , priority 0 [ 455.818015][T11825] tipc: Disabling bearer [ 456.055559][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.304942][T11830] FAULT_INJECTION: forcing a failure. [ 456.304942][T11830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.323188][T11830] CPU: 1 UID: 0 PID: 11830 Comm: syz.4.1617 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 456.333984][T11830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 456.344038][T11830] Call Trace: [ 456.347306][T11830] [ 456.350224][T11830] dump_stack_lvl+0x241/0x360 [ 456.354904][T11830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.360111][T11830] ? __pfx__printk+0x10/0x10 [ 456.364696][T11830] ? snprintf+0xda/0x120 [ 456.368932][T11830] should_fail_ex+0x3b0/0x4e0 [ 456.373603][T11830] _copy_to_user+0x31/0xb0 [ 456.378017][T11830] simple_read_from_buffer+0xca/0x150 [ 456.383383][T11830] proc_fail_nth_read+0x1e9/0x250 [ 456.388438][T11830] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 456.393981][T11830] ? trace_contention_end+0x3c/0x120 [ 456.399263][T11830] ? bpf_lsm_file_permission+0x9/0x10 [ 456.404640][T11830] ? security_file_permission+0x74/0x280 [ 456.410272][T11830] ? rw_verify_area+0x55e/0x6f0 [ 456.415120][T11830] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 456.420666][T11830] vfs_read+0x1fc/0xb70 [ 456.424820][T11830] ? __pfx___mutex_lock+0x10/0x10 [ 456.429839][T11830] ? __pfx_vfs_read+0x10/0x10 [ 456.434508][T11830] ? __fget_files+0x2a/0x410 [ 456.439169][T11830] ? __fget_files+0x395/0x410 [ 456.443824][T11830] ? __fget_files+0x2a/0x410 [ 456.448406][T11830] ksys_read+0x18f/0x2b0 [ 456.452636][T11830] ? __pfx_ksys_read+0x10/0x10 [ 456.457396][T11830] ? rcu_is_watching+0x15/0xb0 [ 456.462150][T11830] ? rcu_is_watching+0x15/0xb0 [ 456.466899][T11830] do_syscall_64+0xf3/0x230 [ 456.471410][T11830] ? clear_bhb_loop+0x35/0x90 [ 456.476088][T11830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.481997][T11830] RIP: 0033:0x7f2510f8473c [ 456.486406][T11830] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 456.506156][T11830] RSP: 002b:00007f2511d0c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 456.514564][T11830] RAX: ffffffffffffffda RBX: 00007f2511176080 RCX: 00007f2510f8473c [ 456.522528][T11830] RDX: 000000000000000f RSI: 00007f2511d0c0a0 RDI: 0000000000000006 [ 456.530491][T11830] RBP: 00007f2511d0c090 R08: 0000000000000000 R09: 0000000000000000 [ 456.538468][T11830] R10: 0000000042000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.546428][T11830] R13: 0000000000000000 R14: 00007f2511176080 R15: 00007ffceda6a478 [ 456.554422][T11830] [ 456.961276][T11849] FAULT_INJECTION: forcing a failure. [ 456.961276][T11849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.978190][T11849] CPU: 0 UID: 0 PID: 11849 Comm: syz.4.1623 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 456.988996][T11849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 456.999073][T11849] Call Trace: [ 457.002365][T11849] [ 457.005305][T11849] dump_stack_lvl+0x241/0x360 [ 457.010010][T11849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.015238][T11849] ? __pfx__printk+0x10/0x10 [ 457.019843][T11849] ? snprintf+0xda/0x120 [ 457.024096][T11849] should_fail_ex+0x3b0/0x4e0 [ 457.028870][T11849] _copy_to_user+0x31/0xb0 [ 457.033289][T11849] simple_read_from_buffer+0xca/0x150 [ 457.038667][T11849] proc_fail_nth_read+0x1e9/0x250 [ 457.043699][T11849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.049243][T11849] ? trace_contention_end+0x3c/0x120 [ 457.054522][T11849] ? bpf_lsm_file_permission+0x9/0x10 [ 457.059887][T11849] ? security_file_permission+0x74/0x280 [ 457.065513][T11849] ? rw_verify_area+0x55e/0x6f0 [ 457.070352][T11849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.075892][T11849] vfs_read+0x1fc/0xb70 [ 457.080043][T11849] ? __pfx___mutex_lock+0x10/0x10 [ 457.085064][T11849] ? __pfx_vfs_read+0x10/0x10 [ 457.089737][T11849] ? __fget_files+0x2a/0x410 [ 457.094326][T11849] ? __fget_files+0x395/0x410 [ 457.098993][T11849] ? __fget_files+0x2a/0x410 [ 457.103583][T11849] ksys_read+0x18f/0x2b0 [ 457.107821][T11849] ? __pfx_ksys_read+0x10/0x10 [ 457.112575][T11849] ? rcu_is_watching+0x15/0xb0 [ 457.117332][T11849] ? rcu_is_watching+0x15/0xb0 [ 457.122091][T11849] do_syscall_64+0xf3/0x230 [ 457.126590][T11849] ? clear_bhb_loop+0x35/0x90 [ 457.131255][T11849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.137144][T11849] RIP: 0033:0x7f2510f8473c [ 457.141986][T11849] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 457.161676][T11849] RSP: 002b:00007f2511d0c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 457.170095][T11849] RAX: ffffffffffffffda RBX: 00007f2511176080 RCX: 00007f2510f8473c [ 457.178059][T11849] RDX: 000000000000000f RSI: 00007f2511d0c0a0 RDI: 0000000000000006 [ 457.186023][T11849] RBP: 00007f2511d0c090 R08: 0000000000000000 R09: 0000000000000000 [ 457.193984][T11849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.201944][T11849] R13: 0000000000000000 R14: 00007f2511176080 R15: 00007ffceda6a478 [ 457.210000][T11849] [ 457.213078][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.224822][ T7575] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 457.444510][ T7575] usb 6-1: Using ep0 maxpacket: 8 [ 457.473226][ T7575] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 457.492767][ T7575] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 457.530125][ T7575] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 457.561029][ T7575] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 457.766952][ T7575] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 457.777621][ T7575] usb 6-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 457.796658][ T7575] usb 6-1: Product: syz [ 458.130123][ T7575] usb 6-1: GET_CAPABILITIES returned 0 [ 458.140008][ T7575] usbtmc 6-1:16.0: can't read capabilities [ 458.256931][ T29] audit: type=1400 audit(1735025579.596:84): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11864 comm="syz.4.1629" daddr=::ffff:172.20.20.0 [ 458.352041][ T1206] usb 6-1: USB disconnect, device number 16 [ 458.615521][ T7575] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 458.804560][T11845] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 458.898445][ T29] audit: type=1326 audit(1735025580.236:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11876 comm="syz.5.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65e385d29 code=0x7ffc0000 [ 458.919919][ C0] vkms_vblank_simulate: vblank timer overrun [ 458.944434][ T7575] usb 5-1: Using ep0 maxpacket: 32 [ 458.972476][ T7575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.994559][ T29] audit: type=1326 audit(1735025580.236:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11876 comm="syz.5.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fe65e385d29 code=0x7ffc0000 [ 459.015958][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.022131][ T7575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.034718][ T7575] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 459.044033][ T7575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.053294][ T29] audit: type=1326 audit(1735025580.236:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11876 comm="syz.5.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65e385d29 code=0x7ffc0000 [ 459.076496][ T7575] usb 5-1: config 0 descriptor?? [ 459.174129][T11885] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1637'. [ 459.217215][ T1206] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 459.274569][ T5829] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 459.449766][ T5829] usb 1-1: config 3 has an invalid interface number: 71 but max is 0 [ 459.470940][ T1206] usb 6-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 459.483299][ T5829] usb 1-1: config 3 has no interface number 0 [ 459.513158][ T1206] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 459.524924][ T5829] usb 1-1: config 3 interface 71 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 459.547962][ T1206] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 459.564543][ T5829] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=a7.ac [ 459.573613][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.589990][ T7575] macally 0003:060B:0001.000D: item fetching failed at offset 2/5 [ 459.636547][ T1206] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 459.651293][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.672379][ T7575] macally 0003:060B:0001.000D: probe with driver macally failed with error -22 [ 459.675612][ T5829] ati_remote 1-1:3.71: ati_remote_probe: Unexpected endpoint_in [ 459.699277][ T1206] usb 6-1: Product: syz [ 459.707333][ T1206] usb 6-1: Manufacturer: syz [ 459.712149][ T1206] usb 6-1: SerialNumber: syz [ 459.974474][ T7575] usb 1-1: USB disconnect, device number 41 [ 459.983462][T11881] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 460.165501][T11867] serio: Serial port ttynull [ 460.267436][T11902] veth0_vlan: entered allmulticast mode [ 461.200068][T11903] block device autoloading is deprecated and will be removed. [ 461.208061][T11903] syz.4.1630: attempt to access beyond end of device [ 461.208061][T11903] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 461.712262][ T29] audit: type=1400 audit(1735025582.546:88): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11901 comm="syz.3.1641" daddr=::ffff:172.20.20.0 [ 461.766211][ T7575] usb 5-1: USB disconnect, device number 54 [ 461.964608][ T8] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 462.117778][T11915] netlink: 'syz.2.1645': attribute type 8 has an invalid length. [ 462.131371][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 462.482518][ T5829] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 462.517254][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 462.526771][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.536354][ T8] usb 4-1: Product: syz [ 462.540632][ T8] usb 4-1: Manufacturer: syz [ 462.545893][ T8] usb 4-1: SerialNumber: syz [ 462.552364][ T8] usb 4-1: config 0 descriptor?? [ 462.664571][ T5829] usb 1-1: Using ep0 maxpacket: 8 [ 462.673463][ T5829] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 462.683168][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.691249][ T5829] usb 1-1: Product: syz [ 462.696489][ T5829] usb 1-1: Manufacturer: syz [ 462.701138][ T5829] usb 1-1: SerialNumber: syz [ 462.707872][ T5829] usb 1-1: config 0 descriptor?? [ 462.813575][ T8] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 462.919550][T11920] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1646'. [ 462.950106][T11920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1646'. [ 463.044819][ T5829] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 463.169770][T11926] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1649'. [ 463.486263][ T1206] usb 6-1: 0:2 : does not exist [ 463.505053][ T1206] usb 6-1: USB disconnect, device number 17 [ 463.534829][ T8] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 463.595100][ T8] usb 4-1: USB disconnect, device number 40 [ 463.668169][ T29] audit: type=1400 audit(1735025585.006:89): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11933 comm="syz.5.1650" daddr=::ffff:172.20.20.0 [ 463.686721][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 463.767749][T11935] netlink: 'syz.2.1652': attribute type 11 has an invalid length. [ 464.564285][ T5829] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 464.578548][ T5829] usb 1-1: USB disconnect, device number 42 [ 464.598975][ T29] audit: type=1400 audit(1735025585.936:90): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=11941 comm="syz.4.1654" daddr=::ffff:172.20.20.0 [ 464.669898][T11943] program syz.2.1652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 464.824651][ T1206] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 464.990502][ T1206] usb 6-1: Using ep0 maxpacket: 16 [ 465.022141][ T25] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 465.044040][ T1206] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 465.058816][ T1206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.067411][ T1206] usb 6-1: Product: syz [ 465.071596][ T1206] usb 6-1: Manufacturer: syz [ 465.078642][ T1206] usb 6-1: SerialNumber: syz [ 465.085383][ T1206] usb 6-1: config 0 descriptor?? [ 465.097939][ T1206] as10x_usb: device has been detected [ 465.103938][ T1206] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 465.120448][ T1206] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 465.135719][ T1206] as10x_usb: error during firmware upload part1 [ 465.142462][ T1206] Registered device Sky IT Digital Key (green led) [ 465.186245][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.202929][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 465.602316][ T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 465.605461][ T8] usb 6-1: USB disconnect, device number 18 [ 465.616073][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.627659][ T25] usb 5-1: Product: syz [ 465.632262][ T8] Unregistered device Sky IT Digital Key (green led) [ 465.632752][ T25] usb 5-1: Manufacturer: syz [ 465.633222][ T8] as10x_usb: device has been disconnected [ 465.640776][ T25] usb 5-1: SerialNumber: syz [ 465.837631][ T8] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 465.847141][ T8] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 465.862919][ T25] usb 5-1: 0:2 : does not exist [ 465.871115][ T25] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 465.886948][ T25] usb 5-1: USB disconnect, device number 55 [ 465.961470][T11963] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1661'. [ 465.986086][ T5829] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 466.074089][T11966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1662'. [ 466.083536][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 466.147926][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.178015][ T5829] usb 1-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 466.256032][ T5829] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 466.279855][ T5829] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 466.371789][T11969] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1663'. [ 466.382966][ T5829] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 466.393303][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.421784][ T5829] usb 1-1: Product: syz [ 466.426551][ T5829] usb 1-1: Manufacturer: syz [ 466.451060][ T5829] usb 1-1: SerialNumber: syz [ 466.547856][T11960] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 466.925609][T11983] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 467.036814][ T8] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 467.589949][ T6494] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 467.671130][ T8] usb 3-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 467.681800][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 467.691376][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 467.959867][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 467.986972][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.011654][ T8] usb 3-1: Product: syz [ 468.020895][ T8] usb 3-1: Manufacturer: syz [ 468.025659][ T8] usb 3-1: SerialNumber: syz [ 468.048958][T11975] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 468.167002][ T6494] usb 6-1: Using ep0 maxpacket: 8 [ 468.177431][ T6494] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 468.190934][ T6494] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.199474][ T6494] usb 6-1: Product: syz [ 468.203758][ T6494] usb 6-1: Manufacturer: syz [ 468.209434][ T6494] usb 6-1: SerialNumber: syz [ 468.225913][ T6494] usb 6-1: config 0 descriptor?? [ 468.344607][ T25] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 468.534826][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 468.571876][ T6494] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 468.672170][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.697059][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.717278][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 468.743992][ T25] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 468.764107][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.772909][ T8] usb 3-1: 0:2 : does not exist [ 468.781481][ T25] usb 5-1: config 0 descriptor?? [ 468.796532][ T8] usb 3-1: USB disconnect, device number 48 [ 468.976167][ T8805] udevd[8805]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.005814][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 469.011871][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 469.042753][ T25] usb 5-1: USB disconnect, device number 56 [ 469.095282][ T5829] usb 1-1: 0:2 : does not exist [ 469.111320][ T5829] usb 1-1: USB disconnect, device number 43 [ 469.469285][ T6494] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 469.486463][ T6494] usb 6-1: USB disconnect, device number 19 [ 469.562162][T12006] FAULT_INJECTION: forcing a failure. [ 469.562162][T12006] name failslab, interval 1, probability 0, space 0, times 0 [ 469.577149][T12006] CPU: 0 UID: 0 PID: 12006 Comm: syz.2.1674 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 469.587952][T12006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 469.598017][T12006] Call Trace: [ 469.601293][T12006] [ 469.604218][T12006] dump_stack_lvl+0x241/0x360 [ 469.608895][T12006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.614093][T12006] ? __pfx__printk+0x10/0x10 [ 469.618680][T12006] ? __pfx___might_resched+0x10/0x10 [ 469.623963][T12006] should_fail_ex+0x3b0/0x4e0 [ 469.628639][T12006] should_failslab+0xac/0x100 [ 469.633315][T12006] __kmalloc_noprof+0xdd/0x4c0 [ 469.638079][T12006] ? tomoyo_encode+0x26f/0x540 [ 469.642847][T12006] tomoyo_encode+0x26f/0x540 [ 469.647437][T12006] tomoyo_realpath_from_path+0x59e/0x5e0 [ 469.653072][T12006] tomoyo_path_number_perm+0x236/0x860 [ 469.658523][T12006] ? tomoyo_path_number_perm+0x206/0x860 [ 469.664149][T12006] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 469.669777][T12006] ? trace_contention_end+0x3c/0x120 [ 469.675057][T12006] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 469.681033][T12006] ? preempt_count_add+0x93/0x190 [ 469.686063][T12006] ? fput+0x21b/0x290 [ 469.690036][T12006] ? __fget_files+0x2a/0x410 [ 469.694619][T12006] ? __fget_files+0x2a/0x410 [ 469.699207][T12006] security_file_ioctl+0xc6/0x2a0 [ 469.704225][T12006] __se_sys_ioctl+0x46/0x170 [ 469.708814][T12006] do_syscall_64+0xf3/0x230 [ 469.713316][T12006] ? clear_bhb_loop+0x35/0x90 [ 469.717985][T12006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.723875][T12006] RIP: 0033:0x7f0eb1585d29 [ 469.728287][T12006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.747895][T12006] RSP: 002b:00007f0eb241a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 469.756310][T12006] RAX: ffffffffffffffda RBX: 00007f0eb1775fa0 RCX: 00007f0eb1585d29 [ 469.764276][T12006] RDX: 0000000020000100 RSI: 000000000000541c RDI: 0000000000000004 [ 469.772238][T12006] RBP: 00007f0eb241a090 R08: 0000000000000000 R09: 0000000000000000 [ 469.780223][T12006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.788210][T12006] R13: 0000000000000000 R14: 00007f0eb1775fa0 R15: 00007ffda4d4baa8 [ 469.796188][T12006] [ 469.799213][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.815291][T12006] ERROR: Out of memory at tomoyo_realpath_from_path. [ 470.226379][T12015] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1677'. [ 470.294532][T11524] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 470.531602][T11524] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 470.581853][T11524] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.623645][T11524] usb 3-1: Product: syz [ 470.659884][T11524] usb 3-1: Manufacturer: syz [ 470.739985][T11524] usb 3-1: SerialNumber: syz [ 470.962451][T11524] usb 3-1: config 0 descriptor?? [ 471.174872][ T8] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 471.216358][T12029] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.241379][ T25] usb 3-1: USB disconnect, device number 49 [ 471.324555][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 471.340209][ T8] usb 1-1: config 0 has an invalid interface number: 91 but max is 0 [ 471.348950][ T8] usb 1-1: config 0 has no interface number 0 [ 471.360042][ T8] usb 1-1: config 0 interface 91 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 471.374715][ T6494] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 471.382891][ T8] usb 1-1: config 0 interface 91 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 471.408883][ T9] libceph: connect (1)[c::]:6789 error -101 [ 471.415165][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 471.674491][ T9] libceph: connect (1)[c::]:6789 error -101 [ 471.689902][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 471.758555][ T8] usb 1-1: New USB device found, idVendor=07c4, idProduct=a400, bcdDevice=c2.f9 [ 471.775633][ T6494] usb 4-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 471.786129][ T6494] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 471.808388][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.829702][ T6494] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 471.854879][ T8] usb 1-1: Product: syz [ 471.859160][ T8] usb 1-1: Manufacturer: syz [ 471.863977][ T8] usb 1-1: SerialNumber: syz [ 471.876613][ T6494] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 471.886919][ T6494] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.895998][ T8] usb 1-1: config 0 descriptor?? [ 471.902489][ T6494] usb 4-1: Product: syz [ 471.907012][T12022] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 471.914356][T12022] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 471.922314][ T8] usb-storage 1-1:0.91: USB Mass Storage device detected [ 471.930750][ T6494] usb 4-1: Manufacturer: syz [ 471.939034][ T6494] usb 4-1: SerialNumber: syz [ 471.959608][ T8] usb-storage 1-1:0.91: Quirks match for vid 07c4 pid a400: 18 [ 472.002770][ T9] libceph: connect (1)[c::]:6789 error -101 [ 472.014445][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 472.039709][T12028] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 472.566970][ T8] libceph: connect (1)[c::]:6789 error -101 [ 472.573922][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 473.123921][ T29] audit: type=1400 audit(1735025594.456:91): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12059 comm="syz.2.1688" daddr=::ffff:172.20.20.0 [ 473.167659][T12062] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1689'. [ 474.197895][ T9] libceph: connect (1)[c::]:6789 error -101 [ 474.205129][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 474.235751][T11524] usb 1-1: USB disconnect, device number 44 [ 474.264552][ T8] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 474.297440][T12035] ceph: No mds server is up or the cluster is laggy [ 474.336461][ T6494] usb 4-1: 0:2 : does not exist [ 474.436324][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 474.445473][ T8] usb 5-1: config 3 has an invalid interface number: 102 but max is 0 [ 474.586505][T12084] netlink: 'syz.0.1694': attribute type 8 has an invalid length. [ 474.620783][ T8] usb 5-1: config 3 has no interface number 0 [ 474.741065][T12086] netlink: 'syz.2.1693': attribute type 8 has an invalid length. [ 474.889437][ T8] usb 5-1: config 3 interface 102 has no altsetting 0 [ 474.897197][ T6494] usb 4-1: USB disconnect, device number 41 [ 474.905564][ T8] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 474.956285][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.968603][ T8] usb 5-1: Product: syz [ 474.972918][ T8] usb 5-1: Manufacturer: ꉹ犙˹ [ 474.980098][ T8] usb 5-1: SerialNumber: syz [ 476.087378][ T6494] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 476.106314][ T29] audit: type=1400 audit(1735025597.426:92): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12098 comm="syz.5.1699" daddr=::ffff:172.20.20.0 [ 476.207778][T12102] FAULT_INJECTION: forcing a failure. [ 476.207778][T12102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.220978][T12102] CPU: 0 UID: 0 PID: 12102 Comm: syz.0.1697 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 476.231752][T12102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 476.241813][T12102] Call Trace: [ 476.245108][T12102] [ 476.248047][T12102] dump_stack_lvl+0x241/0x360 [ 476.252752][T12102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.257956][T12102] ? __pfx__printk+0x10/0x10 [ 476.262563][T12102] ? __pfx_lock_release+0x10/0x10 [ 476.267594][T12102] should_fail_ex+0x3b0/0x4e0 [ 476.272284][T12102] _copy_from_user+0x2f/0xc0 [ 476.276885][T12102] rfcomm_dev_ioctl+0x114/0x2220 [ 476.282180][T12102] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 476.287559][T12102] ? tomoyo_path_number_perm+0x679/0x860 [ 476.293202][T12102] ? bt_sock_ioctl+0xe9/0x2c0 [ 476.297902][T12102] sock_do_ioctl+0x158/0x460 [ 476.302510][T12102] ? __pfx_sock_do_ioctl+0x10/0x10 [ 476.307663][T12102] ? __pfx_sock_ioctl+0x10/0x10 [ 476.312519][T12102] ? do_vfs_ioctl+0x152/0x2e40 [ 476.317292][T12102] sock_ioctl+0x626/0x8e0 [ 476.321631][T12102] ? __pfx_sock_ioctl+0x10/0x10 [ 476.326490][T12102] ? __fget_files+0x2a/0x410 [ 476.331089][T12102] ? __fget_files+0x2a/0x410 [ 476.335683][T12102] ? __pfx_sock_ioctl+0x10/0x10 [ 476.340551][T12102] __se_sys_ioctl+0xf5/0x170 [ 476.345151][T12102] do_syscall_64+0xf3/0x230 [ 476.349671][T12102] ? clear_bhb_loop+0x35/0x90 [ 476.354363][T12102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.360271][T12102] RIP: 0033:0x7fab9b585d29 [ 476.364678][T12102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.384277][T12102] RSP: 002b:00007fab993d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.392704][T12102] RAX: ffffffffffffffda RBX: 00007fab9b776160 RCX: 00007fab9b585d29 [ 476.400693][T12102] RDX: 0000000020000100 RSI: 00000000800452d3 RDI: 0000000000000008 [ 476.408678][T12102] RBP: 00007fab993d5090 R08: 0000000000000000 R09: 0000000000000000 [ 476.416645][T12102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.424609][T12102] R13: 0000000000000000 R14: 00007fab9b776160 R15: 00007ffc0b7d85a8 [ 476.432581][T12102] [ 476.435695][ C0] vkms_vblank_simulate: vblank timer overrun [ 476.449914][T12103] netlink: 'syz.2.1698': attribute type 11 has an invalid length. [ 476.694773][ T6494] usb 4-1: Using ep0 maxpacket: 16 [ 476.900392][T12107] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1701'. [ 476.906631][ T6494] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 476.990120][ T6494] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.998260][ T6494] usb 4-1: Product: syz [ 477.001028][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1703'. [ 477.002422][ T6494] usb 4-1: Manufacturer: syz [ 477.017195][ T6494] usb 4-1: SerialNumber: syz [ 477.044882][ T6494] usb 4-1: config 0 descriptor?? [ 477.070521][ T8] ums-usbat 5-1:3.102: USB Mass Storage device detected [ 477.216638][ T6494] as10x_usb: device has been detected [ 477.254715][ T6494] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 477.356523][T12119] netlink: 'syz.2.1702': attribute type 11 has an invalid length. [ 477.433728][ T8] ums-usbat 5-1:3.102: Quirks match for vid 0781 pid 0005: 1 [ 477.441223][ T8] ums-usbat 5-1:3.102: This device (0781,0005,0005 S 06 P 14) has an unneeded SubClass entry in unusual_devs.h (kernel 6.13.0-rc4-syzkaller-00004-gf07044dd0df0) [ 477.441223][ T8] Please send a copy of this message to and [ 477.532886][T12122] program syz.2.1702 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 478.330909][ T6494] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 478.343057][ T8] usb 5-1: USB disconnect, device number 57 [ 478.861223][ T6494] as10x_usb: error during firmware upload part1 [ 478.861960][ T6494] Registered device Sky IT Digital Key (green led) [ 478.872743][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.874060][ T6494] usb 4-1: USB disconnect, device number 42 [ 479.144571][ T8] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 479.295908][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 479.295940][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 479.295964][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 479.295986][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 479.296018][ T8] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 479.296042][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.902637][ T8] usb 5-1: config 0 descriptor?? [ 479.963593][ T6494] Unregistered device Sky IT Digital Key (green led) [ 479.967440][ T6494] as10x_usb: device has been disconnected [ 480.059622][ T29] audit: type=1400 audit(1735025601.396:93): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12143 comm="syz.5.1710" daddr=::ffff:172.20.20.0 [ 480.070062][T12141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1709'. [ 480.104234][ T8] hdpvr 5-1:0.0: firmware version 0x1d dated [ 480.104269][ T8] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 480.122807][T12141] IPv6: NLM_F_REPLACE set, but no existing node found! [ 480.173187][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1712'. [ 482.410184][ T8] hdpvr 5-1:0.0: Could not setup controls [ 482.416320][ T8] hdpvr 5-1:0.0: registering videodev failed [ 482.426487][ T8] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 482.447871][ T8] usb 5-1: USB disconnect, device number 58 [ 482.705995][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1717'. [ 483.036384][ T25] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 483.184617][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 483.192756][ T25] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 483.192856][ T25] usb 6-1: config 0 has no interface number 0 [ 483.193003][ T25] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 483.193077][ T25] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 483.193216][ T25] usb 6-1: config 0 interface 41 has no altsetting 0 [ 483.203498][ T25] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 483.203591][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.203675][ T25] usb 6-1: Product: syz [ 483.203777][ T25] usb 6-1: Manufacturer: syz [ 483.203854][ T25] usb 6-1: SerialNumber: syz [ 483.228003][ T25] usb 6-1: config 0 descriptor?? [ 483.308492][T12162] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 483.308597][T12162] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 483.517438][T12162] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 483.657965][T12162] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 484.612093][ T25] Error reading MAC address [ 484.617836][T12162] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 484.626498][T12162] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 484.644073][ T29] audit: type=1400 audit(1735025605.976:94): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=12185 comm="syz.0.1723" daddr=::ffff:172.20.20.0 [ 485.604600][ T8] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 485.612932][ T7575] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 485.744585][ T8] usb 1-1: device descriptor read/64, error -71 [ 485.766120][ T7575] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 485.777472][ T7575] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 485.786675][ T7575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.794910][ T7575] usb 3-1: Product: syz [ 485.799340][ T7575] usb 3-1: Manufacturer: syz [ 485.804029][ T7575] usb 3-1: SerialNumber: syz [ 485.812131][ T7575] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 485.881218][ T6494] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 485.985452][ T8] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 486.101451][T12197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.123263][T12197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.135685][ T8] usb 1-1: device descriptor read/64, error -71 [ 486.147971][T12197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.157254][T12197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.158616][T12197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.179583][T12197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.245219][T11524] usb 3-1: USB disconnect, device number 50 [ 486.325423][ T8] usb usb1-port1: attempt power cycle [ 486.664630][ T8] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 486.755850][ T25] sr9700 6-1:0.41 eth5: register 'sr9700' at usb-dummy_hcd.5-1, CoreChip SR9700 USB Ethernet, ba:86:20:84:49:31 [ 486.769759][ T25] usb 6-1: USB disconnect, device number 20 [ 486.774832][ T8] usb 1-1: device descriptor read/8, error -71 [ 486.776365][ T25] sr9700 6-1:0.41 eth5: unregister 'sr9700' usb-dummy_hcd.5-1, CoreChip SR9700 USB Ethernet [ 486.964459][ T6494] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 486.971518][ T6494] ath9k_htc: Failed to initialize the device [ 486.978381][T11524] usb 3-1: ath9k_htc: USB layer deinitialized [ 487.469904][ T8] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 487.487608][ T8] usb 1-1: device descriptor read/8, error -71 [ 487.619599][T12223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1734'. [ 487.642679][T12223] veth1_macvtap: left promiscuous mode [ 487.672200][ T8] usb usb1-port1: unable to enumerate USB device [ 487.700868][T11524] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 487.874683][T11524] usb 3-1: Using ep0 maxpacket: 32 [ 487.899727][T11524] usb 3-1: config index 0 descriptor too short (expected 241, got 72) [ 488.019664][T11524] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 488.114113][T11524] usb 3-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 488.124579][T11524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.135014][T11524] usb 3-1: config 0 descriptor?? [ 488.142749][T11524] mos7840 3-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 593.244340][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 593.251352][ C0] rcu: 1-...!: (1 GPs behind) idle=836c/1/0x4000000000000000 softirq=43251/43253 fqs=7 [ 593.261261][ C0] rcu: (detected by 0, t=10502 jiffies, g=42053, q=160 ncpus=2) [ 593.269002][ C0] Sending NMI from CPU 0 to CPUs 1: [ 593.269036][ C1] NMI backtrace for cpu 1 [ 593.269050][ C1] CPU: 1 UID: 0 PID: 12231 Comm: syz.4.1735 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 593.269070][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 593.269081][ C1] RIP: 0010:taprio_set_budgets+0x1e1/0x370 [ 593.269110][ C1] Code: 79 3d f8 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 87 76 3d f8 48 89 e8 31 d2 48 f7 33 <48> 89 c5 bf 11 00 00 00 4c 89 fe e8 af 9e d9 f7 49 83 ff 10 0f 87 [ 593.269125][ C1] RSP: 0018:ffffc90000a18c10 EFLAGS: 00000046 [ 593.269142][ C1] RAX: 0000000000000000 RBX: ffff8880223592e0 RCX: dffffc0000000000 [ 593.269155][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff8880223592e0 [ 593.269167][ C1] RBP: 0000000000000000 R08: ffff8880223592e7 R09: 1ffff1100446b25c [ 593.269180][ C1] R10: dffffc0000000000 R11: ffffed100446b25d R12: 0000000000000000 [ 593.269192][ C1] R13: ffff8880345d4c00 R14: ffff8880345d4c00 R15: 0000000000000000 [ 593.269205][ C1] FS: 00007f2511ceb6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 593.269221][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 593.269233][ C1] CR2: 00007f2511ceaf98 CR3: 000000004c5fa000 CR4: 00000000003526f0 [ 593.269249][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 593.269259][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 593.269271][ C1] Call Trace: [ 593.269279][ C1] [ 593.269287][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 593.269327][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 593.269370][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 593.269395][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 593.269419][ C1] ? nmi_handle+0x14f/0x5a0 [ 593.269438][ C1] ? nmi_handle+0x2a/0x5a0 [ 593.269456][ C1] ? taprio_set_budgets+0x1e1/0x370 [ 593.269475][ C1] ? default_do_nmi+0x63/0x160 [ 593.269493][ C1] ? exc_nmi+0x123/0x1f0 [ 593.269511][ C1] ? end_repeat_nmi+0xf/0x53 [ 593.269530][ C1] ? taprio_set_budgets+0x1e1/0x370 [ 593.269549][ C1] ? taprio_set_budgets+0x1e1/0x370 [ 593.269568][ C1] ? taprio_set_budgets+0x1e1/0x370 [ 593.269587][ C1] [ 593.269593][ C1] [ 593.269602][ C1] advance_sched+0x98d/0xca0 [ 593.269626][ C1] ? __pfx_advance_sched+0x10/0x10 [ 593.269645][ C1] __hrtimer_run_queues+0x59b/0xd30 [ 593.269673][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 593.269693][ C1] ? sched_clock+0x4a/0x70 [ 593.269716][ C1] ? read_tsc+0x9/0x20 [ 593.269736][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 593.269757][ C1] hrtimer_interrupt+0x403/0xa40 [ 593.269786][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 593.269807][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 593.269829][ C1] [ 593.269835][ C1] [ 593.269842][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 593.269866][ C1] RIP: 0010:do_syscall_64+0xbc/0x230 [ 593.269890][ C1] Code: ed 00 00 00 48 8b 7d 08 e8 31 65 00 00 0f 1f 44 00 00 0f 1f 44 00 00 90 e8 11 c7 e6 f5 90 90 e8 ba c6 e6 f5 fb 49 8b 54 24 08 c2 3f 74 0e 4c 89 f7 4c 89 fe e8 b4 cc c8 f5 49 89 c7 90 90 41 [ 593.269904][ C1] RSP: 0018:ffffc90002fe7f10 EFLAGS: 00000282 [ 593.269919][ C1] RAX: 92580212f93e7000 RBX: ffffc90002fe7f10 RCX: ffffffff81a72cfc [ 593.269933][ C1] RDX: 0000000000000000 RSI: ffffffff8c5edcc0 RDI: ffffffff8bc06746 [ 593.269945][ C1] RBP: ffffc90002fe7f48 R08: ffffffff90185277 R09: 1ffffffff2030a4e [ 593.269958][ C1] R10: dffffc0000000000 R11: fffffbfff2030a4f R12: ffff88803581bc00 [ 593.269972][ C1] R13: 0000000000000000 R14: ffffc90002fe7f58 R15: 00000000000000e3 [ 593.269987][ C1] ? trace_irq_enable+0x2c/0x120 [ 593.270003][ C1] ? do_syscall_64+0xb6/0x230 [ 593.270027][ C1] ? clear_bhb_loop+0x35/0x90 [ 593.270043][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.270066][ C1] RIP: 0033:0x7f2510f85d29 [ 593.270083][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.270097][ C1] RSP: 002b:00007f2511ceb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 593.270113][ C1] RAX: ffffffffffffffda RBX: 00007f2511176160 RCX: 00007f2510f85d29 [ 593.270126][ C1] RDX: 0000000000000000 RSI: 0000000020003c80 RDI: 0000000000000000 [ 593.270137][ C1] RBP: 00007f2511001aa8 R08: 0000000000000000 R09: 0000000000000000 [ 593.270149][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.270160][ C1] R13: 0000000000000001 R14: 00007f2511176160 R15: 00007ffceda6a478 [ 593.270178][ C1] [ 593.271028][ C0] rcu: rcu_preempt kthread starved for 10488 jiffies! g42053 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 593.728754][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 593.738736][ C0] rcu: RCU grace-period kthread stack dump: [ 593.744618][ C0] task:rcu_preempt state:R running task stack:26264 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 593.756375][ C0] Call Trace: [ 593.759654][ C0] [ 593.762588][ C0] __schedule+0x17fb/0x4be0 [ 593.767109][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 593.773020][ C0] ? schedule+0x90/0x320 [ 593.777270][ C0] ? lock_release+0xbf/0xa30 [ 593.781866][ C0] ? __pfx___schedule+0x10/0x10 [ 593.786727][ C0] ? __pfx_lock_release+0x10/0x10 [ 593.791764][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 593.798130][ C0] ? schedule+0x90/0x320 [ 593.802394][ C0] schedule+0x14b/0x320 [ 593.806586][ C0] schedule_timeout+0x15a/0x290 [ 593.811443][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 593.816823][ C0] ? __pfx_process_timeout+0x10/0x10 [ 593.822127][ C0] ? prepare_to_swait_event+0x330/0x350 [ 593.827682][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 593.832554][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 593.838719][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 593.844012][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 593.849918][ C0] ? finish_swait+0xd4/0x1e0 [ 593.854513][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 593.859123][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 593.864328][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 593.870233][ C0] ? __kthread_parkme+0x169/0x1d0 [ 593.875354][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 593.880557][ C0] kthread+0x2f0/0x390 [ 593.884652][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 593.889880][ C0] ? __pfx_kthread+0x10/0x10 [ 593.894492][ C0] ret_from_fork+0x4b/0x80 [ 593.898917][ C0] ? __pfx_kthread+0x10/0x10 [ 593.903511][ C0] ret_from_fork_asm+0x1a/0x30 [ 593.908304][ C0] [ 593.911331][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 593.917660][ C0] CPU: 0 UID: 0 PID: 12233 Comm: syz.0.1726 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 593.928420][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 593.938565][ C0] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2c60 [ 593.945348][ C0] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 56 e9 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 01 e5 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 e5 e4 [ 593.965130][ C0] RSP: 0018:ffffc90002fa7980 EFLAGS: 00000246 [ 593.971553][ C0] RAX: ffffffff81938efb RBX: 1ffff110170e88b9 RCX: 0000000000080000 [ 593.979537][ C0] RDX: ffffc9000d2ce000 RSI: 000000000007ffff RDI: 0000000000080000 [ 593.987510][ C0] RBP: ffffc90002fa7b80 R08: ffffffff81938eca R09: 1ffffffff2030a4e [ 593.995492][ C0] R10: dffffc0000000000 R11: fffffbfff2030a4f R12: dffffc0000000000 [ 594.003470][ C0] R13: ffff8880b87445c8 R14: ffff8880b863f940 R15: 0000000000000001 [ 594.011442][ C0] FS: 00007fab993f66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 594.020373][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 594.026977][ C0] CR2: 000000110c2add96 CR3: 0000000029b7a000 CR4: 00000000003526f0 [ 594.034956][ C0] DR0: 00000000000000fa DR1: 0000000000000000 DR2: 0000000000000000 [ 594.042930][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 594.050952][ C0] Call Trace: [ 594.054244][ C0] [ 594.057106][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 594.063458][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 594.069107][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 594.074922][ C0] ? rcu_is_watching+0x15/0xb0 [ 594.079706][ C0] ? cgroup_rstat_updated+0x13b/0xc30 [ 594.085092][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 594.091345][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 594.096727][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 594.102376][ C0] ? update_process_times+0x242/0x2f0 [ 594.107753][ C0] ? tick_nohz_handler+0x37c/0x500 [ 594.112885][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 594.118356][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 594.123744][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 594.129472][ C0] ? handle_softirqs+0x7e0/0x9b0 [ 594.134420][ C0] ? read_tsc+0x9/0x20 [ 594.138495][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 594.144571][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 594.149700][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 594.155864][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 594.161678][ C0] [ 594.164607][ C0] [ 594.167540][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 594.173708][ C0] ? smp_call_function_many_cond+0x19da/0x2c60 [ 594.179872][ C0] ? smp_call_function_many_cond+0x1a0b/0x2c60 [ 594.186052][ C0] ? smp_call_function_many_cond+0x19f3/0x2c60 [ 594.192217][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 594.197260][ C0] ? __pfx___text_poke+0x10/0x10 [ 594.202205][ C0] ? __pfx___might_resched+0x10/0x10 [ 594.207512][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 594.213846][ C0] ? __pfx___might_resched+0x10/0x10 [ 594.219150][ C0] ? rcu_is_watching+0x15/0xb0 [ 594.223921][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 594.228951][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 594.234077][ C0] text_poke_bp_batch+0x352/0xb30 [ 594.239109][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 594.245099][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 594.250129][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 594.255683][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 594.261932][ C0] ? __jump_label_update+0x379/0x3a0 [ 594.267229][ C0] text_poke_finish+0x30/0x50 [ 594.271918][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 594.277906][ C0] static_key_slow_inc_cpuslocked+0x80/0xf0 [ 594.283810][ C0] static_key_slow_inc+0x1a/0x30 [ 594.288763][ C0] io_uring_create+0xf2/0xc00 [ 594.293443][ C0] __se_sys_io_uring_setup+0x2ba/0x330 [ 594.299011][ C0] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 594.305005][ C0] ? rcu_is_watching+0x15/0xb0 [ 594.309776][ C0] ? rcu_is_watching+0x15/0xb0 [ 594.314546][ C0] do_syscall_64+0xf3/0x230 [ 594.319062][ C0] ? clear_bhb_loop+0x35/0x90 [ 594.323826][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.329729][ C0] RIP: 0033:0x7fab9b585d29 [ 594.334148][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.353841][ C0] RSP: 002b:00007fab993f5fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 594.362267][ C0] RAX: ffffffffffffffda RBX: 00007fab9b776080 RCX: 00007fab9b585d29 [ 594.370247][ C0] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00000000000000d3 [ 594.378220][ C0] RBP: 00000000200000c0 R08: 0000000000000000 R09: 0000000020000080 [ 594.386201][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.394269][ C0] R13: 0000000020000040 R14: 00000000000000d3 R15: 0000000020000080 [ 594.402257][ C0]