last executing test programs: 3m35.128219518s ago: executing program 4 (id=339): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x7e336e7416c280cc}) close_range(r1, 0xffffffffffffffff, 0x0) 3m34.855043787s ago: executing program 4 (id=342): r0 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e62, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711222000000000095"], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2b) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f00000045c0)={0x0, 0x0, 0x0, 0x2, 0xff}, 0x0, &(0x7f0000004640)={0x8, 0x2, 0x0, 0x0, 0x4000000, 0xa}, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r7 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000340), 0xfffffffffffffff2, 0x8041, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) getpid() 3m33.638123334s ago: executing program 4 (id=345): r0 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002400)={0x2020}, 0xffffffffffffff7d) 3m33.538092336s ago: executing program 4 (id=346): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x2) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0x6) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x21) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES16=r5, @ANYRESDEC=r7, @ANYRESDEC=r4, @ANYRES32=r1], 0x50}}, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r10 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r10, r9, 0x0, 0x80000000) 3m32.477720912s ago: executing program 4 (id=348): syz_extract_tcp_res(0x0, 0xdc01, 0x1ed02b75) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) (fail_nth: 4) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup3(r4, r5, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r9 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r9, 0x40045569, 0x5) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000100)={{0x68, 0xfffe, 0xb1}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r9, 0x5501) ioctl$UI_DEV_DESTROY(r9, 0x5502) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00', @ANYBLOB, @ANYRES32=r3, @ANYRES64=r9], 0x58}, 0x1, 0x0, 0x0, 0x48d0}, 0x0) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000006700000008000100000000000c00990000008001230000000800c3001a0000000800c40050000000"], 0x38}}, 0x10) ioctl$TCXONC(r6, 0x540a, 0x2) 3m31.810844808s ago: executing program 4 (id=351): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311a22b58a46ed495465703756e040dd9002584b5f9ae54dd851daed0c915d40f3a3fb324415ea188556f05a94c5a063dcf7be1743c393ed5fd0563366b67048a89f49375cd26cdbbe7f4b9f7d02fb8c26996da27d63c84e31f1b8a8b942e2b7b25354a25c9b79d6dfbd7f7d9ee7c0767dc1e21f382382ac9a01aa1fb75a182d9d410079b15e59a58c12e44ea45aaf6021bf0179b6a99c4b47de940e8c244a8ab542700028dbd1950c70f022d", 0xe8}, {&(0x7f0000000080)="22771ac9cfdc77e8f83a2ff3845660d8d5d2a469dd454a1f4b1161baddab286f59366916990f7dbc28ef5807ab52a488c0", 0x31}, {&(0x7f0000001e40)="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", 0xee2}], 0x3}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000480)=""/186, 0xba}], 0x1}}], 0x2, 0x10000, 0x0) 3m31.452986636s ago: executing program 32 (id=351): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311a22b58a46ed495465703756e040dd9002584b5f9ae54dd851daed0c915d40f3a3fb324415ea188556f05a94c5a063dcf7be1743c393ed5fd0563366b67048a89f49375cd26cdbbe7f4b9f7d02fb8c26996da27d63c84e31f1b8a8b942e2b7b25354a25c9b79d6dfbd7f7d9ee7c0767dc1e21f382382ac9a01aa1fb75a182d9d410079b15e59a58c12e44ea45aaf6021bf0179b6a99c4b47de940e8c244a8ab542700028dbd1950c70f022d", 0xe8}, {&(0x7f0000000080)="22771ac9cfdc77e8f83a2ff3845660d8d5d2a469dd454a1f4b1161baddab286f59366916990f7dbc28ef5807ab52a488c0", 0x31}, {&(0x7f0000001e40)="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", 0xee2}], 0x3}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000480)=""/186, 0xba}], 0x1}}], 0x2, 0x10000, 0x0) 2m58.337627429s ago: executing program 1 (id=481): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x4000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={0x0, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) lseek(0xffffffffffffffff, 0x9, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x40}}, 0x0) socket$pptp(0x18, 0x1, 0x2) 2m57.11830358s ago: executing program 1 (id=483): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xee00}}, './bus\x00'}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r6 = creat(&(0x7f0000000300)='./bus\x00', 0x0) close(r6) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r7, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0}]) ioctl$TUNSETNOCSUM(r3, 0xc0189436, 0x1ffffffe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'lo\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', &(0x7f0000000480)=""/177, 0x1001) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0)="e7ed719a1e9609000000", 0x81, r8}, 0x38) 2m56.864238338s ago: executing program 1 (id=485): add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000800)="31d2542772759bc0146d5792157ade19b0a49d236e8f5e3bbbe5b6e5bf845016ec", 0x21, 0xfffffffffffffffe) r0 = inotify_init1(0x800) r1 = inotify_init() inotify_rm_watch(r1, 0x0) inotify_rm_watch(r0, 0x0) 2m56.201443504s ago: executing program 1 (id=486): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="1200000017000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="dfb47b9eb392dfc35c198791ce62bec600"/28], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="1200000017000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="dfb47b9eb392dfc35c198791ce62bec600"/28], 0x48) syz_emit_ethernet(0x2e5, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_emit_ethernet(0x2e5, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000011c0)={r5, &(0x7f0000000040), 0x0}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$rds(0x15, 0x5, 0x0) (async) socket$rds(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a090400000000ecff0000020000000900020073797a32000000000900010073797a300000000038000480340001800b00010065787468647200002490a05206b125000280080007400000000c0500020000000000080003400000004a0800064000000001140000001100010000000000000000000000000a"], 0x8c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000004c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000201000000000000009081bf9062c5812e000000ba00050000000500050002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)="809b3d9b27b91cb6aa0007", 0xb}, {&(0x7f0000000080)="c67f0d98f90257644ac0450c78d9320351d1be70e2b6955a015bfdd2164fa72b0000000000000000", 0x28}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) bind$unix(r10, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e21}, 0x6e) listen(r0, 0x802) (async) listen(r0, 0x802) socket$netlink(0x10, 0x3, 0x4) (async) r11 = socket$netlink(0x10, 0x3, 0x4) write(r11, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) (async) write(r11, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) 2m55.058980595s ago: executing program 1 (id=491): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000580), 0x400000, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000680)={'\x00', 0x6, 0x0, 0x2}) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000001}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) readv(r3, &(0x7f0000001900)=[{0x0}], 0x1) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000000)={@broadcast, @multicast2, 0x0}, &(0x7f0000000080)=0xc) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f00000000c0)={0x1, 0x1, 0x6, r4, 0x4}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m53.997215589s ago: executing program 1 (id=495): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x5}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="23090000000000000000010000000500070000000000080009000000000006000200e400000008000a000000000008001700", @ANYRES32, @ANYBLOB], 0x3c}}, 0x1000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c", 0x0, 0x0, 0x0}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff00000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="364000004800913a745c"], 0xfe33) io_uring_setup(0x4a2f, &(0x7f0000000100)={0x0, 0xcba9, 0x40, 0x0, 0x22d}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000070500000000000000000000000000090001"], 0x28}, 0x1, 0x0, 0x0, 0x4004001}, 0x40004) 2m38.853059715s ago: executing program 33 (id=495): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x5}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="23090000000000000000010000000500070000000000080009000000000006000200e400000008000a000000000008001700", @ANYRES32, @ANYBLOB], 0x3c}}, 0x1000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c", 0x0, 0x0, 0x0}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff00000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="364000004800913a745c"], 0xfe33) io_uring_setup(0x4a2f, &(0x7f0000000100)={0x0, 0xcba9, 0x40, 0x0, 0x22d}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000000070500000000000000000000000000090001"], 0x28}, 0x1, 0x0, 0x0, 0x4004001}, 0x40004) 2m33.307084863s ago: executing program 3 (id=555): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001001400b7050000000000006a0a00fe80000000850000000a000000b700000059a700009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m33.005562406s ago: executing program 3 (id=556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r1 = socket(0x2, 0x2, 0x1) (async) r2 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x3, 0xfffffffc, 0x5c, @empty, @mcast2={0xff, 0x5}, 0x20, 0x8001, 0x6, 0xffffeffd}}) (async) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c002000060a0b0400000000000000000200000018000480140001800b0001007470726f78790000040002800900010073797a30000000000900020073797a32000000000500074017000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) 2m32.683174664s ago: executing program 3 (id=558): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) preadv(r0, &(0x7f00000000c0), 0x0, 0x9, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0x248, 0x140, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x5, 0x7, 0x6, 0x1, 0x1, 0x2], 0x4, 0x6}}}, @common=@ah={{0x30}, {[0x3, 0x3]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x8, 0xa, [0xa, 0x32, 0x13, 0x16, 0x2, 0x2d, 0x1f, 0x24, 0x29, 0x20, 0x31, 0x20, 0x33, 0x28, 0x28, 0x6], 0x0, 0x6, 0x1}}}, {{@ip={@empty, @private=0xa010102, 0xff, 0xff000000, 'pimreg1\x00', 'vcan0\x00', {0xff}, {}, 0x73, 0x3, 0x8}, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x2, 0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'veth0_macvtap\x00', {0x2}}}}, {{@ip={@broadcast, @multicast2, 0xff000000, 0xff000000, 'batadv_slave_1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x11, 0x2, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x0, 0x3, 0x1, 0x7, 0x4], 0x1}, {0x2, [0x1, 0x4, 0x0, 0x4, 0x0, 0x6], 0x2, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) 2m32.59034414s ago: executing program 3 (id=560): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0xfffc, [0x0, 0xfeffffff], 0x5a4}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r3}, 0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TCFLSH(r4, 0x400455c8, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f00000000c0)='.\x00', 0x4000000e) ftruncate(r7, 0x2000009) sendfile(r6, r7, 0x0, 0x6) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r9 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r10 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r9, r10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r5) 2m30.907097136s ago: executing program 3 (id=564): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xee00}}, './bus\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r6 = creat(&(0x7f0000000300)='./bus\x00', 0x0) close(r6) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r7, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0}]) ioctl$TUNSETNOCSUM(r3, 0xc0189436, 0x1ffffffe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'lo\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x14, 0x0, 0x1, 0x8000, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', &(0x7f0000000480)=""/177, 0x1001) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0)="e7ed719a1e9609000000", 0x81, r8}, 0x38) 2m30.691258238s ago: executing program 3 (id=567): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000048c0)='/sys/kernel/address_bits', 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x82a00) syz_usb_disconnect(r6) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0x3c}, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r8}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r5}]}}}]}, 0x40}}, 0x0) getpeername$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0xfffffffffffffdac) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) socket(0x840000000002, 0x3, 0x100) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r10, &(0x7f0000001440)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x1000000, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) 2m14.596243234s ago: executing program 34 (id=567): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000048c0)='/sys/kernel/address_bits', 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x82a00) syz_usb_disconnect(r6) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0x3c}, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r8}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r5}]}}}]}, 0x40}}, 0x0) getpeername$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0xfffffffffffffdac) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) socket(0x840000000002, 0x3, 0x100) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r10, &(0x7f0000001440)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x1000000, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) 10.499268444s ago: executing program 2 (id=1058): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1}, 0x68, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x0, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x7f}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000a2220840d219bc75819b0102c5f809021200010000000009040000000202"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0xc7, 0xe64, 0x0, 0x0, 0x0, 0x0, 0x401}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0x6, 0xd, {0xd, 0x12, "6e21d5a0a4fb2a356a4791"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x40, 0xc, 0x8a, "b950b2f65d7c0427f3ff2421f0689c9c659cf8114d719951cc9787303dae2611dcc40a71b0ee92e58102e19905d22066185a2a6c51297a008689ec27b3852800274b75900331610634b7117237e85e87783b149174edb5595fc4d584c05613a3f31bff79f24240ccfc3e7d270b1b80925316a30012e2eb20c7cae250955cbff07ddea9cfb714ad5cd9ad"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x1e}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x0, 0x200, 0x4, 0x1000, 0x9, 0xfffc, 0x7fff, 0x9, 0x4, 0x7f5c, 0x659, 0x1}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x15}, &(0x7f0000000340)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x5}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_ENTRY(r2, &(0x7f0000004500)={0x90, 0x8000000000000001}, 0x90) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000000)={0xff}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000580)=[@text16={0x10, &(0x7f0000000780)="6766c744240066000000f30f01f96766c744240600000000670f011c24ba2100ecba6100ec66b8684b258a66efbafc0c66b87400000066ef0f01d6660f0d9e0a0065660fe460700f0017baf80c66b8ce395c8a66efbafc0cec0f32", 0x5b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.831372145s ago: executing program 0 (id=1070): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149004001040800", 0x58}], 0x1) (fail_nth: 7) 7.35183027s ago: executing program 0 (id=1072): ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write(r0, 0x0, 0x0) close(0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x409, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x200, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}}, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff0924031300010005024524", @ANYRES8=r3, @ANYBLOB="05"], 0x0) set_mempolicy(0x4003, &(0x7f00000001c0)=0x8000000100000003, 0xe1) modify_ldt$write2(0x11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) epoll_wait(r3, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f00000005c0)=""/102384, 0x18ff0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0xfffffffc, 0x2000) r6 = getpgid(0xffffffffffffffff) ptrace$ARCH_GET_FS(0x1e, r6, &(0x7f0000000240), 0x1003) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x8d, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)=[0x0], 0x0, 0x0, 0x0, 0x30}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000840)={0x0, 0x0, 0x0, &(0x7f0000002ac0), 0x0, 0x0, 0x0, 0x0, r8}) 5.854153221s ago: executing program 7 (id=1075): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000580)=@req={0xef34, 0xb21b, 0x4d35d94c, 0x9}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000800"}, 0xd8) bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 5.803655284s ago: executing program 2 (id=1076): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="580fff001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149004001040800", 0x58}], 0x1) 5.675001658s ago: executing program 2 (id=1077): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 5.531353841s ago: executing program 2 (id=1078): keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x17e0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00220700000000d934a1"], 0x0}, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x6) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x8000) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff}) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000140)={r2, 0x1, 0x0, 0x20570}) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0, 0x12, r6, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r5, 0x0, 0x0, 0x1, &(0x7f0000000180)='\x00'}) ppoll(&(0x7f0000000040)=[{r2, 0x708}], 0x1, 0x0, 0x0, 0x0) read$dsp(r2, &(0x7f0000001200)=""/4096, 0x1000) write$dsp(r1, &(0x7f0000002200)="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", 0x1000) 4.858965568s ago: executing program 7 (id=1079): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xab, 0x0, 0x0, &(0x7f00000004c0)=""/47, 0x2f}}], 0x2, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x2, 0x80805, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000000)='\x00\x00\x00\x00\x00', 0x5}], 0x1}, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) r2 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) r3 = socket$inet6(0xa, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaae071d7a221fe86dd60a8b5ce001406030000000000bbfe8000000000000000000000000000aa001100002be7081252039e72aa4f43b96e7a688b04ff004a1001c3ee7f62a760267706062eb29aeba9fbe4e9f8416dd175", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5400001190780000"], 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000001240)={[{@workdir={'workdir', 0x3d, './file2'}}, {@default_permissions}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_io_uring_setup(0x39b4, &(0x7f0000000000)={0x0, 0xb098, 0x818, 0x3, 0x1cc}, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000200002000000400004803c0001800b00010065787468647200002c000280050002000000000008000340000000000800044000000010080006400000000408000140000000080900010073797a30000000000900020073797a32"], 0x94}}, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x1a8000, 0x0, 0x1, 0x5b}, {0xdddd0000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x3000, 0xeeef0000}, {0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfa}, {0x0, 0x2, 0x0, 0x9, 0x3, 0xe, 0xfd, 0x0, 0x1}, {0x0, 0x10000, 0x0, 0x0, 0x0, 0xfd, 0x4}, {0x0, 0x0, 0xe, 0x0, 0x0, 0x3, 0x0, 0x5, 0x1, 0x2}, {0x0, 0x7395b2a318166a97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x140030, 0xa, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) mount$nfs4(&(0x7f00000011c0)='/($![X-,\'{\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000001040), 0x208400, &(0x7f0000001140)=ANY=[@ANYBLOB="2d284c5c2e21272c6c6f7765726469722c217d2c6c6f7765726469722c402f282c2e28032c6c6f212a2523732c6f7665726c617900e81d62cf430c2c66736d616769633d3078303030303030303030303030303030362c6673636f6e746578743d73746166665f752c646566636f6e746578743d737973740000000000000000"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f00000013c0)=ANY=[@ANYRES8=r0, @ANYRES64=r6, @ANYBLOB="a4d1038c08751316a1e307ef70f663f58c3a301b775495123f9851d9e21ff0b099e68c372ec09932079818b1b0b218b61660a1f03703a6ef6ecab650fcb0fe8cd64679dad17d7c81929494aebef1e84ff66f69880f908897a1e13cac80268bdeaeb2166dd4ce7e23dd575f9433c9b4441f4e26fb3399a0a210344af77cac12ed2b76cc6bedb3b4b49499139921e49dbb6a770ec12debeebe580a2593c668298d8a2292124f2c80656fffc18d860b73c6af6d1ff6a924e1dc380b45cb5fc1880239cdf61c7c2675787d509c6d152539806abd6d937806d5044e218899f9ae553db320e301537427f99cbe", @ANYBLOB="b0fa550779efa691f47da3411750d78d7312bb05c60f70a5f17540476ba97a7f0207", @ANYRESDEC=r3, @ANYRESHEX], 0x1015, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 4.595184555s ago: executing program 0 (id=1081): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a", 0x11}], 0x1}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@broadcast, 0x4e20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {@in6=@dev, 0x0, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0xfffffffe, 0x2}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f00000001c0)=0x800) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000440)={0x0, 0x100, 0x200, 0x0}) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002780)={0x38, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0x1a, 0x8000, @l2={'eth', 0x3a, 'netdevsim0\x00'}}}}}, 0x38}}, 0x24004000) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r5, 0x20, 0x6, 0x25dfdbfd, {{}, {}, {0x1c, 0x17, {0x1c, 0xfff, @l2={'eth', 0x3a, 'virt_wifi0\x00'}}}}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000000) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e"], 0x0) 4.366244165s ago: executing program 0 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r0 = fsopen(&(0x7f00000001c0)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() setresuid(0x0, 0xee00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000b40)=0x1, 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) r5 = accept4(r4, &(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000400)=0x80, 0x80800) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000000109010400000000000000000a000001080005400000001b0800034000010000e1ff9c69c16e53431823196ac5e8138a280df18bf512f340f9e65b95291ce4633713215213ea79da63a5bf1026890aa1eab3d86d7ddd7b06ba5b133975c477e0dbb3f55ccb5629cdaa64c819924143a6d3b0fa6f4cfaa06c775e5933ced052599c50db1f0ae556a559686158811a93a6a5282aac6fbede8596a90079723d849b89d31e737ab1960211df5cf3c07af69d5a6c8f5c2c38738423b6626f179d9b1a34b1b4a09e8035457766c35bd334e103d8df8a96a8b7db7e3264a98325391380b232e2719c5e63de5d2c0b0fe150"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x81000000}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf365, 0x0, 0x9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000b80)=@newtaction={0x1704, 0x30, 0x200, 0x9, 0x25dfdbfd, {}, [{0x178, 0x1, [@m_ct={0x90, 0x2, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x95d2, 0x0, 0x9, 0xd12}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}]}, {0x34, 0x6, "e4b949bf6d930ed8abbd5c15283ccad23d3f859d9fada7fa756ae902b36e8398560ad442d1f83d035e847aeb6c9d856a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0xe4, 0x13, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xfffc}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_DMAC={0xa, 0x3, @random="30f370160d76"}]}, {0x99, 0x6, "cba601a6e939df5ba48b9412137e288321d884fffd7f3ff00c1724fea02baaf93df81ba5c6e277d574d56bed92c519217cc091103f5df0328d774135f3295490f1c8c6cb16adcc22bab6b47dfac9fe99ace5b8167efcce9186d78f3577c4d5304349cc102494df0fe6e87400112fb201f2fbe96629ece0cf76b9c3bdf7600f6bfd36ce1c64b43cb7a74acb9acdb8e137a9d1549586"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x1578, 0x1, [@m_mirred={0x80, 0xa, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0xfffffc01, 0x8, 0x1, 0x5}, 0x1, r10}}]}, {0x32, 0x6, "5a5a97d1fb72416d219c20360180eb16c6731e3f33272d05077fb6d08c9544792af12fd5deb166970ba4170c1e40"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_gact={0x60, 0xe, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffb1c3, 0xfff, 0x5, 0x1000, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x24e0, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x40, 0x1, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6cf, 0x0, 0x1, 0xfffffff8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1574, 0x10000000}}]}, {0x57, 0x6, "8415c4d0631fd4f162e282440641033ff3c58c651966a4a355f321a8d8fc068ad1bef2a5ddf8b8e1c486458d10d2809994bdbb4946cc83d34583eb403f303e2bdb4cdee077eb5675aeecc84156404ef04131f8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x10d8, 0x9, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x10000007, 0x4}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x1, 0x5, 0xc58, 0x5}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x7ff, 0x20000000, 0x9, 0x6}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xa038, 0x7, 0x1ff, 0x6}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x3, 0x3, 0x80}, 0x73}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x10000002, 0x527f, 0x100}, 0x7e}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0x60, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x31, 0x6, "bc9ddee6e7953e54e9b9c9c7aa4ad4c99e4fcaabb14731735b176ebe5340c408e76826a4733348bd122de74398"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x114, 0x17, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x20000000, 0x1c, 0x6}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x31, 0x4, 0x0, 0x10000, 0x35f}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xe18, 0x5, 0xb, 0x200}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x10000000, 0x7ff, 0x80}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffe, 0x3, 0xffffffffffffffff, 0x1, 0x5}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x10000000, 0xfffff77f, 0x2}, 0x7a}}]}, {0x40, 0x6, "bb4c55332f81ec597305c38b7899a143ec2b00975cf7de17f400eb38b18dea9dd38321591bb757a35b5db78ce4b639373445d6e1db4c39108fe38d51"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x11c, 0x16, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2c8a}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0xe}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0x3}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}]}, {0xb8, 0x6, "6c11404e26ebec94a1769d55e4a5df9af6363db6293eb13abbf5be7c60055e045cdebaf337e047f42a8fe2951b567ad7f8c487cee2edcaeb40372a2fdddd33d9730196952b7ee998d5a6ac547cce64e9ae13407ee22361a5481b5cc705d3565705c0c09843d56a2e53f9d5c4fe8a3e40226b57b2481d58ebf86b820354a38f2ae7fc24f88b7409dec94473dd84c22c4a634982aa859e49c9f2c9e350532da62b5c233fe343522fcde7bd9f354e55791e74f96b16"}, {0xc}, {0xc}}}, @m_simple={0xa8, 0x7, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xc, 0x3, ')}+^}-.\x00'}, @TCA_DEF_DATA={0xd, 0x3, '*}-/-[#}\x00'}]}, {0x57, 0x6, "276b199724223445ab2e24dd0597742236999771c8361ff5202e2d47f8b5cb6bae42a2fa7e917b00a4c34a25f7e341a5e100aabf70a8957b6dc6e12f7b7279f4439cad7b805ee9ce15e26d52d30e79809c4cc6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1704}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000841) 4.365442262s ago: executing program 7 (id=1085): syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) memfd_secret(0x0) userfaultfd(0x801) socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/70, 0x46}, {0x0}], 0x2) syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b010203010902"], 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1, 0x3, 0x0, 0x8, 0x1, 0x200000000}, 0x0, 0x0) 4.215374782s ago: executing program 6 (id=1087): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001500192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149004001040800", 0x58}], 0x1) 4.130267908s ago: executing program 6 (id=1088): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 4.009197296s ago: executing program 6 (id=1089): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = accept(r5, 0x0, 0x0) r8 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x2}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r8}) io_uring_enter(r8, 0x4c4f, 0x4e39, 0xa, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000440)={0x6, 0x118, 0xfa00, {{0x6, 0x0, "3843cedb46ae624dedaebf992f9bc18e0e03a5ffdb3ee15140e4dbf907196a047ba61595bf15d058eb3ff6cff6db35182e31b9cb88c9e7af130038607c6fc75cd2d033c4c2bc029467150c417100622c0f322b4b70adeced02d27153334ef9be31e9f205a300a637d0e980620ace08eec122a3e07ab28508c2f9443b0d4a0bc6c23d72cc067910ab936fff8141501fd63dc10d1583ea06383a66574bdd977ea057111297d2dc1457dbf7b1fe7344a5842be436de232335708b5f1584747d38749eaf0eeee8e4910b8e8a45e81db761638211ce6e973557d79011cc6f066b94613e7f338b0f1f3c86ad09be8ca6dd36ade83d49a6eb85a8a73311952336bf5495", 0x7, 0x7, 0x28, 0xff, 0x40, 0x81, 0x5, 0x1}}}, 0x120) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000001c0)=ANY=[], 0xfffffdef}}, 0x0) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 2.921676891s ago: executing program 6 (id=1090): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0xfffc, [0x0, 0xfeffffff], 0x5a4}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03f6ffe0ff64000200475400f6a13bb1000000086086", 0x17, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r3}, 0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TCFLSH(r4, 0x400455c8, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(0x0, 0x0, 0x0) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f00000000c0)='.\x00', 0x4000000e) ftruncate(r7, 0x2000009) sendfile(r6, r7, 0x0, 0x6) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r9 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r10 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r9, r10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r5) 2.827299058s ago: executing program 0 (id=1091): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/nf_conntrack_expect\x00') writev(r2, &(0x7f0000000280)=[{&(0x7f0000000480)="94", 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f00000000c0)={0x2, 0x0, 0x7, 0x6, 0x13e, 0x8, 0x4, 0x2836f135, 0x9}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000001000071121600000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x6, 0x1008, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e370248018000f0", 0x2a}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000440)="c01803002e000b12d35a80648c4b64f90324fc604fb4fc963803dcd465b380c8179142100c024002000000053582b8eb484d3c19289ba1a00f8593bdb3e27efc2b268616e73ef966811ce9a62986285df25d3433b9f1a40fb31585abdd2d31fdffdff1d3f98e9b4ad23f7d866001bf2cfee36c68f0d9ef64be0f88567ba50952006daa2a893d978679a644a5de018d62a2daadb0963ef2d76471b4919a3c5f372a986e6210cda8138e76734becac579f75c14348f4711e82b6612899eea089f4b586626fb3be7aedfd55eb4eb114071715eca2ece14cf9ec2799a6c80bcacaddb7df5aaedc74db0e6b145586f948a59f9378918c446dbb416de1b4e32e62ae3eb4cd4877ea42dda0398eb0c521e2c2f3e48c0dd3d5b9089b69472108c141e05f13427bb9dd3209142282e31d644078b5dfbffbd277180d8a8c5190b395f8934d9ce01538a1b7838f36cb19f714a16ee130bcf325cc65c01aed9c00f7be802604a0569ccc99a58a9b84b13697fc2c4a8cd3d9630e49f64649ae64f88cda005db858a72090b3399723", 0x116}], 0x1}, 0x400000c) r8 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000100}, 0x14) 1.759303637s ago: executing program 0 (id=1094): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r2, 0x0, 0x4cd) dup3(r1, r2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x34, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf, 0x9d2d666c186a5c6c, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x3, 0x2, {0x9, 0x21, 0x3201, 0x2, 0x1, {0x22, 0x469}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xa2, 0x6c, 0x54}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x67, 0xa, 0x3}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x6c, 0x2, 0x8, 0x8, 0x80}, 0x89, &(0x7f0000000100)={0x5, 0xf, 0x89, 0x6, [@generic={0x5d, 0x10, 0x7, "fcb8fd4a3cf963035db53c3c930f52604580fb769896a18b63b9e50510c9e29ccf8fd9bcb6385ebb1cc77f6b62cd2019e96fc4daa57c9798dfd16637a2da2a9c7242aee400e0dc38a78c84824b3e315299d760d745008de61133"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x8, 0x32}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "49681dbccde131c4cb56e4675cde52ba"}]}, 0x2, [{0x8c, &(0x7f00000001c0)=@string={0x8c, 0x3, "ef8b57112d43d1d293627188a19e793f7432a334d66e032570dbe7eeeef5ca39a01d2dfe0cda9ec7cb1df3ddf0ae371bd4e4d1665d890525c71803c8b38112be9896732823a150cfcbeb34db7a39464edb7f43d79ef62fd68aa84b20b4d5c1f84f2ce78451abe4b3395e604bb4ef38998a86d1f76ef47fffa9fece7ef9c0c8d4a252b256c0e8d759ef07"}}, {0x23, &(0x7f00000002c0)=@string={0x23, 0x3, "87b5757257db4d13f378321a676117b231f38a2885cdb9d4fd82b8fe64e6484715"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000000500)={0x24, &(0x7f0000000340)={0x20, 0x1, 0xda, {0xda, 0x30, "9d9ef0a36ada805cb0b0ce9aeeed24964e33a5479c123def9627d0396354f7b6f9990445450e2f82a18b0d0d6abfaa869924a4cfbbf510452d6561f7f76aceabdb53ade5ccefc7e217e85e35859db7efdace20b3d17a4ddb863e79d3ed28f9f77e4ed70a00717de110c9afbfab7e5fa65694214d35f8b439b823eaa895d3f99b216964874f6c31f69855ec010b5f7c30265c2a9639831d378d0227dbf7faa4e52068096384ddf9734eca217b4cd2775a254d68c249e76e1031a67bdfd91afcb71499926c5f1c3478ed2e4832ef5187c42502ccbd5e184dc8"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}, &(0x7f0000000480)=ANY=[@ANYBLOB="00220a006c22c3dc0000000000000000"], &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0xbdb}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000540)={0x20, 0x14, 0x62, "ff238790b6503da4002af7010deeda2e84a91a4a74ca206653d5e1ab64083c2194dc1059c0548dc2049753669a349d67d7368f4fb1142140b88c80bf950d331c718e915f4b409ed70449e83a858f63c28ad583fe4e58d1a5e5ba191a018b086462b5"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000640)={0x20, 0x1, 0xd7, "4b4e088838896d680c167fa816a4c555376fd789543f7767aa4dd45b3cb8164686729488235a426010b28b040f962a17f4efe0887af71c7285e44c7bb6e1ca45aeea1d384d256d0d2ee438fcb11389f623b2ee6d80ddfbd0fc199ed995198eff8b3837f7c2447ee2d1d17cd25cbc8f1339a660372206a084f8fb0b8362c0e197351b3b9d45a8c3c1605d3ed1b10da865a2c4a6fb6d12df2f615a905d36b3eacb0f894c0c5d6f253b26b9295be75536f053df24e438a69742029e9fd5e154b62854867aaf4a63be68426147033534228b8c6e84c2f5f9b0"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x5}}) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x1, "e4a145df"}, @global=@item_012={0x1, 0x1, 0x2, 'I'}]}}, 0x0}, 0x0) 1.49940224s ago: executing program 2 (id=1097): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4088040, 0x4) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0xe1, 0x0, 0x0, 0xfa000, 0x1a5e00}) 1.499151626s ago: executing program 5 (id=1098): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 1.469949778s ago: executing program 5 (id=1099): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 1.443462855s ago: executing program 5 (id=1100): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x9, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000004c0), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f0000000300), &(0x7f0000000200)=""/35}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000053000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.355074995s ago: executing program 5 (id=1101): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fspick(0xffffffffffffffff, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d0, 0x1c0, 0x2b0, 0x2b0, 0xd0, 0xd0, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x1}}}, {{@ipv6={@remote, @local, [0xffffff00, 0x0, 0xff000000, 0xff000000], [0xff, 0xff000000, 0xffffff00, 0x1cece8fc5b3d2217], 'ipvlan0\x00', 'netpci0\x00', {}, {}, 0x2b, 0x1, 0x1, 0x4}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2c}, @ipv6=@mcast2, 0x11, 0x2, 0x400}}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [0xff000000, 0xffffffff, 0x0, 0xff000000], [0xff, 0x0, 0xff, 0xffffffff], 'ip6tnl0\x00', 'team0\x00', {0xff}, {0xff}, 0x2b, 0x3, 0x1, 0x1}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x242}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@loopback, 0x36, 0x2a, 0x2}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@dst={{0x48}, {0x6, 0x6, 0x0, [0x9, 0x0, 0xc, 0x6f9a, 0x5, 0x3, 0x6, 0x0, 0xfa1, 0x8, 0x100, 0x2, 0x9, 0x44f, 0x225d, 0xff], 0x8}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@broadcast, 0xf, 0x3, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) r2 = io_uring_setup(0x265a, &(0x7f00000000c0)={0x0, 0x3e82, 0x800, 0x0, 0x2a2}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, 0x0, 0x0) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a35f200140600fe5000000000000000000000000000bbfe8000000000000000000000000000aa00004e2245512a13b28a4fb203d87578930c47c6ef8457bf3674085ec3ae30bb974b23e260f3031994593a62251bd6867ad6fbf7216e0c1c514ea5b88a8588cd5b484a521856c68bd4ae2346143f39c8108a3652371ead731378f854429e04b14d6d6daba3e1ea390de7c25a44575b3b903ece0d4d2aae27a47d882d07e839af8f25cdf721", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000600)=0xfffffffffffffffa, 0x12) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) fspick(0xffffffffffffffff, 0x0, 0x1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d0, 0x1c0, 0x2b0, 0x2b0, 0xd0, 0xd0, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x1}}}, {{@ipv6={@remote, @local, [0xffffff00, 0x0, 0xff000000, 0xff000000], [0xff, 0xff000000, 0xffffff00, 0x1cece8fc5b3d2217], 'ipvlan0\x00', 'netpci0\x00', {}, {}, 0x2b, 0x1, 0x1, 0x4}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2c}, @ipv6=@mcast2, 0x11, 0x2, 0x400}}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [0xff000000, 0xffffffff, 0x0, 0xff000000], [0xff, 0x0, 0xff, 0xffffffff], 'ip6tnl0\x00', 'team0\x00', {0xff}, {0xff}, 0x2b, 0x3, 0x1, 0x1}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x242}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@loopback, 0x36, 0x2a, 0x2}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@dst={{0x48}, {0x6, 0x6, 0x0, [0x9, 0x0, 0xc, 0x6f9a, 0x5, 0x3, 0x6, 0x0, 0xfa1, 0x8, 0x100, 0x2, 0x9, 0x44f, 0x225d, 0xff], 0x8}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@broadcast, 0xf, 0x3, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0xb}, 0x1c) (async) io_uring_setup(0x265a, &(0x7f00000000c0)={0x0, 0x3e82, 0x800, 0x0, 0x2a2}) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, 0x0, 0x0) (async) listen(r1, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a35f200140600fe5000000000000000000000000000bbfe8000000000000000000000000000aa00004e2245512a13b28a4fb203d87578930c47c6ef8457bf3674085ec3ae30bb974b23e260f3031994593a62251bd6867ad6fbf7216e0c1c514ea5b88a8588cd5b484a521856c68bd4ae2346143f39c8108a3652371ead731378f854429e04b14d6d6daba3e1ea390de7c25a44575b3b903ece0d4d2aae27a47d882d07e839af8f25cdf721", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) (async) openat$cgroup_int(r0, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) (async) write$cgroup_int(r3, &(0x7f0000000600)=0xfffffffffffffffa, 0x12) (async) 1.223129248s ago: executing program 7 (id=1102): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x509040, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x3, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x301200, 0x0) sendmsg$unix(r2, &(0x7f0000000680)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES32=r3, @ANYRES8=r3], 0x30}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.143536881s ago: executing program 7 (id=1103): r0 = syz_usb_connect(0x2, 0xffffffffffffffaa, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0xe1, 0xd3, 0x32, 0x20, 0xdb0, 0x6869, 0x18a4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x50, 0x8, [{{0x9, 0x4, 0xda, 0xf7, 0x0, 0x85, 0xee, 0x20, 0xa, [@generic={0x0, 0x7, "ee7941ef7ce67217b6c9911d6325feb1217bcef0b53c144cc5a6d87d0a7cd5f62f21a212c1dacd9ffcc7a0c96954b01938f9ce82f9d6a592d4d2b4b7a5eba4151e0e6ab9c299ec4e760d695b148706ba30aa328e1b475a4d7d947804b194e924fdae43e9baced63b504313994d40c90ba221a07a260dac02955edfe1aeb6cd1da7d846b0e3e19055b8f89d15b80c804ec40de1c47cbd7607927b36aee2fef3ef11795ff015a02cd51f06c5d31a6b8633eefb37b8dd7bee00b8e768911cc55a2632cda10d3103dbc6643b"}], [{{0x9, 0x5, 0x4, 0x0, 0x40, 0x6, 0x63, 0x9}}, {{0x9, 0x5, 0x3, 0x1c, 0x3ff, 0x9, 0x2, 0x40, [@generic={0x0, 0x10, "9fac0eb49aeb8015e20e003f16124b2f2b8ba0c571ccc60392ed9290f78b2cd00879e5064c34a41222e2ae62826bee39366e65e592a1fda2f9a24703b2d3eff4d99c6f58b1ed62ca4a5ae1c895571841d0be04eb3abbfe3079e6ad607d2fb8d041b4504a10f105e3719bd0e71f1455aef40e6875366bafa69a82482b902a57333f8748815964c875251b7b31eb994fbf42bb5578241e814e35fa5d82b985514d154c9762d5991ee0875865a19e229615747e39d087c54501f2f24adad9cc5a7464dcadd3882ea9dc"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0xd, 0x6, 0x8, [@generic={0x0, 0x11, "198f10f06c1dd28645038f92382af528d0311b8ffc88a7e6e9e211b96603aa86f0cee5b5ba1b68f2f2ceb3cf39f4f055583b0acf073eff8f10bb"}]}}, {{0x9, 0x5, 0x3, 0x18, 0x20, 0x1, 0x9, 0xfc, [@generic={0x0, 0x10, "af9e8346194a9604a9a3dde8a83c0e6810b12d511bf96f3a4acfb597e27eb99ec10a3ddc3f1dcabec4a62981a9c50e60db80ceb4043b0ac57d79ce41a8e25d085f1ef91f58a9967845e6cc54bac0070c0d427efd78e4185090c1a19128e6e5a39fa4c00127d28bae4b242c745460e78755e2edda38a22ebb6a21136d01f266e0087d6ee9637b61b71e8972c2547283ef996dabf92dc4dcf4a32bdfb0bbef0578db3586946ea3c3947e11a8548664a20a5db6c406cb0359d40de1f3376acd13a8a4aa0156e680e6af71d18e5ffaa3a55e355ab3b17295c425"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x10, 0x7f, 0x2, 0x2, [@generic={0x0, 0x24, "f443b1d88402fc80946899460e8a52cc1f54befec58092465961a94fd9cf69896eaedb2f13441ae3acf1fb661bd82f7ce8caee42d32c208aa29f36adfedc97e68f57af5e7d7970fc07eedeb572526bb001934a6b2a695301203eee9086b78b58"}, @generic={0x0, 0x9, "d9614809600256e272fed6a883155bd20ff29f04fa193bddc9965237fb7c6f22643358139d619ab5c3dbcaa87ea389659466fa06decb2e18cd96a170e8a2a59f96bbbcdef91042e62b9485278d56eb67505ea8b750a5dc252f8145d0e53d554252802cb83be029688fb8f051ffea4923f7b5288778c60d1ae5e40b62235b942b53f77981b1cd7a74e2351e6bcca72355fed7302dc2e339000f2cf4915f87d6556a3e87ac837063494e002af245bfee088e38b971e89f946b785717cef9992970b1c475a89bc4751b9b56c7fb475b73c2a83e406f866fac0f005252f76bdad550704a9a0502c0f212c95b31bd25bff7e4d49b11b8e0"}]}}]}}]}}]}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) (async) socket$kcm(0x2, 0x2, 0x73) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x82a00) (async) syz_usb_disconnect(r3) (async) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0x3c, 0x3, 0x0, 0x0, 0x4000, 0x0, 0x3ff}, 0x0, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) writev(r4, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) r5 = syz_usb_connect(0x3, 0xbe8, &(0x7f0000000900)={{0x12, 0x1, 0x250, 0xde, 0xd4, 0xf9, 0xf7, 0x2304, 0x207, 0x5fa5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd6, 0x3, 0x5a, 0x9, 0x10, 0x6, [{{0x9, 0x4, 0xfa, 0x82, 0xe, 0x1f, 0x4e, 0x77, 0x9, [@generic={0xec, 0xc, "59a1b3fb5ca6fb484020cd6774764dff595b12e0b206bab6a01d6006f7be6f2697356eeca14e6d8a31c3cfab04004fcb7f839e31f0631eceb11f0385fe14cfbd8b08f148bc0d976fbb93716300cc497071733d7fc5b7564a2f12fc00bca80486267334a15ebfd23ae39a4240b3d49209e300d4e5375e53c35bcbcd386a7c94b02f3824467a1981fb98807d9c9d273038ee107620807a234720c36b8767f5dd54abdf55eaff4e54f925f3e1c6be99e93fe8ce9bb59f6308af81f90971cf7194aba4fc06bcc7bdcac821e5507c2e726c64603beb1686cda40fb9950ae4e71064fbdbbce0daa90e6c07b543"}], [{{0x9, 0x5, 0xd, 0xc, 0x40, 0x3, 0x8, 0x5, [@generic={0xd2, 0xd, "5fe23dd42e42501456703a1295f3dc08aa7d83b71ece20d5e7fa97427c42b1fa37101451eaf001ea90005a65f58e0c3cd37f7e85cad35fb10ac448c1dc118050cbcc7be42bd450faaff6aa1e49f491b3ed46507645df10c72d30901779b760f0c41659bc85667fa24952f9835cae8d0e12a75b682d5b65047837b459c3073b015db70e6ecef6e300f9d3e857a9dcbc78aafe5d7b0f6eff908b99a0c5f88a3db1c43bf34489314c2bd7b63974206a82b83d5282508b0d8d4021bf3edf0f6d1a2c0e382556f397c8bb9c1080a4754c7a93"}, @generic={0x26, 0x21, "e5d1fd32f39fcbc12f042702efef952a0c11950a3c28ba7a2163dc279d94bbd90c44c43e"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x40, 0x0, 0x7, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf, 0x7}]}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0x6, 0xe8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf9, 0x6}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x7, 0xc1, 0xa9, [@generic={0x77, 0xd, "df7b698a774c84164f0f2c4a1ac5a5dd8a895464faa031c71b50f9f86fb5b3c53e80fb904842a44c1efd725222fac67f6dcb8e6c8b8bcb7e046b579e74b1d613e7d85b788b3bd3903ea63f728952a7528c1846583937b1dd645cf1b38400af0516b1ba614cc7da869e7f21ab2f537cfb15e376f0cb"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x80}]}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0x6, 0x1, 0x8, [@generic={0x9f, 0x5, "8c4b4bc0f88ac560b5952a94f936b3084bd6eae904607094dd8b5bd231008d121589fca1b97d804b8d9c3602ecfaacfa2116566bda4dbbe46b65676a42ef0b24dff1b74fb747a1bb4fa8b449d65b1805abbe87d54d9690852dd2392896969fdaf9c5fff07a2d84384b0f18ea2559cf3d4049e6fb92d606ae2c205fbc5cad0fc288abde802dff0f15e1650ee7790b127dfefadcde3278ec51922de4ffda"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x5, 0x40, 0x1, [@generic={0x67, 0x6, "74ddad4740ba2d2940cbe9ccdd34a9b31053f1635faf8489bbc5c605e4275790d6ca496ca63e6afbe41ba68cd8f9c935427a2dae0e047e4761a47a42b112e01b33d0a0556de71af4f14217540c6d0d6873e955b464d1a57ad43db112e46c2131b2b2a50e5f"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x40, 0x24, 0xff, 0x84, [@generic={0x61, 0x3, "313469e3e1c3a2c55e5710d965723c6a289206996322794826c9967140765e49caeb026c3b2d5b6f4ae65db808368d75fd63dc8d5413e18f46d4d31b1f9dcd497cec29ed722537574e5d6435ad5dc3ac385380087413bdade276c8dfb2fb4f"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x16}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x8e, 0x2, [@generic={0x49, 0xf, "a937285761b3fe78a2acc27f037d8c7dcae54890de6970504522e842f9645d4233972fe584cc5eb3c5733c660eaa3d2dd54d4907e279b0ad5bd3bff5ca314fecf7e3569c4868da"}]}}, {{0x9, 0x5, 0x41, 0x10, 0x10, 0xf5, 0xa8, 0xa, [@generic={0x3d, 0x1, "68f0826782eadd0454f2447176ec5be074ff0df4aadbbbd88394bbf4313a6f1e7a33f92e619c73b2393b86628dd96d5cdee03d296dd8139e06187f"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x2}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x63, 0x8, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0xe, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xb, 0x5}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x6, 0xfe, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x7}]}}, {{0x9, 0x5, 0x225b4979ca95dc65, 0x4, 0x200, 0xbc, 0x90, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x2}]}}, {{0x9, 0x5, 0x5, 0x2, 0x618, 0x6, 0x0, 0x2, [@generic={0x3a, 0x8, "0dd740bfa3dfeecb3024776c8abbeee16eb77c7429570bd017ca81897867915cdac75e8c4b08114d16bd8d095b330daf2ff862737082e6e2"}, @generic={0xd8, 0x8, "db4facc06a0eea41b7f3edbfb1641b02355129e999f6697e9de431b71b0f2110cf8ff8007e75fde7d67f89b1617f18f0328113624327a14e6fa15519c1e4ebe234a21761a95bbe4dd284b37cb260b12bbfecae796064096d3ecdbe97b525060830a43117eb188d7741ff75816708d055e9f762599c57fc4f2b9ecb98408452374b61d7b9c7623bb1f27abdeab6e5e5244210e3743da6dc0762e72761806deaa2dc488b8871406fdfbc2c11f6d9b650c94889718185238257bc9a45bb2b1df19e4ad3e99bd93edbe208c4e543e89a27b87d8d8ce599f1"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xe, 0xf0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7fff}]}}]}}, {{0x9, 0x4, 0x6, 0x6, 0x8, 0x25, 0xb7, 0xce, 0xf, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "8ee7e63900ad"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xfffc, 0xfff, 0x3}, {0x6, 0x24, 0x1a, 0x81, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x2d}, @obex={0x5, 0x24, 0x15, 0xb}]}], [{{0x9, 0x5, 0xf, 0x8, 0x400, 0x40, 0xf1, 0x18, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x8, 0x4}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x9, 0x5, 0x7, [@generic={0x4b, 0x22, "da7f3e6419629f0bc6a3802bdf27a481e06eded6053bc107f4fbf24b26538fae8ca5faee96f5facc11ce9c3ca4d18587750234322dd9d0dbb952f34357a5575b031925fd7e92cf0691"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x7, 0xc, 0xff, [@generic={0x90, 0x5, "bb1b49e0ff6358c17b2c27c44e37a1c1a30ec33f09c86955ae604d4350fcddde6d41f3a48ab7068079d4761e0dde9f7c290af0fb078df1de39073c09cc70ea30d380cf326878d3b4985bd6e9b862fd38ffb962b6c3b60bcf4a310ea9c144bd8c5afe5ef621aff8e9e81526acaf70bd584c3cc234076e024d78815cd3f86542abc4f5281339a29406fcc2c3157a8f"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0xd6, 0x6, 0xf, [@generic={0x71, 0x28, "4122babd604f1e781bafa2edcc8133875f20e85c0e98a64b4c941e0a12c511ed8335803df5cad391a2862c619930a09feac924d76b4ef47e472773cc2df19081f5546d91de8cd1d58f245882662056fb57046a911a19c1233a6891372d28e4dbbe2b4d60e7f5f7d266c02e7dca5123"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x10, 0x5, 0x72, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x11}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x10, 0x10, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf8}, @generic={0x4b, 0xc, "50cca38ccd08595ccc39980e8ce6deac375f85b8b21fff34baee8d3ff606741441d15f5b2fba871b09408a54d462de5e4d757037b112f01549e93a6a93cdf1135743318bdb859d7978"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x3, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x6, 0x1, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x6}]}}]}}, {{0x9, 0x4, 0x44, 0xf9, 0xc, 0x3, 0x4, 0x2, 0x10, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "be1069fa"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x1d7, 0x7, 0x2fb0, 0xf6}, [@country_functional={0x12, 0x24, 0x7, 0x0, 0x401, [0x7b2, 0xcd4c, 0xcfc, 0xb2c, 0x5, 0x9]}, @mdlm={0x15, 0x24, 0x12, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x4}, @obex={0x5, 0x24, 0x15, 0x114}]}], [{{0x9, 0x5, 0x3, 0x3, 0x8, 0x3, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc2, 0x4, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4}]}}, {{0x9, 0x5, 0x7, 0xc, 0x3ff, 0x6, 0x1b, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1}]}}, {{0x9, 0x5, 0x3, 0x1, 0x40, 0x5, 0xed, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x9e0}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x7}]}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x8, 0x2, [@generic={0xd5, 0x3, "e18712693e11f1d62b2a686d2ec1522cd8d1c122d815587ae2fa060b9bf62c3673d47dfad19c15b8268e152701178387d15a7513aa05e9d7018a1e7007408b4bcd53744f8e2e2b4ff286494a0deaff783a0f6e70e2f5b5313442a837660b26721d542e94a6c24045d4987c3a383081a6fcb202a2cc4cdf0edb604ee8809c1c51a880311737d80ab07186220ce13aaf7b27fd2020cd3e21afcc17ce4b5d15808174f7445ddb5213e87f6fe39908124faa3007874c91604eb72ffd13a5c150d771e73e9808b056956e0c22ca209eddcc378def56"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x8, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x10, 0x8}]}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0xf9, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5}]}}, {{0x9, 0x5, 0x5, 0x0, 0x387, 0x81, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x30}]}}, {{0x9, 0x5, 0xf, 0x1c, 0x20, 0x9, 0x48, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7e, 0x3ef6}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x5, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x10, 0x13}, @generic={0xbf, 0x8, "6ab687c9290dc00a3221b7268053fe6f577281cd1837b9119636802261a051b9bfbaa67004cb76e09e518e15bdca99e1c9cac8147aa788b36e389d729994ef00ac449ca0bce1ff5f2804280c821ccd8aca0a9500aceda04fdb997f882fb77de24dd3f88bd752967d6a3b03c334cb331b5dbe91cc98cda3e7eb07fdf813792897ce1795c504bcaf00e37dd4ac09a787fac17b46e3ab713c84b6a78ecdb4eda8add25930900433d2a72d073ea334b1fbeb51a400b06804be00db922bc3b4"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x10, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7}]}}, {{0x9, 0x5, 0xf, 0x1, 0x0, 0xa, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xb9f}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x6, 0x3, 0x0, [@generic={0xa0, 0xb, "bd357a6617e692930fff343d0ef505c64620bb0bc709dad466b85986449dea53b93249fe970c71744d9d2e3e2bb36abad661425904c608d9a2efd2c51d2097c70ad3b3f9a63c738bf2146f2b38d2a1dd95b369a29b666659ba06c1a921fd317db46d353ec098ab5725e63055679ad67341383b3a5594ed0915cc3bcc68f3a35e92fbe662490986929856622bd56b4ad8ab7f2f6f07dbe621fa484c4d761c"}]}}]}}]}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xff, 0x3, 0x9, 0x10, 0xfe}, 0xdc, &(0x7f00000000c0)={0x5, 0xf, 0xdc, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x9, 0x33, 0x64, 0x3}, @generic={0xa8, 0x10, 0xa, "641f984763c72137a24f3ca49025825d10f4313333413875db10cd21c1e314819c195c390cf5474016bcedc674ba7a1e7c5ba27fef1297dbd46b751bd39ab756c617e45269a41fca04f8d0932cdc3bcd90d0ed1d975b788b59353aa468a2fa52810f2baef56f8a61d6cae917d0362d6670fb5967f462f9fc96b106e424b2210e6ba4e2fc39c7d2d2d6da3675046f55b3527ed5ae9adfb453faa157a5750efa17201c589d12"}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x100, 0xff00, 0x3, [0x0, 0x7f8000, 0x208f, 0xc0, 0x0, 0xc000]}]}, 0x9, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3801}}, {0x101, &(0x7f00000002c0)=@string={0x101, 0x3, "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"}}, {0xd2, &(0x7f0000001500)=@string={0xd2, 0x3, "66199c6a73fb554329e96dcd71c2423b0faf58617b46c08908a47a7b96bd81978f7af7073a478ffd72d677c75698e9d2b9514420ad3a272aa5341ccd4a0017f6436f968c8412410f110a5c2c27d7d297bae56f6b5f675def5e228470e33d04011b39fa1baea75789949c8f797f114e81382c981e0125a542ca1b5532447b4c14e35f609db6bc63dd56a3c58513d44fc56cb7ea991385aa660aabb55a2f7f355d4068560ad6c62d7a120504eb43588155a9ddad996ecc7dcec1253753acba987f96a22585288dcc7c79272949d71db5b0"}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x444}}, {0x4d, &(0x7f0000001640)=@string={0x4d, 0x3, "f564811fe67e8f8cb1da7bd1e69c2a42c7236df7b7f4c52e53484beb074b75a4bc4147db112b7088ace7ed03e304984540c51a0b593ad4414de197b4c7d0c19d0e5f3ab247367127d7af88"}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x40c}}, {0x2a, &(0x7f0000001a00)=ANY=[@ANYBLOB="2a0352ecbf923ad97e9f4992ec023492517816251dac90182e6c124336e8ec057289875727122121b0e695418e7db377234045a49aad9c3320ea530e85874ac6cf82b5fdc4553459fb8ba8c9398f13f512192bf46895c4b8bd3156cd8e4a787aa718a2d25e5bcb9627a885df6d162ce8bae38457f022f140ba24f5eb73fe7decda50ebd80cd8259d8f384b0a8a5ff306d8ee0fd7a1c27b3a6966467d67dd60365ddba273c0b4dfadf027a1846697918aa16e6089dff368d3002e8e49f2aa0d8ad9b582c3ce7b555c9aeb94b6c7c72a422bd09b2f9ce0e0"]}]}) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000001880)={0x44, &(0x7f0000001900)=ANY=[@ANYBLOB="830aa7d2750a2d08ebbc8837de2c43fc6dcf7850f99a1187cc12d8bc44a3160bea7edf7321b4aff7e15db0772f149c459265edd76a9c69235956510ef4f6df31d9b9ed6d2e2895c7530f3929f86fec0ab35c3525545d8c2fac299be2d4d68324b93a668d6364802f6660292d276d99003ef9527b37848d95b05adfbeab92ba095bb910d85edb0ad2b57f22b913bc6904000000b98e197c3c6d0725157190fe5ee06f04be25f53860951b4b1eb5d151b509f4413e553f8d5e4c5b6ede0b5ee3dc4cf6438b07e2bb47c451251c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 727.344137ms ago: executing program 5 (id=1104): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x10, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r2, r1, 0x0, 0x100800001) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/time_for_children\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x1407, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x44845}, 0x8040) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x1c}) 726.954137ms ago: executing program 6 (id=1105): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000008000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000099108500000008000000bf090000000b000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 612.590199ms ago: executing program 2 (id=1106): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xe080, 0x26) r2 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x317300, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x19, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800005, 0x11, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0xb81a, @none, 0x7ff}, 0xe) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg1\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000001780)='%U', 0x2, 0x24000015, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb2, &(0x7f0000000000), &(0x7f0000000240)=0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) 551.452941ms ago: executing program 6 (id=1107): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x4000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={0x0, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61157800000000006113700000000000bfa000000000000007000000ee0016055e03010000000000640500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000040600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x700, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) lseek(0xffffffffffffffff, 0x9, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x40}}, 0x0) socket$pptp(0x18, 0x1, 0x2) 503.259268ms ago: executing program 7 (id=1108): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x4, 0x5, 0x5, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0xe, 0x30, &(0x7f0000000040)=ANY=[@ANYBLOB="250a00000000000071116400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1c}, 0x60) getsockopt$nfc_llcp(r3, 0x118, 0x1, &(0x7f0000000280)=""/184, 0x2000006a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x5, 0x0, 0x0, 0xfeb}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r8, 0x4b63, 0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000340)=0x402, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="09070f00007f0000000000000000"], 0x14}}, 0x0) getpid() syz_open_procfs(0x0, 0x0) 0s ago: executing program 5 (id=1109): syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x1840, 0x2}, 0x18, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2a020400) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x41, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000080)=0x3, &(0x7f0000000100)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r2) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x78, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x77fbe527}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x46810) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x7, 0x81, "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", 0x6, 0xf7, 0x3, 0xe6, 0x8c, 0x1, 0xff}, r5}}, 0x120) landlock_restrict_self(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.934303][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.945167][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.955153][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.968831][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.978847][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.990874][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.001099][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.008022][ T3072] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 234.012043][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.029251][ T3072] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.032708][ T7789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.040446][ T3072] usb 4-1: Product: syz [ 234.050021][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.061782][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.071736][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.071992][ T3072] usb 4-1: Manufacturer: syz [ 234.082666][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.097562][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.107707][ T3072] usb 4-1: SerialNumber: syz [ 234.108343][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.123404][ T5846] Bluetooth: hci5: command 0x0419 tx timeout [ 234.123488][ T5846] Bluetooth: hci3: command 0x0405 tx timeout [ 234.129526][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.136298][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 234.146852][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.153560][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 234.163236][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.180148][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.180238][ T3072] usb 4-1: config 0 descriptor?? [ 234.190246][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.205889][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.217705][ T7789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.270334][ T7789] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.288937][ T7789] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.301722][ T7789] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.311477][ T7789] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.395859][ T7152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.424362][ T7152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.465878][ T5884] usb 4-1: USB disconnect, device number 18 [ 234.483218][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.499306][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.673308][ T5882] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 234.833517][ T5882] usb 6-1: Using ep0 maxpacket: 32 [ 234.842711][ T5882] usb 6-1: config index 0 descriptor too short (expected 164, got 36) [ 234.859003][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.870413][ T5882] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 234.879748][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.891444][ T5882] usb 6-1: config 0 descriptor?? [ 235.025188][ T7924] netlink: 16 bytes leftover after parsing attributes in process `syz.6.575'. [ 235.039325][ T7924] netlink: 20 bytes leftover after parsing attributes in process `syz.6.575'. [ 235.169964][ T5882] usbhid 6-1:0.0: can't add hid device: -71 [ 235.187338][ T5882] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 235.212601][ T5882] usb 6-1: USB disconnect, device number 7 [ 235.495376][ T7923] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 235.501745][ T7923] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 235.508585][ T7923] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 235.515308][ T7923] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 235.523472][ T7923] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 235.659764][ T7938] netlink: 'syz.2.578': attribute type 10 has an invalid length. [ 235.698867][ T7938] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 235.859807][ T7940] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 235.885488][ T5835] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 236.571180][ T7945] bridge0: entered promiscuous mode [ 236.613611][ T7945] macsec1: entered promiscuous mode [ 236.633081][ T7945] macsec1: entered allmulticast mode [ 236.658695][ T7945] bridge0: entered allmulticast mode [ 236.680835][ T7945] bridge0: left allmulticast mode [ 236.688387][ T7945] bridge0: left promiscuous mode [ 237.162876][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 237.601452][ T5838] Bluetooth: hci5: command 0x0419 tx timeout [ 237.607667][ T5838] Bluetooth: hci3: command 0x0405 tx timeout [ 237.613998][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 237.620609][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 238.036368][ T7953] block device autoloading is deprecated and will be removed. [ 238.713157][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 238.923636][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 238.953189][ T25] usb 7-1: config 0 has an invalid interface number: 126 but max is 0 [ 239.019514][ T25] usb 7-1: config 0 has no interface number 0 [ 239.089523][ T25] usb 7-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 239.128996][ T25] usb 7-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 239.168492][ T25] usb 7-1: config 0 interface 126 has no altsetting 0 [ 239.184917][ T25] usb 7-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 239.194517][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.237809][ T25] usb 7-1: Product: syz [ 239.272955][ T25] usb 7-1: Manufacturer: syz [ 239.290780][ T25] usb 7-1: SerialNumber: syz [ 239.300620][ T25] usb 7-1: config 0 descriptor?? [ 239.314792][ T7956] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 239.322046][ T7956] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 239.356213][ T7941] Bluetooth: hci0: Frame reassembly failed (-84) [ 239.361113][ T7971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.591'. [ 239.372691][ T7971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.591'. [ 239.390033][ T7971] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 239.399151][ T7971] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 239.593126][ T3072] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 239.656281][ T5838] Bluetooth: hci5: command 0x0419 tx timeout [ 239.770852][ T3072] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 239.781187][ T3072] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.791559][ T3072] usb 3-1: config 0 has no interface number 0 [ 239.844318][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 239.844368][ T29] audit: type=1326 audit(1731367209.216:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7955 comm="syz.6.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5037e719 code=0x7ffc0000 [ 239.882631][ T25] ir_usb 7-1:0.126: IR Dongle converter detected [ 239.885281][ T29] audit: type=1326 audit(1731367209.216:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7955 comm="syz.6.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5037e719 code=0x7ffc0000 [ 239.892543][ T3072] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 239.920989][ T3072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.922468][ T29] audit: type=1326 audit(1731367209.216:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7955 comm="syz.6.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f5037e31b code=0x7ffc0000 [ 239.929237][ T3072] usb 3-1: Product: syz [ 239.929258][ T3072] usb 3-1: Manufacturer: syz [ 239.929273][ T3072] usb 3-1: SerialNumber: syz [ 239.981145][ T29] audit: type=1326 audit(1731367209.216:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7955 comm="syz.6.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f5037e31b code=0x7ffc0000 [ 239.984004][ T3072] usb 3-1: config 0 descriptor?? [ 240.038855][ T29] audit: type=1326 audit(1731367209.226:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7955 comm="syz.6.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8f503b0805 code=0x7ffc0000 [ 240.075102][ T25] usb 7-1: IRDA class descriptor not found, device not bound [ 240.111781][ T25] usb 7-1: USB disconnect, device number 2 [ 240.170899][ T29] audit: type=1326 audit(1731367209.426:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7955 comm="syz.6.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5037e719 code=0x7ffc0000 [ 240.215809][ T29] audit: type=1326 audit(1731367209.426:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7955 comm="syz.6.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5037e719 code=0x7ffc0000 [ 240.233131][ T7979] bridge0: entered promiscuous mode [ 240.243552][ T7979] macsec2: entered promiscuous mode [ 240.248943][ T7979] macsec2: entered allmulticast mode [ 240.255062][ T7979] bridge0: entered allmulticast mode [ 240.263959][ T7979] bridge0: left allmulticast mode [ 240.269676][ T7979] bridge0: left promiscuous mode [ 240.276750][ T5829] usb 3-1: USB disconnect, device number 16 [ 240.603085][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 240.892943][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 240.907511][ T25] usb 1-1: too many configurations: 249, using maximum allowed: 8 [ 241.480029][ T5838] Bluetooth: hci0: command 0x1003 tx timeout [ 241.492144][ T5835] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 241.753608][ T5835] Bluetooth: hci5: command 0x0419 tx timeout [ 241.859677][ T25] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 241.871963][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 241.880204][ T25] usb 1-1: Product: syz [ 241.884646][ T25] usb 1-1: Manufacturer: syz [ 242.087767][ T25] usb 1-1: SerialNumber: syz [ 242.876355][ T25] usb 1-1: config 0 descriptor?? [ 243.737061][ T25] mdc800 1-1:0.0: probe fails -> wrong Number of Configuration [ 243.765750][ T25] usb 1-1: USB disconnect, device number 11 [ 243.950012][ T8005] can0: slcan on ttyS3. [ 244.204086][ T8008] can0 (unregistered): slcan off ttyS3. [ 244.210185][ T8008] Falling back ldisc for ttyS3. [ 244.748655][ T8021] xt_HMARK: spi-set and port-set can't be combined [ 245.286099][ T5838] Bluetooth: hci0: sending frame failed (-49) [ 245.287593][ T8037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.606'. [ 245.294483][ T5835] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 245.329677][ T8037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.606'. [ 245.368765][ T8037] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 245.412693][ T8037] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 246.106253][ T8051] netlink: 28 bytes leftover after parsing attributes in process `syz.6.609'. [ 246.131929][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.6.609'. [ 246.148450][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz.6.609'. [ 246.170543][ T8051] FAULT_INJECTION: forcing a failure. [ 246.170543][ T8051] name failslab, interval 1, probability 0, space 0, times 0 [ 246.220917][ T8051] CPU: 0 UID: 0 PID: 8051 Comm: syz.6.609 Not tainted 6.12.0-rc7-syzkaller #0 [ 246.229841][ T8051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 246.239944][ T8051] Call Trace: [ 246.243267][ T8051] [ 246.246220][ T8051] dump_stack_lvl+0x241/0x360 [ 246.250944][ T8051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.256190][ T8051] ? __pfx__printk+0x10/0x10 [ 246.260833][ T8051] should_fail_ex+0x3b0/0x4e0 [ 246.265544][ T8051] should_failslab+0xac/0x100 [ 246.270262][ T8051] ? __hw_addr_add_ex+0x1a8/0x610 [ 246.275326][ T8051] __kmalloc_cache_noprof+0x6c/0x2c0 [ 246.280648][ T8051] __hw_addr_add_ex+0x1a8/0x610 [ 246.285537][ T8051] dev_addr_init+0x143/0x230 [ 246.290167][ T8051] ? __pfx_dev_addr_init+0x10/0x10 [ 246.295329][ T8051] alloc_netdev_mqs+0x2a1/0x1000 [ 246.300332][ T8051] ? __pfx_vxlan_setup+0x10/0x10 [ 246.305321][ T8051] rtnl_create_link+0x2f9/0xc20 [ 246.310219][ T8051] rtnl_newlink+0x1423/0x20a0 [ 246.314935][ T8051] ? rtnl_newlink+0xaa1/0x20a0 [ 246.319764][ T8051] ? __pfx_rtnl_newlink+0x10/0x10 [ 246.324823][ T8051] ? __pfx___mutex_trylock_common+0x10/0x10 [ 246.330764][ T8051] ? rcu_is_watching+0x15/0xb0 [ 246.335563][ T8051] ? trace_contention_end+0x3c/0x120 [ 246.340877][ T8051] ? __mutex_lock+0x2ef/0xd70 [ 246.345597][ T8051] ? __pfx_lock_release+0x10/0x10 [ 246.350773][ T8051] ? __pfx_rtnl_newlink+0x10/0x10 [ 246.355835][ T8051] rtnetlink_rcv_msg+0x73f/0xcf0 [ 246.360800][ T8051] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 246.365942][ T8051] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 246.371435][ T8051] ? ref_tracker_free+0x643/0x7e0 [ 246.376492][ T8051] netlink_rcv_skb+0x1e3/0x430 [ 246.381280][ T8051] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 246.386765][ T8051] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 246.392097][ T8051] ? netlink_deliver_tap+0x2e/0x1b0 [ 246.397325][ T8051] netlink_unicast+0x7f6/0x990 [ 246.402127][ T8051] ? __pfx_netlink_unicast+0x10/0x10 [ 246.407443][ T8051] ? __virt_addr_valid+0x183/0x530 [ 246.412590][ T8051] ? __check_object_size+0x48e/0x900 [ 246.417916][ T8051] netlink_sendmsg+0x8e4/0xcb0 [ 246.422725][ T8051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.428069][ T8051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.433386][ T8051] __sock_sendmsg+0x221/0x270 [ 246.438084][ T8051] ____sys_sendmsg+0x52a/0x7e0 [ 246.442972][ T8051] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.448305][ T8051] __sys_sendmsg+0x292/0x380 [ 246.452929][ T8051] ? __pfx___sys_sendmsg+0x10/0x10 [ 246.458129][ T8051] ? __pfx_vfs_write+0x10/0x10 [ 246.462951][ T8051] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 246.469307][ T8051] ? do_syscall_64+0x100/0x230 [ 246.474111][ T8051] ? do_syscall_64+0xb6/0x230 [ 246.478922][ T8051] do_syscall_64+0xf3/0x230 [ 246.483471][ T8051] ? clear_bhb_loop+0x35/0x90 [ 246.488207][ T8051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.494139][ T8051] RIP: 0033:0x7f8f5037e719 [ 246.498577][ T8051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.518217][ T8051] RSP: 002b:00007f8f51113038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.526676][ T8051] RAX: ffffffffffffffda RBX: 00007f8f50535f80 RCX: 00007f8f5037e719 [ 246.534687][ T8051] RDX: 0000000004000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 246.542705][ T8051] RBP: 00007f8f51113090 R08: 0000000000000000 R09: 0000000000000000 [ 246.550719][ T8051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.558731][ T8051] R13: 0000000000000000 R14: 00007f8f50535f80 R15: 00007ffe5afbabf8 [ 246.566764][ T8051] [ 247.127887][ T8068] netlink: 36 bytes leftover after parsing attributes in process `syz.6.612'. [ 247.804327][ T8073] netlink: 'syz.6.614': attribute type 1 has an invalid length. [ 249.658257][ T1328] Bluetooth: hci0: Frame reassembly failed (-84) [ 249.671498][ T8101] bridge0: entered promiscuous mode [ 249.695198][ T8101] macsec1: entered promiscuous mode [ 249.731172][ T8101] macsec1: entered allmulticast mode [ 249.731528][ T5846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 249.746679][ T8101] bridge0: entered allmulticast mode [ 249.755276][ T5846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 249.764688][ T8101] bridge0: left allmulticast mode [ 249.781369][ T5846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 249.786889][ T8101] bridge0: left promiscuous mode [ 249.795371][ T5846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 249.803413][ T5846] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 249.811566][ T5846] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 250.102479][ T8100] chnl_net:caif_netlink_parms(): no params data found [ 250.304133][ T8100] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.311358][ T8100] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.335361][ T8100] bridge_slave_0: entered allmulticast mode [ 250.342431][ T8100] bridge_slave_0: entered promiscuous mode [ 250.376612][ T8100] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.392920][ T8100] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.400584][ T8100] bridge_slave_1: entered allmulticast mode [ 250.420644][ T8100] bridge_slave_1: entered promiscuous mode [ 250.512330][ T8100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.536037][ T8100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.615615][ T8100] team0: Port device team_slave_0 added [ 250.631728][ T8129] syz.2.626 uses obsolete (PF_INET,SOCK_PACKET) [ 250.641302][ T8100] team0: Port device team_slave_1 added [ 250.714839][ T8100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.732260][ T8100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.782823][ T8100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.805245][ T8100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.826644][ T8100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.871275][ T8100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.966570][ T8100] hsr_slave_0: entered promiscuous mode [ 250.986996][ T8100] hsr_slave_1: entered promiscuous mode [ 251.058419][ T8100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.092269][ T8100] Cannot create hsr debugfs directory [ 251.644894][ T5838] Bluetooth: hci0: command 0x1003 tx timeout [ 251.710038][ T5835] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 251.891005][ T5838] Bluetooth: hci6: command tx timeout [ 252.172649][ T5882] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 252.194278][ T8145] overlayfs: failed to resolve './file0': -2 [ 252.257352][ T8100] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 252.287113][ T8100] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 252.311223][ T8100] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 252.323220][ T5882] usb 3-1: device descriptor read/64, error -71 [ 252.542641][ T8100] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 253.145955][ T8100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.263376][ T5926] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 253.287037][ T8100] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.306014][ T2900] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.313240][ T2900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.350841][ T2900] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.358022][ T2900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.403207][ T5882] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 253.410867][ T5926] usb 1-1: device descriptor read/64, error -71 [ 253.435042][ T8100] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.446557][ T8100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.553086][ T5882] usb 3-1: device descriptor read/64, error -71 [ 253.663492][ T5926] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 253.672484][ T5882] usb usb3-port1: attempt power cycle [ 253.692537][ T8100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.803004][ T5926] usb 1-1: device descriptor read/64, error -71 [ 253.914466][ T5926] usb usb1-port1: attempt power cycle [ 253.956947][ T8100] veth0_vlan: entered promiscuous mode [ 253.963232][ T5838] Bluetooth: hci6: command tx timeout [ 253.980021][ T8100] veth1_vlan: entered promiscuous mode [ 254.014058][ T8100] veth0_macvtap: entered promiscuous mode [ 254.023801][ T5882] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 254.031774][ T8100] veth1_macvtap: entered promiscuous mode [ 254.053002][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 254.056956][ T8100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.076595][ T5882] usb 3-1: device descriptor read/8, error -71 [ 254.086434][ T8100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.100570][ T8100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.112224][ T8100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.128631][ T8100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.139544][ T8100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.149579][ T8100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.160247][ T8100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.170216][ T8100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.180839][ T8100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.191112][ T8100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.203374][ T8100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.214433][ T8100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.215457][ T25] usb 7-1: config 240 has an invalid interface number: 202 but max is 0 [ 254.232828][ T8100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.243572][ T25] usb 7-1: config 240 has no interface number 0 [ 254.250633][ T25] usb 7-1: config 240 interface 202 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 254.252388][ T8100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.261772][ T25] usb 7-1: config 240 interface 202 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 254.268864][ T5926] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 254.281826][ T25] usb 7-1: New USB device found, idVendor=294b, idProduct=31fa, bcdDevice=83.37 [ 254.301113][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.301357][ T8100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.320892][ T25] usb 7-1: Product: syz [ 254.323173][ T8100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.327115][ T25] usb 7-1: Manufacturer: syz [ 254.335270][ T5926] usb 1-1: device descriptor read/8, error -71 [ 254.346271][ T5882] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 254.349250][ T25] usb 7-1: SerialNumber: syz [ 254.354087][ T8100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.378302][ T8100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.382105][ T8165] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 254.390490][ T8100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.406648][ T5882] usb 3-1: device descriptor read/8, error -71 [ 254.429479][ T8100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.449315][ T8100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.459891][ T8100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.470295][ T8100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.480971][ T8100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.491365][ T8100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.501919][ T8100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.511900][ T8100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.523363][ T5882] usb usb3-port1: unable to enumerate USB device [ 254.530465][ T8100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.542420][ T8100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.560823][ T8100] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.570377][ T8100] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.579192][ T8100] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.588533][ T8100] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.597931][ T5926] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 254.623509][ T5926] usb 1-1: device descriptor read/8, error -71 [ 254.695502][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.711631][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.735106][ T5926] usb usb1-port1: unable to enumerate USB device [ 254.752737][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.760825][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.063378][ T5835] Bluetooth: hci0: sending frame failed (-49) [ 255.075783][ T5838] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 255.637211][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'. [ 256.400864][ T5838] Bluetooth: hci6: command tx timeout [ 256.404177][ T8207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.645'. [ 256.422513][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.429345][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.814988][ T5829] usb 7-1: USB disconnect, device number 3 [ 257.255679][ T1328] Bluetooth: hci0: Frame reassembly failed (-84) [ 257.703269][ T3072] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 257.923509][ T3072] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 258.002430][ T3072] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.031784][ T3072] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 258.045138][ T3072] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 258.061905][ T3072] usb 8-1: Manufacturer: syz [ 258.070450][ T3072] usb 8-1: config 0 descriptor?? [ 258.453867][ T5835] Bluetooth: hci6: command tx timeout [ 258.654831][ T8233] netlink: 24 bytes leftover after parsing attributes in process `syz.7.653'. [ 258.681135][ T8246] netlink: 28 bytes leftover after parsing attributes in process `syz.6.657'. [ 258.691632][ T8246] netlink: 28 bytes leftover after parsing attributes in process `syz.6.657'. [ 258.704251][ T3072] rc_core: IR keymap rc-hauppauge not found [ 258.710161][ T3072] Registered IR keymap rc-empty [ 258.777982][ T8246] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 258.853227][ T3072] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 258.864639][ T3072] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input18 [ 258.881558][ T8233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.580605][ T5835] Bluetooth: hci0: command 0x1003 tx timeout [ 259.647947][ T5838] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 259.713181][ T8233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.762525][ T8246] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 260.566198][ T5926] usb 8-1: USB disconnect, device number 2 [ 260.644633][ T8268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.662'. [ 260.675423][ T8270] bridge0: entered promiscuous mode [ 260.686682][ T8270] macsec1: entered promiscuous mode [ 260.702409][ T8270] macsec1: entered allmulticast mode [ 260.723161][ T8270] bridge0: entered allmulticast mode [ 260.751387][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'. [ 260.775687][ T8270] bridge0: left allmulticast mode [ 260.781031][ T8270] bridge0: left promiscuous mode [ 262.448596][ T1328] Bluetooth: hci0: Frame reassembly failed (-84) [ 263.448058][ T8301] netlink: 'syz.2.672': attribute type 9 has an invalid length. [ 263.456044][ T8301] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.672'. [ 264.295570][ T8318] netlink: 'syz.7.677': attribute type 1 has an invalid length. [ 264.351880][ T8318] netlink: 'syz.7.677': attribute type 4 has an invalid length. [ 264.372151][ T8318] netlink: 15334 bytes leftover after parsing attributes in process `syz.7.677'. [ 264.453596][ T5838] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 266.502920][ T5905] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 266.571665][ T1328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.686477][ T5905] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 266.712143][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.771217][ T5905] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 266.816883][ T5905] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 266.851842][ T5905] usb 6-1: Manufacturer: syz [ 266.867200][ T1328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.873758][ T5905] usb 6-1: config 0 descriptor?? [ 267.003218][ T5905] rc_core: IR keymap rc-hauppauge not found [ 267.011522][ T5905] Registered IR keymap rc-empty [ 267.017418][ T5905] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 267.044249][ T5905] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input19 [ 267.062008][ T1328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.142011][ T35] Bluetooth: hci0: Frame reassembly failed (-84) [ 267.352903][ T5829] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 267.367602][ T1328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.536634][ T5829] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 267.545965][ T5882] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 267.553973][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.562170][ T5829] usb 3-1: Product: syz [ 267.609500][ T5829] usb 3-1: Manufacturer: syz [ 267.615104][ T1328] bridge_slave_1: left allmulticast mode [ 267.634371][ T1328] bridge_slave_1: left promiscuous mode [ 267.642885][ T5829] usb 3-1: SerialNumber: syz [ 267.655310][ T1328] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.671453][ T5829] usb 3-1: config 0 descriptor?? [ 267.696324][ T5829] powermate 3-1:0.0: probe with driver powermate failed with error -22 [ 267.716971][ T1328] bridge_slave_0: left allmulticast mode [ 267.728637][ T5882] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 267.756805][ T1328] bridge_slave_0: left promiscuous mode [ 267.762560][ T1328] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.772710][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.784040][ T5882] usb 1-1: config 0 descriptor?? [ 267.918697][ T5829] usb 3-1: USB disconnect, device number 21 [ 268.320464][ T5882] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 269.176580][ T5835] Bluetooth: hci0: command 0x1003 tx timeout [ 269.183220][ T5838] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 269.514891][ T5829] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 269.796446][ T5829] usb 7-1: Using ep0 maxpacket: 8 [ 269.814708][ T5829] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.828272][ T5829] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.847394][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.858314][ T5829] usb 7-1: Product: syz [ 269.873129][ T5829] usb 7-1: Manufacturer: syz [ 269.896831][ T5829] usb 7-1: SerialNumber: syz [ 269.980874][ T1328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.001199][ T1328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.012353][ T8] usb 6-1: USB disconnect, device number 8 [ 270.051720][ T1328] bond0 (unregistering): Released all slaves [ 270.609480][ T8] usb 1-1: USB disconnect, device number 16 [ 270.941351][ T5829] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 271.049814][ T5829] cdc_ncm 7-1:1.0: setting tx_max = 184 [ 271.457137][ T5829] cdc_ncm 7-1:1.0 eth5: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 271.511113][ T5829] usb 7-1: USB disconnect, device number 4 [ 271.532367][ T5829] cdc_ncm 7-1:1.0 eth5: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 271.582261][ T1328] hsr_slave_0: left promiscuous mode [ 271.592125][ T1328] hsr_slave_1: left promiscuous mode [ 271.609366][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.630479][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.653178][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.660760][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.725297][ T1328] veth1_macvtap: left promiscuous mode [ 271.739240][ T1328] veth0_macvtap: left promiscuous mode [ 271.746401][ T1328] veth1_vlan: left promiscuous mode [ 271.750681][ T8415] overlayfs: unescaped trailing colons in lowerdir mount option. [ 271.752195][ T1328] veth0_vlan: left promiscuous mode [ 271.915285][ T8418] netlink: 16 bytes leftover after parsing attributes in process `syz.0.702'. [ 271.947912][ T8418] netlink: 20 bytes leftover after parsing attributes in process `syz.0.702'. [ 273.653457][ T1328] team0 (unregistering): Port device team_slave_1 removed [ 273.757058][ T1328] team0 (unregistering): Port device team_slave_0 removed [ 275.175916][ T8412] netlink: 'syz.2.707': attribute type 1 has an invalid length. [ 275.184192][ T8412] netlink: 'syz.2.707': attribute type 4 has an invalid length. [ 275.200142][ T8412] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.707'. [ 275.214762][ T8452] netlink: 28 bytes leftover after parsing attributes in process `syz.6.719'. [ 275.313755][ T8417] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 275.319851][ T8417] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 275.326918][ T8417] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 275.333655][ T8417] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 275.340049][ T8417] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 275.347864][ T8455] FAULT_INJECTION: forcing a failure. [ 275.347864][ T8455] name failslab, interval 1, probability 0, space 0, times 0 [ 275.348388][ T8417] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 275.369849][ T8455] CPU: 1 UID: 0 PID: 8455 Comm: syz.2.720 Not tainted 6.12.0-rc7-syzkaller #0 [ 275.378755][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 275.387321][ T8417] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 275.388825][ T8455] Call Trace: [ 275.388836][ T8455] [ 275.388847][ T8455] dump_stack_lvl+0x241/0x360 [ 275.405666][ T8455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.410993][ T8455] ? __pfx__printk+0x10/0x10 [ 275.415626][ T8455] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 275.421559][ T8455] ? __pfx___might_resched+0x10/0x10 [ 275.426888][ T8455] should_fail_ex+0x3b0/0x4e0 [ 275.431612][ T8455] should_failslab+0xac/0x100 [ 275.436343][ T8455] __kmalloc_cache_node_noprof+0x74/0x300 [ 275.442100][ T8455] ? __get_vm_area_node+0x113/0x270 [ 275.447358][ T8455] __get_vm_area_node+0x113/0x270 [ 275.452601][ T8455] __vmalloc_node_range_noprof+0x3a6/0x13f0 [ 275.458535][ T8455] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 275.464121][ T8455] ? mark_lock+0x9a/0x360 [ 275.468507][ T8455] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 275.474979][ T8455] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 275.480567][ T8455] __vmalloc_noprof+0x79/0x90 [ 275.485286][ T8455] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 275.490963][ T8455] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 275.496380][ T8455] ? bpf_prog_alloc+0x28/0x1b0 [ 275.501184][ T8455] bpf_prog_alloc+0x3a/0x1b0 [ 275.505815][ T8455] bpf_prog_load+0x7f7/0x20f0 [ 275.510547][ T8455] ? __pfx_bpf_prog_load+0x10/0x10 [ 275.515694][ T8455] ? __pfx___might_resched+0x10/0x10 [ 275.521042][ T8455] ? __might_fault+0xc6/0x120 [ 275.525768][ T8455] __sys_bpf+0x4ee/0x810 [ 275.530060][ T8455] ? __pfx___sys_bpf+0x10/0x10 [ 275.534876][ T8455] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 275.540902][ T8455] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.547333][ T8455] ? do_syscall_64+0x100/0x230 [ 275.552137][ T8455] __x64_sys_bpf+0x7c/0x90 [ 275.556608][ T8455] do_syscall_64+0xf3/0x230 [ 275.561158][ T8455] ? clear_bhb_loop+0x35/0x90 [ 275.565917][ T8455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.571847][ T8455] RIP: 0033:0x7f1e2c57e719 [ 275.576298][ T8455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.595944][ T8455] RSP: 002b:00007f1e2d409038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.604481][ T8455] RAX: ffffffffffffffda RBX: 00007f1e2c735f80 RCX: 00007f1e2c57e719 [ 275.612494][ T8455] RDX: 0000000000000048 RSI: 00000000200054c0 RDI: 0000000000000005 [ 275.620503][ T8455] RBP: 00007f1e2d409090 R08: 0000000000000000 R09: 0000000000000000 [ 275.628528][ T8455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.636555][ T8455] R13: 0000000000000001 R14: 00007f1e2c735f80 R15: 00007ffffc710778 [ 275.644599][ T8455] [ 275.661751][ T8455] syz.2.720: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 275.680020][ T8417] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 275.681054][ T8455] CPU: 1 UID: 0 PID: 8455 Comm: syz.2.720 Not tainted 6.12.0-rc7-syzkaller #0 [ 275.694816][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 275.704898][ T8455] Call Trace: [ 275.708203][ T8455] [ 275.711158][ T8455] dump_stack_lvl+0x241/0x360 [ 275.715876][ T8455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.721116][ T8455] ? __pfx__printk+0x10/0x10 [ 275.725750][ T8455] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 275.732208][ T8455] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 275.738751][ T8455] warn_alloc+0x278/0x410 [ 275.743121][ T8455] ? __pfx_warn_alloc+0x10/0x10 [ 275.748004][ T8455] ? __get_vm_area_node+0x113/0x270 [ 275.753238][ T8455] ? __get_vm_area_node+0x261/0x270 [ 275.758490][ T8455] __vmalloc_node_range_noprof+0x3cb/0x13f0 [ 275.764425][ T8455] ? mark_lock+0x9a/0x360 [ 275.768815][ T8455] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 275.775190][ T8455] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 275.780771][ T8455] __vmalloc_noprof+0x79/0x90 [ 275.785493][ T8455] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 275.791068][ T8455] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 275.796456][ T8455] ? bpf_prog_alloc+0x28/0x1b0 [ 275.801231][ T8455] bpf_prog_alloc+0x3a/0x1b0 [ 275.805819][ T8455] bpf_prog_load+0x7f7/0x20f0 [ 275.810503][ T8455] ? __pfx_bpf_prog_load+0x10/0x10 [ 275.815617][ T8455] ? __pfx___might_resched+0x10/0x10 [ 275.820911][ T8455] ? __might_fault+0xc6/0x120 [ 275.825599][ T8455] __sys_bpf+0x4ee/0x810 [ 275.829840][ T8455] ? __pfx___sys_bpf+0x10/0x10 [ 275.834608][ T8455] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 275.840603][ T8455] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.846932][ T8455] ? do_syscall_64+0x100/0x230 [ 275.851695][ T8455] __x64_sys_bpf+0x7c/0x90 [ 275.856107][ T8455] do_syscall_64+0xf3/0x230 [ 275.860608][ T8455] ? clear_bhb_loop+0x35/0x90 [ 275.865283][ T8455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.871176][ T8455] RIP: 0033:0x7f1e2c57e719 [ 275.875593][ T8455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.895200][ T8455] RSP: 002b:00007f1e2d409038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.903618][ T8455] RAX: ffffffffffffffda RBX: 00007f1e2c735f80 RCX: 00007f1e2c57e719 [ 275.911582][ T8455] RDX: 0000000000000048 RSI: 00000000200054c0 RDI: 0000000000000005 [ 275.919546][ T8455] RBP: 00007f1e2d409090 R08: 0000000000000000 R09: 0000000000000000 [ 275.927517][ T8455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.935491][ T8455] R13: 0000000000000001 R14: 00007f1e2c735f80 R15: 00007ffffc710778 [ 275.943475][ T8455] [ 275.968599][ T8455] Mem-Info: [ 275.971885][ T8455] active_anon:348 inactive_anon:7931 isolated_anon:0 [ 275.971885][ T8455] active_file:13560 inactive_file:38087 isolated_file:0 [ 275.971885][ T8455] unevictable:768 dirty:48 writeback:20 [ 275.971885][ T8455] slab_reclaimable:9950 slab_unreclaimable:106655 [ 275.971885][ T8455] mapped:30001 shmem:4312 pagetables:855 [ 275.971885][ T8455] sec_pagetables:0 bounce:0 [ 275.971885][ T8455] kernel_misc_reclaimable:0 [ 275.971885][ T8455] free:1315303 free_pcp:363 free_cma:0 [ 276.025373][ T8455] Node 0 active_anon:1392kB inactive_anon:31524kB active_file:54164kB inactive_file:152348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119904kB dirty:192kB writeback:80kB shmem:15712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11552kB pagetables:3420kB sec_pagetables:0kB all_unreclaimable? no [ 276.146215][ T8455] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 276.280600][ T8455] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.308013][ T8455] lowmem_reserve[]: 0 2465 2466 0 0 [ 276.320913][ T8455] Node 0 DMA32 free:1338924kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1416kB inactive_anon:19656kB active_file:53408kB inactive_file:152296kB unevictable:1536kB writepending:304kB present:3129332kB managed:2552504kB mlocked:0kB bounce:0kB free_pcp:14192kB local_pcp:13040kB free_cma:0kB [ 276.371557][ T8455] lowmem_reserve[]: 0 0 0 0 0 [ 276.376426][ T8455] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:764kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 276.418577][ T8455] lowmem_reserve[]: 0 0 0 0 0 [ 276.423910][ T8455] Node 1 Normal free:3912224kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.459344][ T8455] lowmem_reserve[]: 0 0 0 0 0 [ 276.464469][ T8455] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 276.502037][ T8455] Node 0 DMA32: 1*4kB (E) 337*8kB (UME) 89*16kB (ME) 307*32kB (UME) 418*64kB (UME) 95*128kB (UME) 21*256kB (UM) 34*512kB (UM) 12*1024kB (UME) 6*2048kB (UME) 302*4096kB (UM) = 1337212kB [ 276.512489][ T8480] netlink: 'syz.7.721': attribute type 1 has an invalid length. [ 276.544902][ T8480] netlink: 'syz.7.721': attribute type 4 has an invalid length. [ 276.558818][ T8455] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 276.623367][ T8455] Node 1 Normal: 216*4kB (UE) 42*8kB (UM) 45*16kB (UME) 189*32kB (UME) 90*64kB (UME) 35*128kB (UME) 15*256kB (UME) 8*512kB (UME) 7*1024kB (UME) 4*2048kB (UE) 945*4096kB (M) = 3912224kB [ 276.644612][ T8455] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.647909][ T8480] netlink: 15334 bytes leftover after parsing attributes in process `syz.7.721'. [ 276.654324][ T8455] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 276.654348][ T8455] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.654364][ T8455] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 276.711897][ T8455] 53094 total pagecache pages [ 276.717040][ T8455] 0 pages in swap cache [ 276.721240][ T8455] Free swap = 124520kB [ 276.725688][ T8455] Total swap = 124996kB [ 276.729874][ T8455] 2097051 pages RAM [ 276.735792][ T8455] 0 pages HighMem/MovableOnly [ 276.740595][ T8455] 427073 pages reserved [ 276.750724][ T8455] 0 pages cma reserved [ 276.922876][ T6854] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 276.970392][ T1328] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.138659][ T1328] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.403273][ T5838] Bluetooth: hci5: command 0x0419 tx timeout [ 277.403427][ T5835] Bluetooth: hci6: command 0x0c1a tx timeout [ 277.416049][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 277.416306][ T5835] Bluetooth: hci3: command 0x0405 tx timeout [ 277.428643][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 277.435043][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 278.015641][ T1328] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.297947][ T1328] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.558182][ T8524] Driver unsupported XDP return value 0 on prog (id 218) dev N/A, expect packet loss! [ 279.093215][ T1328] bridge_slave_1: left allmulticast mode [ 279.123025][ T1328] bridge_slave_1: left promiscuous mode [ 279.313139][ T51] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 279.313303][ T1328] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.483423][ T5846] Bluetooth: hci6: command 0x0c1a tx timeout [ 279.513269][ T51] usb 7-1: device descriptor read/64, error -71 [ 279.750717][ T1328] bridge_slave_0: left allmulticast mode [ 279.775514][ T1328] bridge_slave_0: left promiscuous mode [ 279.822913][ T51] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 279.856128][ T1328] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.992920][ T51] usb 7-1: device descriptor read/64, error -71 [ 280.039263][ T8560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.070550][ T8560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.124797][ T51] usb usb7-port1: attempt power cycle [ 280.207700][ T8564] netlink: 16 bytes leftover after parsing attributes in process `syz.7.733'. [ 280.253743][ T8564] netlink: 20 bytes leftover after parsing attributes in process `syz.7.733'. [ 280.472929][ T51] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 280.516419][ T51] usb 7-1: device descriptor read/8, error -71 [ 280.766287][ T51] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 280.807031][ T51] usb 7-1: device descriptor read/8, error -71 [ 281.005721][ T51] usb usb7-port1: unable to enumerate USB device [ 281.506365][ T1328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.544477][ T1328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.563021][ T5846] Bluetooth: hci6: command 0x0c1a tx timeout [ 281.589069][ T1328] bond0 (unregistering): Released all slaves [ 282.668429][ T8561] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 282.675121][ T8561] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 282.681179][ T8561] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 282.693104][ T8561] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 282.705688][ T8561] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 282.711946][ T8561] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 284.409383][ T1328] hsr_slave_0: left promiscuous mode [ 284.422051][ T1328] hsr_slave_1: left promiscuous mode [ 284.430336][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.441399][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.457976][ T1328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.466352][ T1328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.770972][ T5846] Bluetooth: hci5: command 0x0419 tx timeout [ 284.778704][ T54] Bluetooth: hci3: command 0x0405 tx timeout [ 284.786036][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 284.786489][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 284.793057][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 284.798540][ T5838] Bluetooth: hci6: command 0x0c1a tx timeout [ 284.924997][ T1328] veth1_macvtap: left promiscuous mode [ 284.948105][ T1328] veth0_macvtap: left promiscuous mode [ 284.972644][ T1328] veth1_vlan: left promiscuous mode [ 285.043069][ T1328] veth0_vlan: left promiscuous mode [ 285.184704][ T8627] netlink: 88 bytes leftover after parsing attributes in process `syz.7.756'. [ 285.184786][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.7.756'. [ 285.275720][ T8630] xt_CT: You must specify a L4 protocol and not use inversions on it [ 285.284670][ T8628] xt_HMARK: spi-set and port-set can't be combined [ 287.381323][ T8644] trusted_key: encrypted_key: insufficient parameters specified [ 288.303705][ T1328] team0 (unregistering): Port device team_slave_1 removed [ 288.424491][ T1328] team0 (unregistering): Port device team_slave_0 removed [ 289.113520][ T3072] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 289.502909][ T3072] usb 8-1: device descriptor read/64, error -71 [ 289.772578][ T3072] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 289.933245][ T3072] usb 8-1: device descriptor read/64, error -71 [ 290.187569][ T3072] usb usb8-port1: attempt power cycle [ 290.476721][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.753'. [ 290.497190][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.753'. [ 290.637568][ T3072] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 290.714069][ T3072] usb 8-1: device descriptor read/8, error -71 [ 291.133135][ T3072] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 291.428971][ T3072] usb 8-1: device descriptor read/8, error -71 [ 291.553066][ T3072] usb usb8-port1: unable to enumerate USB device [ 292.681879][ T1160] Bluetooth: hci0: Frame reassembly failed (-84) [ 292.708716][ T5842] Bluetooth: hci7: sending frame failed (-49) [ 292.718696][ T54] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 292.853115][ T8] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 293.014484][ T8] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 293.034027][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.067931][ T8] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 293.087632][ T8] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 293.115630][ T8] usb 8-1: Manufacturer: syz [ 293.134348][ T8] usb 8-1: config 0 descriptor?? [ 293.283577][ T8] rc_core: IR keymap rc-hauppauge not found [ 293.306400][ T8] Registered IR keymap rc-empty [ 293.327599][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 293.362935][ T8689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.382709][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input20 [ 293.394884][ T8689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.472599][ T8] usb 8-1: USB disconnect, device number 7 [ 294.624439][ T8729] macsec1: entered promiscuous mode [ 294.629722][ T8729] macsec1: entered allmulticast mode [ 294.683180][ T5838] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 294.855376][ T8736] netlink: 28 bytes leftover after parsing attributes in process `syz.0.780'. [ 294.911291][ T8736] netlink: 28 bytes leftover after parsing attributes in process `syz.0.780'. [ 295.030701][ T8736] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 295.136255][ T25] kernel write not supported for file /snd/seq (pid: 25 comm: kworker/1:0) [ 295.274961][ T8736] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 297.594487][ T54] Bluetooth: hci0: sending frame failed (-49) [ 297.603612][ T5838] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 298.669855][ T11] Bluetooth: hci0: Frame reassembly failed (-84) [ 298.877861][ T8811] netlink: 'syz.6.799': attribute type 1 has an invalid length. [ 298.927404][ T8811] netlink: 'syz.6.799': attribute type 4 has an invalid length. [ 298.968241][ T8811] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.799'. [ 299.765412][ T8817] netlink: 28 bytes leftover after parsing attributes in process `syz.6.800'. [ 299.785935][ T8817] netlink: 28 bytes leftover after parsing attributes in process `syz.6.800'. [ 299.860217][ T8817] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 299.895436][ T8817] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 300.715044][ T5838] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 302.743255][ T5829] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 302.945193][ T5829] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 302.945237][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.945258][ T5829] usb 1-1: Product: syz [ 302.945274][ T5829] usb 1-1: Manufacturer: syz [ 302.945289][ T5829] usb 1-1: SerialNumber: syz [ 302.947441][ T5829] usb 1-1: config 0 descriptor?? [ 302.951309][ T5829] powermate 1-1:0.0: probe with driver powermate failed with error -22 [ 303.107760][ T8871] xt_HMARK: spi-set and port-set can't be combined [ 303.182031][ T8] usb 1-1: USB disconnect, device number 17 [ 303.753095][ T51] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 303.928081][ T51] usb 8-1: Using ep0 maxpacket: 32 [ 304.098990][ T51] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.365864][ T51] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.429806][ T51] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 304.478669][ T51] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.513335][ T51] usb 8-1: config 0 descriptor?? [ 304.529832][ T51] hub 8-1:0.0: USB hub found [ 304.730183][ T8882] netlink: 24 bytes leftover after parsing attributes in process `syz.7.813'. [ 304.743946][ T51] hub 8-1:0.0: 1 port detected [ 304.863441][ T5926] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 304.934446][ T8914] netlink: 40 bytes leftover after parsing attributes in process `syz.5.819'. [ 305.024671][ T5926] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 305.034236][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.136518][ T5926] usb 3-1: config 0 descriptor?? [ 305.155220][ T51] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 305.162320][ T51] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 305.203236][ T51] usbhid 8-1:0.0: can't add hid device: -71 [ 305.209569][ T51] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 305.248634][ T51] usb 8-1: USB disconnect, device number 8 [ 305.414469][ T8925] ubi0: attaching mtd0 [ 305.424301][ T8925] ubi0: scanning is finished [ 305.445585][ T8925] ubi0: empty MTD device detected [ 305.673695][ T8925] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 305.681375][ T8925] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 305.703191][ T8925] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 305.726863][ T8925] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 305.742468][ T8925] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 305.759885][ T8925] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 305.776619][ T8925] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3546713000 [ 305.804221][ T8935] program syz.0.823 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.572965][ T8925] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 306.593436][ T8934] ubi0: background thread "ubi_bgt0d" started, PID 8934 [ 307.100180][ T5926] pegasus 3-1:0.0: probe with driver pegasus failed with error -121 [ 307.502450][ T8972] vlan2: entered promiscuous mode [ 307.510097][ T8972] vlan2: entered allmulticast mode [ 307.528505][ T8972] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 307.573255][ T8972] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 307.619410][ T8972] team0: Port device vlan2 added [ 308.218558][ T8978] bridge0: port 3(vlan3) entered blocking state [ 308.257564][ T8978] bridge0: port 3(vlan3) entered disabled state [ 308.297054][ T8978] vlan3: entered allmulticast mode [ 308.341986][ T8978] vlan3: left allmulticast mode [ 309.099498][ T9010] ubi: mtd0 is already attached to ubi0 [ 309.115618][ T5829] usb 3-1: USB disconnect, device number 23 [ 310.941981][ T5926] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 310.942970][ T9035] FAULT_INJECTION: forcing a failure. [ 310.942970][ T9035] name failslab, interval 1, probability 0, space 0, times 0 [ 310.963943][ T9035] CPU: 0 UID: 0 PID: 9035 Comm: syz.6.843 Not tainted 6.12.0-rc7-syzkaller #0 [ 310.972822][ T9035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 310.982893][ T9035] Call Trace: [ 310.986184][ T9035] [ 310.989123][ T9035] dump_stack_lvl+0x241/0x360 [ 310.993827][ T9035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.999048][ T9035] ? __pfx__printk+0x10/0x10 [ 311.003658][ T9035] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 311.009659][ T9035] ? __pfx___might_resched+0x10/0x10 [ 311.014968][ T9035] should_fail_ex+0x3b0/0x4e0 [ 311.019668][ T9035] should_failslab+0xac/0x100 [ 311.024372][ T9035] ? __alloc_skb+0x1c3/0x440 [ 311.028980][ T9035] kmem_cache_alloc_node_noprof+0x71/0x320 [ 311.034807][ T9035] __alloc_skb+0x1c3/0x440 [ 311.039242][ T9035] ? validate_chain+0x11e/0x5920 [ 311.044215][ T9035] ? __pfx___alloc_skb+0x10/0x10 [ 311.049174][ T9035] ? reacquire_held_locks+0x5c0/0x690 [ 311.054565][ T9035] ? __pfx_lock_release+0x10/0x10 [ 311.059614][ T9035] alloc_skb_with_frags+0xc3/0x820 [ 311.064748][ T9035] ? mark_lock+0x9a/0x360 [ 311.069096][ T9035] ? __lock_acquire+0x1384/0x2050 [ 311.074146][ T9035] sock_alloc_send_pskb+0x91a/0xa60 [ 311.079382][ T9035] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 311.085126][ T9035] ? smack_socket_sendmsg+0x178/0x540 [ 311.090522][ T9035] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 311.096262][ T9035] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 311.102701][ T9035] hci_sock_sendmsg+0x22b/0x11c0 [ 311.107661][ T9035] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 311.114451][ T9035] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 311.119857][ T9035] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 311.125358][ T9035] __sock_sendmsg+0x221/0x270 [ 311.130059][ T9035] sock_write_iter+0x2d7/0x3f0 [ 311.134859][ T9035] ? __pfx_sock_write_iter+0x10/0x10 [ 311.140174][ T9035] ? bpf_lsm_file_permission+0x9/0x10 [ 311.145571][ T9035] ? security_file_permission+0x74/0x280 [ 311.151231][ T9035] vfs_write+0xaeb/0xd30 [ 311.155508][ T9035] ? __pfx_sock_write_iter+0x10/0x10 [ 311.160820][ T9035] ? __pfx_vfs_write+0x10/0x10 [ 311.165616][ T9035] ? fdget_pos+0x19a/0x320 [ 311.170057][ T9035] ksys_write+0x183/0x2b0 [ 311.174411][ T9035] ? __pfx_ksys_write+0x10/0x10 [ 311.179297][ T9035] ? do_syscall_64+0x100/0x230 [ 311.184079][ T9035] ? do_syscall_64+0xb6/0x230 [ 311.188776][ T9035] do_syscall_64+0xf3/0x230 [ 311.193300][ T9035] ? clear_bhb_loop+0x35/0x90 [ 311.197996][ T9035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.203994][ T9035] RIP: 0033:0x7f8f5037e719 [ 311.208425][ T9035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.228063][ T9035] RSP: 002b:00007f8f510d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 311.236510][ T9035] RAX: ffffffffffffffda RBX: 00007f8f50536130 RCX: 00007f8f5037e719 [ 311.244508][ T9035] RDX: 0000000000000006 RSI: 0000000020000080 RDI: 0000000000000009 [ 311.252500][ T9035] RBP: 00007f8f510d1090 R08: 0000000000000000 R09: 0000000000000000 [ 311.260488][ T9035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.268477][ T9035] R13: 0000000000000000 R14: 00007f8f50536130 R15: 00007ffe5afbabf8 [ 311.276494][ T9035] [ 311.803179][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 311.854817][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.878444][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.914341][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 312.194041][ T5926] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 312.203710][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.230669][ T5926] usb 3-1: config 0 descriptor?? [ 313.127012][ T5926] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 313.260391][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 313.285751][ T5926] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 313.301055][ T5926] microsoft 0003:045E:07DA.0003: no inputs found [ 313.307651][ T5926] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 313.320076][ T9062] 9pnet_fd: Insufficient options for proto=fd [ 313.581605][ T9070] xt_HMARK: spi-set and port-set can't be combined [ 313.693369][ T9074] tipc: Enabling of bearer rejected, media not registered [ 313.853333][ T51] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 314.023033][ T51] usb 1-1: Using ep0 maxpacket: 8 [ 314.039578][ T51] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 314.067633][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.106371][ T51] usb 1-1: Product: syz [ 314.216876][ T51] usb 1-1: Manufacturer: syz [ 314.221539][ T51] usb 1-1: SerialNumber: syz [ 314.229946][ T51] usb 1-1: config 0 descriptor?? [ 314.236060][ T25] usb 3-1: USB disconnect, device number 24 [ 314.248456][ T51] gspca_main: se401-2.14.0 probing 047d:5003 [ 315.379939][ T9108] ubi: mtd0 is already attached to ubi0 [ 316.243226][ T51] gspca_se401: Wrong descriptor type [ 317.003074][ T3072] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 317.108267][ T9127] overlayfs: failed to resolve './file1': -2 [ 317.142996][ T3072] usb 3-1: device descriptor read/64, error -71 [ 317.220210][ T9134] netlink: 'syz.7.860': attribute type 1 has an invalid length. [ 317.233501][ T9134] netlink: 'syz.7.860': attribute type 4 has an invalid length. [ 317.247720][ T9134] netlink: 15334 bytes leftover after parsing attributes in process `syz.7.860'. [ 317.494149][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.500716][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.516329][ T3072] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 317.537630][ T25] usb 1-1: USB disconnect, device number 18 [ 317.834965][ T3072] usb 3-1: device descriptor read/64, error -71 [ 318.021395][ T3072] usb usb3-port1: attempt power cycle [ 319.091971][ T9176] netlink: 16 bytes leftover after parsing attributes in process `syz.5.866'. [ 319.141419][ T9181] netlink: 20 bytes leftover after parsing attributes in process `syz.5.866'. [ 319.223301][ T3072] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 319.255786][ T3072] usb 3-1: device descriptor read/8, error -71 [ 319.292116][ T9186] FAULT_INJECTION: forcing a failure. [ 319.292116][ T9186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.305442][ T9186] CPU: 1 UID: 0 PID: 9186 Comm: syz.6.869 Not tainted 6.12.0-rc7-syzkaller #0 [ 319.314335][ T9186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 319.324409][ T9186] Call Trace: [ 319.327714][ T9186] [ 319.330657][ T9186] dump_stack_lvl+0x241/0x360 [ 319.335364][ T9186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.340584][ T9186] ? __pfx__printk+0x10/0x10 [ 319.345202][ T9186] ? __pfx_lock_release+0x10/0x10 [ 319.350253][ T9186] should_fail_ex+0x3b0/0x4e0 [ 319.354955][ T9186] _copy_from_iter+0x21f/0x1e70 [ 319.359829][ T9186] ? __virt_addr_valid+0x183/0x530 [ 319.364956][ T9186] ? __pfx_lock_release+0x10/0x10 [ 319.370019][ T9186] ? __pfx__copy_from_iter+0x10/0x10 [ 319.375336][ T9186] ? __virt_addr_valid+0x183/0x530 [ 319.380470][ T9186] ? __virt_addr_valid+0x183/0x530 [ 319.385681][ T9186] ? __virt_addr_valid+0x45f/0x530 [ 319.390810][ T9186] ? __check_object_size+0x48e/0x900 [ 319.396142][ T9186] hci_sock_sendmsg+0x4f1/0x11c0 [ 319.401114][ T9186] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 319.408010][ T9186] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 319.413410][ T9186] ? security_socket_sendmsg+0x18/0x2a0 [ 319.418987][ T9186] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 319.424375][ T9186] __sock_sendmsg+0x221/0x270 [ 319.429076][ T9186] sock_write_iter+0x2d7/0x3f0 [ 319.433862][ T9186] ? __pfx_sock_write_iter+0x10/0x10 [ 319.439443][ T9186] ? bpf_lsm_file_permission+0x9/0x10 [ 319.444839][ T9186] ? security_file_permission+0x74/0x280 [ 319.450528][ T9186] vfs_write+0xaeb/0xd30 [ 319.454799][ T9186] ? __pfx_sock_write_iter+0x10/0x10 [ 319.460111][ T9186] ? __pfx_vfs_write+0x10/0x10 [ 319.464915][ T9186] ? fdget_pos+0x19a/0x320 [ 319.469350][ T9186] ksys_write+0x183/0x2b0 [ 319.473700][ T9186] ? __pfx_ksys_write+0x10/0x10 [ 319.478570][ T9186] ? do_syscall_64+0x100/0x230 [ 319.483351][ T9186] ? do_syscall_64+0xb6/0x230 [ 319.488047][ T9186] do_syscall_64+0xf3/0x230 [ 319.492654][ T9186] ? clear_bhb_loop+0x35/0x90 [ 319.497379][ T9186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.503290][ T9186] RIP: 0033:0x7f8f5037e719 [ 319.507730][ T9186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.527373][ T9186] RSP: 002b:00007f8f510d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 319.535821][ T9186] RAX: ffffffffffffffda RBX: 00007f8f50536130 RCX: 00007f8f5037e719 [ 319.543817][ T9186] RDX: 0000000000000006 RSI: 0000000020000080 RDI: 0000000000000009 [ 319.551804][ T9186] RBP: 00007f8f510d1090 R08: 0000000000000000 R09: 0000000000000000 [ 319.559788][ T9186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.567776][ T9186] R13: 0000000000000000 R14: 00007f8f50536130 R15: 00007ffe5afbabf8 [ 319.575783][ T9186] [ 319.596327][ T9170] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 319.602495][ T9170] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 319.637314][ T9170] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 319.668494][ T9170] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 319.684114][ T9170] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 319.701779][ T9170] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 319.745804][ T3072] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 320.713411][ T3072] usb 3-1: device not accepting address 28, error -71 [ 320.720787][ T3072] usb usb3-port1: unable to enumerate USB device [ 321.133019][ T5882] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 321.402951][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 321.409654][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 321.424980][ T5882] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.493372][ T5882] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.574251][ T5882] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 321.585659][ T9201] netlink: 28 bytes leftover after parsing attributes in process `syz.6.874'. [ 321.604318][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.644614][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 321.645464][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 321.691245][ T5882] usb 1-1: Product: syz [ 321.700572][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.6.874'. [ 321.713951][ T9201] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 321.726700][ T5838] Bluetooth: hci6: command 0x0c1a tx timeout [ 321.726750][ T5838] Bluetooth: hci5: command 0x0419 tx timeout [ 321.726784][ T5838] Bluetooth: hci3: command 0x0405 tx timeout [ 321.756924][ T5882] usb 1-1: Manufacturer: syz [ 321.761580][ T5882] usb 1-1: SerialNumber: syz [ 323.129613][ T3072] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 323.151740][ T5882] usb 1-1: 0:2 : does not exist [ 323.193803][ T5882] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 323.484569][ T5882] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 323.565850][ T5882] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 323.638513][ T5882] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 323.705665][ T5882] usb 1-1: USB disconnect, device number 19 [ 323.727152][ T8] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 323.843775][ T3072] usb 8-1: Using ep0 maxpacket: 32 [ 323.859351][ T3072] usb 8-1: unable to get BOS descriptor or descriptor too short [ 323.881330][ T3072] usb 8-1: config 253 has an invalid interface number: 202 but max is 0 [ 323.922713][ T3072] usb 8-1: config 253 has no interface number 0 [ 324.009681][ T3072] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 324.129030][ T3072] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.256083][ T3072] usb 8-1: Product: syz [ 324.325147][ T3072] usb 8-1: Manufacturer: syz [ 324.375123][ T9226] netlink: 20 bytes leftover after parsing attributes in process `syz.6.880'. [ 324.413122][ T3072] usb 8-1: SerialNumber: syz [ 324.479071][ T29] audit: type=1326 audit(1731367293.866:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9225 comm="syz.6.880" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f5037e719 code=0x0 [ 324.552353][ T9240] netlink: 203452 bytes leftover after parsing attributes in process `syz.0.883'. [ 324.552551][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.583172][ T8] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 324.587924][ T9240] netlink: 'syz.0.883': attribute type 2 has an invalid length. [ 324.591628][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.612677][ T8] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 324.642173][ T8] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 324.662504][ T8] usb 6-1: Manufacturer: syz [ 324.684234][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 324.698821][ T8] usb 6-1: config 0 descriptor?? [ 324.815375][ T8] rc_core: IR keymap rc-hauppauge not found [ 324.821340][ T8] Registered IR keymap rc-empty [ 324.828406][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 324.840179][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input22 [ 325.660848][ T5882] usb 6-1: USB disconnect, device number 10 [ 325.747705][ T3072] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 325.749759][ T3432] usb 8-1: Failed to submit usb control message: -71 [ 325.795688][ T3072] usb 8-1: USB disconnect, device number 9 [ 325.805622][ T3432] usb 8-1: unable to send the bmi data to the device: -71 [ 325.838558][ T3432] usb 8-1: unable to get target info from device [ 325.857635][ T3432] usb 8-1: could not get target info (-71) [ 325.870228][ T3432] usb 8-1: could not probe fw (-71) [ 326.053022][ T8] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 326.213931][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 326.220955][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 326.251380][ T8] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 326.263592][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 326.281777][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 326.305506][ T8] usb 7-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 326.318298][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.336635][ T8] usb 7-1: Product: syz [ 326.340888][ T8] usb 7-1: Manufacturer: syz [ 326.351165][ T8] usb 7-1: SerialNumber: syz [ 326.372168][ T8] usb 7-1: config 0 descriptor?? [ 326.393207][ T9266] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 326.405001][ T8] radioshark2 7-1:0.0: Invalid radioSHARK2 device [ 326.412672][ T8] radioshark2 7-1:0.0: probe with driver radioshark2 failed with error -22 [ 326.591637][ T9297] overlayfs: missing 'lowerdir' [ 326.615707][ T9258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.652314][ T9258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.888480][ T8] usb 7-1: USB disconnect, device number 10 [ 330.478570][ T5829] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 331.155248][ T5829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.180905][ T5829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.191264][ T5829] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 331.200854][ T5829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.222133][ T5829] usb 7-1: config 0 descriptor?? [ 331.353072][ T8] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 331.469007][ T5829] usbhid 7-1:0.0: can't add hid device: -71 [ 331.475755][ T5829] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 331.497610][ T5829] usb 7-1: USB disconnect, device number 11 [ 331.512897][ T8] usb 8-1: Using ep0 maxpacket: 32 [ 331.682960][ T5905] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 331.816538][ T8] usb 8-1: unable to get BOS descriptor or descriptor too short [ 331.826947][ T8] usb 8-1: config 253 has an invalid interface number: 202 but max is 0 [ 331.844285][ T5905] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 331.865790][ T8] usb 8-1: config 253 has no interface number 0 [ 331.879098][ T8] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 331.889996][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.901276][ T8] usb 8-1: Product: syz [ 331.906924][ T8] usb 8-1: Manufacturer: syz [ 331.911642][ T8] usb 8-1: SerialNumber: syz [ 331.911849][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.959680][ T5905] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 331.979421][ T5905] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 332.007336][ T5905] usb 1-1: Manufacturer: syz [ 332.024895][ T5905] usb 1-1: config 0 descriptor?? [ 332.088420][ T9386] netlink: 28 bytes leftover after parsing attributes in process `syz.5.907'. [ 332.108843][ T9386] netlink: 28 bytes leftover after parsing attributes in process `syz.5.907'. [ 332.134571][ T5905] rc_core: IR keymap rc-hauppauge not found [ 332.159165][ T5905] Registered IR keymap rc-empty [ 332.176815][ T5905] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 332.225028][ T5905] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input23 [ 332.236747][ T8] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 332.267022][ T8] usb 8-1: USB disconnect, device number 10 [ 332.292901][ T3481] usb 8-1: Failed to submit usb control message: -71 [ 332.310891][ T9386] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 332.333673][ T3481] usb 8-1: unable to send the bmi data to the device: -71 [ 332.343958][ T9386] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 332.426781][ T3481] usb 8-1: unable to get target info from device [ 332.478857][ T3481] usb 8-1: could not get target info (-71) [ 332.493769][ T3481] usb 8-1: could not probe fw (-71) [ 333.749350][ T9413] syz.6.910 (9413) used greatest stack depth: 18224 bytes left [ 334.111500][ T8] usb 1-1: USB disconnect, device number 20 [ 336.639608][ T5882] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 336.833328][ T5882] usb 8-1: Using ep0 maxpacket: 32 [ 336.843293][ T9465] overlay: Unknown parameter 'dont_measure' [ 336.860567][ T5882] usb 8-1: unable to get BOS descriptor or descriptor too short [ 336.869500][ T5882] usb 8-1: config 253 has an invalid interface number: 202 but max is 0 [ 336.888853][ T5882] usb 8-1: config 253 has no interface number 0 [ 336.923417][ T5882] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 336.933034][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.941068][ T5882] usb 8-1: Product: syz [ 337.026738][ T5882] usb 8-1: Manufacturer: syz [ 337.045017][ T5882] usb 8-1: SerialNumber: syz [ 337.593348][ T5882] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 337.595791][ T7941] usb 8-1: Failed to submit usb control message: -71 [ 337.610913][ T7941] usb 8-1: unable to send the bmi data to the device: -71 [ 337.619723][ T7941] usb 8-1: unable to get target info from device [ 337.626513][ T7941] usb 8-1: could not get target info (-71) [ 337.632451][ T7941] usb 8-1: could not probe fw (-71) [ 338.390478][ T5882] usb 8-1: USB disconnect, device number 11 [ 338.427565][ T9509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.934'. [ 338.436869][ T9509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.934'. [ 339.268918][ T9509] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 339.377375][ T9509] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 339.470104][ T9519] netlink: 2 bytes leftover after parsing attributes in process `syz.5.938'. [ 339.833145][ T25] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 340.266723][ T25] usb 7-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 340.439670][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.501314][ T25] usb 7-1: Product: syz [ 340.533313][ T25] usb 7-1: Manufacturer: syz [ 340.557055][ T25] usb 7-1: SerialNumber: syz [ 340.580912][ T25] usb 7-1: config 0 descriptor?? [ 340.624261][ T25] powermate 7-1:0.0: probe with driver powermate failed with error -22 [ 340.825556][ T6854] usb 7-1: USB disconnect, device number 12 [ 341.096783][ T25] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 342.368918][ T25] usb 3-1: device descriptor read/64, error -71 [ 342.757951][ T25] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 342.805960][ T9562] netlink: 'syz.6.949': attribute type 1 has an invalid length. [ 342.903787][ T9571] netlink: 28 bytes leftover after parsing attributes in process `syz.6.950'. [ 342.921949][ T9571] netlink: 28 bytes leftover after parsing attributes in process `syz.6.950'. [ 342.932892][ T25] usb 3-1: device descriptor read/64, error -71 [ 342.980442][ T9571] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 343.043962][ T25] usb usb3-port1: attempt power cycle [ 343.066549][ T9576] qrtr: Invalid version 48 [ 343.110008][ T9571] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 343.174295][ T5905] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 343.522966][ T25] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 343.544278][ T25] usb 3-1: device descriptor read/8, error -71 [ 343.568207][ T9578] loop7: detected capacity change from 0 to 7 [ 343.588273][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'. [ 343.593829][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 343.627891][ T5905] usb 6-1: unable to get BOS descriptor or descriptor too short [ 343.648430][ T9578] Dev loop7: unable to read RDB block 7 [ 343.656111][ T54] Bluetooth: hci2: unexpected event for opcode 0x200f [ 343.672669][ T9578] loop7: unable to read partition table [ 343.681047][ T5905] usb 6-1: config 253 has an invalid interface number: 202 but max is 0 [ 343.693231][ T9578] loop7: partition table beyond EOD, truncated [ 343.699567][ T5905] usb 6-1: config 253 has no interface number 0 [ 343.715089][ T5905] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 343.729728][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.738173][ T5905] usb 6-1: Product: syz [ 343.742339][ T5905] usb 6-1: Manufacturer: syz [ 343.747308][ T9578] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 343.747308][ T9578] ) failed (rc=-5) [ 343.760770][ T5905] usb 6-1: SerialNumber: syz [ 343.809649][ T25] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 344.056337][ T25] usb 3-1: device not accepting address 32, error -71 [ 344.064545][ T25] usb usb3-port1: unable to enumerate USB device [ 344.483660][ T25] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 344.857424][ T5905] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 344.866843][ T11] usb 6-1: Failed to submit usb control message: -71 [ 344.877093][ T5905] usb 6-1: USB disconnect, device number 11 [ 344.893925][ T11] usb 6-1: unable to send the bmi data to the device: -71 [ 344.901114][ T11] usb 6-1: unable to get target info from device [ 344.945459][ T11] usb 6-1: could not get target info (-71) [ 344.955300][ T11] usb 6-1: could not probe fw (-71) [ 344.964453][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 344.992168][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.017978][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.075609][ T25] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 345.101629][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.140700][ T25] usb 3-1: config 0 descriptor?? [ 346.089107][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 346.095412][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 346.133824][ T25] usb 3-1: USB disconnect, device number 33 [ 347.270476][ T9642] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 347.270476][ T9642] program syz.0.960 not setting count and/or reply_len properly [ 347.984399][ T54] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 347.993361][ T54] Bluetooth: hci2: Injecting HCI hardware error event [ 348.002634][ T54] Bluetooth: hci2: hardware error 0x00 [ 348.369565][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.971'. [ 349.634235][ T8] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 349.874123][ T5880] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 349.988652][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.021453][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.047803][ T54] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 350.733266][ T8] usb 8-1: New USB device found, idVendor=2087, idProduct=0703, bcdDevice= 0.00 [ 350.742369][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.759542][ T8] usb 8-1: config 0 descriptor?? [ 350.803373][ T5880] usb 1-1: Using ep0 maxpacket: 32 [ 350.811982][ T9698] netlink: 14 bytes leftover after parsing attributes in process `syz.5.977'. [ 350.833673][ T5880] usb 1-1: unable to get BOS descriptor or descriptor too short [ 350.843229][ T5880] usb 1-1: config 253 has an invalid interface number: 202 but max is 0 [ 350.906561][ T5880] usb 1-1: config 253 has no interface number 0 [ 350.931885][ T5880] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 350.956771][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.971899][ T5880] usb 1-1: Product: syz [ 350.977431][ T5880] usb 1-1: Manufacturer: syz [ 350.983700][ T9703] netlink: 'syz.2.978': attribute type 1 has an invalid length. [ 350.991448][ T9703] netlink: 'syz.2.978': attribute type 4 has an invalid length. [ 351.013019][ T5880] usb 1-1: SerialNumber: syz [ 351.042971][ T9703] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.978'. [ 351.194038][ T9672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.221602][ T9672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.379143][ T5880] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 351.395530][ T52] usb 1-1: Failed to submit usb control message: -71 [ 351.426523][ T5880] usb 1-1: USB disconnect, device number 21 [ 351.440191][ T52] usb 1-1: unable to send the bmi data to the device: -71 [ 351.448849][ T52] usb 1-1: unable to get target info from device [ 351.455453][ T52] usb 1-1: could not get target info (-71) [ 351.472153][ T9672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.493211][ T9672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.507014][ T52] usb 1-1: could not probe fw (-71) [ 351.518518][ T8] usbhid 8-1:0.0: can't add hid device: -32 [ 351.524757][ T8] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 351.529045][ T9727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.585476][ T9672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.635099][ T9727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.679397][ T9672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.196230][ T5905] usb 8-1: USB disconnect, device number 12 [ 353.251848][ T9745] netlink: 20 bytes leftover after parsing attributes in process `syz.6.987'. [ 354.612983][ T5883] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 354.856676][ T9782] FAULT_INJECTION: forcing a failure. [ 354.856676][ T9782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.870398][ T9782] CPU: 0 UID: 0 PID: 9782 Comm: syz.2.993 Not tainted 6.12.0-rc7-syzkaller #0 [ 354.879319][ T9782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 354.889501][ T9782] Call Trace: [ 354.892802][ T9782] [ 354.895755][ T9782] dump_stack_lvl+0x241/0x360 [ 354.900463][ T9782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.905687][ T9782] ? __pfx__printk+0x10/0x10 [ 354.910297][ T9782] ? snprintf+0xda/0x120 [ 354.914566][ T9782] should_fail_ex+0x3b0/0x4e0 [ 354.919264][ T9782] _copy_to_user+0x31/0xb0 [ 354.923702][ T9782] simple_read_from_buffer+0xca/0x150 [ 354.929098][ T9782] proc_fail_nth_read+0x1e9/0x250 [ 354.934148][ T9782] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.939714][ T9782] ? rw_verify_area+0x55e/0x6f0 [ 354.944578][ T9782] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.950143][ T9782] vfs_read+0x1fc/0xb70 [ 354.954318][ T9782] ? fdget_pos+0x24e/0x320 [ 354.958753][ T9782] ? __pfx_vfs_read+0x10/0x10 [ 354.963453][ T9782] ? __fget_files+0x3f3/0x470 [ 354.968152][ T9782] ? fdget_pos+0x24e/0x320 [ 354.972597][ T9782] ksys_read+0x183/0x2b0 [ 354.976868][ T9782] ? __pfx_ksys_read+0x10/0x10 [ 354.981651][ T9782] ? do_syscall_64+0x100/0x230 [ 354.986439][ T9782] ? do_syscall_64+0xb6/0x230 [ 354.991131][ T9782] do_syscall_64+0xf3/0x230 [ 354.995648][ T9782] ? clear_bhb_loop+0x35/0x90 [ 355.000339][ T9782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.006248][ T9782] RIP: 0033:0x7f1e2c57d15c [ 355.010739][ T9782] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 355.030373][ T9782] RSP: 002b:00007f1e2d3c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 355.038822][ T9782] RAX: ffffffffffffffda RBX: 00007f1e2c736130 RCX: 00007f1e2c57d15c [ 355.046822][ T9782] RDX: 000000000000000f RSI: 00007f1e2d3c70a0 RDI: 0000000000000008 [ 355.054813][ T9782] RBP: 00007f1e2d3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 355.062801][ T9782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 355.070803][ T9782] R13: 0000000000000000 R14: 00007f1e2c736130 R15: 00007ffffc710778 [ 355.078823][ T9782] [ 355.203735][ T5883] usb 6-1: config 0 has an invalid descriptor of length 194, skipping remainder of the config [ 355.214570][ T5883] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 355.226312][ T5883] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 355.235601][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 355.252184][ T5883] usb 6-1: Product: syz [ 355.266811][ T5883] usb 6-1: Manufacturer: syz [ 355.271472][ T5883] usb 6-1: SerialNumber: syz [ 355.329209][ T5883] usb 6-1: config 0 descriptor?? [ 355.544194][ T9796] netlink: 'syz.6.997': attribute type 2 has an invalid length. [ 355.577358][ T8] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 355.608603][ T9796] netlink: 'syz.6.997': attribute type 10 has an invalid length. [ 355.653273][ T5926] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 355.682166][ T9796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.699571][ T9796] team0: Port device batadv0 added [ 355.708031][ T5882] usb 6-1: USB disconnect, device number 12 [ 355.733402][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 355.740638][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.764217][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.793080][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 355.812883][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 355.822958][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 355.831896][ T5926] usb 3-1: unable to get BOS descriptor or descriptor too short [ 355.840451][ T8] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 355.851119][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.851245][ T5926] usb 3-1: config 253 has an invalid interface number: 202 but max is 0 [ 355.870017][ T5926] usb 3-1: config 253 has no interface number 0 [ 355.877651][ T8] usb 1-1: config 0 descriptor?? [ 355.897006][ T5926] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 355.906749][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.917222][ T5926] usb 3-1: Product: syz [ 355.921501][ T5926] usb 3-1: Manufacturer: syz [ 355.943196][ T5926] usb 3-1: SerialNumber: syz [ 355.953317][ T5880] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 356.162997][ T5880] usb 8-1: Using ep0 maxpacket: 16 [ 356.170616][ T5880] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.274531][ T9822] 9pnet_fd: Insufficient options for proto=fd [ 356.310060][ T5880] usb 8-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=c9.be [ 356.319880][ T5880] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.328373][ T5880] usb 8-1: Product: syz [ 356.332815][ T5880] usb 8-1: Manufacturer: syz [ 356.337620][ T5880] usb 8-1: SerialNumber: syz [ 356.364276][ T5880] usb 8-1: config 0 descriptor?? [ 356.375679][ T5880] cdc_ether 8-1:0.0: skipping garbage [ 356.381655][ T5880] usb 8-1: bad CDC descriptors [ 356.387804][ T5880] usb 8-1: unsupported MDLM descriptors [ 356.415884][ T8] hid-u2fzero 0003:10C4:8ACF.0004: unknown main item tag 0x0 [ 356.423552][ T8] hid-u2fzero 0003:10C4:8ACF.0004: unknown main item tag 0x0 [ 356.431117][ T8] hid-u2fzero 0003:10C4:8ACF.0004: unknown main item tag 0x0 [ 356.438787][ T8] hid-u2fzero 0003:10C4:8ACF.0004: unknown main item tag 0x0 [ 356.447399][ T8] hid-u2fzero 0003:10C4:8ACF.0004: unknown main item tag 0x0 [ 356.496772][ T8] hid-u2fzero 0003:10C4:8ACF.0004: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.0-1/input0 [ 356.517293][ T8] hid-u2fzero 0003:10C4:8ACF.0004: U2F Zero LED initialised [ 356.526356][ T8] hid-u2fzero 0003:10C4:8ACF.0004: U2F Zero RNG initialised [ 356.716097][ T8] usb 8-1: USB disconnect, device number 13 [ 356.874980][ T5883] usb 1-1: USB disconnect, device number 22 [ 358.099678][ T5926] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 358.101932][ T11] usb 3-1: Failed to submit usb control message: -71 [ 358.117021][ T11] usb 3-1: unable to send the bmi data to the device: -71 [ 358.124453][ T11] usb 3-1: unable to get target info from device [ 358.130820][ T11] usb 3-1: could not get target info (-71) [ 358.136901][ T11] usb 3-1: could not probe fw (-71) [ 358.180082][ T5926] usb 3-1: USB disconnect, device number 34 [ 358.290586][ T9851] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1006'. [ 358.301320][ T9851] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 363.030085][ T29] audit: type=1800 audit(1731367332.406:32): pid=9906 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1019" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 363.906017][ T9929] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1023'. [ 364.914629][ T9947] FAULT_INJECTION: forcing a failure. [ 364.914629][ T9947] name failslab, interval 1, probability 0, space 0, times 0 [ 365.105708][ T9947] CPU: 0 UID: 0 PID: 9947 Comm: syz.6.1027 Not tainted 6.12.0-rc7-syzkaller #0 [ 365.114727][ T9947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 365.124809][ T9947] Call Trace: [ 365.128974][ T9947] [ 365.131922][ T9947] dump_stack_lvl+0x241/0x360 [ 365.136628][ T9947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.141855][ T9947] ? __pfx__printk+0x10/0x10 [ 365.146475][ T9947] ? ref_tracker_alloc+0x332/0x490 [ 365.151621][ T9947] should_fail_ex+0x3b0/0x4e0 [ 365.156344][ T9947] ? skb_clone+0x20c/0x390 [ 365.160792][ T9947] should_failslab+0xac/0x100 [ 365.165505][ T9947] ? skb_clone+0x20c/0x390 [ 365.169950][ T9947] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 365.175324][ T9947] skb_clone+0x20c/0x390 [ 365.179587][ T9947] __netlink_deliver_tap+0x3cc/0x7c0 [ 365.184869][ T9947] ? netlink_deliver_tap+0x2e/0x1b0 [ 365.190057][ T9947] netlink_deliver_tap+0x19d/0x1b0 [ 365.195155][ T9947] netlink_unicast+0x7c4/0x990 [ 365.199911][ T9947] ? __pfx_netlink_unicast+0x10/0x10 [ 365.205194][ T9947] ? __virt_addr_valid+0x183/0x530 [ 365.210322][ T9947] ? __check_object_size+0x48e/0x900 [ 365.215613][ T9947] netlink_sendmsg+0x8e4/0xcb0 [ 365.220369][ T9947] ? mark_lock+0x9a/0x360 [ 365.224705][ T9947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.230011][ T9947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.235381][ T9947] __sock_sendmsg+0x221/0x270 [ 365.240060][ T9947] sock_write_iter+0x2d7/0x3f0 [ 365.244832][ T9947] ? __pfx_sock_write_iter+0x10/0x10 [ 365.250136][ T9947] do_iter_readv_writev+0x600/0x880 [ 365.255338][ T9947] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 365.261060][ T9947] ? bpf_lsm_file_permission+0x9/0x10 [ 365.266431][ T9947] ? security_file_permission+0x74/0x280 [ 365.272071][ T9947] ? rw_verify_area+0x1c3/0x6f0 [ 365.276928][ T9947] vfs_writev+0x376/0xba0 [ 365.281266][ T9947] ? __pfx_vfs_writev+0x10/0x10 [ 365.286136][ T9947] ? fdget_pos+0x19a/0x320 [ 365.290567][ T9947] do_writev+0x1b1/0x350 [ 365.294810][ T9947] ? __pfx_do_writev+0x10/0x10 [ 365.299572][ T9947] ? do_syscall_64+0x100/0x230 [ 365.304337][ T9947] ? do_syscall_64+0xb6/0x230 [ 365.309014][ T9947] do_syscall_64+0xf3/0x230 [ 365.313527][ T9947] ? clear_bhb_loop+0x35/0x90 [ 365.318213][ T9947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.324106][ T9947] RIP: 0033:0x7f8f5037e719 [ 365.328520][ T9947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.348126][ T9947] RSP: 002b:00007f8f51113038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 365.356539][ T9947] RAX: ffffffffffffffda RBX: 00007f8f50535f80 RCX: 00007f8f5037e719 [ 365.364517][ T9947] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 365.372488][ T9947] RBP: 00007f8f51113090 R08: 0000000000000000 R09: 0000000000000000 [ 365.380455][ T9947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.388423][ T9947] R13: 0000000000000000 R14: 00007f8f50535f80 R15: 00007ffe5afbabf8 [ 365.396402][ T9947] [ 366.392907][ T9912] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 366.593430][ T8] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 366.600221][ T9912] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 366.617046][ T5926] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 366.625233][ T9912] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.643427][ T9912] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 366.654268][ T9912] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 366.662505][ T9912] usb 8-1: Manufacturer: syz [ 366.716716][ T9912] usb 8-1: config 0 descriptor?? [ 366.807510][ T8] usb 6-1: config 2 has an invalid interface number: 174 but max is 0 [ 366.919118][ T5926] usb 7-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 366.978317][ T8] usb 6-1: config 2 has no interface number 0 [ 366.984623][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.994713][ T8] usb 6-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 367.045477][ T5926] usb 7-1: Product: syz [ 367.077783][ T5926] usb 7-1: Manufacturer: syz [ 367.122412][ T8] usb 6-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 367.181323][ T5926] usb 7-1: SerialNumber: syz [ 367.208851][ T5926] usb 7-1: config 0 descriptor?? [ 367.217982][ T8] usb 6-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 367.239148][ T5926] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 367.248520][ T8] usb 6-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 367.263004][ T9912] rc_core: IR keymap rc-hauppauge not found [ 367.295238][ T9912] Registered IR keymap rc-empty [ 367.300491][ T8] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 367.324583][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.331110][ T9912] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 367.345489][ T8] usb 6-1: Product: syz [ 367.349790][ T8] usb 6-1: Manufacturer: syz [ 367.355129][ T8] usb 6-1: SerialNumber: syz [ 367.376834][ T9963] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 367.406545][ T9912] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input24 [ 367.501351][ T9912] usb 8-1: USB disconnect, device number 14 [ 367.613571][ T9963] overlayfs: failed to resolve './file2': -2 [ 368.099563][ T9963] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1033'. [ 368.147063][ T5926] input: sonixb as /devices/platform/dummy_hcd.6/usb7/7-1/input/input25 [ 368.255078][ T8] usb 6-1: probing VID:PID(0424:012C) [ 368.262960][ T8] usb 6-1: vub300 testing BULK IN EndPoint(0) 8E [ 368.272855][ T8] usb 6-1: vub300 testing BULK IN EndPoint(1) 82 [ 368.282502][ T8] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 368.301399][ T5926] usb 7-1: USB disconnect, device number 13 [ 368.384514][ T8] vub300 6-1:2.174: probe with driver vub300 failed with error -22 [ 368.419514][ T8] usb 6-1: USB disconnect, device number 13 [ 368.473775][T10011] FAULT_INJECTION: forcing a failure. [ 368.473775][T10011] name failslab, interval 1, probability 0, space 0, times 0 [ 368.486945][T10011] CPU: 0 UID: 0 PID: 10011 Comm: syz.7.1042 Not tainted 6.12.0-rc7-syzkaller #0 [ 368.496005][T10011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 368.506090][T10011] Call Trace: [ 368.509433][T10011] [ 368.512398][T10011] dump_stack_lvl+0x241/0x360 [ 368.517126][T10011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.522447][T10011] ? __pfx__printk+0x10/0x10 [ 368.527089][T10011] should_fail_ex+0x3b0/0x4e0 [ 368.531797][T10011] ? skb_clone+0x20c/0x390 [ 368.536246][T10011] should_failslab+0xac/0x100 [ 368.540962][T10011] ? skb_clone+0x20c/0x390 [ 368.545416][T10011] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 368.550830][T10011] skb_clone+0x20c/0x390 [ 368.555114][T10011] ? dev_queue_xmit_nit+0x220/0xc10 [ 368.560362][T10011] dev_queue_xmit_nit+0x419/0xc10 [ 368.565425][T10011] ? dev_queue_xmit_nit+0x2b/0xc10 [ 368.570574][T10011] ? validate_xmit_skb+0x977/0xf90 [ 368.575738][T10011] dev_hard_start_xmit+0x15f/0x7e0 [ 368.580890][T10011] ? __pfx_validate_xmit_skb+0x10/0x10 [ 368.586400][T10011] __dev_queue_xmit+0x1b11/0x3ed0 [ 368.591493][T10011] ? kasan_save_track+0x51/0x80 [ 368.596403][T10011] ? vfs_writev+0x376/0xba0 [ 368.600937][T10011] ? __dev_queue_xmit+0x2da/0x3ed0 [ 368.606088][T10011] ? __pfx___dev_queue_xmit+0x10/0x10 [ 368.611514][T10011] ? __copy_skb_header+0x437/0x5b0 [ 368.616658][T10011] ? __asan_memcpy+0x40/0x70 [ 368.621283][T10011] ? __copy_skb_header+0x437/0x5b0 [ 368.626437][T10011] ? __skb_clone+0x454/0x6c0 [ 368.631160][T10011] ? skb_clone+0x240/0x390 [ 368.635618][T10011] __netlink_deliver_tap+0x54d/0x7c0 [ 368.640955][T10011] ? netlink_deliver_tap+0x2e/0x1b0 [ 368.646189][T10011] netlink_deliver_tap+0x19d/0x1b0 [ 368.651339][T10011] netlink_unicast+0x7c4/0x990 [ 368.656152][T10011] ? __pfx_netlink_unicast+0x10/0x10 [ 368.661472][T10011] ? __virt_addr_valid+0x183/0x530 [ 368.666625][T10011] ? __check_object_size+0x48e/0x900 [ 368.671953][T10011] netlink_sendmsg+0x8e4/0xcb0 [ 368.676754][T10011] ? mark_lock+0x9a/0x360 [ 368.681128][T10011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.686464][T10011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.691783][T10011] __sock_sendmsg+0x221/0x270 [ 368.696501][T10011] sock_write_iter+0x2d7/0x3f0 [ 368.701311][T10011] ? __pfx_sock_write_iter+0x10/0x10 [ 368.706637][T10011] do_iter_readv_writev+0x600/0x880 [ 368.711858][T10011] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 368.717668][T10011] ? bpf_lsm_file_permission+0x9/0x10 [ 368.723034][T10011] ? security_file_permission+0x74/0x280 [ 368.728666][T10011] ? rw_verify_area+0x1c3/0x6f0 [ 368.733560][T10011] vfs_writev+0x376/0xba0 [ 368.737937][T10011] ? __pfx_vfs_writev+0x10/0x10 [ 368.742840][T10011] ? fdget_pos+0x19a/0x320 [ 368.747298][T10011] do_writev+0x1b1/0x350 [ 368.751563][T10011] ? __pfx_do_writev+0x10/0x10 [ 368.756349][T10011] ? do_syscall_64+0x100/0x230 [ 368.761128][T10011] ? do_syscall_64+0xb6/0x230 [ 368.765835][T10011] do_syscall_64+0xf3/0x230 [ 368.770335][T10011] ? clear_bhb_loop+0x35/0x90 [ 368.775014][T10011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.780919][T10011] RIP: 0033:0x7f71b9b7e719 [ 368.785328][T10011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.804942][T10011] RSP: 002b:00007f71ba8bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 368.813367][T10011] RAX: ffffffffffffffda RBX: 00007f71b9d35f80 RCX: 00007f71b9b7e719 [ 368.821338][T10011] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 368.829480][T10011] RBP: 00007f71ba8bd090 R08: 0000000000000000 R09: 0000000000000000 [ 368.837448][T10011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.845502][T10011] R13: 0000000000000000 R14: 00007f71b9d35f80 R15: 00007ffe34660108 [ 368.853485][T10011] [ 368.992936][ T5882] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 369.127501][T10027] x_tables: duplicate underflow at hook 2 [ 369.155220][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.166655][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.212159][T10024] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1046'. [ 369.234874][T10024] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1046'. [ 369.286244][ T5882] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 369.343314][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.415244][ T5882] usb 3-1: config 0 descriptor?? [ 370.045837][ T5882] dragonrise 0003:0079:0006.0005: unknown main item tag 0x0 [ 370.585114][ T5882] dragonrise 0003:0079:0006.0005: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.2-1/input0 [ 370.598265][ T5882] dragonrise 0003:0079:0006.0005: no inputs found [ 370.604908][ T5882] dragonrise 0003:0079:0006.0005: force feedback init failed [ 370.789493][T10004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.800269][T10004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.827336][ T5882] usb 3-1: USB disconnect, device number 35 [ 371.391874][ T5881] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 371.595749][ T5881] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 371.610795][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.658984][ T5881] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 371.722646][ T5881] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 371.994085][ T5881] usb 7-1: Manufacturer: syz [ 372.151078][ T5881] usb 7-1: config 0 descriptor?? [ 372.251096][T10080] FAULT_INJECTION: forcing a failure. [ 372.251096][T10080] name failslab, interval 1, probability 0, space 0, times 0 [ 372.271417][T10080] CPU: 0 UID: 0 PID: 10080 Comm: syz.2.1056 Not tainted 6.12.0-rc7-syzkaller #0 [ 372.280557][T10080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 372.290617][T10080] Call Trace: [ 372.293890][T10080] [ 372.296837][T10080] dump_stack_lvl+0x241/0x360 [ 372.301510][T10080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.306703][T10080] ? __pfx__printk+0x10/0x10 [ 372.311299][T10080] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 372.316752][T10080] ? __pfx___might_resched+0x10/0x10 [ 372.322031][T10080] ? trace_contention_end+0x3c/0x120 [ 372.327316][T10080] should_fail_ex+0x3b0/0x4e0 [ 372.331985][T10080] should_failslab+0xac/0x100 [ 372.336662][T10080] ? __inet_diag_dump_start+0x9d/0xa50 [ 372.342125][T10080] __kmalloc_cache_noprof+0x6c/0x2c0 [ 372.347404][T10080] __inet_diag_dump_start+0x9d/0xa50 [ 372.352693][T10080] __netlink_dump_start+0x45c/0x790 [ 372.357883][T10080] inet_diag_handler_cmd+0x1de/0x2b0 [ 372.363158][T10080] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 372.368949][T10080] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 372.374654][T10080] ? __pfx_inet_diag_dump+0x10/0x10 [ 372.379844][T10080] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 372.385473][T10080] ? sock_diag_lock_handler+0x19/0x280 [ 372.390920][T10080] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 372.396732][T10080] sock_diag_rcv_msg+0x3dc/0x5f0 [ 372.401750][T10080] netlink_rcv_skb+0x1e3/0x430 [ 372.406536][T10080] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 372.412001][T10080] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.417304][T10080] ? netlink_deliver_tap+0x2e/0x1b0 [ 372.422514][T10080] netlink_unicast+0x7f6/0x990 [ 372.427290][T10080] ? __pfx_netlink_unicast+0x10/0x10 [ 372.432563][T10080] ? __virt_addr_valid+0x183/0x530 [ 372.437668][T10080] ? __check_object_size+0x48e/0x900 [ 372.442949][T10080] netlink_sendmsg+0x8e4/0xcb0 [ 372.447728][T10080] ? mark_lock+0x9a/0x360 [ 372.452077][T10080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.457372][T10080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.462665][T10080] __sock_sendmsg+0x221/0x270 [ 372.467334][T10080] sock_write_iter+0x2d7/0x3f0 [ 372.472089][T10080] ? __pfx_sock_write_iter+0x10/0x10 [ 372.477409][T10080] do_iter_readv_writev+0x600/0x880 [ 372.482618][T10080] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 372.488367][T10080] ? bpf_lsm_file_permission+0x9/0x10 [ 372.493732][T10080] ? security_file_permission+0x74/0x280 [ 372.499359][T10080] ? rw_verify_area+0x1c3/0x6f0 [ 372.504249][T10080] vfs_writev+0x376/0xba0 [ 372.508594][T10080] ? __pfx_vfs_writev+0x10/0x10 [ 372.513486][T10080] ? fdget_pos+0x19a/0x320 [ 372.517984][T10080] do_writev+0x1b1/0x350 [ 372.522250][T10080] ? __pfx_do_writev+0x10/0x10 [ 372.527103][T10080] ? do_syscall_64+0x100/0x230 [ 372.531866][T10080] ? do_syscall_64+0xb6/0x230 [ 372.536540][T10080] do_syscall_64+0xf3/0x230 [ 372.541037][T10080] ? clear_bhb_loop+0x35/0x90 [ 372.545718][T10080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.551604][T10080] RIP: 0033:0x7f1e2c57e719 [ 372.556011][T10080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.575874][T10080] RSP: 002b:00007f1e2d409038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 372.584299][T10080] RAX: ffffffffffffffda RBX: 00007f1e2c735f80 RCX: 00007f1e2c57e719 [ 372.592277][T10080] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 372.600266][T10080] RBP: 00007f1e2d409090 R08: 0000000000000000 R09: 0000000000000000 [ 372.608233][T10080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.616201][T10080] R13: 0000000000000000 R14: 00007f1e2c735f80 R15: 00007ffffc710778 [ 372.624176][T10080] [ 372.628326][ T5881] rc_core: IR keymap rc-hauppauge not found [ 372.637876][ T5881] Registered IR keymap rc-empty [ 372.651339][ T5881] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 372.693556][ T5881] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input26 [ 372.740900][ T5881] usb 7-1: USB disconnect, device number 14 [ 373.706460][ T5905] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 374.531120][ T5905] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.544692][ T5905] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 374.564964][ T5905] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 374.598829][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.606073][T10116] input: syz0 as /devices/virtual/input/input28 [ 374.608934][ T5905] usb 3-1: Product: syz [ 374.666649][ T5905] usb 3-1: Manufacturer: syz [ 374.675642][ T5905] usb 3-1: SerialNumber: syz [ 375.784214][T10090] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 375.912314][T10126] FAULT_INJECTION: forcing a failure. [ 375.912314][T10126] name failslab, interval 1, probability 0, space 0, times 0 [ 375.934071][T10126] CPU: 0 UID: 0 PID: 10126 Comm: syz.0.1070 Not tainted 6.12.0-rc7-syzkaller #0 [ 375.943158][T10126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 375.953245][T10126] Call Trace: [ 375.956526][T10126] [ 375.959464][T10126] dump_stack_lvl+0x241/0x360 [ 375.964171][T10126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.969381][T10126] ? __pfx__printk+0x10/0x10 [ 375.974003][T10126] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 375.980020][T10126] ? __pfx___might_resched+0x10/0x10 [ 375.985332][T10126] should_fail_ex+0x3b0/0x4e0 [ 375.990036][T10126] should_failslab+0xac/0x100 [ 375.994735][T10126] ? __alloc_skb+0x1c3/0x440 [ 375.999379][T10126] kmem_cache_alloc_node_noprof+0x71/0x320 [ 376.005135][T10128] binder: 10127:10128 ioctl 40046205 0 returned -22 [ 376.005296][T10126] ? __inet_diag_dump_start+0x9d/0xa50 [ 376.017420][T10126] __alloc_skb+0x1c3/0x440 [ 376.021859][T10126] ? do_iter_readv_writev+0x600/0x880 [ 376.027236][T10126] ? vfs_writev+0x376/0xba0 [ 376.031761][T10126] ? do_writev+0x1b1/0x350 [ 376.036191][T10126] ? do_syscall_64+0xf3/0x230 [ 376.040899][T10126] ? __pfx___alloc_skb+0x10/0x10 [ 376.045887][T10126] netlink_dump+0x2cd/0xd80 [ 376.050423][T10126] ? __pfx_netlink_dump+0x10/0x10 [ 376.055634][T10126] ? cap_capable+0x1b4/0x250 [ 376.060254][T10126] ? ns_capable+0x8a/0xf0 [ 376.064692][T10126] ? __inet_diag_dump_start+0x8c9/0xa50 [ 376.070270][T10126] __netlink_dump_start+0x5a2/0x790 [ 376.075502][T10126] inet_diag_handler_cmd+0x1de/0x2b0 [ 376.080797][T10126] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 376.086608][T10126] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 376.092329][T10126] ? __pfx_inet_diag_dump+0x10/0x10 [ 376.097528][T10126] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 376.103172][T10126] ? sock_diag_lock_handler+0x19/0x280 [ 376.108677][T10126] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 376.114502][T10126] sock_diag_rcv_msg+0x3dc/0x5f0 [ 376.119463][T10126] netlink_rcv_skb+0x1e3/0x430 [ 376.124239][T10126] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 376.129807][T10126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.135146][T10126] ? netlink_deliver_tap+0x2e/0x1b0 [ 376.140356][T10126] netlink_unicast+0x7f6/0x990 [ 376.145135][T10126] ? __pfx_netlink_unicast+0x10/0x10 [ 376.150419][T10126] ? __virt_addr_valid+0x183/0x530 [ 376.155975][T10126] ? __check_object_size+0x48e/0x900 [ 376.161277][T10126] netlink_sendmsg+0x8e4/0xcb0 [ 376.166048][T10126] ? mark_lock+0x9a/0x360 [ 376.170393][T10126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.175693][T10126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.180988][T10126] __sock_sendmsg+0x221/0x270 [ 376.185685][T10126] sock_write_iter+0x2d7/0x3f0 [ 376.190463][T10126] ? __pfx_sock_write_iter+0x10/0x10 [ 376.195776][T10126] do_iter_readv_writev+0x600/0x880 [ 376.200983][T10126] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 376.206714][T10126] ? bpf_lsm_file_permission+0x9/0x10 [ 376.212100][T10126] ? security_file_permission+0x74/0x280 [ 376.217747][T10126] ? rw_verify_area+0x1c3/0x6f0 [ 376.222605][T10126] vfs_writev+0x376/0xba0 [ 376.226945][T10126] ? __pfx_vfs_writev+0x10/0x10 [ 376.231810][T10126] ? fdget_pos+0x19a/0x320 [ 376.236239][T10126] do_writev+0x1b1/0x350 [ 376.240492][T10126] ? __pfx_do_writev+0x10/0x10 [ 376.245252][T10126] ? do_syscall_64+0x100/0x230 [ 376.250023][T10126] ? do_syscall_64+0xb6/0x230 [ 376.254699][T10126] do_syscall_64+0xf3/0x230 [ 376.259208][T10126] ? clear_bhb_loop+0x35/0x90 [ 376.263883][T10126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.269774][T10126] RIP: 0033:0x7f88c377e719 [ 376.274194][T10126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.293800][T10126] RSP: 002b:00007f88c1bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 376.302212][T10126] RAX: ffffffffffffffda RBX: 00007f88c3935f80 RCX: 00007f88c377e719 [ 376.310177][T10126] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 376.318144][T10126] RBP: 00007f88c1bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 376.326196][T10126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.334163][T10126] R13: 0000000000000000 R14: 00007f88c3935f80 R15: 00007ffdf94e1da8 [ 376.342149][T10126] [ 376.364075][T10090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.384019][T10090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.466225][T10129] netlink: 'syz.5.1071': attribute type 8 has an invalid length. [ 376.482981][ T5926] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 376.513431][T10129] block nbd5: shutting down sockets [ 376.642896][ T5926] usb 7-1: Using ep0 maxpacket: 32 [ 376.652183][ T5926] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 376.663138][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.671407][ T5926] usb 7-1: Product: syz [ 376.678823][ T5926] usb 7-1: Manufacturer: syz [ 376.685714][ T5926] usb 7-1: SerialNumber: syz [ 376.692294][ T5926] usb 7-1: config 0 descriptor?? [ 376.742965][ T9912] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 376.801974][T10090] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 376.913028][ T9912] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.926005][ T9912] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 376.927015][ T1328] Bluetooth: hci0: Frame reassembly failed (-84) [ 376.950701][ T9912] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 376.960232][ T9912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 376.968678][ T9912] usb 1-1: SerialNumber: syz [ 377.109519][ T5926] airspy 7-1:0.0: Board ID: 00 [ 377.114714][ T5926] airspy 7-1:0.0: Firmware version: [ 377.155917][ T5905] cdc_ncm 3-1:1.0: failed to get mac address [ 377.165038][ T5905] cdc_ncm 3-1:1.0: bind() failure [ 377.174875][ T5905] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 377.183603][ T5905] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 377.193830][ T5905] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 377.213368][ T5905] usb 3-1: USB disconnect, device number 36 [ 377.898802][ T9912] usb 1-1: 0:2 : does not exist [ 377.980857][ T9912] usb 1-1: USB disconnect, device number 23 [ 378.286529][T10120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.822973][T10120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.844156][ T9834] udevd[9834]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.896899][ T5926] airspy 7-1:0.0: usb_control_msg() failed -71 request 10 [ 378.909804][ T5926] airspy 7-1:0.0: Registered as swradio24 [ 378.915876][ T5926] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 378.936249][ T5838] Bluetooth: hci0: command 0x1003 tx timeout [ 378.944828][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.951196][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.972280][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 379.003572][ T5926] usb 7-1: USB disconnect, device number 15 [ 379.092948][ T9912] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 379.096795][T10154] overlayfs: failed to resolve './file2': -2 [ 379.254388][ T9912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.275823][ T9912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.304931][ T9912] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 379.355519][ T9912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.385505][ T9912] usb 3-1: config 0 descriptor?? [ 379.783092][ T5881] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 379.818613][ T9912] asus 0003:0B05:17E0.0006: unknown main item tag 0x0 [ 379.952694][ T9912] asus 0003:0B05:17E0.0006: unknown main item tag 0x0 [ 379.961977][ T9912] asus 0003:0B05:17E0.0006: unknown main item tag 0x0 [ 379.970707][ T9912] asus 0003:0B05:17E0.0006: unbalanced collection at end of report description [ 379.983740][ T5881] usb 8-1: Using ep0 maxpacket: 8 [ 379.991150][ T5881] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 380.114038][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 380.691748][ T5881] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 380.700956][ T5881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.709603][ T9912] asus 0003:0B05:17E0.0006: Asus hid parse failed: -22 [ 380.717512][ T9912] asus 0003:0B05:17E0.0006: probe with driver asus failed with error -22 [ 380.734234][ T5881] usb 8-1: config 0 descriptor?? [ 380.946453][ T1328] Bluetooth: hci0: Frame reassembly failed (-84) [ 381.076447][ T5881] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 381.858684][T10179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.911195][T10179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.961782][ T5926] usb 8-1: USB disconnect, device number 15 [ 381.977330][ T5926] iowarrior 8-1:0.0: I/O-Warror #0 now disconnected [ 382.189870][ T9912] usb 3-1: USB disconnect, device number 37 [ 382.273242][ T5880] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 382.422871][ T5880] usb 1-1: Using ep0 maxpacket: 32 [ 382.437259][ T5880] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 382.452883][ T5880] usb 1-1: config 0 has no interface number 0 [ 382.459129][ T5880] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.482869][ T5880] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.512828][ T5880] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 382.522633][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.544860][ T5880] usb 1-1: config 0 descriptor?? [ 382.922886][ T9912] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 382.928684][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 383.082468][T10206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.084458][T10206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.103482][T10229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.103758][T10229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.162169][ T9912] usb 8-1: unable to get BOS descriptor or descriptor too short [ 383.164423][ T9912] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 383.592926][ T5880] uclogic 0003:28BD:0094.0007: failed retrieving string descriptor #100: -71 [ 383.662817][ T9912] usb 8-1: can't read configurations, error -71 [ 383.757583][ T5880] uclogic 0003:28BD:0094.0007: failed retrieving pen parameters: -71 [ 383.902238][ T5880] uclogic 0003:28BD:0094.0007: pen probing failed: -71 [ 383.932575][ T5880] uclogic 0003:28BD:0094.0007: failed probing parameters: -71 [ 383.938734][T10251] netlink: 'syz.5.1109': attribute type 1 has an invalid length. [ 384.171366][ T30] INFO: task kworker/0:6:5884 blocked for more than 143 seconds. [ 384.177399][ T5880] uclogic 0003:28BD:0094.0007: probe with driver uclogic failed with error -71 [ 384.321720][ T30] Not tainted 6.12.0-rc7-syzkaller #0 [ 384.388285][ T5880] usb 1-1: USB disconnect, device number 24 [ 384.460973][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 384.542878][ T30] task:kworker/0:6 state:D stack:17912 pid:5884 tgid:5884 ppid:2 flags:0x00004000 [ 384.562325][ T30] Workqueue: usb_hub_wq hub_event [ 384.567893][ T30] Call Trace: [ 384.571208][ T30] [ 384.582837][ T30] __schedule+0x17fa/0x4bd0 [ 384.587384][ T30] ? try_to_wake_up+0x98b/0x14b0 [ 384.592362][ T30] ? __pfx___schedule+0x10/0x10 [ 384.612900][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 384.619391][ T30] ? __pfx_lock_release+0x10/0x10 [ 384.642844][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 384.648112][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 384.662871][ T30] ? schedule+0x90/0x320 [ 384.696776][ T30] schedule+0x14b/0x320 [ 384.700999][ T30] schedule_timeout+0xb0/0x310 [ 384.728296][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 384.740511][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 384.750813][ T30] ? wait_for_completion+0x2fe/0x620 [ 384.766159][ T30] ? wait_for_completion+0x2fe/0x620 [ 384.771978][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 384.792831][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 384.798095][ T30] ? wait_for_completion+0x2fe/0x620 [ 384.812905][ T30] wait_for_completion+0x355/0x620 [ 384.818100][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 384.832984][ T30] ? __init_swait_queue_head+0xae/0x150 [ 384.838608][ T30] snd_card_free+0x12a/0x190 [ 384.852797][ T30] ? __pfx_snd_card_free+0x10/0x10 [ 384.857977][ T30] ? __wake_up_common_lock+0x18c/0x1e0 [ 384.876423][ T30] usb_unbind_interface+0x25e/0x940 [ 384.881930][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 384.900821][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 384.909618][ T30] device_release_driver_internal+0x503/0x7c0 [ 384.921218][ T30] bus_remove_device+0x34f/0x420 [ 384.931895][ T30] device_del+0x57a/0x9b0 [ 384.942236][ T30] ? __pfx_device_del+0x10/0x10 [ 384.950525][ T30] ? usb_disconnect+0x103/0x950 [ 384.960533][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 384.969832][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 384.979809][ T30] usb_disable_device+0x3bf/0x850 [ 384.987927][ T30] usb_disconnect+0x340/0x950 [ 384.997403][ T30] hub_event+0x1ebc/0x5150 [ 385.001963][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 385.018202][ T30] ? __pfx_hub_event+0x10/0x10 [ 385.024351][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 385.029515][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 385.044984][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 385.052275][ T30] ? process_scheduled_works+0x976/0x1850 [ 385.065119][ T30] process_scheduled_works+0xa63/0x1850 [ 385.070840][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 385.081737][ T30] ? assign_work+0x364/0x3d0 [ 385.087835][ T30] worker_thread+0x870/0xd30 [ 385.097993][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 385.105513][ T30] ? __kthread_parkme+0x169/0x1d0 [ 385.110752][ T30] ? __pfx_worker_thread+0x10/0x10 [ 385.123717][ T30] kthread+0x2f0/0x390 [ 385.130718][ T30] ? __pfx_worker_thread+0x10/0x10 [ 385.139650][ T30] ? __pfx_kthread+0x10/0x10 [ 385.148193][ T30] ret_from_fork+0x4b/0x80 [ 385.157208][ T30] ? __pfx_kthread+0x10/0x10 [ 385.161954][ T30] ret_from_fork_asm+0x1a/0x30 [ 385.169430][ T30] [ 385.172616][ T30] [ 385.172616][ T30] Showing all locks held in the system: [ 385.210032][ T30] 3 locks held by kworker/u8:1/12: [ 385.222999][ T30] 1 lock held by khungtaskd/30: [ 385.227935][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 385.266634][ T30] 3 locks held by kworker/u8:7/2900: [ 385.271997][ T30] #0: ffff8880b873ea58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 385.282624][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 385.294205][ T30] #2: ffff88805c208768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0xd9/0x490 [ 385.304437][ T30] 2 locks held by getty/5585: [ 385.309170][ T30] #0: ffff88814ce6e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 385.319115][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 385.329421][ T30] 5 locks held by kworker/0:6/5884: [ 385.334808][ T30] #0: ffff88801def0d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 385.346620][ T30] #1: ffffc9000448fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 385.359049][ T30] #2: ffff888028be9190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 385.368161][ T30] #3: ffff888061a5f190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 385.377583][ T30] #4: ffff888079a3b160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 385.389062][ T30] 4 locks held by kworker/1:7/9912: [ 385.394528][ T30] [ 385.396879][ T30] ============================================= [ 385.396879][ T30] [ 385.405600][ T30] NMI backtrace for cpu 0 [ 385.409960][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller #0 [ 385.418721][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 385.428873][ T30] Call Trace: [ 385.432148][ T30] [ 385.435089][ T30] dump_stack_lvl+0x241/0x360 [ 385.439782][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.445019][ T30] ? __pfx__printk+0x10/0x10 [ 385.449635][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 385.454594][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 385.460082][ T30] ? _printk+0xd5/0x120 [ 385.464250][ T30] ? __pfx__printk+0x10/0x10 [ 385.468878][ T30] ? __wake_up_klogd+0xcc/0x110 [ 385.473757][ T30] ? __pfx__printk+0x10/0x10 [ 385.478355][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 385.483405][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 385.489393][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 385.495387][ T30] watchdog+0xff4/0x1040 [ 385.499644][ T30] ? watchdog+0x1ea/0x1040 [ 385.504080][ T30] ? __pfx_watchdog+0x10/0x10 [ 385.508754][ T30] kthread+0x2f0/0x390 [ 385.512845][ T30] ? __pfx_watchdog+0x10/0x10 [ 385.517537][ T30] ? __pfx_kthread+0x10/0x10 [ 385.522125][ T30] ret_from_fork+0x4b/0x80 [ 385.526563][ T30] ? __pfx_kthread+0x10/0x10 [ 385.531197][ T30] ret_from_fork_asm+0x1a/0x30 [ 385.536005][ T30] [ 385.539047][ C0] vkms_vblank_simulate: vblank timer overrun [ 385.546260][ T30] Sending NMI from CPU 0 to CPUs 1: [ 385.551518][ C1] NMI backtrace for cpu 1 [ 385.551532][ C1] CPU: 1 UID: 0 PID: 9912 Comm: kworker/1:7 Not tainted 6.12.0-rc7-syzkaller #0 [ 385.551550][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 385.551561][ C1] Workqueue: usb_hub_wq hub_event [ 385.551582][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x0/0x90 [ 385.551605][ C1] Code: 10 48 89 74 0a 18 4c 89 44 0a 20 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 4c 8b 04 24 65 48 8b 0c 25 80 d7 03 00 65 8b 05 e0 f8 [ 385.551618][ C1] RSP: 0018:ffffc900052f74a0 EFLAGS: 00000246 [ 385.551632][ C1] RAX: ffffffff8142ef99 RBX: 0000000000000000 RCX: 000000000000002e [ 385.551643][ C1] RDX: ffffc90016d83000 RSI: 0000000000000000 RDI: 0000000000000000 [ 385.551653][ C1] RBP: 0000000000000000 R08: ffffffff8142ef8a R09: ffffffff81fb91af [ 385.551664][ C1] R10: dffffc0000000000 R11: fffffbfff2853107 R12: ffff8880268080c0 [ 385.551676][ C1] R13: ffffea0000000000 R14: 00000000268080c0 R15: 000000000000002e [ 385.551688][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 385.551701][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 385.551712][ C1] CR2: 00007f71b9d08ab8 CR3: 000000003544e000 CR4: 00000000003526f0 [ 385.551727][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 385.551737][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 385.551747][ C1] Call Trace: [ 385.551753][ C1] [ 385.551761][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 385.551783][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 385.551805][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 385.551824][ C1] ? nmi_handle+0x2a/0x5a0 [ 385.551846][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 385.551866][ C1] ? nmi_handle+0x14f/0x5a0 [ 385.551881][ C1] ? nmi_handle+0x2a/0x5a0 [ 385.551896][ C1] ? __pfx___sanitizer_cov_trace_const_cmp8+0x10/0x10 [ 385.551915][ C1] ? default_do_nmi+0x63/0x160 [ 385.551937][ C1] ? exc_nmi+0x123/0x1f0 [ 385.551957][ C1] ? end_repeat_nmi+0xf/0x53 [ 385.551975][ C1] ? qlist_free_all+0x8f/0x140 [ 385.551993][ C1] ? __phys_addr+0x8a/0x170 [ 385.552007][ C1] ? __phys_addr+0x99/0x170 [ 385.552022][ C1] ? __pfx___sanitizer_cov_trace_const_cmp8+0x10/0x10 [ 385.552041][ C1] ? __pfx___sanitizer_cov_trace_const_cmp8+0x10/0x10 [ 385.552061][ C1] ? __pfx___sanitizer_cov_trace_const_cmp8+0x10/0x10 [ 385.552080][ C1] [ 385.552085][ C1] [ 385.552091][ C1] __phys_addr+0xac/0x170 [ 385.552105][ C1] ? qlist_free_all+0x8f/0x140 [ 385.552122][ C1] ___cache_free+0x1a/0xe0 [ 385.552137][ C1] qlist_free_all+0x9a/0x140 [ 385.552156][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 385.552176][ C1] __kasan_slab_alloc+0x23/0x80 [ 385.552201][ C1] ? usb_control_msg+0xbb/0x4c0 [ 385.552222][ C1] __kmalloc_cache_noprof+0x132/0x2c0 [ 385.552240][ C1] usb_control_msg+0xbb/0x4c0 [ 385.552260][ C1] ? __pfx_usb_control_msg+0x10/0x10 [ 385.552280][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 385.552301][ C1] ? __pfx_process_timeout+0x10/0x10 [ 385.552321][ C1] hub_ext_port_status+0x11a/0x840 [ 385.552347][ C1] hub_port_debounce+0x336/0x590 [ 385.552371][ C1] ? __pfx_hub_port_debounce+0x10/0x10 [ 385.552396][ C1] hub_event+0x1f4f/0x5150 [ 385.552419][ C1] ? debug_object_deactivate+0x2d5/0x390 [ 385.552447][ C1] ? __pfx_hub_event+0x10/0x10 [ 385.552463][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 385.552483][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 385.552504][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 385.552529][ C1] ? process_scheduled_works+0x976/0x1850 [ 385.552549][ C1] process_scheduled_works+0xa63/0x1850 [ 385.552579][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 385.552602][ C1] ? assign_work+0x364/0x3d0 [ 385.552622][ C1] worker_thread+0x870/0xd30 [ 385.552644][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 385.552661][ C1] ? __kthread_parkme+0x169/0x1d0 [ 385.552682][ C1] ? __pfx_worker_thread+0x10/0x10 [ 385.552701][ C1] kthread+0x2f0/0x390 [ 385.552714][ C1] ? __pfx_worker_thread+0x10/0x10 [ 385.552733][ C1] ? __pfx_kthread+0x10/0x10 [ 385.552749][ C1] ret_from_fork+0x4b/0x80 [ 385.552767][ C1] ? __pfx_kthread+0x10/0x10 [ 385.552780][ C1] ret_from_fork_asm+0x1a/0x30 [ 385.552806][ C1] [ 385.554461][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 385.554476][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller #0 [ 385.554497][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 385.554508][ T30] Call Trace: [ 385.554516][ T30] [ 385.554524][ T30] dump_stack_lvl+0x241/0x360 [ 385.554552][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.554575][ T30] ? __pfx__printk+0x10/0x10 [ 385.554594][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 385.554625][ T30] ? vscnprintf+0x5d/0x90 [ 385.554651][ T30] panic+0x349/0x880 [ 385.554673][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 385.554700][ T30] ? __pfx_panic+0x10/0x10 [ 385.554718][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 385.554738][ T30] ? __irq_work_queue_local+0x137/0x410 [ 385.554762][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 385.554782][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 385.554806][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 385.554832][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 385.554860][ T30] watchdog+0x1033/0x1040 [ 385.554883][ T30] ? watchdog+0x1ea/0x1040 [ 385.554911][ T30] ? __pfx_watchdog+0x10/0x10 [ 385.554939][ T30] kthread+0x2f0/0x390 [ 385.554957][ T30] ? __pfx_watchdog+0x10/0x10 [ 385.554979][ T30] ? __pfx_kthread+0x10/0x10 [ 385.554997][ T30] ret_from_fork+0x4b/0x80 [ 385.555020][ T30] ? __pfx_kthread+0x10/0x10 [ 385.555038][ T30] ret_from_fork_asm+0x1a/0x30 [ 385.555073][ T30] [ 386.121941][ T30] Kernel Offset: disabled [ 386.126262][ T30] Rebooting in 86400 seconds..