last executing test programs: 2m27.047943598s ago: executing program 1 (id=1534): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0xd, 0x0, 0x80c, 0x72bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x20040894) socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905e20040"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f00000001a00000125bd7000fddbdf25fc010000000000000000000000000001000000000000000000000000000000004e2300074e2200050a00808004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000000004d646000000ff010000000000000000000000000001070000000000000067000000000000f8ffffffffffffffffff00000000000003000000000000000500000000000000020000000000000007000000000000000000000000000000000000000000000001000000000000000900000009000000ab06000028bd700004350000020000071000"/168], 0xf0}, 0x1, 0x0, 0x0, 0x8000004}, 0x20000000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008666604880000000000010902240001000000000904000001030000000921000000013307000905"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1078c0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1}}], 0x0, 0x2041, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8387681d3acb1dff}, {0x0, 0x4}, {0x6, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x20000000) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 2m21.862452517s ago: executing program 1 (id=1544): fchmodat(0xffffffffffffff9c, 0x0, 0xfffffe13) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000005380)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x26, 0x0, 0x11100}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008400)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0x0, 0x7, 0x0, 0x0, {0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xee01, 0x80000000, 0xf8}}, {0x0, 0x10}}}, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xc8841, 0x0) dup3(r6, r4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f00000021c0)="305c0607e182087051667557c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e6417acfc8648ad1b86400393d502b0cd490635d54cdf5bd0461690982b236949ab5e000000808ce41d86b9b949004fd8fe45b91e8fe7ec7c49750a1b0ade", 0x5e, 0xfffffffffffffffe) 2m21.594432463s ago: executing program 1 (id=1546): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2m21.261676653s ago: executing program 1 (id=1548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() r1 = socket(0x10, 0x803, 0x0) write(r1, 0x0, 0x0) sendto(r1, &(0x7f00000005c0)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0xfffffefb, 0x1, 0x1}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000003000000080000000600000024100000", @ANYRES32=r7, @ANYBLOB="0100"/18, @ANYRES32, @ANYRES32, @ANYBLOB="05000000050000000500000000000000000000000000000000000000b0d764c080970754249b609852b6105d665cb3360b4db22b36f6b23f10774ab5ad7ba0997a5a28107cb70503cb5a0e69e12588f559a1069585e9470118fb545cece279c5b4fea94da3b161050f03030d0d0e113fefc66b6d70caa1fa21138f4b6be32539d90c0ccd9c2934170a1d497caa8e02f5288e1d7cd2ed68cc29ad2637590b7d938b590cec95462e2f6077e2553c68d4f475dfc718d31a4c895ddceee6"], 0x50) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2}) close_range(r3, 0xffffffffffffffff, 0x0) 2m17.303038095s ago: executing program 1 (id=1557): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87}, './file0\x00'}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="11000000040000000400000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000000000000000000000000000000000000773c674574880a"], 0x50) write$binfmt_register(r1, &(0x7f0000000980)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x3, 0x3a, '', 0x3a, '7\x1a\xb2\xa0\x92h\xd7\xf8\xf0\xc26\xb7\xb4\xa93\x89\x93\x98\xed', 0x3a, './file0', 0x3a, [0x46, 0x43, 0x6d1025443fd490c0, 0x50, 0x0, 0x50, 0x4f]}, 0x41) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x8000, 0x7, 0x9, 0x4a2c, {{0x9, 0x4, 0x1, 0x39, 0x24, 0x64, 0x0, 0x0, 0x2f, 0x0, @local, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0xbc, 0x3, 0xb, [{@private=0xa010102}]}, @noop]}}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r4) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x4) r6 = dup3(r2, r2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYRES64=r6, @ANYRES32=r3, @ANYBLOB="000106000000ffdbdf250300000005000200fa00000005000200020000000500030007000000050005005000000005000300010000002800018008000300020000100800010064a4cb14512eca27f8b77599207cbf134b28a6688eb61aeb7c8d516891fbc04d0ecf63b6d0ca379ba51dbed864f9ad8b394e797904a7ae38c0b9a4f0f9fd8080", @ANYRES32=r3, @ANYBLOB="14000200766c616e3100000000000000000000000500020025000000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x20004044) socket(0x2c, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f0000000080)={0x1, 0x8000}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000004000000040000007f"], 0x48) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r11, &(0x7f0000000400)={'syz1\x00', {0x4, 0x6e5, 0x4, 0x727c}, 0x4d, [0x9, 0x200, 0x2, 0x6, 0x0, 0x238, 0x189fba01, 0xcaac, 0xacf, 0x1, 0x0, 0x2, 0x8000, 0x9, 0x7, 0x100, 0xffffffff, 0xd, 0x3ff, 0x96a, 0x3, 0x1, 0x3ff, 0xe, 0x7fffffff, 0x7, 0xb7000000, 0x2, 0x5, 0x10000, 0x57b, 0x7fff, 0x80000001, 0xe54e, 0x10, 0x10, 0x4, 0x5, 0x7, 0x3ff, 0x0, 0x3ff, 0x7f, 0x7, 0x1, 0x4, 0xfffffffd, 0x0, 0x0, 0x6, 0xf, 0x9, 0x4, 0x9, 0x42e, 0x7, 0x1, 0xcbf0, 0xdd93, 0xe, 0xfff, 0xf, 0x3, 0x9], [0x3, 0x5, 0x7ff, 0x0, 0x0, 0x9, 0x80000000, 0xd, 0x2, 0x5, 0x101, 0x6, 0x9, 0x5, 0x100, 0xb3a8, 0x71e2, 0x3, 0x9, 0x44a, 0x80000001, 0x6, 0x29, 0x9, 0x8, 0x2, 0x1, 0x0, 0x2, 0x8, 0x9, 0x2, 0xfe9, 0x0, 0x3ff, 0x1, 0x9, 0x8, 0x5, 0x8, 0x8, 0x615, 0x2, 0x0, 0x5, 0xe, 0x6, 0x6, 0x5b, 0x640, 0x5, 0x270d, 0x80000000, 0x81, 0x8, 0x9, 0x200, 0x2, 0x7, 0x7, 0x5, 0x7, 0x7], [0x6, 0x7, 0xfffffff0, 0xa, 0x8, 0x81, 0x9, 0x6, 0x2, 0xf5, 0x100, 0x2, 0x3, 0x4, 0x8, 0xebf, 0xfffffffa, 0xffffff80, 0x8, 0x7, 0x3, 0x2, 0x7, 0x7, 0x5, 0xbe, 0xfffffff9, 0x5, 0x3, 0x5, 0x4, 0xdf7, 0x4, 0x9, 0x9, 0x9, 0x4, 0x4, 0x7, 0x4, 0x2, 0x9, 0x4, 0x13ac, 0x9, 0x1ff, 0xe68e, 0x6, 0x7fff, 0x8f, 0x0, 0x6, 0x3, 0xb72, 0x9, 0x734, 0x0, 0x10001, 0x7b0, 0xc52d, 0x88000000, 0x6, 0xf, 0xfffffffa], [0xffffffff, 0x7f, 0x0, 0xb, 0x9, 0x0, 0x2, 0xa, 0x3, 0x1, 0xb, 0x21db, 0xd, 0x0, 0x3, 0xc, 0x3, 0x2, 0x6, 0xfffffffd, 0x3, 0x1, 0xf8, 0xab5, 0xc, 0xa2a2, 0x5, 0x0, 0x3, 0xfd1, 0x4, 0x8001, 0x80000001, 0x0, 0x8, 0xfffffffd, 0xc0000000, 0xa, 0x6, 0x7b60, 0x0, 0x8, 0x80000000, 0xa, 0x5, 0x0, 0x80, 0xfffffffc, 0xff, 0xfffffffc, 0xffffffff, 0x7, 0x10001, 0x101, 0x1, 0xa, 0x3, 0x200, 0xc6b, 0x0, 0x8001, 0x1000, 0x7, 0x1]}, 0x45c) 2m15.314938024s ago: executing program 1 (id=1560): syz_usb_connect(0x1, 0x3d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30d1ed00000020000034b7c90202050300000000000000f860c7c3f63015de3400e3026f5b0200000305000900"], 0x20}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x20000090) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="490900000000000000001500000004002b8008000300", @ANYRES32=r4, @ANYBLOB="08002a0000000000050029000100000020002b80040003800800010001040000050002"], 0x58}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r6 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setresuid(r7, r7, 0x0) openat$cgroup_procs(r5, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) 1m58.120574549s ago: executing program 32 (id=1560): syz_usb_connect(0x1, 0x3d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30d1ed00000020000034b7c90202050300000000000000f860c7c3f63015de3400e3026f5b0200000305000900"], 0x20}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x20000090) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="490900000000000000001500000004002b8008000300", @ANYRES32=r4, @ANYBLOB="08002a0000000000050029000100000020002b80040003800800010001040000050002"], 0x58}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r6 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setresuid(r7, r7, 0x0) openat$cgroup_procs(r5, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) 11.690300936s ago: executing program 0 (id=1842): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) getpeername$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x88}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f0000001100)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x8, @loopback}, 0x1c, 0x0}}], 0x1, 0x1) recvmmsg(r1, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x12141, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) 11.637626311s ago: executing program 2 (id=1843): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = io_uring_setup(0x2863, &(0x7f00000000c0)={0x0, 0x4ccd, 0x200, 0x0, 0x223}) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000180)={0x6, 0x0, &(0x7f0000000000)=[r2, r0, r0, r0]}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x9}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x410a01, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@cgroup, 0xffffffffffffffff, 0x20, 0x1, 0xffffffffffffffff, @void, @value}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r10 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) close_range(r10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10.364727693s ago: executing program 4 (id=1848): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040041e1d113c812e5d601adda05c7b5d27c9"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) read$FUSE(r3, 0x0, 0x0) 9.823969256s ago: executing program 2 (id=1849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() r1 = socket(0x10, 0x803, 0x0) write(r1, 0x0, 0x0) sendto(r1, &(0x7f00000005c0)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0xfffffefb, 0x1, 0x1}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000300000008000000060000", @ANYRES32=r7, @ANYBLOB="0100"/20, @ANYRES32, @ANYRES32, @ANYBLOB="05000000050000000500000000000000000000000000000000000000b0d764c080970754249b609852b6105d665cb3360b4db22b36f6b23f10774ab5ad7ba0997a5a28107cb70503cb5a0e69e12588f559a1069585e9470118fb545cece279c5b4fea94da3b161050f03030d0d0e113fefc66b6d70caa1fa21138f4b6be32539d90c0ccd9c2934170a1d497caa8e02f5288e1d7cd2ed68cc29ad2637590b7d938b590cec95462e2f6077e2553c68d4f475dfc718d31a4c895ddceee6"], 0x50) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2}) close_range(r3, 0xffffffffffffffff, 0x0) 9.64779369s ago: executing program 3 (id=1850): syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x38, r7, 0x1, 0xfffffffd, 0x0, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}}, 0x40) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r7, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x22}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) 9.566720524s ago: executing program 4 (id=1852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc8}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0xfe7, &(0x7f0000000080)={0x0, 0x0, 0x1000}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.290769065s ago: executing program 5 (id=1853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000870}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x4000, 0x8fdb808b270385a2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r5, 0x0, 0x0, 0x10fff9) 9.255867193s ago: executing program 4 (id=1854): socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)=ANY=[@ANYBLOB="38000000100001040800b5df2a00000000000a4c", @ANYRES32=0x0, @ANYBLOB="6a400400200400001800128008000100677470000c", @ANYBLOB], 0x38}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000200), 0x4) unshare(0x2c060000) unshare(0x24020400) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4008, 0x3, 0x240, 0xd8, 0x500b, 0x148, 0xd8, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0xffffff9c, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x2f}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) socket$inet(0x2, 0x2, 0x0) mq_open(0x0, 0x40, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./bus\x00', 0x0, 0x1001, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='exfat\x00', 0x0, 0x0) 8.337273875s ago: executing program 0 (id=1855): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0d0}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00000001800000000000800300000000000000", @ANYRES32=r0, @ANYBLOB="7e02000010020000000000000000", @ANYRES32=r0, @ANYBLOB="020000000000040000000a0000000000000000400000000000000000"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf250b00000044000580"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x8c0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x1000000000000) openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x20000000000000de, &(0x7f0000000040)=[{0x6, 0x4, 0x8, 0x7ffffcb8}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000600)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64722db7c691a45adb671475fc451b86224a88521a959b66d5668f78f8aa50361d03fb5b7740caf23a7b8aa698769915817e82d5a53b68f56b2e527b042722c6e29349a0fcf278bd2688ae3d7c889710029c8b4699e7eb31d7f7f6935a241e074c156ca70fd25b17923d3891a6cbc3eb6fd9cd7382653b929de6326cc58f3b85b6ee273e48ce537930cdafa26759235e56939f76c9cff354d771f3fa9aaeb737", @ANYRES16=r5, @ANYBLOB="09010000000000000000030000000c00018008000100", @ANYRES32=r6, @ANYBLOB], 0x20}}, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x4008af10, &(0x7f0000000080)) 8.01128051s ago: executing program 3 (id=1856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = socket$inet(0x2, 0x3, 0xe) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1}, 0x18) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000002500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x3f7, 0x4, 0x70bd28, 0x25dfdbfe, {0x5, 0x7, './bus', './file0'}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4880}, 0x4000) r7 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r7, 0x0) modify_ldt$read(0x0, &(0x7f00000000c0)=""/4122, 0x101a) r8 = syz_io_uring_setup(0x3832, &(0x7f0000000080)={0x0, 0xbbc1, 0x10100, 0x0, 0x18b}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}) io_uring_enter(r8, 0x4d8, 0x40, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x6c20}, 0x1, 0x0, 0x0, 0x4000}, 0x24000009) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) 7.618466762s ago: executing program 0 (id=1857): syz_clone(0x41000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.042509015s ago: executing program 4 (id=1858): socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(&(0x7f0000000300)='./file0\x00', 0x60) mount(0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x418, 0xffffffff, 0xffffffff, 0x418, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @loopback, [0xff000000, 0xff000000, 0xff000000, 0xffffffff], [0xffffff00, 0xff, 0xffffffff, 0xffffff00], 'bridge_slave_0\x00', 'rose0\x00', {}, {}, 0x3a, 0x4, 0x4, 0x41}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@srh1={{0x90}, {0x2f, 0x5, 0x2, 0x2, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @private1, [0xff000000, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0xff000000, 0xff000000], [0xff, 0xffffffff, 0xffffff00, 0xff000000], 0x2, 0x1083}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) 4.689275865s ago: executing program 3 (id=1859): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8740, 0x0) mount$pvfs2(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x2200000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 4.621870961s ago: executing program 4 (id=1860): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8740, 0x0) mount$pvfs2(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x2200000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 4.535528901s ago: executing program 0 (id=1861): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x108011, 0xffffffffffffffff, 0x1000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0xffb}], 0x1) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 4.360045845s ago: executing program 2 (id=1862): socket$netlink(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040041e1d113c812e5d601adda05c7b5d27c9"}) syz_open_pts(r0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 4.333886279s ago: executing program 2 (id=1863): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) getpeername$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x88}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f0000001100)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x8, @loopback}, 0x1c, 0x0}}], 0x1, 0x1) recvmmsg(r1, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x12141, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r5, 0xd01c4813, 0x0) 4.051081811s ago: executing program 5 (id=1864): fchmodat(0xffffffffffffff9c, 0x0, 0xfffffe13) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000005380)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x26, 0x0, 0x11100}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008400)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0x0, 0x7, 0x0, 0x0, {0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xee01, 0x80000000, 0xf8}}, {0x0, 0x10}}}, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xc8841, 0x0) dup3(r6, r4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f00000021c0)="305c0607e182087051667557c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e6417acfc8648ad1b86400393d502b0cd490635d54cdf5bd0461690982b236949ab5e000000808ce41d86b9b949004fd8fe45b91e8fe7ec7c49750a1b0ade", 0x5e, 0xfffffffffffffffe) 3.907709899s ago: executing program 5 (id=1865): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)=@multiplanar_overlay={0x6, 0xe, 0x4, 0x0, 0x8, {}, {0x1, 0x0, 0x0, 0x80, 0xfb, 0xa, "0039fff7"}, 0xbcc8, 0x3, {0x0}, 0x7f}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_io_uring_setup(0x66e, &(0x7f0000000040)={0x0, 0x0, 0x100, 0x1}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0\x00'}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r6, &(0x7f0000000900)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r6, &(0x7f0000003b00)=[{{&(0x7f0000000940)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000980)='C', 0x1}], 0x1}}], 0x1, 0x4000000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x80102, 0x0) write$dsp(r8, &(0x7f0000000140)="f3", 0x1) dup2(r7, r8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2.923404281s ago: executing program 3 (id=1866): r0 = socket$inet_sctp(0x2, 0x1, 0x84) close(r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000140)=@assoc_value, &(0x7f0000000500)=0x8) syz_open_dev$radio(&(0x7f0000000200), 0x2, 0x2) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32, @ANYBLOB="0a00340002020202020200ed0b0049"], 0x34}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) 2.91937324s ago: executing program 4 (id=1867): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000107d1eb42d0000000000010902240001000000000914000001000122040009058103000000000000000000000000006f1511747031a528b26b5ecd96fe9d7b"], 0x0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x78, 0x4) fstat(r1, &(0x7f0000000100)) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x41d1, 0x4) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)=ANY=[@ANYBLOB="96c40b00860700dc43696e"]) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00001400000004007d99"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.843626735s ago: executing program 5 (id=1868): socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)=ANY=[@ANYBLOB="38000000100001040800b5df2a00000000000a4c", @ANYRES32=0x0, @ANYBLOB="6a400400200400001800128008000100677470000c", @ANYBLOB], 0x38}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000200), 0x4) unshare(0x2c060000) unshare(0x24020400) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4008, 0x3, 0x240, 0xd8, 0x500b, 0x148, 0xd8, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0xffffff9c, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x2f}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) socket$inet(0x2, 0x2, 0x0) mq_open(0x0, 0x40, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./bus\x00', 0x0, 0x1001, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='exfat\x00', 0x0, 0x0) 1.63963916s ago: executing program 5 (id=1869): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = socket$inet(0x2, 0x3, 0xe) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1}, 0x18) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000002500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x3f7, 0x4, 0x70bd28, 0x25dfdbfe, {0x5, 0x7, './bus', './file0'}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4880}, 0x4000) r7 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r7, 0x0) modify_ldt$read(0x0, &(0x7f00000000c0)=""/4122, 0x101a) r8 = syz_io_uring_setup(0x3832, &(0x7f0000000080)={0x0, 0xbbc1, 0x10100, 0x0, 0x18b}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}) io_uring_enter(r8, 0x4d8, 0x40, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x6c20}, 0x1, 0x0, 0x0, 0x4000}, 0x24000009) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) 1.513540281s ago: executing program 3 (id=1870): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) fcntl$lock(r3, 0x7, 0x0) fcntl$lock(r3, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0x8001}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x300, 0x62e5}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 238.774801ms ago: executing program 2 (id=1871): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x1f, 0x9, @l2={'eth', 0x3a, 'caif0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) 205.607147ms ago: executing program 5 (id=1872): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r3) r4 = timerfd_create(0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) timerfd_settime(r4, 0x3, &(0x7f0000000440), 0x0) (async) timerfd_settime(r4, 0x3, &(0x7f0000000440), 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xb, 0x8000000}) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) 139.959838ms ago: executing program 0 (id=1873): socket$netlink(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040041e1d113c812e5d601adda05c7b5d27c9"}) syz_open_pts(r0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 110.555768ms ago: executing program 3 (id=1874): syz_open_dev$char_usb(0xc, 0xb4, 0x8) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x4000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x400000}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000440)='K', 0x1}], 0x1) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x23, 0xa1, 0x26, 0x8, 0x2770, 0x9120, 0xee8a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8d, 0x0, 0x0, 0xd0, 0x97, 0x6e}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 42.431975ms ago: executing program 0 (id=1875): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r4, &(0x7f0000000080)={0xa, 0x0, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x20) socket$nl_route(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x2}) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000140)={0x7, 0x1, 0x1ff}) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000017f03e3f70fff00006ee2ffca1b1f0000000504c00e72f78100000000000000bf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010006080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) r8 = fcntl$dupfd(r6, 0x0, r6) ioctl$NBD_SET_SOCK(r5, 0xab00, r8) r9 = semget$private(0x0, 0x207, 0x0) semtimedop(r9, &(0x7f00000002c0)=[{0x0, 0xff78}], 0x1, 0x0) semctl$SETALL(r9, 0x0, 0x11, &(0x7f00000003c0)) ioctl$NBD_CLEAR_SOCK(r5, 0xab08) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', r8, 0x4000, r2}, 0x18) 0s ago: executing program 2 (id=1876): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0xfe7, &(0x7f0000000080)={0x0, 0x0, 0x1000}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): AC:8241.0029: unknown main item tag 0x0 [ 714.030845][ T8071] appleir 0003:05AC:8241.0029: unknown main item tag 0x0 [ 714.038029][ T8071] appleir 0003:05AC:8241.0029: unknown main item tag 0x0 [ 714.045244][ T8071] appleir 0003:05AC:8241.0029: unknown main item tag 0x0 [ 714.052942][ T8071] appleir 0003:05AC:8241.0029: No inputs registered, leaving [ 714.065247][T11550] ERROR: Out of memory at tomoyo_realpath_from_path. [ 714.073891][ T8071] appleir 0003:05AC:8241.0029: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 715.416874][T11560] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 715.496616][T11560] PKCS7: Only support pkcs7_signedData type [ 715.789370][ T5885] usbhid 5-1:0.0: can't add hid device: -71 [ 715.797548][ T5885] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 715.807500][ T5885] usb 5-1: USB disconnect, device number 59 [ 715.920228][T11575] FAULT_INJECTION: forcing a failure. [ 715.920228][T11575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 715.934736][T11575] CPU: 1 UID: 0 PID: 11575 Comm: syz.2.1476 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 715.945218][T11575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 715.955317][T11575] Call Trace: [ 715.958615][T11575] [ 715.961560][T11575] dump_stack_lvl+0x241/0x360 [ 715.966271][T11575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 715.971510][T11575] ? __pfx__printk+0x10/0x10 [ 715.976141][T11575] ? __pfx_lock_release+0x10/0x10 [ 715.981189][T11575] ? __lock_acquire+0x1397/0x2100 [ 715.986297][T11575] should_fail_ex+0x3b0/0x4e0 [ 715.991009][T11575] _copy_from_user+0x2f/0xc0 [ 715.995669][T11575] kstrtouint_from_user+0xc6/0x190 [ 716.000799][T11575] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 716.006534][T11575] ? __pfx_lock_acquire+0x10/0x10 [ 716.011578][T11575] proc_fail_nth_write+0xaa/0x2d0 [ 716.016642][T11575] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 716.022575][T11575] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 716.028243][T11575] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 716.034050][T11575] vfs_write+0x2a3/0xd30 [ 716.038371][T11575] ? __pfx_vfs_write+0x10/0x10 [ 716.043159][T11575] ? __fget_files+0x2a/0x410 [ 716.047767][T11575] ? __fget_files+0x395/0x410 [ 716.052458][T11575] ? __fget_files+0x2a/0x410 [ 716.057077][T11575] ksys_write+0x18f/0x2b0 [ 716.061429][T11575] ? __pfx_ksys_write+0x10/0x10 [ 716.066301][T11575] ? do_syscall_64+0x100/0x230 [ 716.071346][T11575] ? do_syscall_64+0xb6/0x230 [ 716.076052][T11575] do_syscall_64+0xf3/0x230 [ 716.080587][T11575] ? clear_bhb_loop+0x35/0x90 [ 716.085301][T11575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.091213][T11575] RIP: 0033:0x7fca5f77d2ff [ 716.095640][T11575] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 716.115270][T11575] RSP: 002b:00007fca6049d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 716.123707][T11575] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fca5f77d2ff [ 716.131688][T11575] RDX: 0000000000000001 RSI: 00007fca6049d0a0 RDI: 0000000000000005 [ 716.139680][T11575] RBP: 00007fca6049d090 R08: 0000000000000000 R09: 0000000000000000 [ 716.147752][T11575] R10: 0000000020000140 R11: 0000000000000293 R12: 0000000000000001 [ 716.155774][T11575] R13: 0000000000000000 R14: 00007fca5f935fa0 R15: 00007ffc5c2c21d8 [ 716.163870][T11575] [ 716.166914][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.176491][T11572] autofs4:pid:11572:validate_dev_ioctl: path string terminator missing for cmd(0xc018937d) [ 716.198320][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 716.789760][T11586] Cannot find del_set index 0 as target [ 717.231250][ T5885] usb 2-1: reset high-speed USB device number 61 using dummy_hcd [ 717.488056][T11597] FAULT_INJECTION: forcing a failure. [ 717.488056][T11597] name failslab, interval 1, probability 0, space 0, times 0 [ 717.501354][T11597] CPU: 1 UID: 0 PID: 11597 Comm: syz.3.1482 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 717.511815][T11597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 717.521873][T11597] Call Trace: [ 717.525166][T11597] [ 717.528114][T11597] dump_stack_lvl+0x241/0x360 [ 717.532848][T11597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 717.538096][T11597] ? __pfx__printk+0x10/0x10 [ 717.542732][T11597] ? __kmalloc_noprof+0xb0/0x400 [ 717.547708][T11597] ? __pfx___might_resched+0x10/0x10 [ 717.553049][T11597] should_fail_ex+0x3b0/0x4e0 [ 717.557776][T11597] ? nla_strdup+0x9c/0x140 [ 717.562231][T11597] should_failslab+0xac/0x100 [ 717.566961][T11597] ? nla_strdup+0x9c/0x140 [ 717.571429][T11597] __kmalloc_noprof+0xd8/0x400 [ 717.576231][T11597] ? __kasan_kmalloc+0x98/0xb0 [ 717.581053][T11597] nla_strdup+0x9c/0x140 [ 717.585344][T11597] nf_tables_newtable+0x59b/0x1e40 [ 717.587262][T11601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1483'. [ 717.590483][T11597] ? nfnl_pernet+0x23/0x240 [ 717.603862][T11597] ? __pfx_nf_tables_newtable+0x10/0x10 [ 717.609466][T11597] ? __nla_parse+0x40/0x60 [ 717.613934][T11597] nfnetlink_rcv+0x14e3/0x2ab0 [ 717.618749][T11597] ? __pfx_validate_chain+0x10/0x10 [ 717.624032][T11597] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 717.629195][T11597] ? __lock_acquire+0x1397/0x2100 [ 717.634297][T11597] ? netlink_deliver_tap+0x2e/0x1b0 [ 717.639548][T11597] ? __pfx_lock_release+0x10/0x10 [ 717.644626][T11597] ? netlink_deliver_tap+0x2e/0x1b0 [ 717.649875][T11597] netlink_unicast+0x7f6/0x990 [ 717.654697][T11597] ? __pfx_netlink_unicast+0x10/0x10 [ 717.660024][T11597] ? __virt_addr_valid+0x183/0x530 [ 717.665183][T11597] ? __check_object_size+0x48e/0x900 [ 717.670525][T11597] netlink_sendmsg+0x8e4/0xcb0 [ 717.675356][T11597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.680702][T11597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.686031][T11597] __sock_sendmsg+0x221/0x270 [ 717.690756][T11597] ____sys_sendmsg+0x52a/0x7e0 [ 717.695570][T11597] ? __pfx_____sys_sendmsg+0x10/0x10 [ 717.700891][T11597] ? __fget_files+0x2a/0x410 [ 717.705518][T11597] ? __fget_files+0x2a/0x410 [ 717.710153][T11597] __sys_sendmsg+0x269/0x350 [ 717.714784][T11597] ? __pfx_lock_release+0x10/0x10 [ 717.719851][T11597] ? __pfx___sys_sendmsg+0x10/0x10 [ 717.725020][T11597] ? __pfx_vfs_write+0x10/0x10 [ 717.729884][T11597] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 717.736272][T11597] ? do_syscall_64+0x100/0x230 [ 717.741092][T11597] ? do_syscall_64+0xb6/0x230 [ 717.745820][T11597] do_syscall_64+0xf3/0x230 [ 717.750373][T11597] ? clear_bhb_loop+0x35/0x90 [ 717.755099][T11597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.761046][T11597] RIP: 0033:0x7f50ec17e819 [ 717.765500][T11597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.785151][T11597] RSP: 002b:00007f50ecf3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.793789][T11597] RAX: ffffffffffffffda RBX: 00007f50ec335fa0 RCX: 00007f50ec17e819 [ 717.801808][T11597] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 717.809836][T11597] RBP: 00007f50ecf3c090 R08: 0000000000000000 R09: 0000000000000000 [ 717.817848][T11597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.825864][T11597] R13: 0000000000000000 R14: 00007f50ec335fa0 R15: 00007ffc7c8dba58 [ 717.833889][T11597] [ 717.837135][ C1] vkms_vblank_simulate: vblank timer overrun [ 718.172313][ T8] usb 2-1: USB disconnect, device number 61 [ 719.602394][T11614] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1484'. [ 719.912461][T11614] 0ªX¹¦À: renamed from caif0 [ 719.931489][T11614] 0ªX¹¦À: entered allmulticast mode [ 719.975535][T11614] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 720.363759][ T5885] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 720.714015][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 720.728245][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 720.764008][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 721.027332][ T5885] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 721.287462][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.336359][ T5885] usb 2-1: Product: syz [ 722.014122][ T5885] usb 2-1: Manufacturer: syz [ 722.018762][ T5885] usb 2-1: SerialNumber: syz [ 722.426989][ T5885] usb 2-1: config 0 descriptor?? [ 722.448906][ T5885] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 722.458451][ T5885] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 722.638833][T11632] syz.3.1492: attempt to access beyond end of device [ 722.638833][T11632] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 722.688495][T11632] syz.3.1492: attempt to access beyond end of device [ 722.688495][T11632] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 722.874135][T11632] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 722.900871][T11632] getblk(): invalid block size 512 requested [ 722.943241][T11632] logical block size: 1024 [ 722.951050][T11632] CPU: 1 UID: 0 PID: 11632 Comm: syz.3.1492 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 722.961546][T11632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 722.971635][T11632] Call Trace: [ 722.974923][T11632] [ 722.977856][T11632] dump_stack_lvl+0x241/0x360 [ 722.982580][T11632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 722.987794][T11632] ? __pfx__printk+0x10/0x10 [ 722.992415][T11632] ? _udf_err+0x13b/0x190 [ 722.996768][T11632] ? fs_reclaim_acquire+0x93/0x130 [ 723.001916][T11632] bdev_getblk+0x4a6/0x550 [ 723.004553][ T5885] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 723.006350][T11632] ? __bread_gfp+0x23c/0x400 [ 723.016975][T11632] __bread_gfp+0x86/0x400 [ 723.021355][T11632] udf_read_tagged+0xa6/0xe00 [ 723.026082][T11632] ? __pfx_call_rcu+0x10/0x10 [ 723.030801][T11632] udf_check_anchor_block+0xba/0x550 [ 723.036135][T11632] ? __phys_addr+0xba/0x170 [ 723.040691][T11632] ? udf_get_last_block+0x2e7/0x3b0 [ 723.045908][T11632] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 723.051842][T11632] ? __bread_gfp+0x23c/0x400 [ 723.056499][T11632] udf_load_vrs+0xc3d/0x1130 [ 723.061136][T11632] ? __pfx_udf_load_vrs+0x10/0x10 [ 723.066184][T11632] ? udf_get_last_session+0x121/0x2d0 [ 723.071598][T11632] udf_fill_super+0x5eb/0x1ed0 [ 723.076404][T11632] ? __pfx_udf_fill_super+0x10/0x10 [ 723.081636][T11632] ? set_blocksize+0x1f9/0x360 [ 723.086421][T11632] ? sb_set_blocksize+0x98/0xf0 [ 723.091307][T11632] ? setup_bdev_super+0x4e6/0x5d0 [ 723.096377][T11632] get_tree_bdev_flags+0x48c/0x5c0 [ 723.101558][T11632] ? __pfx_udf_fill_super+0x10/0x10 [ 723.106797][T11632] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 723.112490][T11632] ? cap_capable+0x1b4/0x250 [ 723.117125][T11632] ? safesetid_security_capable+0xb2/0x1d0 [ 723.122981][T11632] vfs_get_tree+0x90/0x2b0 [ 723.127439][T11632] do_new_mount+0x2be/0xb40 [ 723.132003][T11632] ? __pfx_do_new_mount+0x10/0x10 [ 723.137336][T11632] __se_sys_mount+0x2d6/0x3c0 [ 723.142060][T11632] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 723.148098][T11632] ? __pfx___se_sys_mount+0x10/0x10 [ 723.153349][T11632] ? do_syscall_64+0x100/0x230 [ 723.158133][T11632] ? __x64_sys_mount+0x20/0xc0 [ 723.162958][T11632] do_syscall_64+0xf3/0x230 [ 723.167505][T11632] ? clear_bhb_loop+0x35/0x90 [ 723.172260][T11632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.178194][T11632] RIP: 0033:0x7f50ec17e819 [ 723.182792][T11632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.202443][T11632] RSP: 002b:00007f50ecf3c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 723.210900][T11632] RAX: ffffffffffffffda RBX: 00007f50ec335fa0 RCX: 00007f50ec17e819 [ 723.218906][T11632] RDX: 0000000020000040 RSI: 0000000020004a00 RDI: 0000000020000000 [ 723.226905][T11632] RBP: 00007f50ec1f175e R08: 0000000000000000 R09: 0000000000000000 [ 723.234908][T11632] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 723.242899][T11632] R13: 0000000000000000 R14: 00007f50ec335fa0 R15: 00007ffc7c8dba58 [ 723.250928][T11632] [ 723.276735][ T5885] em28xx 2-1:0.0: Config register raw data: 0x23 [ 723.286655][ T5885] em28xx 2-1:0.0: I2S Audio (1 sample rate(s)) [ 723.292986][ T5885] em28xx 2-1:0.0: No AC97 audio processor [ 723.296446][T11642] nbd3: detected capacity change from 0 to 20 [ 723.302536][T11632] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 723.321778][ T9759] Buffer I/O error on dev nbd3, logical block 0, async page read [ 723.330492][ T9759] Buffer I/O error on dev nbd3, logical block 1, async page read [ 723.338796][ T9759] Buffer I/O error on dev nbd3, logical block 2, async page read [ 723.349876][ T9759] Buffer I/O error on dev nbd3, logical block 3, async page read [ 723.358851][ T9759] Buffer I/O error on dev nbd3, logical block 4, async page read [ 723.371252][ T9759] Buffer I/O error on dev nbd3, logical block 5, async page read [ 723.387113][ T9759] Buffer I/O error on dev nbd3, logical block 6, async page read [ 723.472383][T11653] Cannot find del_set index 1 as target [ 724.282697][ T9759] Buffer I/O error on dev nbd3, logical block 7, async page read [ 724.307863][ T5885] usb 2-1: USB disconnect, device number 62 [ 724.336276][T11638] block nbd3: shutting down sockets [ 724.365435][T11632] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 724.374933][ T9759] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 724.375026][ T9759] Buffer I/O error on dev nbd3, logical block 0, async page read [ 724.376015][T11632] I/O error, dev nbd3, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 724.403514][T11632] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=9, location=9 [ 724.420797][T11632] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 724.431445][T11632] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=8, location=8 [ 724.433456][ T9759] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 724.441811][T11632] I/O error, dev nbd3, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 724.461010][T11632] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=7, location=7 [ 724.470630][T11632] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 724.483736][ T9759] Buffer I/O error on dev nbd3, logical block 1, async page read [ 724.492218][ T9759] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 724.501651][ T9759] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 724.513127][T11632] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 724.523953][ T9759] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 724.535734][ T9759] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 724.545136][T11632] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 724.555701][ T9759] ldm_validate_partition_table(): Disk read failed. [ 724.563256][ T9759] Dev nbd3: unable to read RDB block 0 [ 724.569036][T11632] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=4, location=4 [ 724.600889][T11632] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=3, location=3 [ 724.628402][ T9759] nbd3: unable to read partition table [ 724.634865][T11632] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=2, location=2 [ 724.644912][ T9759] nbd3: partition table beyond EOD, truncated [ 724.698789][T11632] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 724.711082][T11632] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 724.712117][ T9759] ldm_validate_partition_table(): Disk read failed. [ 724.725434][T11632] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=1, location=1 [ 724.728258][ T9759] Dev nbd3: unable to read RDB block 0 [ 724.739702][T11632] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=0, location=0 [ 724.743397][ T9759] nbd3: unable to read partition table [ 724.934774][ T9759] nbd3: partition table beyond EOD, truncated [ 725.025149][T11632] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 725.298729][T11632] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 725.833660][ T5885] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 726.233749][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 726.260783][T11680] No such timeout policy "syz0" [ 726.318261][ T5885] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 726.739829][T11683] tipc: Enabled bearer , priority 0 [ 726.884385][ T5885] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 726.894673][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.903733][ T5885] usb 1-1: Product: syz [ 726.908015][ T5885] usb 1-1: Manufacturer: syz [ 726.912647][ T5885] usb 1-1: SerialNumber: syz [ 726.939394][ T5885] usb 1-1: config 0 descriptor?? [ 727.311654][T11691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1503'. [ 728.279246][ T29] audit: type=1400 audit(1732346533.997:299): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=11675 comm="syz.4.1503" daddr=fe88::5 [ 728.950792][T11659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.959612][T11659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.051674][T11684] tipc: Resetting bearer [ 729.067462][T11682] tipc: Resetting bearer [ 729.494227][ T5885] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 730.543835][ T62] usb 1-1: Failed to submit usb control message: -110 [ 730.561004][ T62] usb 1-1: unable to send the bmi data to the device: -110 [ 730.611702][ T62] usb 1-1: unable to get target info from device [ 730.646311][ T62] usb 1-1: could not get target info (-110) [ 730.663870][ T62] usb 1-1: could not probe fw (-110) [ 732.530825][ T8071] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 732.593803][ T5884] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 732.716842][ T8071] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.732553][ T8071] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.749188][ T8071] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 732.758553][ T8071] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.770761][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 732.789801][ T8071] usb 4-1: config 0 descriptor?? [ 732.806205][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.822873][ T5884] usb 3-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 732.840266][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.864665][ T5884] usb 3-1: config 0 descriptor?? [ 733.221716][ T8071] uclogic 0003:145F:0212.002A: interface is invalid, ignoring [ 733.447895][T11725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.457869][T11725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.478016][ T5884] usb 4-1: USB disconnect, device number 62 [ 733.576405][T11682] tipc: Disabling bearer [ 733.618562][ T5978] usb 1-1: USB disconnect, device number 45 [ 733.767886][ T5885] usb 3-1: USB disconnect, device number 59 [ 736.001335][ T5978] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 738.471804][ T5978] usb 1-1: device not accepting address 46, error -71 [ 738.587064][T11763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1521'. [ 739.733879][ T8] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 739.862908][T11778] tipc: Enabled bearer , priority 0 [ 739.893795][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 739.925540][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1064, setting to 1024 [ 739.963624][ T8] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 739.972744][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.995560][T11778] tipc: Resetting bearer [ 740.015921][ T8] usb 4-1: config 0 descriptor?? [ 740.044328][T11765] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 740.074035][T11777] tipc: Resetting bearer [ 741.034807][ T8] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0909.002B/input/input27 [ 741.105712][ T8] uclogic 0003:28BD:0909.002B: input,hidraw0: USB HID v0.08 Mouse [HID 28bd:0909] on usb-dummy_hcd.3-1/input0 [ 741.269536][ T8] usb 4-1: USB disconnect, device number 63 [ 742.385206][T11801] FAULT_INJECTION: forcing a failure. [ 742.385206][T11801] name failslab, interval 1, probability 0, space 0, times 0 [ 742.398216][T11801] CPU: 0 UID: 0 PID: 11801 Comm: syz.2.1536 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 742.408674][T11801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 742.418739][T11801] Call Trace: [ 742.422021][T11801] [ 742.424970][T11801] dump_stack_lvl+0x241/0x360 [ 742.429672][T11801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 742.434897][T11801] ? __pfx__printk+0x10/0x10 [ 742.439518][T11801] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 742.445509][T11801] ? __pfx___might_resched+0x10/0x10 [ 742.450812][T11801] should_fail_ex+0x3b0/0x4e0 [ 742.455535][T11801] should_failslab+0xac/0x100 [ 742.460249][T11801] ? __alloc_skb+0x1c3/0x440 [ 742.464864][T11801] kmem_cache_alloc_node_noprof+0x71/0x320 [ 742.470701][T11801] __alloc_skb+0x1c3/0x440 [ 742.475170][T11801] ? __pfx___alloc_skb+0x10/0x10 [ 742.480142][T11801] ? netlink_ack_tlv_len+0x6e/0x200 [ 742.485367][T11801] netlink_ack+0x13f/0xa30 [ 742.489826][T11801] ? ____sys_sendmsg+0x52a/0x7e0 [ 742.494781][T11801] ? __sys_sendmsg+0x269/0x350 [ 742.499620][T11801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.505733][T11801] netlink_rcv_skb+0x262/0x430 [ 742.510523][T11801] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 742.515994][T11801] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 742.521303][T11801] ? cap_capable+0x1b4/0x250 [ 742.525903][T11801] ? safesetid_security_capable+0xb2/0x1d0 [ 742.531720][T11801] ? bpf_lsm_capable+0x9/0x10 [ 742.536408][T11801] ? security_capable+0x7e/0x2d0 [ 742.541388][T11801] nfnetlink_rcv+0x297/0x2ab0 [ 742.546079][T11801] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 742.551838][T11801] ? __dev_queue_xmit+0x2f4/0x3f50 [ 742.556975][T11801] ? __dev_queue_xmit+0x1775/0x3f50 [ 742.562187][T11801] ? kasan_save_track+0x51/0x80 [ 742.567056][T11801] ? ____sys_sendmsg+0x52a/0x7e0 [ 742.572004][T11801] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 742.577126][T11801] ? __dev_queue_xmit+0x2f4/0x3f50 [ 742.582248][T11801] ? __pfx___dev_queue_xmit+0x10/0x10 [ 742.587643][T11801] ? ref_tracker_free+0x643/0x7e0 [ 742.592679][T11801] ? __asan_memcpy+0x40/0x70 [ 742.597285][T11801] ? __pfx_ref_tracker_free+0x10/0x10 [ 742.602684][T11801] ? netlink_deliver_tap+0x2e/0x1b0 [ 742.607899][T11801] ? skb_clone+0x240/0x390 [ 742.612346][T11801] ? __pfx_lock_release+0x10/0x10 [ 742.617405][T11801] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 742.622891][T11801] ? netlink_deliver_tap+0x2e/0x1b0 [ 742.628105][T11801] netlink_unicast+0x7f6/0x990 [ 742.632908][T11801] ? __pfx_netlink_unicast+0x10/0x10 [ 742.638219][T11801] ? __virt_addr_valid+0x183/0x530 [ 742.643351][T11801] ? __check_object_size+0x48e/0x900 [ 742.648659][T11801] netlink_sendmsg+0x8e4/0xcb0 [ 742.653450][T11801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 742.658765][T11801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 742.664076][T11801] __sock_sendmsg+0x221/0x270 [ 742.668775][T11801] ____sys_sendmsg+0x52a/0x7e0 [ 742.673564][T11801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 742.678860][T11801] ? __fget_files+0x2a/0x410 [ 742.683460][T11801] ? __fget_files+0x2a/0x410 [ 742.688066][T11801] __sys_sendmsg+0x269/0x350 [ 742.692667][T11801] ? __pfx_lock_release+0x10/0x10 [ 742.697706][T11801] ? __pfx___sys_sendmsg+0x10/0x10 [ 742.702837][T11801] ? __pfx_vfs_write+0x10/0x10 [ 742.707631][T11801] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 742.713970][T11801] ? do_syscall_64+0x100/0x230 [ 742.718752][T11801] ? do_syscall_64+0xb6/0x230 [ 742.723445][T11801] do_syscall_64+0xf3/0x230 [ 742.727962][T11801] ? clear_bhb_loop+0x35/0x90 [ 742.732657][T11801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.738599][T11801] RIP: 0033:0x7fca5f77e819 [ 742.743029][T11801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.762740][T11801] RSP: 002b:00007fca6049d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 742.771179][T11801] RAX: ffffffffffffffda RBX: 00007fca5f935fa0 RCX: 00007fca5f77e819 [ 742.779173][T11801] RDX: 0000000000004000 RSI: 0000000020000400 RDI: 0000000000000003 [ 742.787246][T11801] RBP: 00007fca6049d090 R08: 0000000000000000 R09: 0000000000000000 [ 742.795321][T11801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.803307][T11801] R13: 0000000000000000 R14: 00007fca5f935fa0 R15: 00007ffc5c2c21d8 [ 742.811306][T11801] [ 742.884681][ T5978] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 743.065087][T11805] xt_CT: You must specify a L4 protocol and not use inversions on it [ 743.723716][ T8] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 743.741675][ T5978] usb 2-1: Using ep0 maxpacket: 16 [ 743.748912][ T5978] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 743.848148][ T5978] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 743.857870][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.866367][ T5978] usb 2-1: Product: syz [ 743.870815][ T5978] usb 2-1: Manufacturer: syz [ 743.876218][ T5978] usb 2-1: SerialNumber: syz [ 743.893927][ T5978] usb 2-1: config 0 descriptor?? [ 743.978459][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 744.034882][ T8] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 744.047256][ T8] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 744.180252][T11795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.278472][T11795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.652172][ T5978] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 744.662013][ T8] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 744.677631][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 744.688269][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.696492][ T8] usb 4-1: Product: syz [ 744.700899][ T8] usb 4-1: Manufacturer: syz [ 744.706372][ T8] usb 4-1: SerialNumber: syz [ 744.977782][ T8] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 745.080667][ T8] usb 4-1: USB disconnect, device number 64 [ 745.224994][ T6065] usb 2-1: Failed to submit usb control message: -110 [ 745.232345][ T6065] usb 2-1: unable to send the bmi data to the device: -110 [ 745.248370][ T6065] usb 2-1: unable to get target info from device [ 745.256820][ T6065] usb 2-1: could not get target info (-110) [ 745.270818][ T6065] usb 2-1: could not probe fw (-110) [ 745.287323][ T9745] udevd[9745]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 746.216746][T11777] tipc: Disabling bearer [ 746.441981][T10995] usb 2-1: USB disconnect, device number 63 [ 746.645622][T11831] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 746.652829][T11831] PKCS7: Only support pkcs7_signedData type [ 746.677754][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1543'. [ 746.999439][T11842] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 747.006443][T11842] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 747.054183][T11842] vhci_hcd vhci_hcd.0: Device attached [ 747.403755][T10995] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 747.556116][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.562742][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.605461][T10995] usb 3-1: config 0 has no interfaces? [ 747.611251][T10995] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 747.648445][T10995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.702700][T11851] xt_CT: You must specify a L4 protocol and not use inversions on it [ 748.024108][T10995] usb 3-1: config 0 descriptor?? [ 748.467567][ T5884] usb 3-1: USB disconnect, device number 60 [ 748.473830][T11843] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 748.487336][ T8] vhci_hcd: vhci_device speed not set [ 748.557346][T11854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1550'. [ 748.623916][ T11] vhci_hcd: stop threads [ 748.640592][ T11] vhci_hcd: release socket [ 748.677800][ T11] vhci_hcd: disconnect device [ 748.786774][T11855] No such timeout policy "syz0" [ 749.796936][ T8] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 749.805078][ T8] usb 37-1: enqueue for inactive port 0 [ 749.853595][T11864] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 749.893840][ T8] vhci_hcd: vhci_device speed not set [ 749.959205][T11866] pim6reg: entered allmulticast mode [ 749.981443][T11866] pim6reg: left allmulticast mode [ 750.058276][T11870] xt_CT: You must specify a L4 protocol and not use inversions on it [ 750.903635][ T5978] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 751.063332][ T5978] usb 4-1: Using ep0 maxpacket: 8 [ 751.082862][T11875] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 751.082975][ T5978] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 751.089953][T11875] PKCS7: Only support pkcs7_signedData type [ 751.162201][ T5978] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 751.171471][ T5978] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 751.183923][ T5978] usb 4-1: Product: syz [ 751.188150][ T5978] usb 4-1: Manufacturer: syz [ 751.193025][ T5978] usb 4-1: SerialNumber: syz [ 751.199232][T11872] FAULT_INJECTION: forcing a failure. [ 751.199232][T11872] name failslab, interval 1, probability 0, space 0, times 0 [ 751.219319][T11872] CPU: 0 UID: 0 PID: 11872 Comm: syz.4.1555 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 751.229819][T11872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 751.239928][T11872] Call Trace: [ 751.243257][T11872] [ 751.246225][T11872] dump_stack_lvl+0x241/0x360 [ 751.250940][T11872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 751.256165][T11872] ? __pfx__printk+0x10/0x10 [ 751.260781][T11872] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 751.266355][T11872] ? __pfx___might_resched+0x10/0x10 [ 751.271679][T11872] should_fail_ex+0x3b0/0x4e0 [ 751.276416][T11872] ? __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 751.282526][T11872] should_failslab+0xac/0x100 [ 751.287251][T11872] ? __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 751.293345][T11872] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 751.298790][T11872] __kvm_mmu_topup_memory_cache+0x1e3/0x6b0 [ 751.304716][T11872] kvm_mmu_load+0x115/0x26e0 [ 751.309414][T11872] ? __mutex_unlock_slowpath+0x21e/0x790 [ 751.315080][T11872] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 751.321092][T11872] ? __pfx_kvm_mmu_load+0x10/0x10 [ 751.326137][T11872] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 751.332140][T11872] ? vmx_flush_tlb_guest+0x331/0x5a0 [ 751.337444][T11872] ? vmx_flush_tlb_all+0xc6/0x3c0 [ 751.342485][T11872] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 751.348142][T11872] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 751.354140][T11872] ? kvm_apic_has_interrupt+0x9d4/0xa70 [ 751.359744][T11872] vcpu_run+0x6e74/0x8940 [ 751.364175][T11872] ? __pfx_vcpu_run+0x10/0x10 [ 751.368880][T11872] ? __local_bh_enable_ip+0x168/0x200 [ 751.374271][T11872] ? lockdep_hardirqs_on+0x99/0x150 [ 751.379487][T11872] ? __pfx_lock_acquire+0x10/0x10 [ 751.384524][T11872] ? fpu_swap_kvm_fpstate+0x82/0x460 [ 751.389822][T11872] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 751.395563][T11872] ? xfd_validate_state+0x6e/0x150 [ 751.400700][T11872] ? rcu_is_watching+0x15/0xb0 [ 751.405489][T11872] ? rcu_is_watching+0x15/0xb0 [ 751.410279][T11872] kvm_arch_vcpu_ioctl_run+0xa76/0x19d0 [ 751.415861][T11872] ? mark_lock+0x9a/0x360 [ 751.420209][T11872] ? kvm_arch_vcpu_ioctl_run+0x1cc/0x19d0 [ 751.425943][T11872] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 751.431957][T11872] ? __pfx_lock_acquire+0x10/0x10 [ 751.436994][T11872] ? get_task_pid+0x23/0x310 [ 751.441595][T11872] ? kvm_vcpu_ioctl+0x1da/0xea0 [ 751.446465][T11872] ? __pfx_lock_release+0x10/0x10 [ 751.451503][T11872] ? tomoyo_path_number_perm+0x6f9/0x860 [ 751.457165][T11872] ? get_task_pid+0x23/0x310 [ 751.461772][T11872] kvm_vcpu_ioctl+0x91a/0xea0 [ 751.466500][T11872] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 751.471745][T11872] ? smack_file_ioctl+0x353/0x3a0 [ 751.476798][T11872] ? __pfx_smack_file_ioctl+0x10/0x10 [ 751.482219][T11872] ? __fget_files+0x2a/0x410 [ 751.486846][T11872] ? __fget_files+0x2a/0x410 [ 751.491447][T11872] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 751.496666][T11872] __se_sys_ioctl+0xf5/0x170 [ 751.501274][T11872] do_syscall_64+0xf3/0x230 [ 751.505921][T11872] ? clear_bhb_loop+0x35/0x90 [ 751.510650][T11872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.516560][T11872] RIP: 0033:0x7fcf2997e819 [ 751.520992][T11872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.540613][T11872] RSP: 002b:00007fcf2a76f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.549045][T11872] RAX: ffffffffffffffda RBX: 00007fcf29b35fa0 RCX: 00007fcf2997e819 [ 751.557034][T11872] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 751.565082][T11872] RBP: 00007fcf2a76f090 R08: 0000000000000000 R09: 0000000000000000 [ 751.573094][T11872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.581080][T11872] R13: 0000000000000000 R14: 00007fcf29b35fa0 R15: 00007ffe917e5368 [ 751.589087][T11872] [ 751.934687][ T5978] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 751.943086][ T5978] visor 4-1:1.0: probe with driver visor failed with error -110 [ 753.413665][ T8] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 754.453578][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 754.460393][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.471607][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.481832][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 754.504644][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.534878][ T8] usb 3-1: config 0 descriptor?? [ 754.671485][ T9] usb 4-1: USB disconnect, device number 65 [ 756.422391][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1564'. [ 756.457623][T11910] vlan2: entered promiscuous mode [ 756.753331][ T8] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 756.760552][ T8] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 756.767749][ T8] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 756.774907][ T8] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 756.781998][ T8] appleir 0003:05AC:8241.002C: unknown main item tag 0x0 [ 756.790295][ T8] appleir 0003:05AC:8241.002C: No inputs registered, leaving [ 756.946826][ T8] appleir 0003:05AC:8241.002C: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 756.988223][ T8] usb 3-1: USB disconnect, device number 61 [ 757.243275][T11921] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1568'. [ 757.383835][ T5978] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 757.703683][ T5978] usb 1-1: Using ep0 maxpacket: 32 [ 757.712415][ T5978] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 757.724428][ T5978] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 757.736171][ T5978] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 757.752353][ T5978] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 757.762295][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 757.771764][ T5978] usb 1-1: Product: syz [ 757.778958][ T5978] usb 1-1: Manufacturer: syz [ 757.808290][ T5978] usb 1-1: SerialNumber: syz [ 757.827989][T11915] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 757.856177][ T5978] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input29 [ 758.446153][T11934] xt_CT: You must specify a L4 protocol and not use inversions on it [ 758.486863][T11935] xt_CT: You must specify a L4 protocol and not use inversions on it [ 758.559668][T11915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.589116][T11915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.625275][ T5884] usb 1-1: USB disconnect, device number 48 [ 758.647191][ T5884] appletouch 1-1:1.0: input: appletouch disconnected [ 759.213175][T11949] xt_CT: You must specify a L4 protocol and not use inversions on it [ 760.749037][ T8] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 761.604081][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 761.617297][ T8] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 761.626168][ T8] usb 1-1: config 0 has no interface number 0 [ 762.616260][ T8] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 762.627959][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.667535][ T8] usb 1-1: Product: syz [ 763.671872][ T8] usb 1-1: Manufacturer: syz [ 763.676682][ T8] usb 1-1: SerialNumber: syz [ 764.710958][ T8] usb 1-1: config 0 descriptor?? [ 769.853288][ T8] usb 1-1: can't set config #0, error -110 [ 770.237065][ T8] usb 1-1: USB disconnect, device number 49 [ 770.606993][T11981] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001 [ 770.642322][T11981] tipc: Enabled bearer , priority 10 [ 770.723057][T11987] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 770.925467][T11990] xt_CT: You must specify a L4 protocol and not use inversions on it [ 771.004219][ T5884] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 771.219395][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 771.346808][ T5884] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 771.587528][ T5884] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 771.692925][ T5884] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 771.744243][ T5884] usb 5-1: Product: syz [ 771.754133][ T5884] usb 5-1: Manufacturer: syz [ 771.758883][ T5884] usb 5-1: SerialNumber: syz [ 771.992904][T11997] xt_CT: You must specify a L4 protocol and not use inversions on it [ 772.876549][ T5884] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 772.885052][ T5884] usb 5-1: Handspring Visor / Palm OS: port 0, is for Console use [ 772.892902][ T5884] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 772.900834][ T5884] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 773.213998][ T5884] usb 5-1: palm_os_3_probe - error -110 getting bytes available request [ 773.222698][ T5884] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 773.249135][T10305] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 773.261588][T10305] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 773.271072][T10305] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 773.282247][T10305] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 773.309905][ T5884] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 773.321532][ T5884] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 773.336849][ T5884] usb 5-1: USB disconnect, device number 60 [ 773.348458][ T5884] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 773.361329][T10305] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 773.369366][ T5884] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 773.381076][ T5884] visor 5-1:1.0: device disconnected [ 773.394959][T10305] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 773.563667][ T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 773.612099][T12010] FAULT_INJECTION: forcing a failure. [ 773.612099][T12010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.626094][T12010] CPU: 1 UID: 0 PID: 12010 Comm: syz.0.1591 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 773.636569][T12010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 773.646768][T12010] Call Trace: [ 773.650084][T12010] [ 773.653054][T12010] dump_stack_lvl+0x241/0x360 [ 773.657786][T12010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 773.663046][T12010] ? __pfx__printk+0x10/0x10 [ 773.667692][T12010] ? __pfx_lock_release+0x10/0x10 [ 773.672774][T12010] should_fail_ex+0x3b0/0x4e0 [ 773.677515][T12010] _copy_from_user+0x2f/0xc0 [ 773.682155][T12010] ethtool_set_per_queue+0xba/0x1f0 [ 773.687406][T12010] ? __pfx_ethtool_set_per_queue+0x10/0x10 [ 773.693311][T12010] ? __pfx_lock_release+0x10/0x10 [ 773.698390][T12010] ? __might_fault+0xc6/0x120 [ 773.703122][T12010] dev_ethtool+0x104a/0x1bc0 [ 773.707772][T12010] ? __pfx_dev_ethtool+0x10/0x10 [ 773.712760][T12010] ? kfree+0x1a0/0x440 [ 773.716896][T12010] ? dev_load+0x21/0x1f0 [ 773.721179][T12010] dev_ioctl+0x785/0x1340 [ 773.725550][T12010] sock_do_ioctl+0x240/0x460 [ 773.730194][T12010] ? __pfx_sock_do_ioctl+0x10/0x10 [ 773.735367][T12010] ? __asan_memset+0x23/0x50 [ 773.740006][T12010] ? smack_file_ioctl+0x29e/0x3a0 [ 773.745087][T12010] sock_ioctl+0x626/0x8e0 [ 773.749458][T12010] ? __pfx_sock_ioctl+0x10/0x10 [ 773.754354][T12010] ? __fget_files+0x2a/0x410 [ 773.758993][T12010] ? __fget_files+0x2a/0x410 [ 773.763618][T12010] ? __pfx_sock_ioctl+0x10/0x10 [ 773.768481][T12010] __se_sys_ioctl+0xf5/0x170 [ 773.773083][T12010] do_syscall_64+0xf3/0x230 [ 773.777630][T12010] ? clear_bhb_loop+0x35/0x90 [ 773.782330][T12010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.788248][T12010] RIP: 0033:0x7f14ce37e819 [ 773.792698][T12010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.812335][T12010] RSP: 002b:00007f14cf1fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 773.820773][T12010] RAX: ffffffffffffffda RBX: 00007f14ce535fa0 RCX: 00007f14ce37e819 [ 773.828772][T12010] RDX: 0000000020000900 RSI: 0000000000008946 RDI: 0000000000000004 [ 773.834823][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 773.836760][T12010] RBP: 00007f14cf1fc090 R08: 0000000000000000 R09: 0000000000000000 [ 773.849894][T12010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.855202][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 773.857875][T12010] R13: 0000000000000000 R14: 00007f14ce535fa0 R15: 00007ffe9f45dc88 [ 773.877019][T12010] [ 773.906314][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 773.924587][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 773.959382][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 773.968853][ T5978] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 773.991118][ T9] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 774.170141][ T9] usb 3-1: Product: syz [ 774.182365][T12001] chnl_net:caif_netlink_parms(): no params data found [ 774.184474][ T9] usb 3-1: Manufacturer: syz [ 774.212180][ T9] usb 3-1: SerialNumber: syz [ 774.221634][T12019] bridge_slave_0: left allmulticast mode [ 774.262495][T12019] bridge_slave_0: left promiscuous mode [ 774.499786][T12019] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.615717][T12019] bridge_slave_1: left allmulticast mode [ 774.623040][T12019] bridge_slave_1: left promiscuous mode [ 774.690204][T12019] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.836809][ T29] audit: type=1326 audit(1732346581.527:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2997e819 code=0x7fc00000 [ 774.949669][T12019] bond0: (slave bond_slave_0): Releasing backup interface [ 774.987371][T12019] bond0: (slave bond_slave_1): Releasing backup interface [ 775.046376][T12019] team0: Port device team_slave_0 removed [ 775.083118][T12019] team0: Port device team_slave_1 removed [ 775.092376][ T29] audit: type=1326 audit(1732346581.777:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf2997e819 code=0x7fc00000 [ 775.124944][ T29] audit: type=1326 audit(1732346581.807:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2997e819 code=0x7fc00000 [ 775.157865][T12003] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 775.168695][ T9] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input30 [ 775.178249][ T5978] usb 4-1: Using ep0 maxpacket: 16 [ 775.187103][ T5978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.198257][ T5978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.208575][ T29] audit: type=1326 audit(1732346581.807:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2997e819 code=0x7fc00000 [ 775.210540][ T5978] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 775.233487][T12019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.260500][ C0] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 775.263727][T12019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.288057][ T29] audit: type=1326 audit(1732346581.807:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2997e819 code=0x7fc00000 [ 775.312528][T12019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.321995][T12019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.330560][ T5978] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 775.334753][ T29] audit: type=1326 audit(1732346581.807:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2997e819 code=0x7fc00000 [ 775.360588][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.382681][ T29] audit: type=1326 audit(1732346581.807:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2997e819 code=0x7fc00000 [ 775.417871][ T5978] usb 4-1: config 0 descriptor?? [ 775.436650][ T29] audit: type=1326 audit(1732346581.807:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2997e819 code=0x7fc00000 [ 775.462191][ T29] audit: type=1326 audit(1732346581.817:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2997e819 code=0x7fc00000 [ 775.491873][ T29] audit: type=1326 audit(1732346581.817:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12018 comm="syz.4.1594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf2997e819 code=0x7fc00000 [ 775.498223][T10305] Bluetooth: hci3: command tx timeout [ 775.595697][T12039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.648113][T12039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.702749][T12001] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.710578][T12001] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.720111][T12001] bridge_slave_0: entered allmulticast mode [ 775.728407][T12001] bridge_slave_0: entered promiscuous mode [ 775.741435][T12001] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.757263][T12001] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.770440][T12001] bridge_slave_1: entered allmulticast mode [ 775.781773][T12001] bridge_slave_1: entered promiscuous mode [ 775.788098][T10305] Bluetooth: hci0: command 0x0406 tx timeout [ 775.831286][T12001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.847034][ T5978] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 775.854530][ T5978] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 775.855396][T12001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.862883][ T5978] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 775.878858][ T5978] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 775.886357][ T5978] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 775.894206][ T5978] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 775.901586][ T5978] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 775.909518][ T5978] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 775.922435][T12043] xt_CT: You must specify a L4 protocol and not use inversions on it [ 776.055769][T12014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.163267][T12030] orangefs_mount: mount request failed with -4 [ 776.282559][T12014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.653346][ T5978] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 776.661447][ T5978] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 776.727296][ T5978] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.002D/input/input31 [ 776.784597][ T9] usb 3-1: USB disconnect, device number 62 [ 776.800795][T12001] team0: Port device team_slave_0 added [ 776.810581][T12001] team0: Port device team_slave_1 added [ 776.848765][ T9] appletouch 3-1:1.0: input: appletouch disconnected [ 776.870830][ T5978] microsoft 0003:045E:07DA.002D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 777.064155][ T5978] usb 4-1: USB disconnect, device number 66 [ 777.502113][T12001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.518327][T12001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.545474][ T8] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 777.561081][T10305] Bluetooth: hci3: command tx timeout [ 777.658286][T12001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.339897][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 778.371482][T12001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.378728][T12001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.405288][T12001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.427557][T12057] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1603'. [ 778.441053][T12057] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1603'. [ 778.453259][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 778.473121][ T8] usb 1-1: config 127 has an invalid interface number: 25 but max is 0 [ 778.481642][ T8] usb 1-1: config 127 has no interface number 0 [ 778.488137][ T8] usb 1-1: config 127 interface 25 has no altsetting 0 [ 778.496001][ T5978] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 778.514880][ T8] usb 1-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 778.531268][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.539656][ T8] usb 1-1: Product: syz [ 778.549776][ T8] usb 1-1: Manufacturer: syz [ 778.558337][ T8] usb 1-1: SerialNumber: syz [ 778.640909][T12001] hsr_slave_0: entered promiscuous mode [ 778.700432][ T5978] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 778.718873][ T5978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 778.731252][T12001] hsr_slave_1: entered promiscuous mode [ 778.738127][ T5978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 778.748850][T12001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 778.756626][T12001] Cannot create hsr debugfs directory [ 778.762332][ T5978] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 778.789835][ T5978] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 779.219046][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.236468][ T5978] usb 4-1: config 0 descriptor?? [ 779.244352][ T8] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 779.527002][T12001] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 779.589653][T12001] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 779.634834][T10305] Bluetooth: hci3: command tx timeout [ 779.638669][T12001] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 779.669946][T12001] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 779.677139][ T5978] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving [ 779.688317][ T5978] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 780.663842][T12076] input: syz0 as /devices/virtual/input/input33 [ 780.913121][ T8] ueagle-atm 1-1:127.25: usbatm_usb_probe: bind failed: -19! [ 781.269790][ T8] usb 1-1: USB disconnect, device number 50 [ 781.652197][T12074] netdevsim netdevsim2: Direct firmware load for WÙ«Zê¤Û failed with error -2 [ 781.699577][T12001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.707498][T12074] netdevsim netdevsim2: Falling back to sysfs fallback for: WÙ«Zê¤Û [ 781.724421][T10305] Bluetooth: hci3: command tx timeout [ 781.801461][T12001] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.891316][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.898597][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.943255][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.950538][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.031586][T12001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 782.284593][T10995] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 782.308329][T12001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.539760][T10995] usb 1-1: Using ep0 maxpacket: 32 [ 782.545786][ T8071] usb 4-1: USB disconnect, device number 67 [ 782.573846][T10995] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 782.585312][T10995] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 782.690235][T10995] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 782.741457][T10995] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 782.752968][T10995] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 782.761810][T10995] usb 1-1: Product: syz [ 782.860943][T12001] veth0_vlan: entered promiscuous mode [ 782.891653][T12001] veth1_vlan: entered promiscuous mode [ 782.943195][T10995] usb 1-1: Manufacturer: syz [ 782.969014][T10995] usb 1-1: SerialNumber: syz [ 783.747275][T12086] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 783.758355][T10995] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input34 [ 783.840461][T12001] veth0_macvtap: entered promiscuous mode [ 783.855372][ C0] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 783.902215][T12001] veth1_macvtap: entered promiscuous mode [ 784.046212][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 784.174781][T12001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.199096][T12001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.219332][T12112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.994140][T12001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.005500][T12112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.025831][T12001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.060038][ T8] usb 1-1: USB disconnect, device number 51 [ 785.060128][ C1] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 785.087332][T12001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.101441][T12001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.219954][T12117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1611'. [ 785.349805][ T29] kauditd_printk_skb: 609 callbacks suppressed [ 785.349831][ T29] audit: type=1400 audit(1732346591.907:919): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=12091 comm="syz.4.1611" daddr=fe88::5 [ 785.456443][T12001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.477570][ T8] appletouch 1-1:1.0: input: appletouch disconnected [ 785.493596][T12001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.519832][T12001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.531543][T12001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.545908][T12001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.550603][ T29] audit: type=1400 audit(1732346592.217:920): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=12120 comm="syz.3.1616" dest=2 [ 785.567556][T12001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.770199][T12001] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.779280][T12001] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.788332][T12001] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.797429][T12001] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.881850][ T6065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.921290][ T6065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.929451][ T54] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 786.998470][ T7125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 787.054646][ T7125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.353720][ T5884] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 790.504097][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 790.522400][ T5884] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 790.544844][ T5884] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 790.573665][ T5884] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 790.627215][ T5884] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 790.637446][ T29] audit: type=1400 audit(1732346597.327:921): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=12172 comm="syz.0.1631" daddr=fe88::1 [ 790.654947][T12181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1631'. [ 790.664207][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 790.675568][ T5884] usb 3-1: Product: syz [ 790.686361][ T5884] usb 3-1: Manufacturer: syz [ 790.694841][ T5884] usb 3-1: SerialNumber: syz [ 790.745338][T12171] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 790.756525][ T5884] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input35 [ 791.125217][T12184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.137225][T10305] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 791.158087][T12184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.915960][T12200] pim6reg: entered allmulticast mode [ 793.871586][T12205] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1639'. [ 793.937177][ T8] usb 3-1: USB disconnect, device number 63 [ 794.017362][ T8] appletouch 3-1:1.0: input: appletouch disconnected [ 794.333906][ T25] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 794.614031][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 794.634253][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.758841][ T25] usb 4-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 794.962209][T12213] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1642'. [ 794.971609][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.018242][ T25] usb 4-1: config 0 descriptor?? [ 795.429545][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1645'. [ 795.613167][ T25] input: HID 0458:5014 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5014.002F/input/input36 [ 795.738520][ T25] kye 0003:0458:5014.002F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5014] on usb-dummy_hcd.3-1/input0 [ 795.751313][T12237] netdevsim netdevsim5: Direct firmware load for WÙ«Zê¤Û failed with error -2 [ 795.833751][T12237] netdevsim netdevsim5: Falling back to sysfs fallback for: WÙ«Zê¤Û [ 796.903969][ T8] usb 4-1: reset high-speed USB device number 68 using dummy_hcd [ 797.835207][ T5978] usb 4-1: USB disconnect, device number 68 [ 798.427560][T12252] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1651'. [ 799.189784][T12265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1657'. [ 799.200936][T12265] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1657'. [ 800.043886][ T29] audit: type=1400 audit(1732346606.347:922): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=12264 comm="syz.4.1657" daddr=::ffff:172.20.20.57 dest=20001 [ 800.228043][T10305] Bluetooth: hci2: unexpected event for opcode 0x043d [ 800.240233][ T29] audit: type=1326 audit(1732346606.927:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12270 comm="syz.4.1659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf2997e819 code=0x0 [ 800.508992][T10305] Bluetooth: hci3: command tx timeout [ 800.559900][T12274] syzkaller0: entered promiscuous mode [ 800.566265][T12274] syzkaller0: entered allmulticast mode [ 800.621739][T12274] dlm: no local IP address has been set [ 800.637811][T12274] dlm: cannot start dlm midcomms -107 [ 800.933263][T12280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1654'. [ 800.980294][ T29] audit: type=1400 audit(1732346607.617:924): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=12259 comm="syz.3.1654" daddr=fe88::4 [ 802.292822][T10305] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 803.822812][T12299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1667'. [ 803.832333][T12300] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1666'. [ 805.582517][ T5978] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 805.743633][ T5978] usb 5-1: Using ep0 maxpacket: 16 [ 805.750878][ T5978] usb 5-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 805.763810][ T5978] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 805.788804][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 805.797661][ T5978] usb 5-1: SerialNumber: syz [ 805.819297][ T5978] cdc_acm 5-1:1.0: skipping garbage [ 805.824860][ T5978] cdc_acm 5-1:1.0: invalid descriptor buffer length [ 805.831595][ T5978] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 805.841688][ T5978] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 805.849123][ T5978] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 807.129738][T12318] netdevsim netdevsim2: Direct firmware load for WÙ«Zê¤Û failed with error -2 [ 807.145542][T12318] netdevsim netdevsim2: Falling back to sysfs fallback for: WÙ«Zê¤Û [ 807.309502][ T54] Bluetooth: hci0: unexpected event for opcode 0x043d [ 808.996703][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.003081][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.023964][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 809.173778][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 809.182706][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.201154][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.211748][ T25] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 809.230993][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.253334][ T25] usb 6-1: config 0 descriptor?? [ 809.687686][ T25] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8241.0030/input/input37 [ 809.768873][ T25] appleir 0003:05AC:8241.0030: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 810.309859][ T25] usb 5-1: USB disconnect, device number 61 [ 810.579690][T12358] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1680'. [ 810.964002][ T25] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 811.049950][T10995] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 811.144105][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 811.166569][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 811.388030][ T25] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 811.885330][ T25] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 811.893796][ T25] usb 3-1: Product: syz [ 811.898004][ T25] usb 3-1: Manufacturer: syz [ 811.902650][ T25] usb 3-1: SerialNumber: syz [ 812.128771][ T25] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 812.165311][ T25] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 812.204493][ T25] usb 3-1: Handspring Visor / Palm OS: port 0, is for HotSync use [ 812.212497][ T25] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 812.421638][ T25] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 812.430946][ T25] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 812.566151][ T25] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 812.664265][ T25] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 812.701607][T12373] vivid-001: disconnect [ 812.705113][ T5884] usb 6-1: USB disconnect, device number 2 [ 812.714161][ T5918] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 812.734312][ T25] usb 3-1: USB disconnect, device number 64 [ 812.759035][T12372] vivid-001: reconnect [ 812.787429][ T25] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 812.810087][T12381] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 812.839169][ T25] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 812.862072][ T25] visor 3-1:1.0: device disconnected [ 812.873852][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 812.881093][ T5918] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 812.898860][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.924071][ T5918] usb 5-1: config 0 has no interface number 0 [ 812.944185][ T5918] usb 5-1: config 0 interface 64 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 812.970561][ T5918] usb 5-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 812.988490][ T5918] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 812.998512][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=75 [ 813.008226][ T5918] usb 5-1: Product: syz [ 813.012443][ T5918] usb 5-1: Manufacturer: syz [ 813.018685][ T5918] usb 5-1: SerialNumber: syz [ 813.031820][ T5918] usb 5-1: config 0 descriptor?? [ 813.047683][ T5918] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 813.191809][ T29] audit: type=1400 audit(1732346619.877:925): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=12394 comm="syz.5.1692" daddr=::ffff:255.255.255.255 [ 813.460420][ T5918] usb 5-1: USB disconnect, device number 62 [ 813.476761][ T3550] usb 5-1: Failed to submit usb control message: -71 [ 813.526931][ T3550] usb 5-1: unable to send the bmi data to the device: -71 [ 813.540318][ T3550] usb 5-1: unable to get target info from device [ 813.552336][ T3550] usb 5-1: could not get target info (-71) [ 813.558653][ T3550] usb 5-1: could not probe fw (-71) [ 813.565295][ T25] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 813.704044][ T25] usb 1-1: device descriptor read/64, error -71 [ 813.852371][T12402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1693'. [ 814.613638][ T25] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 814.879545][ T25] usb 1-1: device descriptor read/64, error -71 [ 815.381122][ T25] usb usb1-port1: attempt power cycle [ 816.240878][ T5885] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 816.693727][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 817.636532][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.671140][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.779247][ T5885] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 817.820407][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.120103][T12430] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 818.145584][ T5885] usb 3-1: config 0 descriptor?? [ 820.384285][ T5885] usb 3-1: can't set config #0, error -71 [ 820.393897][ T5885] usb 3-1: USB disconnect, device number 65 [ 822.839196][T12448] netdevsim netdevsim0: Direct firmware load for WÙ«Zê¤Û failed with error -2 [ 822.850505][T12448] netdevsim netdevsim0: Falling back to sysfs fallback for: WÙ«Zê¤Û [ 822.866296][ T29] audit: type=1400 audit(1732346629.477:926): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=12444 comm="syz.4.1705" daddr=::ffff:255.255.255.255 [ 823.122979][T12455] FAULT_INJECTION: forcing a failure. [ 823.122979][T12455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.136391][T12455] CPU: 0 UID: 0 PID: 12455 Comm: syz.5.1708 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 823.146912][T12455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 823.157180][T12455] Call Trace: [ 823.160493][T12455] [ 823.163435][T12455] dump_stack_lvl+0x241/0x360 [ 823.168143][T12455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 823.173364][T12455] ? __pfx__printk+0x10/0x10 [ 823.177976][T12455] ? __pfx_lock_release+0x10/0x10 [ 823.183019][T12455] should_fail_ex+0x3b0/0x4e0 [ 823.187723][T12455] _copy_from_user+0x2f/0xc0 [ 823.192330][T12455] copy_msghdr_from_user+0xae/0x680 [ 823.197547][T12455] ? __lock_acquire+0x1397/0x2100 [ 823.202586][T12455] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 823.208445][T12455] ? __fget_files+0x2a/0x410 [ 823.213237][T12455] ? __fget_files+0x2a/0x410 [ 823.217860][T12455] do_recvmmsg+0x3bd/0xab0 [ 823.222321][T12455] ? __pfx_do_recvmmsg+0x10/0x10 [ 823.227300][T12455] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 823.233235][T12455] ? ksys_write+0x22a/0x2b0 [ 823.237948][T12455] ? __pfx_lock_release+0x10/0x10 [ 823.243005][T12455] ? vfs_write+0x730/0xd30 [ 823.247566][T12455] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 823.253745][T12455] ? __fget_files+0x2a/0x410 [ 823.258374][T12455] __x64_sys_recvmmsg+0x199/0x250 [ 823.263445][T12455] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 823.269012][T12455] ? do_syscall_64+0x100/0x230 [ 823.273814][T12455] ? do_syscall_64+0xb6/0x230 [ 823.278523][T12455] do_syscall_64+0xf3/0x230 [ 823.283052][T12455] ? clear_bhb_loop+0x35/0x90 [ 823.287763][T12455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.293789][T12455] RIP: 0033:0x7f1f7777e819 [ 823.298241][T12455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 823.317884][T12455] RSP: 002b:00007f1f784a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 823.326336][T12455] RAX: ffffffffffffffda RBX: 00007f1f77935fa0 RCX: 00007f1f7777e819 [ 823.334318][T12455] RDX: 0000000000000001 RSI: 0000000020005d80 RDI: 0000000000000004 [ 823.342296][T12455] RBP: 00007f1f784a5090 R08: 0000000000000000 R09: 0000000000000000 [ 823.350276][T12455] R10: 0000000040000102 R11: 0000000000000246 R12: 0000000000000001 [ 823.358261][T12455] R13: 0000000000000000 R14: 00007f1f77935fa0 R15: 00007ffd575c76e8 [ 823.366260][T12455] [ 823.763637][ T8] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 824.016097][ T8] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 824.027141][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 824.050839][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 824.079999][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.309971][ T8] usb 3-1: config 0 descriptor?? [ 824.335696][ T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 825.820702][T12483] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 826.277531][T12490] netlink: 'syz.0.1716': attribute type 15 has an invalid length. [ 827.373918][ T29] audit: type=1400 audit(1732346634.067:927): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=12494 comm="syz.0.1719" dest=20004 [ 827.595090][ T5918] usb 3-1: USB disconnect, device number 66 [ 827.604992][ T8] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 827.669329][T12507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1721'. [ 827.687035][T12507] No such timeout policy "syz0" [ 827.708872][T12507] syz.4.1721: attempt to access beyond end of device [ 827.708872][T12507] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 827.721960][T12507] exFAT-fs (nbd4): unable to read boot sector [ 827.728295][T12507] exFAT-fs (nbd4): failed to read boot sector [ 827.734506][T12507] exFAT-fs (nbd4): failed to recognize exfat type [ 828.643713][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 828.648143][T10305] Bluetooth: hci5: sending frame failed (-49) [ 828.657142][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 828.677994][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.698434][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.718263][T12512] bond0: (slave team0): Releasing backup interface [ 828.718734][ T8] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 828.748327][T12512] team0: left allmulticast mode [ 828.778431][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.791169][T12512] team_slave_0: left allmulticast mode [ 828.818225][T12512] team_slave_1: left allmulticast mode [ 828.828356][ T8] usb 4-1: config 0 descriptor?? [ 828.835423][T12512] team0: left promiscuous mode [ 828.850515][T12512] team_slave_0: left promiscuous mode [ 828.864398][T12512] team_slave_1: left promiscuous mode [ 828.883043][T12512] bridge_slave_0: left allmulticast mode [ 828.893750][T12512] bridge_slave_0: left promiscuous mode [ 828.903054][T12512] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.929281][T12512] bridge_slave_1: left allmulticast mode [ 828.967008][ T29] audit: type=1326 audit(1732346635.657:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12511 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5f77e819 code=0x7fc00000 [ 828.991450][T12512] bridge_slave_1: left promiscuous mode [ 829.006295][T12512] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.029173][T12512] bond0: (slave bond_slave_0): Releasing backup interface [ 829.047309][T12512] bond_slave_0: left promiscuous mode [ 829.072382][T12512] bond0: (slave bond_slave_1): Releasing backup interface [ 829.090064][T12512] bond_slave_1: left promiscuous mode [ 829.142583][T12512] team0: Port device team_slave_0 removed [ 829.169794][T12512] team0: Port device team_slave_1 removed [ 829.186256][T12512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 829.194308][T12512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.205740][T12512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 829.213413][T12512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.287556][ T8] uclogic 0003:28BD:0094.0031: interface is invalid, ignoring [ 829.321709][ T29] audit: type=1400 audit(1732346636.007:929): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=12527 comm="syz.0.1725" daddr=fe80::1b dest=16385 [ 829.341309][T12531] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 829.371949][T12512] bond0: (slave vlan2): Releasing backup interface [ 829.411245][ T29] audit: type=1326 audit(1732346636.097:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12511 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca5f77e819 code=0x7fc00000 [ 829.466554][ T29] audit: type=1326 audit(1732346636.127:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12511 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5f77e819 code=0x7fc00000 [ 829.561667][ T5978] usb 4-1: USB disconnect, device number 69 [ 829.574255][ T29] audit: type=1326 audit(1732346636.127:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12511 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5f77e819 code=0x7fc00000 [ 829.634852][ T29] audit: type=1326 audit(1732346636.127:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12511 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5f77e819 code=0x7fc00000 [ 829.677298][ T29] audit: type=1326 audit(1732346636.127:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12511 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5f77e819 code=0x7fc00000 [ 829.703754][ T29] audit: type=1326 audit(1732346636.127:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12511 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5f77e819 code=0x7fc00000 [ 829.830637][ T29] audit: type=1326 audit(1732346636.127:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12511 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5f77e819 code=0x7fc00000 [ 829.909839][ T29] audit: type=1326 audit(1732346636.127:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12511 comm="syz.2.1723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5f77e819 code=0x7fc00000 [ 830.008190][T12539] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1728'. [ 830.465299][T12546] Cannot find del_set index 0 as target [ 831.777185][T12565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1734'. [ 832.232707][ T5918] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 832.453922][T12565] No such timeout policy "syz0" [ 832.612375][T12563] syz.2.1734: attempt to access beyond end of device [ 832.612375][T12563] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 832.625291][T12563] exFAT-fs (nbd2): unable to read boot sector [ 832.631390][T12563] exFAT-fs (nbd2): failed to read boot sector [ 832.637534][T12563] exFAT-fs (nbd2): failed to recognize exfat type [ 832.815459][ T5918] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 832.833726][ T5918] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 832.877706][ T5918] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 240, setting to 64 [ 832.913578][ T5918] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 832.969115][ T5918] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 833.020189][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.141487][T12575] tmpfs: Unknown parameter 'nohap' [ 833.359576][ T5918] ath6kl: Failed to submit usb control message: -71 [ 833.373571][ T5918] ath6kl: unable to send the bmi data to the device: -71 [ 833.387801][ T5978] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 833.390096][ T5918] ath6kl: Unable to send get target info: -71 [ 833.415461][ T5918] ath6kl: Failed to init ath6kl core: -71 [ 833.428649][ T5918] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 833.456392][ T5918] usb 1-1: USB disconnect, device number 55 [ 833.539513][T12579] netlink: 'syz.3.1739': attribute type 5 has an invalid length. [ 833.559326][ T5978] usb 3-1: Using ep0 maxpacket: 8 [ 833.566555][ T5978] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 833.583840][ T5978] usb 3-1: config 179 has no interface number 0 [ 833.593987][ T5978] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 833.612007][ T5978] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 833.624043][ T5978] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 833.636186][ T5978] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 833.647859][ T5978] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 833.661779][ T5978] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 833.677749][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.716746][T12575] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 833.803315][T12583] FAULT_INJECTION: forcing a failure. [ 833.803315][T12583] name failslab, interval 1, probability 0, space 0, times 0 [ 833.839764][T12583] CPU: 0 UID: 0 PID: 12583 Comm: syz.5.1741 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 833.850266][T12583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 833.860368][T12583] Call Trace: [ 833.863688][T12583] [ 833.866662][T12583] dump_stack_lvl+0x241/0x360 [ 833.871395][T12583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 833.876653][T12583] ? __pfx__printk+0x10/0x10 [ 833.881301][T12583] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 833.886814][T12583] ? __pfx___might_resched+0x10/0x10 [ 833.892164][T12583] should_fail_ex+0x3b0/0x4e0 [ 833.896909][T12583] should_failslab+0xac/0x100 [ 833.901649][T12583] ? ctnetlink_alloc_filter+0xb0/0xbf0 [ 833.907259][T12583] __kmalloc_cache_noprof+0x6c/0x2c0 [ 833.912610][T12583] ctnetlink_alloc_filter+0xb0/0xbf0 [ 833.917972][T12583] ? __pfx_ctnetlink_alloc_filter+0x10/0x10 [ 833.923933][T12583] ? __mutex_trylock_common+0x183/0x2e0 [ 833.929548][T12583] ctnetlink_start+0x13c/0x1b0 [ 833.934364][T12583] __netlink_dump_start+0x45c/0x790 [ 833.939599][T12583] ctnetlink_get_conntrack+0x2be/0x870 [ 833.945090][T12583] ? __pfx_ctnetlink_get_conntrack+0x10/0x10 [ 833.951179][T12583] ? nfnetlink_rcv_msg+0xa5c/0x1180 [ 833.956393][T12583] ? __pfx___mutex_lock+0x10/0x10 [ 833.961445][T12583] ? __pfx_ctnetlink_start+0x10/0x10 [ 833.966754][T12583] ? __pfx_ctnetlink_dump_table+0x10/0x10 [ 833.972492][T12583] ? __pfx_ctnetlink_done+0x10/0x10 [ 833.977725][T12583] ? nfnetlink_rcv_msg+0x225/0x1180 [ 833.982937][T12583] nfnetlink_rcv_msg+0xbec/0x1180 [ 833.988075][T12583] ? nfnetlink_rcv_msg+0x225/0x1180 [ 833.993310][T12583] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 833.998811][T12583] ? __netlink_deliver_tap+0x56b/0x7f0 [ 834.004321][T12583] ? netlink_deliver_tap+0x19d/0x1b0 [ 834.009628][T12583] ? netlink_unicast+0x7c4/0x990 [ 834.014583][T12583] ? netlink_sendmsg+0x8e4/0xcb0 [ 834.019559][T12583] ? __sock_sendmsg+0x221/0x270 [ 834.024446][T12583] ? ____sys_sendmsg+0x52a/0x7e0 [ 834.029419][T12583] ? __sys_sendmsg+0x269/0x350 [ 834.034207][T12583] ? do_syscall_64+0xf3/0x230 [ 834.038912][T12583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.045024][T12583] netlink_rcv_skb+0x1e3/0x430 [ 834.049834][T12583] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 834.055308][T12583] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 834.060625][T12583] ? cap_capable+0x1b4/0x250 [ 834.065225][T12583] ? safesetid_security_capable+0xb2/0x1d0 [ 834.071131][T12583] ? bpf_lsm_capable+0x9/0x10 [ 834.075831][T12583] ? security_capable+0x7e/0x2d0 [ 834.080790][T12583] nfnetlink_rcv+0x297/0x2ab0 [ 834.085497][T12583] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 834.091939][T12583] ? __dev_queue_xmit+0x2f4/0x3f50 [ 834.097067][T12583] ? __dev_queue_xmit+0x1775/0x3f50 [ 834.102276][T12583] ? kasan_save_track+0x51/0x80 [ 834.107158][T12583] ? ____sys_sendmsg+0x52a/0x7e0 [ 834.112112][T12583] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 834.117244][T12583] ? __dev_queue_xmit+0x2f4/0x3f50 [ 834.122373][T12583] ? __pfx___dev_queue_xmit+0x10/0x10 [ 834.127767][T12583] ? ref_tracker_free+0x643/0x7e0 [ 834.132807][T12583] ? __asan_memcpy+0x40/0x70 [ 834.137418][T12583] ? __pfx_ref_tracker_free+0x10/0x10 [ 834.142819][T12583] ? netlink_deliver_tap+0x2e/0x1b0 [ 834.148041][T12583] ? skb_clone+0x240/0x390 [ 834.152495][T12583] ? __pfx_lock_release+0x10/0x10 [ 834.157569][T12583] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 834.163078][T12583] ? netlink_deliver_tap+0x2e/0x1b0 [ 834.168310][T12583] netlink_unicast+0x7f6/0x990 [ 834.173104][T12583] ? __pfx_netlink_unicast+0x10/0x10 [ 834.178408][T12583] ? __virt_addr_valid+0x183/0x530 [ 834.183543][T12583] ? __check_object_size+0x48e/0x900 [ 834.188865][T12583] netlink_sendmsg+0x8e4/0xcb0 [ 834.193662][T12583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.198983][T12583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.204304][T12583] __sock_sendmsg+0x221/0x270 [ 834.209009][T12583] ____sys_sendmsg+0x52a/0x7e0 [ 834.213955][T12583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 834.219287][T12583] ? __fget_files+0x2a/0x410 [ 834.223907][T12583] ? __fget_files+0x2a/0x410 [ 834.228533][T12583] __sys_sendmsg+0x269/0x350 [ 834.233147][T12583] ? __pfx_lock_release+0x10/0x10 [ 834.238203][T12583] ? __pfx___sys_sendmsg+0x10/0x10 [ 834.243343][T12583] ? __pfx_vfs_write+0x10/0x10 [ 834.248161][T12583] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 834.254504][T12583] ? do_syscall_64+0x100/0x230 [ 834.259289][T12583] ? do_syscall_64+0xb6/0x230 [ 834.263985][T12583] do_syscall_64+0xf3/0x230 [ 834.268508][T12583] ? clear_bhb_loop+0x35/0x90 [ 834.273225][T12583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.279135][T12583] RIP: 0033:0x7f1f7777e819 [ 834.283565][T12583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 834.303279][T12583] RSP: 002b:00007f1f784a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.311720][T12583] RAX: ffffffffffffffda RBX: 00007f1f77935fa0 RCX: 00007f1f7777e819 [ 834.319711][T12583] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 834.327693][T12583] RBP: 00007f1f784a5090 R08: 0000000000000000 R09: 0000000000000000 [ 834.335680][T12583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.343666][T12583] R13: 0000000000000000 R14: 00007f1f77935fa0 R15: 00007ffd575c76e8 [ 834.351664][T12583] [ 834.401398][ T5978] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input38 [ 834.562181][T12575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.578304][T12575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.808768][T12591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 836.424658][ T5918] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 836.703565][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 836.758095][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 836.818040][ T5918] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 836.849322][ T25] usb 3-1: USB disconnect, device number 67 [ 836.849366][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 836.864469][ T25] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 836.867539][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 836.924525][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.990254][T12603] FAULT_INJECTION: forcing a failure. [ 836.990254][T12603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.004640][ T5918] usb 6-1: config 0 descriptor?? [ 837.031301][T12603] CPU: 0 UID: 0 PID: 12603 Comm: syz.2.1747 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 837.041808][T12603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 837.051910][T12603] Call Trace: [ 837.055225][T12603] [ 837.058190][T12603] dump_stack_lvl+0x241/0x360 [ 837.062925][T12603] ? __pfx_dump_stack_lvl+0x10/0x10 [ 837.068168][T12603] ? __pfx__printk+0x10/0x10 [ 837.072813][T12603] ? snprintf+0xda/0x120 [ 837.077203][T12603] should_fail_ex+0x3b0/0x4e0 [ 837.081950][T12603] _copy_to_user+0x31/0xb0 [ 837.086414][T12603] simple_read_from_buffer+0xca/0x150 [ 837.091841][T12603] proc_fail_nth_read+0x1e9/0x250 [ 837.096909][T12603] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 837.102502][T12603] ? rw_verify_area+0x55e/0x6f0 [ 837.107393][T12603] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 837.112999][T12603] vfs_read+0x1fc/0xb70 [ 837.117208][T12603] ? __pfx___mutex_lock+0x10/0x10 [ 837.122277][T12603] ? __pfx_vfs_read+0x10/0x10 [ 837.127012][T12603] ? __fget_files+0x2a/0x410 [ 837.131634][T12603] ? __fget_files+0x395/0x410 [ 837.136347][T12603] ? __fget_files+0x2a/0x410 [ 837.140978][T12603] ksys_read+0x18f/0x2b0 [ 837.145274][T12603] ? __pfx_ksys_read+0x10/0x10 [ 837.150085][T12603] ? do_syscall_64+0x100/0x230 [ 837.154891][T12603] ? do_syscall_64+0xb6/0x230 [ 837.159614][T12603] do_syscall_64+0xf3/0x230 [ 837.164158][T12603] ? clear_bhb_loop+0x35/0x90 [ 837.168880][T12603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.174817][T12603] RIP: 0033:0x7fca5f77d25c [ 837.179262][T12603] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 837.198920][T12603] RSP: 002b:00007fca6049d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 837.207383][T12603] RAX: ffffffffffffffda RBX: 00007fca5f935fa0 RCX: 00007fca5f77d25c [ 837.215398][T12603] RDX: 000000000000000f RSI: 00007fca6049d0a0 RDI: 0000000000000004 [ 837.223417][T12603] RBP: 00007fca6049d090 R08: 0000000000000000 R09: 0000000000000000 [ 837.231480][T12603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.239503][T12603] R13: 0000000000000000 R14: 00007fca5f935fa0 R15: 00007ffc5c2c21d8 [ 837.247548][T12603] [ 838.499092][T12618] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1751'. [ 838.522173][ T5918] ath6kl: Failed to submit usb control message: -110 [ 838.529083][ T5918] ath6kl: unable to send the bmi data to the device: -110 [ 838.536526][ T5918] ath6kl: Unable to send get target info: -110 [ 838.544046][ T5918] ath6kl: Failed to init ath6kl core: -110 [ 838.550234][ T5918] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 838.958716][ T5978] usb 6-1: USB disconnect, device number 3 [ 840.270118][T12637] mmap: syz.5.1757 (12637) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 840.621101][ T5918] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 840.640424][T12646] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 841.112363][T12654] xt_CT: You must specify a L4 protocol and not use inversions on it [ 842.757100][T12661] No such timeout policy "syz0" [ 842.779448][T12661] syz.5.1764: attempt to access beyond end of device [ 842.779448][T12661] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 842.792497][T12661] exFAT-fs (nbd5): unable to read boot sector [ 842.798711][T12661] exFAT-fs (nbd5): failed to read boot sector [ 842.805466][T12661] exFAT-fs (nbd5): failed to recognize exfat type [ 843.376414][ T5918] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 843.378728][T12663] netdevsim netdevsim4: Direct firmware load for WÙ«Zê¤Û failed with error -2 [ 843.386912][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 843.409459][ T5918] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 843.418969][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.482202][T12663] netdevsim netdevsim4: Falling back to sysfs fallback for: WÙ«Zê¤Û [ 843.544822][ T5918] usb 3-1: config 0 descriptor?? [ 843.563699][ T5918] usb 3-1: can't set config #0, error -71 [ 843.592775][ T5918] usb 3-1: USB disconnect, device number 68 [ 843.916102][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 843.916124][ T29] audit: type=1326 audit(1732346650.607:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.5.1770" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f7777e819 code=0x0 [ 844.086027][ T29] audit: type=1326 audit(1732346650.777:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.5.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7777e819 code=0x7ffc0000 [ 844.142290][ T29] audit: type=1326 audit(1732346650.777:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.5.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7777e819 code=0x7ffc0000 [ 844.167028][ T29] audit: type=1326 audit(1732346650.777:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.5.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1f7777e819 code=0x7ffc0000 [ 844.194397][ T29] audit: type=1326 audit(1732346650.777:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.5.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7777e819 code=0x7ffc0000 [ 844.218703][ T29] audit: type=1326 audit(1732346650.777:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.5.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7777e819 code=0x7ffc0000 [ 844.243773][ T29] audit: type=1326 audit(1732346650.777:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.5.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f7777e819 code=0x7ffc0000 [ 844.268060][ T29] audit: type=1326 audit(1732346650.777:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.5.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7777e819 code=0x7ffc0000 [ 844.443944][ T29] audit: type=1326 audit(1732346650.777:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12676 comm="syz.5.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7777e819 code=0x7ffc0000 [ 844.511474][T12686] No such timeout policy "syz0" [ 844.703258][T12688] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 846.722722][T12707] No such timeout policy "syz0" [ 846.788997][T12707] syz.0.1777: attempt to access beyond end of device [ 846.788997][T12707] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 846.802427][T12707] exFAT-fs (nbd0): unable to read boot sector [ 846.809051][T12707] exFAT-fs (nbd0): failed to read boot sector [ 846.815256][T12707] exFAT-fs (nbd0): failed to recognize exfat type [ 850.450239][T12739] FAULT_INJECTION: forcing a failure. [ 850.450239][T12739] name failslab, interval 1, probability 0, space 0, times 0 [ 850.553692][T12739] CPU: 0 UID: 0 PID: 12739 Comm: syz.4.1785 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 850.564203][T12739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 850.574290][T12739] Call Trace: [ 850.577573][T12739] [ 850.580505][T12739] dump_stack_lvl+0x241/0x360 [ 850.585203][T12739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 850.590418][T12739] ? __pfx__printk+0x10/0x10 [ 850.595016][T12739] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 850.600478][T12739] ? __pfx___might_resched+0x10/0x10 [ 850.605785][T12739] should_fail_ex+0x3b0/0x4e0 [ 850.610480][T12739] should_failslab+0xac/0x100 [ 850.615169][T12739] ? sg_read+0x9a3/0x1720 [ 850.619502][T12739] __kmalloc_cache_noprof+0x6c/0x2c0 [ 850.624794][T12739] ? finish_wait+0xd4/0x1e0 [ 850.629346][T12739] sg_read+0x9a3/0x1720 [ 850.633528][T12739] ? __pfx_sg_read+0x10/0x10 [ 850.638134][T12739] ? __pfx_autoremove_wake_function+0x10/0x10 [ 850.644230][T12739] ? rw_verify_area+0x568/0x6f0 [ 850.649216][T12739] ? __pfx_sg_read+0x10/0x10 [ 850.653828][T12739] vfs_read+0x1fc/0xb70 [ 850.658024][T12739] ? __pfx_vfs_read+0x10/0x10 [ 850.662712][T12739] ? __fget_files+0x2a/0x410 [ 850.667398][T12739] ? __fget_files+0x395/0x410 [ 850.672080][T12739] ? __fget_files+0x2a/0x410 [ 850.676699][T12739] ksys_read+0x18f/0x2b0 [ 850.680970][T12739] ? __pfx_ksys_read+0x10/0x10 [ 850.685738][T12739] ? do_syscall_64+0x100/0x230 [ 850.690516][T12739] ? do_syscall_64+0xb6/0x230 [ 850.695207][T12739] do_syscall_64+0xf3/0x230 [ 850.699728][T12739] ? clear_bhb_loop+0x35/0x90 [ 850.704460][T12739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.710396][T12739] RIP: 0033:0x7fcf2997e819 [ 850.714849][T12739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 850.734500][T12739] RSP: 002b:00007fcf2a76f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 850.742961][T12739] RAX: ffffffffffffffda RBX: 00007fcf29b35fa0 RCX: 00007fcf2997e819 [ 850.750977][T12739] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 850.759014][T12739] RBP: 00007fcf2a76f090 R08: 0000000000000000 R09: 0000000000000000 [ 850.767003][T12739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.774983][T12739] R13: 0000000000000000 R14: 00007fcf29b35fa0 R15: 00007ffe917e5368 [ 850.782974][T12739] [ 851.078350][T12749] No such timeout policy "syz0" [ 851.998577][T12757] No such timeout policy "syz0" [ 852.012154][T12757] syz.3.1790: attempt to access beyond end of device [ 852.012154][T12757] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 852.025689][T12757] exFAT-fs (nbd3): unable to read boot sector [ 852.031798][T12757] exFAT-fs (nbd3): failed to read boot sector [ 852.037975][T12757] exFAT-fs (nbd3): failed to recognize exfat type [ 853.740126][T12770] tipc: Started in network mode [ 853.756510][T12770] tipc: Node identity 2ab523b4de5a, cluster identity 4711 [ 853.787273][T12770] tipc: Enabled bearer , priority 0 [ 854.639815][T12772] tipc: Resetting bearer [ 854.683815][ T5918] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 854.701354][T12766] tipc: Resetting bearer [ 854.829309][ T25] tipc: Node number set to 4109312948 [ 855.098540][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 855.105685][ T5918] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 855.117704][ T5918] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 855.129403][ T5918] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 855.147145][ T5918] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 855.161914][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 855.170899][ T5918] usb 4-1: Product: syz [ 855.175947][ T5918] usb 4-1: Manufacturer: syz [ 855.183427][ T5918] usb 4-1: SerialNumber: syz [ 855.212858][T12768] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 855.241533][ T5918] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input39 [ 855.862810][T12803] xt_CT: You must specify a L4 protocol and not use inversions on it [ 857.002590][T12810] No such timeout policy "syz0" [ 857.103965][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1803'. [ 858.961743][ T9] usb 4-1: USB disconnect, device number 70 [ 859.033262][ T9] appletouch 4-1:1.0: input: appletouch disconnected [ 860.379607][T12839] FAULT_INJECTION: forcing a failure. [ 860.379607][T12839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 860.392880][T12839] CPU: 0 UID: 0 PID: 12839 Comm: syz.2.1809 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 860.403339][T12839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 860.413427][T12839] Call Trace: [ 860.416740][T12839] [ 860.419698][T12839] dump_stack_lvl+0x241/0x360 [ 860.424433][T12839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 860.429671][T12839] ? __pfx__printk+0x10/0x10 [ 860.434304][T12839] ? __pfx_lock_release+0x10/0x10 [ 860.439367][T12839] should_fail_ex+0x3b0/0x4e0 [ 860.444099][T12839] _copy_from_user+0x2f/0xc0 [ 860.448735][T12839] __sys_bpf+0x1a4/0x810 [ 860.453023][T12839] ? __pfx___sys_bpf+0x10/0x10 [ 860.457865][T12839] __x64_sys_bpf+0x7c/0x90 [ 860.462323][T12839] do_syscall_64+0xf3/0x230 [ 860.466867][T12839] ? clear_bhb_loop+0x35/0x90 [ 860.471587][T12839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.477520][T12839] RIP: 0033:0x7fca5f77e819 [ 860.481969][T12839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 860.501614][T12839] RSP: 002b:00007fca5d5d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 860.510077][T12839] RAX: ffffffffffffffda RBX: 00007fca5f936160 RCX: 00007fca5f77e819 [ 860.518091][T12839] RDX: 0000000000000090 RSI: 00000000200008c0 RDI: 0000000000000005 [ 860.526102][T12839] RBP: 00007fca5d5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 860.534106][T12839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.542104][T12839] R13: 0000000000000000 R14: 00007fca5f936160 R15: 00007ffc5c2c21d8 [ 860.550138][T12839] [ 861.284066][ T5884] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 861.443651][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 861.453570][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.467204][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.477252][ T5884] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 861.486469][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.510022][ T5884] usb 3-1: config 0 descriptor?? [ 861.935749][ T5884] appleir 0003:05AC:8241.0032: unknown main item tag 0x0 [ 861.951372][ T5884] appleir 0003:05AC:8241.0032: unknown main item tag 0x0 [ 861.959356][ T5884] appleir 0003:05AC:8241.0032: unknown main item tag 0x0 [ 861.966694][ T5884] appleir 0003:05AC:8241.0032: unknown main item tag 0x0 [ 861.981605][ T5884] appleir 0003:05AC:8241.0032: unknown main item tag 0x0 [ 861.991947][ T5884] appleir 0003:05AC:8241.0032: No inputs registered, leaving [ 862.013037][ T5884] appleir 0003:05AC:8241.0032: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 862.542539][T12766] tipc: Disabling bearer [ 862.738718][T12844] netlink: 'syz.0.1811': attribute type 21 has an invalid length. [ 863.952893][T12859] program syz.0.1816 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 863.983451][T12849] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 863.984518][ T9] usb 3-1: reset high-speed USB device number 69 using dummy_hcd [ 863.990187][T12849] PKCS7: Only support pkcs7_signedData type [ 865.087680][ T5885] usb 3-1: USB disconnect, device number 69 [ 865.147611][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1820'. [ 865.629456][T12880] No such timeout policy "syz0" [ 867.449262][T12891] tipc: Enabled bearer , priority 0 [ 867.492468][T12891] tipc: Resetting bearer [ 867.867058][T12890] tipc: Resetting bearer [ 867.874292][T12883] Process accounting resumed [ 868.125939][ T5884] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 868.298139][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 868.321760][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 868.341041][ T5885] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 868.345680][ T5884] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 868.381708][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.390194][ T5884] usb 4-1: Product: syz [ 868.394565][ T5884] usb 4-1: Manufacturer: syz [ 868.399219][ T5884] usb 4-1: SerialNumber: syz [ 868.414954][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 868.424664][ T5884] usb 4-1: config 0 descriptor?? [ 868.485148][ T5884] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 868.507213][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 868.514902][ T5885] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 868.527918][ T5885] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 868.539395][ T5885] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 868.556877][ T5885] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 868.573622][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 868.582083][ T5885] usb 5-1: Product: syz [ 868.586689][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 868.594203][ T5885] usb 5-1: Manufacturer: syz [ 868.598984][ T5885] usb 5-1: SerialNumber: syz [ 868.615652][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.628316][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.638770][T12897] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 868.646435][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 868.651759][ T5885] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input40 [ 868.660231][T12896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.685824][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.704881][T12896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.715222][ T9] usb 6-1: config 0 descriptor?? [ 868.922896][ T5918] usb 5-1: USB disconnect, device number 63 [ 868.982601][ T5918] appletouch 5-1:1.0: input: appletouch disconnected [ 869.162652][ T9] appleir 0003:05AC:8241.0033: unknown main item tag 0x0 [ 869.171790][ T9] appleir 0003:05AC:8241.0033: unknown main item tag 0x0 [ 869.190515][ T9] appleir 0003:05AC:8241.0033: unknown main item tag 0x0 [ 869.198215][ T9] appleir 0003:05AC:8241.0033: unknown main item tag 0x0 [ 869.208246][ T9] appleir 0003:05AC:8241.0033: unknown main item tag 0x0 [ 869.216607][ T9] appleir 0003:05AC:8241.0033: No inputs registered, leaving [ 869.238801][ T9] appleir 0003:05AC:8241.0033: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 869.544273][ T3355] usb 4-1: Failed to submit usb control message: -110 [ 869.551722][ T3355] usb 4-1: unable to send the bmi data to the device: -110 [ 869.570481][ T3355] usb 4-1: unable to get target info from device [ 869.589402][ T3355] usb 4-1: could not get target info (-110) [ 869.605227][ T3355] usb 4-1: could not probe fw (-110) [ 870.188943][ T5918] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 870.344856][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 870.377134][ T5918] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 870.387366][ T5918] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 870.397759][ T5918] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 870.426247][ T5918] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 870.439805][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.446274][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.454799][ T5918] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 870.463962][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.667931][ T8071] usb 6-1: reset high-speed USB device number 4 using dummy_hcd [ 870.696707][ T5918] usb 5-1: GET_CAPABILITIES returned 0 [ 870.702461][ T5918] usbtmc 5-1:16.0: can't read capabilities [ 872.311252][T12890] tipc: Disabling bearer [ 872.420318][T12921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1832'. [ 872.526086][ T25] usb 4-1: USB disconnect, device number 71 [ 872.581909][ T5884] usb 6-1: USB disconnect, device number 4 [ 873.715152][T12933] FAULT_INJECTION: forcing a failure. [ 873.715152][T12933] name failslab, interval 1, probability 0, space 0, times 0 [ 873.739368][T12933] CPU: 1 UID: 0 PID: 12933 Comm: syz.2.1837 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 873.749866][T12933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 873.759966][T12933] Call Trace: [ 873.763294][T12933] [ 873.766263][T12933] dump_stack_lvl+0x241/0x360 [ 873.771008][T12933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 873.776268][T12933] ? __pfx__printk+0x10/0x10 [ 873.780902][T12933] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 873.786923][T12933] ? __pfx___might_resched+0x10/0x10 [ 873.792249][T12933] ? kfree+0x1a0/0x440 [ 873.796341][T12933] should_fail_ex+0x3b0/0x4e0 [ 873.801056][T12933] should_failslab+0xac/0x100 [ 873.805747][T12933] ? __alloc_skb+0x1c3/0x440 [ 873.810359][T12933] kmem_cache_alloc_node_noprof+0x71/0x320 [ 873.816170][T12933] __alloc_skb+0x1c3/0x440 [ 873.820597][T12933] ? ____sys_sendmsg+0x52a/0x7e0 [ 873.825536][T12933] ? __pfx___alloc_skb+0x10/0x10 [ 873.830486][T12933] ? netlink_ack_tlv_len+0x6e/0x200 [ 873.835717][T12933] netlink_ack+0x13f/0xa30 [ 873.840137][T12933] ? __pfx_lock_acquire+0x10/0x10 [ 873.845159][T12933] ? __pfx_ip_vs_genl_set_daemon+0x10/0x10 [ 873.850992][T12933] netlink_rcv_skb+0x262/0x430 [ 873.855772][T12933] ? __pfx_genl_rcv_msg+0x10/0x10 [ 873.860815][T12933] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 873.866117][T12933] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 873.871597][T12933] genl_rcv+0x28/0x40 [ 873.875584][T12933] netlink_unicast+0x7f6/0x990 [ 873.880361][T12933] ? __pfx_netlink_unicast+0x10/0x10 [ 873.885657][T12933] ? __virt_addr_valid+0x183/0x530 [ 873.890774][T12933] ? __check_object_size+0x48e/0x900 [ 873.896075][T12933] netlink_sendmsg+0x8e4/0xcb0 [ 873.900859][T12933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.906162][T12933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.911455][T12933] __sock_sendmsg+0x221/0x270 [ 873.916151][T12933] ____sys_sendmsg+0x52a/0x7e0 [ 873.920921][T12933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 873.926205][T12933] ? __fget_files+0x2a/0x410 [ 873.930796][T12933] ? __fget_files+0x2a/0x410 [ 873.935415][T12933] __sys_sendmsg+0x269/0x350 [ 873.940008][T12933] ? __pfx_lock_release+0x10/0x10 [ 873.945044][T12933] ? __pfx___sys_sendmsg+0x10/0x10 [ 873.950342][T12933] ? __pfx_vfs_write+0x10/0x10 [ 873.955146][T12933] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 873.961478][T12933] ? do_syscall_64+0x100/0x230 [ 873.966261][T12933] ? do_syscall_64+0xb6/0x230 [ 873.970955][T12933] do_syscall_64+0xf3/0x230 [ 873.975645][T12933] ? clear_bhb_loop+0x35/0x90 [ 873.980345][T12933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.986245][T12933] RIP: 0033:0x7fca5f77e819 [ 873.990672][T12933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.010290][T12933] RSP: 002b:00007fca6049d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 874.018720][T12933] RAX: ffffffffffffffda RBX: 00007fca5f935fa0 RCX: 00007fca5f77e819 [ 874.026729][T12933] RDX: 0000000000008080 RSI: 00000000200004c0 RDI: 0000000000000003 [ 874.034800][T12933] RBP: 00007fca6049d090 R08: 0000000000000000 R09: 0000000000000000 [ 874.042780][T12933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.050761][T12933] R13: 0000000000000000 R14: 00007fca5f935fa0 R15: 00007ffc5c2c21d8 [ 874.058771][T12933] [ 874.093814][ T8] usb 5-1: USB disconnect, device number 64 [ 874.185014][T12937] No such timeout policy "syz0" [ 874.280742][T12941] fuse: Bad value for 'fd' [ 874.284211][T12939] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 874.304217][T12941] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 874.310759][T12941] PKCS7: Only support pkcs7_signedData type [ 875.852277][ T5884] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 876.545560][ T5884] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 876.684393][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 876.698101][ T5884] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 876.707759][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.738539][ T5884] usb 6-1: config 0 descriptor?? [ 876.757105][ T5884] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 876.883414][T12955] usb usb9: usbfs: process 12955 (syz.3.1844) did not claim interface 0 before use [ 876.977404][T12955] input: syz0 as /devices/virtual/input/input41 [ 877.023912][ T8071] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 877.183641][ T8071] usb 1-1: Using ep0 maxpacket: 16 [ 877.190693][ T8071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.210572][ T8071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.230174][ T8071] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 877.247893][ T8071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.270243][ T8071] usb 1-1: config 0 descriptor?? [ 877.607860][T12968] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 877.972135][ T8071] appleir 0003:05AC:8241.0034: unknown main item tag 0x0 [ 877.990134][ T8071] appleir 0003:05AC:8241.0034: unknown main item tag 0x0 [ 878.065352][T12973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1847'. [ 878.081266][T12973] FAULT_INJECTION: forcing a failure. [ 878.081266][T12973] name failslab, interval 1, probability 0, space 0, times 0 [ 878.094232][T12973] CPU: 0 UID: 0 PID: 12973 Comm: syz.3.1847 Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 878.104792][T12973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 878.114885][T12973] Call Trace: [ 878.118190][T12973] [ 878.121150][T12973] dump_stack_lvl+0x241/0x360 [ 878.125877][T12973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 878.131116][T12973] ? __pfx__printk+0x10/0x10 [ 878.135748][T12973] ? fs_reclaim_acquire+0x93/0x130 [ 878.140894][T12973] ? __pfx___might_resched+0x10/0x10 [ 878.146234][T12973] should_fail_ex+0x3b0/0x4e0 [ 878.150955][T12973] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 878.156708][T12973] should_failslab+0xac/0x100 [ 878.161423][T12973] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 878.167183][T12973] __kmalloc_noprof+0xd8/0x400 [ 878.171976][T12973] tomoyo_realpath_from_path+0xcf/0x5e0 [ 878.177571][T12973] tomoyo_path_number_perm+0x236/0x860 [ 878.183089][T12973] ? __lock_acquire+0x1397/0x2100 [ 878.188142][T12973] ? tomoyo_path_number_perm+0x206/0x860 [ 878.193819][T12973] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 878.199875][T12973] ? __fget_files+0x2a/0x410 [ 878.204495][T12973] ? __fget_files+0x2a/0x410 [ 878.209152][T12973] security_file_ioctl+0xc6/0x2a0 [ 878.214562][T12973] __se_sys_ioctl+0x46/0x170 [ 878.219179][T12973] do_syscall_64+0xf3/0x230 [ 878.223727][T12973] ? clear_bhb_loop+0x35/0x90 [ 878.228444][T12973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.234378][T12973] RIP: 0033:0x7f50ec17e819 [ 878.238829][T12973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.258475][T12973] RSP: 002b:00007f50ecefa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 878.267014][T12973] RAX: ffffffffffffffda RBX: 00007f50ec336160 RCX: 00007f50ec17e819 [ 878.275018][T12973] RDX: 00000000200004c0 RSI: 00000000c0405668 RDI: 000000000000000b [ 878.283029][T12973] RBP: 00007f50ecefa090 R08: 0000000000000000 R09: 0000000000000000 [ 878.291033][T12973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.299024][T12973] R13: 0000000000000000 R14: 00007f50ec336160 R15: 00007ffc7c8dba58 [ 878.307053][T12973] [ 878.311859][T12973] ERROR: Out of memory at tomoyo_realpath_from_path. [ 878.321722][ T29] audit: type=1400 audit(1732346684.747:1013): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=12969 comm="syz.3.1847" daddr=fe88::4 [ 878.340055][ T29] audit: type=1400 audit(1732346684.747:1014): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=12969 comm="syz.3.1847" daddr=fe88::4 [ 878.369995][ T8071] appleir 0003:05AC:8241.0034: unknown main item tag 0x0 [ 878.377339][ T8071] appleir 0003:05AC:8241.0034: unknown main item tag 0x0 [ 878.384713][ T8071] appleir 0003:05AC:8241.0034: unknown main item tag 0x0 [ 878.393444][ T8071] appleir 0003:05AC:8241.0034: No inputs registered, leaving [ 878.499399][ T8071] appleir 0003:05AC:8241.0034: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 878.730543][ T5885] usb 6-1: USB disconnect, device number 5 [ 878.932624][T12983] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 878.939382][T12983] PKCS7: Only support pkcs7_signedData type [ 880.123328][ T29] audit: type=1400 audit(1732346686.747:1015): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="," requested=w pid=12988 comm="syz.5.1853" daddr=::ffff:255.255.255.255 [ 880.294739][ T8071] usb 1-1: USB disconnect, device number 56 [ 880.424764][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1855'. [ 880.630438][T12999] No such timeout policy "syz0" [ 880.652829][T12999] syz.4.1854: attempt to access beyond end of device [ 880.652829][T12999] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 880.666067][T12999] exFAT-fs (nbd4): unable to read boot sector [ 880.672216][T12999] exFAT-fs (nbd4): failed to read boot sector [ 880.678488][T12999] exFAT-fs (nbd4): failed to recognize exfat type [ 882.325204][T13011] Cannot find del_set index 0 as target [ 884.113765][ T8071] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 884.295071][ T8071] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 884.317637][ T8071] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 884.333639][ T5888] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 884.334271][ T8071] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 884.351943][ T8071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.365519][ T8071] usb 1-1: config 0 descriptor?? [ 884.375591][ T8071] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 884.405061][T13038] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 884.411552][T13038] PKCS7: Only support pkcs7_signedData type [ 884.513878][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 884.520553][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.532491][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.543005][T13014] orangefs_mount: mount request failed with -4 [ 884.543169][ T5888] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 884.665225][T13018] orangefs_mount: mount request failed with -4 [ 885.474326][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.489354][ T5888] usb 3-1: config 0 descriptor?? [ 885.903425][ T5885] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 886.004408][T13055] No such timeout policy "syz0" [ 886.025673][T13055] syz.5.1868: attempt to access beyond end of device [ 886.025673][T13055] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 886.039179][T13055] exFAT-fs (nbd5): unable to read boot sector [ 886.045422][T13055] exFAT-fs (nbd5): failed to read boot sector [ 886.051606][T13055] exFAT-fs (nbd5): failed to recognize exfat type [ 886.199863][ T5888] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0035/input/input42 [ 886.303819][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 886.344467][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.547061][ T5885] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 886.556233][ T5885] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 886.565364][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.677695][ T5885] usb 5-1: config 0 descriptor?? [ 886.699646][ T5888] appleir 0003:05AC:8241.0035: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 887.578794][T13069] tmpfs: Unknown parameter '–Ä ' [ 888.141486][ T25] usb 1-1: USB disconnect, device number 57 [ 993.423457][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 993.430476][ C1] rcu: 0-...!: (1 ticks this GP) idle=9064/1/0x4000000000000000 softirq=50781/50781 fqs=0 [ 993.441912][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6065/1:b..l P13083/1:b..l [ 993.451129][ C1] rcu: (detected by 1, t=10506 jiffies, g=57141, q=184 ncpus=2) [ 993.458885][ C1] Sending NMI from CPU 1 to CPUs 0: [ 993.458924][ C0] NMI backtrace for cpu 0 [ 993.458940][ C0] CPU: 0 UID: 0 PID: 5832 Comm: syz-executor Not tainted 6.12.0-syzkaller-07834-g06afb0f36106 #0 [ 993.458960][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 993.458972][ C0] RIP: 0010:match_held_lock+0x17/0xb0 [ 993.459007][ C0] Code: 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 53 bd 01 00 00 00 48 39 77 10 74 67 48 89 fb 81 7f 20 00 00 20 00 <72> 59 48 8b 46 08 48 85 c0 75 11 31 ed 48 89 f7 31 f6 e8 52 fe ff [ 993.459022][ C0] RSP: 0018:ffffc90000007c10 EFLAGS: 00000083 [ 993.459038][ C0] RAX: 0000000000000000 RBX: ffff88807d0a28e0 RCX: ffff88807d0a1e00 [ 993.459052][ C0] RDX: ffff88807d0a1e00 RSI: ffff88805d9df300 RDI: ffff88807d0a28e0 [ 993.459066][ C0] RBP: 0000000000000001 R08: ffffffff89c13dcb R09: fffff52000000f7c [ 993.459078][ C0] R10: dffffc0000000000 R11: fffff52000000f7c R12: 0000000000000046 [ 993.459092][ C0] R13: ffff88807d0a1e00 R14: 00000000ffffffff R15: ffff88805d9df300 [ 993.459106][ C0] FS: 000055555bbd8500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 993.459122][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 993.459135][ C0] CR2: 00007fca604656c0 CR3: 0000000060a12000 CR4: 00000000003526f0 [ 993.459151][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 993.459162][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 993.459174][ C0] Call Trace: [ 993.459182][ C0] [ 993.459192][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 993.459230][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 993.459259][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 993.459308][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 993.459344][ C0] ? nmi_handle+0x14f/0x5a0 [ 993.459373][ C0] ? nmi_handle+0x2a/0x5a0 [ 993.459402][ C0] ? match_held_lock+0x17/0xb0 [ 993.459432][ C0] ? default_do_nmi+0x63/0x160 [ 993.459458][ C0] ? exc_nmi+0x123/0x1f0 [ 993.459483][ C0] ? end_repeat_nmi+0xf/0x53 [ 993.459519][ C0] ? advance_sched+0xbb/0xca0 [ 993.459548][ C0] ? match_held_lock+0x17/0xb0 [ 993.459579][ C0] ? match_held_lock+0x17/0xb0 [ 993.459611][ C0] ? match_held_lock+0x17/0xb0 [ 993.459642][ C0] [ 993.459652][ C0] [ 993.459663][ C0] lock_is_held_type+0xa9/0x190 [ 993.459695][ C0] ? __pfx_advance_sched+0x10/0x10 [ 993.459736][ C0] advance_sched+0xcd/0xca0 [ 993.459755][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 993.459776][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 993.459800][ C0] ? __pfx_advance_sched+0x10/0x10 [ 993.459817][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 993.459848][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 993.459870][ C0] ? sched_clock+0x4a/0x70 [ 993.459895][ C0] ? read_tsc+0x9/0x20 [ 993.459930][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 993.459951][ C0] hrtimer_interrupt+0x403/0xa40 [ 993.459983][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 993.460011][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 993.460032][ C0] [ 993.460038][ C0] [ 993.460045][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 993.460069][ C0] RIP: 0010:lock_acquire+0xa/0x550 [ 993.460086][ C0] Code: 0f 95 c0 c3 cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 20 01 00 00 4c 89 4c 24 [ 993.460101][ C0] RSP: 0018:ffffc90003e871a8 EFLAGS: 00000246 [ 993.460116][ C0] RAX: 0000000000000003 RBX: 0000000000000180 RCX: 0000000000000002 [ 993.460128][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e93c7e0 [ 993.460140][ C0] RBP: ffffc90003e871b0 R08: 0000000000000000 R09: 0000000000000000 [ 993.460151][ C0] R10: dffffc0000000000 R11: fffff9400032aa01 R12: dffffc0000000000 [ 993.460165][ C0] R13: 0000000000065540 R14: ffffffff8209dc56 R15: ffff88813fffae40 [ 993.460179][ C0] ? pfn_valid+0xf6/0x450 [ 993.460211][ C0] pfn_valid+0x113/0x450 [ 993.460235][ C0] ? pfn_valid+0xf6/0x450 [ 993.460260][ C0] page_table_check_set+0x22/0x540 [ 993.460288][ C0] __page_table_check_ptes_set+0x30f/0x410 [ 993.460316][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 993.460345][ C0] ? __folio_rmap_sanity_checks+0x15d/0x3a0 [ 993.460369][ C0] copy_pmd_range+0x4785/0x85b0 [ 993.460402][ C0] ? mas_destroy+0x197c/0x1fe0 [ 993.460420][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 993.460442][ C0] ? look_up_lock_class+0x77/0x170 [ 993.460464][ C0] ? register_lock_class+0x102/0x980 [ 993.460501][ C0] ? __pfx_mas_destroy+0x10/0x10 [ 993.460520][ C0] ? mark_lock+0x9a/0x360 [ 993.460541][ C0] ? __lock_acquire+0x1397/0x2100 [ 993.460573][ C0] copy_page_range+0x99f/0xe90 [ 993.460607][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 993.460635][ C0] ? __pfx_up_write+0x10/0x10 [ 993.460657][ C0] ? __asan_memset+0x23/0x50 [ 993.460677][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 993.460705][ C0] ? vma_interval_tree_insert_after+0x259/0x2b0 [ 993.460736][ C0] copy_mm+0x1117/0x1e80 [ 993.460770][ C0] ? __pfx_copy_mm+0x10/0x10 [ 993.460802][ C0] ? __init_rwsem+0x122/0x160 [ 993.460824][ C0] ? copy_signal+0x51c/0x640 [ 993.460851][ C0] copy_process+0x1845/0x3d50 [ 993.460883][ C0] ? copy_process+0x9fa/0x3d50 [ 993.460909][ C0] ? __lock_acquire+0x1397/0x2100 [ 993.460929][ C0] ? __pfx_copy_process+0x10/0x10 [ 993.460962][ C0] kernel_clone+0x223/0x880 [ 993.460997][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 993.461033][ C0] __x64_sys_clone+0x258/0x2a0 [ 993.461051][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 993.461068][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 993.461092][ C0] ? exc_page_fault+0x590/0x8c0 [ 993.461114][ C0] ? do_syscall_64+0xb6/0x230 [ 993.461138][ C0] do_syscall_64+0xf3/0x230 [ 993.461162][ C0] ? clear_bhb_loop+0x35/0x90 [ 993.461186][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.461209][ C0] RIP: 0033:0x7fca5f775093 [ 993.461226][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 993.461241][ C0] RSP: 002b:00007ffc5c2c2468 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 993.461259][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fca5f775093 [ 993.461272][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 993.461284][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 993.461295][ C0] R10: 000055555bbd87d0 R11: 0000000000000246 R12: 0000000000000000 [ 993.461307][ C0] R13: 00000000000d8de9 R14: 00000000000d8d6d R15: 00007ffc5c2c25f0 [ 993.461327][ C0] [ 993.461919][ C1] task:syz.0.1875 state:R running task stack:26736 pid:13083 tgid:13083 ppid:5849 flags:0x00000000 [ 994.121347][ C1] Call Trace: [ 994.124648][ C1] [ 994.127614][ C1] __schedule+0x17fb/0x4be0 [ 994.132154][ C1] ? kernel_text_address+0xa7/0xe0 [ 994.137338][ C1] ? __pfx___schedule+0x10/0x10 [ 994.142244][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 994.148286][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 994.153622][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 994.158772][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 994.164541][ C1] ? mark_lock+0x9a/0x360 [ 994.168942][ C1] irqentry_exit+0x5e/0x90 [ 994.173414][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 994.178920][ C1] RIP: 0010:lock_release+0x658/0xa30 [ 994.184251][ C1] Code: 3c 3b 00 74 08 4c 89 f7 e8 d5 28 8c 00 f6 84 24 91 00 00 00 02 75 77 41 f7 c5 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 4b c7 44 27 08 00 00 00 00 65 48 8b 04 25 [ 994.203891][ C1] RSP: 0000:ffffc9000c93f320 EFLAGS: 00000206 [ 994.209998][ C1] RAX: 0000000000000001 RBX: 1ffff92001927e76 RCX: ffffc9000c93f303 [ 994.217999][ C1] RDX: 0000000000000002 RSI: ffffffff8c0ae4c0 RDI: ffffffff8c5f9e60 [ 994.225999][ C1] RBP: ffffc9000c93f458 R08: ffffffff901c0137 R09: 1ffffffff2038026 [ 994.233996][ C1] R10: dffffc0000000000 R11: fffffbfff2038027 R12: 1ffff92001927e70 [ 994.242017][ C1] R13: 0000000000000246 R14: ffffc9000c93f3b0 R15: dffffc0000000000 [ 994.250040][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 994.255095][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 994.260323][ C1] ? __pfx_lock_release+0x10/0x10 [ 994.265381][ C1] ? unwind_next_frame+0x18e6/0x22d0 [ 994.270784][ C1] ? preempt_count_add+0x93/0x190 [ 994.275847][ C1] ? 0xffffffffa0001ed0 [ 994.280022][ C1] ? 0xffffffffa0001ed0 [ 994.284196][ C1] is_bpf_text_address+0x280/0x2a0 [ 994.289332][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 994.294573][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 994.300783][ C1] kernel_text_address+0xa7/0xe0 [ 994.305750][ C1] __kernel_text_address+0xd/0x40 [ 994.310812][ C1] unwind_get_return_address+0x4d/0x90 [ 994.316311][ C1] arch_stack_walk+0xfd/0x150 [ 994.321032][ C1] stack_trace_save+0x118/0x1d0 [ 994.325924][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 994.331360][ C1] ? mark_lock+0x9a/0x360 [ 994.335747][ C1] kasan_save_track+0x3f/0x80 [ 994.340459][ C1] ? kasan_save_track+0x3f/0x80 [ 994.345365][ C1] ? __kasan_slab_alloc+0x66/0x80 [ 994.350426][ C1] ? kmem_cache_alloc_noprof+0x135/0x2a0 [ 994.356099][ C1] ? __anon_vma_prepare+0xc4/0x4a0 [ 994.361242][ C1] ? handle_pte_fault+0x538a/0x6820 [ 994.366473][ C1] ? handle_mm_fault+0x1053/0x1ad0 [ 994.371613][ C1] ? exc_page_fault+0x459/0x8c0 [ 994.376492][ C1] ? asm_exc_page_fault+0x26/0x30 [ 994.381596][ C1] __kasan_slab_alloc+0x66/0x80 [ 994.386483][ C1] ? __anon_vma_prepare+0xc4/0x4a0 [ 994.391625][ C1] kmem_cache_alloc_noprof+0x135/0x2a0 [ 994.397133][ C1] __anon_vma_prepare+0xc4/0x4a0 [ 994.402121][ C1] handle_pte_fault+0x538a/0x6820 [ 994.407200][ C1] ? __pfx_handle_pte_fault+0x10/0x10 [ 994.412627][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 994.417677][ C1] ? __pmd_alloc+0x54c/0x670 [ 994.422296][ C1] ? __pfx_lock_release+0x10/0x10 [ 994.427343][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 994.432409][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 994.437652][ C1] ? _raw_spin_unlock+0x28/0x50 [ 994.442529][ C1] ? __pmd_alloc+0x54c/0x670 [ 994.447147][ C1] ? __pfx___pmd_alloc+0x10/0x10 [ 994.452122][ C1] handle_mm_fault+0x1053/0x1ad0 [ 994.457110][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 994.462417][ C1] ? lock_vma_under_rcu+0x602/0x790 [ 994.467664][ C1] ? lock_vma_under_rcu+0x1dd/0x790 [ 994.472908][ C1] ? exc_page_fault+0x113/0x8c0 [ 994.477797][ C1] exc_page_fault+0x459/0x8c0 [ 994.482518][ C1] asm_exc_page_fault+0x26/0x30 [ 994.487397][ C1] RIP: 0033:0x7f14ce3462d8 [ 994.491833][ C1] RSP: 002b:00007ffe9f45dde8 EFLAGS: 00010202 [ 994.497940][ C1] RAX: 0000000020000000 RBX: 0000000000000004 RCX: 002364626e2f7665 [ 994.505941][ C1] RDX: 000000000000000a RSI: 64626e2f7665642f RDI: 0000000020000000 [ 994.513948][ C1] RBP: 00007ffe9f45e04c R08: 00007f14ce200000 R09: 0000000000000001 [ 994.522033][ C1] R10: 0000000000000001 R11: 0000000000000009 R12: 0000000000000032 [ 994.530027][ C1] R13: 00000000000d8e05 R14: 00000000000d8d83 R15: fffffffffffffffe [ 994.538039][ C1] [ 994.541093][ C1] task:kworker/u8:9 state:R running task stack:20456 pid:6065 tgid:6065 ppid:2 flags:0x00004000 [ 994.552880][ C1] Workqueue: bat_events batadv_nc_worker [ 994.558562][ C1] Call Trace: [ 994.561860][ C1] [ 994.564822][ C1] __schedule+0x17fb/0x4be0 [ 994.569382][ C1] ? __pfx___schedule+0x10/0x10 [ 994.574271][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 994.580291][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 994.585607][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 994.590747][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 994.596514][ C1] irqentry_exit+0x5e/0x90 [ 994.600960][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 994.606451][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 994.611761][ C1] Code: 2b 00 74 08 4c 89 f7 e8 8a 54 8c 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 994.631390][ C1] RSP: 0018:ffffc900048579e0 EFLAGS: 00000206 [ 994.637489][ C1] RAX: 0000000000000001 RBX: 1ffff9200090af48 RCX: ffff88802e01a8d8 [ 994.645501][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0ae4c0 RDI: ffffffff8c5f9e60 [ 994.653497][ C1] RBP: ffffc90004857b40 R08: ffffffff942b0887 R09: 1ffffffff2856110 [ 994.661489][ C1] R10: dffffc0000000000 R11: fffffbfff2856111 R12: 1ffff9200090af44 [ 994.669478][ C1] R13: dffffc0000000000 R14: ffffc90004857a40 R15: 0000000000000246 [ 994.677693][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 994.682751][ C1] ? batadv_nc_worker+0xcb/0x610 [ 994.687724][ C1] ? __pfx_lock_release+0x10/0x10 [ 994.692778][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 994.698801][ C1] batadv_nc_worker+0xec/0x610 [ 994.703643][ C1] ? batadv_nc_worker+0xcb/0x610 [ 994.708631][ C1] ? batadv_nc_worker+0xcb/0x610 [ 994.713601][ C1] ? process_scheduled_works+0x976/0x1850 [ 994.719384][ C1] process_scheduled_works+0xa63/0x1850 [ 994.725031][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 994.731068][ C1] ? assign_work+0x364/0x3d0 [ 994.735706][ C1] worker_thread+0x870/0xd30 [ 994.740351][ C1] ? __kthread_parkme+0x169/0x1d0 [ 994.745418][ C1] ? __pfx_worker_thread+0x10/0x10 [ 994.750564][ C1] kthread+0x2f0/0x390 [ 994.754666][ C1] ? __pfx_worker_thread+0x10/0x10 [ 994.759833][ C1] ? __pfx_kthread+0x10/0x10 [ 994.764453][ C1] ret_from_fork+0x4b/0x80 [ 994.768903][ C1] ? __pfx_kthread+0x10/0x10 [ 994.773523][ C1] ret_from_fork_asm+0x1a/0x30 [ 994.778333][ C1] [ 994.781374][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g57141 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 994.793718][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=56986 [ 994.801620][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g57141 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 994.813016][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 994.823007][ C1] rcu: RCU grace-period kthread stack dump: [ 994.828909][ C1] task:rcu_preempt state:I stack:26072 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 994.839126][ C1] Call Trace: [ 994.842434][ C1] [ 994.845396][ C1] __schedule+0x17fb/0x4be0 [ 994.849954][ C1] ? __pfx___schedule+0x10/0x10 [ 994.854838][ C1] ? __pfx_lock_release+0x10/0x10 [ 994.859900][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 994.866254][ C1] ? schedule+0x90/0x320 [ 994.870522][ C1] schedule+0x14b/0x320 [ 994.874710][ C1] schedule_timeout+0x15a/0x290 [ 994.879596][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 994.885039][ C1] ? __pfx_process_timeout+0x10/0x10 [ 994.890360][ C1] ? prepare_to_swait_event+0x330/0x350 [ 994.895950][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 994.900831][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 994.906062][ C1] ? rcu_gp_init+0x1256/0x1630 [ 994.910862][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 994.915827][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 994.921141][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 994.927067][ C1] ? finish_swait+0xd4/0x1e0 [ 994.931727][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 994.936368][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 994.941615][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 994.947544][ C1] ? __kthread_parkme+0x169/0x1d0 [ 994.952611][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 994.957943][ C1] kthread+0x2f0/0x390 [ 994.962039][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 994.967267][ C1] ? __pfx_kthread+0x10/0x10 [ 994.971898][ C1] ret_from_fork+0x4b/0x80 [ 994.976437][ C1] ? __pfx_kthread+0x10/0x10 [ 994.981052][ C1] ret_from_fork_asm+0x1a/0x30 [ 994.985869][ C1]