last executing test programs: 17.460743708s ago: executing program 3 (id=2856): r0 = socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) accept4$unix(r0, 0x0, 0x0, 0x80000) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000c657d1202104df043bd50102030109021b00010000000009040000010202ff00090500000000e9ae7662e138f31cc63918fc000000"], 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f0000000580)=0xe8) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e725f696e6f6465733d6b33ac6f627a5f747970653d5d2c7569643d", @ANYRESDEC, @ANYBLOB=',obj_type=}+#$#,,smackfstransmute=nr_inodes,dont_hash,obj_user=netdevsim,obj_type=.K(,\x00']) setxattr$trusted_overlay_upper(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000680), &(0x7f0000000c00)={0x0, 0xfb, 0x7d, 0x4, 0xdf, "973083a76fa51d1628760ba74a48db5a", "25df295488d23906a820af76776b3395d5e8c436b4de786d6bde9b9ef6e9d9ec553c697f94b06468703515beb29f3e1e1734e20ddd3972816220bbae507090fb3b3af7ab14a76e1cf6d53ab19fefda17b546daf9c6e1a4e179d639ed71df340ef99eef34e657cc48"}, 0x7d, 0x1) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000200)={0xa, {0x0, 0x40c79, 0x801, 0x300}}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x82, 0xc0, 0xff, 0x20, 0xfe9, 0xd620, 0x6f18, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8b, 0x0, 0x0, 0xd1, 0x7f, 0xa6}}]}}]}}, 0x0) syz_usb_disconnect(r1) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80900) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000040)="af5cead5e2e395cc0d"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x34, r6, 0x303, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x3, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}}, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$sock(r7, &(0x7f0000000580)={&(0x7f0000000480)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x1}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)="23855d8aaea07e8c3dea5c12c3ab90b6d6354a3408", 0x15}], 0x1}, 0x800) sendmsg$rds(r7, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES16, @ANYRES64=0x0, @ANYRESHEX=r1], 0x90}}, 0x4001) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000140)=0x10001, 0x4) 15.336939847s ago: executing program 0 (id=2863): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) time(0xfffffffffffffffc) 14.04602597s ago: executing program 0 (id=2865): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = dup(r2) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) (fail_nth: 1) 13.940236069s ago: executing program 3 (id=2866): getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) (async) sched_setscheduler(r0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) userfaultfd(0x801) (async) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000300)={0x0, 0x4, 0x9, 0x10000, @vifc_lcl_ifindex=r5, @loopback}, 0x10) 13.464441732s ago: executing program 3 (id=2868): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000400)={0x3, &(0x7f0000000380)=[{0x1800, 0x68, 0xf, 0x8}, {0x7fff, 0x3, 0x4, 0xffffffff}, {0x8, 0x6, 0x6c, 0x7ff}]}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x9, 0x88f, &(0x7f0000000e80)={{0x12, 0x1, 0x110, 0xcd, 0x42, 0x94, 0x8, 0x13d3, 0x3333, 0xa375, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87d, 0x4, 0x0, 0xbe, 0x10, 0x4, [{{0x9, 0x4, 0xe9, 0x6, 0x6, 0xb7, 0xa, 0xef, 0xa, [@hid_hid={0x9, 0x21, 0x101, 0x4, 0x1, {0x22, 0xdea}}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x5, 0x2, 0x80}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0xa, 0x1, 0xf9}}, {{0x9, 0x5, 0x1, 0xc, 0x3ff, 0xf9, 0x1, 0x80, [@generic={0x30, 0x8, "76894196f4ef35e077706e335f1829845a066a00e37105f11411988c05afcd915e09fe78d37b9e605beea65bba49"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x5, 0x30, 0xa0}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x2, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb6, 0x2}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x5, 0x10, 0x8, [@generic={0x6f, 0x31, "160ed928afcbeaf43a4b4b3ae564560e9ff915ef559f03f08a1458996911333e50d8258ea56dcd760b27cb49e8b04b5f4f6f2c99b939e67f7e50792deb954d582e4c4fe2b25583424df562d4fd102ea8d728afc043934c21598b5aaa62cdb1c6f8ca6632fd1b0bb42fa4c96e39"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x3}]}}]}}, {{0x9, 0x4, 0x3, 0x10, 0x6, 0x6a, 0x9b, 0x7f, 0xfa, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "9c"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x1067844d, 0x9, 0x3, 0x9}, {0x6, 0x24, 0x1a, 0x9}, [@dmm={0x7, 0x24, 0x14, 0x1, 0xfffd}, @mbim={0xc, 0x24, 0x1b, 0xffff, 0x8, 0x1f, 0x9, 0x5}]}], [{{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x46, 0x3, 0x19}}, {{0x9, 0x5, 0xa, 0x2, 0x20, 0x10, 0x7, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x20, 0x6}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x2, 0x0, 0x9, [@generic={0xd6, 0x22, "02e451ac4ff9fa628aed0f7fe352c5ba124c4197684c1197fd0817e28d0737250cb90fdec7b91f73b8d13f0870d9b59376e8f7ff21180ebb9aff14c80c37a6207adbe1fc38a0c42f76ec7a814aec435bdecf6e122776e2c2b852bffdd753319ec4472d75cffa31b27c4ecf1ec00b386c080b2cc3b27f5bba8b5fb590597ea4a05fa672bba70fd60d0e7c64b2508475ea5b7e3a07a3ce7eb9349290ea8f9e5056d7a348be93ef500111d159cc4f4671c61d5da5ce96075320e47bc0c3dec43f3f79e78aeec0d7b13ce62034301fd88ed7a03c5c81"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x5, 0x5a, 0x9b, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9e, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x8001}]}}, {{0x9, 0x5, 0x1, 0x8, 0x3ff, 0x2b, 0xa, 0x3}}, {{0x9, 0x5, 0xd, 0x3, 0x40, 0xfa, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x200}]}}]}}, {{0x9, 0x4, 0x7c, 0x7, 0xf, 0xff, 0x2, 0x6b, 0x69, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "e544f7"}, {0x5, 0x24, 0x0, 0x201}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x1ff, 0xd, 0x9}, [@call_mgmt={0x5, 0x24, 0x1, 0x1}, @dmm={0x7, 0x24, 0x14, 0x666, 0x32db}, @obex={0x5, 0x24, 0x15, 0x1000}, @mdlm_detail={0x3a, 0x24, 0x13, 0x80, "846f81188573a2f2fae74dd37e7a0169967eb21dbb13481f4f0c541748860150972767251a216f66cbe2fb4e10f43beaac2d8668b2e3"}, @obex={0x5, 0x24, 0x15, 0x80}, @mbim={0xc, 0x24, 0x1b, 0x2, 0xaf4, 0x8, 0x1, 0x6, 0xe}]}], [{{0x9, 0x5, 0x80, 0x4, 0x10, 0x4, 0xff, 0x2, [@generic={0x9d, 0x5, "fb6a0651152400833c8d5ed812a6e0e1e3bf3e06fa778d60723f6d3d14022f1fa3d7c79e6a8b1b99bf34ef6d6d15e89ff7edb5d05f21e0bd0f2826343fd522a8da999b49157de2b950f12918232524f6d65b600eb25fcb8b85ead8379747c8b3c9fbe21e2348ceda46c15fcc1b05d3dc08c24cc07098f880212bef29e6abc225e4ab74744bcd5542aa7a2c7e572693ef07a44a6bc3bddaf93c713a"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0xcf, 0xc, 0x8c, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x9}]}}, {{0x9, 0x5, 0x7, 0x10, 0x0, 0x6, 0x3}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x1c, 0x61, 0x2, [@generic={0x90, 0x11, "09a5e9a755a54fa2fed1fd783581683a6ada7e034535065451eddd05674abb946ea61c1852502f5a47b368c3c82f096d6d17f9645189901d89c68f739077ed4369add3bced602e472e02f92502fa1002fce8bdb821ff6cda2b45b021853d5c0ab18f7194b4f61ad1dc283b4b3422d9212c61826d0429144f587ed4b2aafd25bf5c92e0eeb0a5fb88b437876cba1c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x100}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x1, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xec, 0xfe9}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x2, 0x1, 0x8, [@generic={0xe4, 0x22, "8555c902c71253aeabff71ebd1cb3e3d0d18b5017d2b1b934eb0ef43ebe34158ced95d65c8fd963bb18f6f6ad452816b188258a2447e4736a55026081b134ef8dd2490908a95162702b3fdb5024598cc7693b5ff99d24a9bb859f1677d18e587b5a6d6cfccfc0b03bf4aab729be0d4384b2d4f3f304ebee28b3c5d3bfd47505859c86437c6ae230a5a9c8235bd062546aae992c41fd18312ce2e1ae8148341226892cb3edcdf10612bc27fb329e030c49d5ceeb84c465e9f45d62ea70724cbac829137f10ee8ab06b966c2d02897f5d425e6c5c001155f9cdba475f576498a2cd376"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x6, 0x8, 0xd9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x9}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x2, 0x9, 0x8}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x9, 0xff, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x2}]}}, {{0x9, 0x5, 0x1, 0x10, 0x5d7, 0x81, 0x9, 0x8}}, {{0x9, 0x5, 0x82, 0x3, 0x400, 0x9, 0x8, 0x3}}, {{0x9, 0x5, 0x7, 0x4, 0x40, 0xb9, 0x9, 0xd}}, {{0x9, 0x5, 0xb, 0x1, 0x200, 0x3, 0x7, 0x5, [@generic={0xb8, 0x2, "b712fc4819cc26c3e37d65a7b738ff59be8d00981763d1554a5e4b041fe98cff60e7ec5143c21d143d78ebfd21f347e127b1a2314b95d92898931ead3b83e4435f0a9af615cf48592b8d65425c510a702cb607db33da0755d734c9dadabcda0f9b47e1e2df5b9585fde53d58d81d608218fd1e72c07eae0e13b165c22a4f7528b7f58ba0da74da9362ae146fe23ea128ce1a5bd2d1c362ddf70d1fd93b73e317d7b4404a98868d0c36375076e90ab1ad3cbd84020531"}, @generic={0x35, 0x21, "caa27425507b92dbba6a39f19cf1c8d3a70e53580ee630a3ac9724c2ff0115e36c346d9718fb33ec4988530123ce178e0120f8"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0x0, 0xab, 0x2, [@generic={0x46, 0x21, "90fff7dea947e805c446675ae88b694b1e8432cadfeba15efcc391c63939679f694c62dd2dd11b2d07c98bd5f4d7ac35927b626865de5de4a5fcb61ea1f54bd2e6bf5216"}]}}]}}, {{0x9, 0x4, 0x46, 0x1, 0x8, 0xa6, 0x32, 0x6e, 0xd0, [@generic={0x3c, 0x9, "2e3523bfe29bb8daf4e8d54d03727aa74453d44e906ae648d46b307ebfb5d7d50828d547e4d24bca0a3c4834ca731596217c1ed9ed38bb7c4eba"}, @generic={0x9e, 0xa, "5a6c5940081b7dfe8ebec5310315ccb452e04e4458847c858f5a82d2bcfd66267b394e735a8bc5d502ca2dfb4dc1d8da6de25a97a4f9730533e985fa8ab46235362fe6f28022eba05f353a8dc6b0b8a0227aeb1df9e097660771c479bc0f0a0a1ebc93237908fe3b29bf82c6943ef1c741aa9c64f2d4a56375fef3db1647e12fa34e141855243e2b53ba2eb99df510fa159e44055190f710776cb8ae"}], [{{0x9, 0x5, 0x8, 0xc, 0x10, 0xff, 0x2, 0x1}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x1f, 0xfa, 0x7}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0x7, 0x9, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x5}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x7, 0xf2, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x4, 0x7, 0xf}}, {{0x9, 0x5, 0x0, 0x2, 0x0, 0xff, 0x7, 0x30, [@generic={0x1e, 0xe, "b1b5c06e05e7e2994d7fe3f600a7fbe6903b31cd600d2259622f5db8"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1}]}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x0, 0x4, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x79, 0xa6}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x7, 0xfc, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x6}, @generic={0x36, 0x22, "d1a5b6c56875b0d293ea4f2580e84353e1e823c181169b0abfb4ca8604ff06ed8de20841159240f9aefa6f147a986ca607773e38"}]}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xc1, 0x9, 0xe, 0x10, 0x6}, 0x8, &(0x7f0000000080)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x53, &(0x7f0000000280)=@string={0x53, 0x3, "96690c8f45888f90800a3a3df39542646b097c4a1c7ce14a5aebc6f6a363d74f55aff036936ed423ef32020d659fa7e4a375f0c69f7e34e3ac5d3825eecfdf62526191e8e3f79cd2aa27e3a4ecb9727ae1"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x426}}]}) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@map, 0xffffffffffffffff, 0x12, 0x3004, 0x0, @value}, 0x20) syz_usb_control_io(r1, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x7e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000002a00090000000000000000000400002c0c001a80080001"], 0x20}}, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000011ff03000001"], 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r6}, &(0x7f0000000240), &(0x7f0000000340)='%-5lx \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) tkill(0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[], 0xfef0) splice(r2, 0x0, r7, 0x0, 0x80000001, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r9 = dup(r8) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, 0x0) 11.935071905s ago: executing program 2 (id=2871): socket(0x18, 0x5, 0xfffffffc) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c8000c00080001"], 0x11) syz_emit_vhci(0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_vhci(&(0x7f0000000780)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/43, 0x0, 0x4000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000001c0)=0x10000001) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0xcd5, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000008c0)=ANY=[@ANYRES32=0x0, @ANYRES8], 0x9) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20980, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 10.551753474s ago: executing program 1 (id=2873): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0404"], 0x11) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdirat(r4, &(0x7f0000000240)='./file0\x00', 0x1a) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000022c0)=ANY=[]) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc080) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x8, 0x0, 0x2, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10000}) timerfd_settime(r6, 0x3, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0) sendmmsg$sock(r7, &(0x7f00000001c0), 0x0, 0x4000) 9.748423104s ago: executing program 3 (id=2874): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x58, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f000090588"], 0x0) 9.742010365s ago: executing program 0 (id=2875): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822a0269a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7ae22e16c6c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bba3d005585bf07d70e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x82101) r2 = dup3(r1, r0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0xfa000, 0x1a5e02}) writev(r2, &(0x7f0000001680)=[{&(0x7f0000001280)='7N', 0xfdef}], 0x1) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040), &(0x7f0000000140), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$packet(0x11, 0x3, 0x300) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') preadv(r4, &(0x7f0000003280)=[{&(0x7f00000020c0)=""/4096, 0x1000}], 0x1, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r8, &(0x7f0000000000), 0x0}, 0x20) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000000)={0xe8, 0x1}) 9.223068317s ago: executing program 1 (id=2876): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000000), 0x4) r0 = dup(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) r2 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000100)) io_uring_enter(r2, 0x92, 0x0, 0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000240)={0x1c, r2}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400a4770dbfa963105c1fb3b11f0938", @ANYRES16=r5, @ANYBLOB="050000000000f9dbdf250600000008000300", @ANYRES32=r6, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYBLOB="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", @ANYBLOB="050000000001000000002100000008000300", @ANYRESOCT, @ANYRES64, @ANYRES8=r6, @ANYBLOB="706231ee645595f47f2df9cd6755d1abf9eb04d9bc11d5c91cdec42325af9af38b706bc7a269cc1a8f3ebe759b77805faedd84685f8d94ff398d980000f695e22cf452cb1f7a82835574f751dd4daf6d43cd027f06a223e2b1f7cd825d0b3a2bbf785b568408b0bbab7bbcefcb00853d97d490855a3fa6d079c159af7e61bf12ef3ba4a6162396c62e72852f65a5c57873613f50da2062b29f504a7758b6c628eecaff80fb324b293c1d4b6eb7eedf9665eaa75413fa65dd22ee531647b0965689aed25b9401ac57280ca671e07016b0408df3c7d7d9d74cda71d839ea628a75f44beb379004962a90f609eee39fa545be62376a54283fc81755"], 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000002c0)=ANY=[@ANYBLOB="80000000080211000802110000f90000003202020201002a0101720603030303"], 0x39) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 9.129054606s ago: executing program 4 (id=2877): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x2000400) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) r2 = creat(0x0, 0x188) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}]}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) linkat(r2, &(0x7f0000000600)='./file0/file0\x00', r4, &(0x7f0000000640)='./file0\x00', 0x1000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000300)={0x4, 0x5, 0x8, 0x0, 0x2}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x1c}}, 0x0) 9.124722069s ago: executing program 2 (id=2878): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fallocate(r2, 0x0, 0x200000000000000, 0x3) (fail_nth: 1) 7.540820087s ago: executing program 4 (id=2879): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_MKDIRAT={0x25, 0x1, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x80, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0x911}}, {{{0x9, 0x5, 0x81, 0x3, 0x3df, 0x4, 0x1, 0x7}}}}}]}}]}}, 0x0) 6.886353736s ago: executing program 0 (id=2880): syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xd5, 0x4c, 0xb9, 0x40, 0x7ca, 0xa868, 0xa0c8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x30, 0x2, 0x0, 0x38, 0x92, 0xc5}}]}}]}}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x34, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x0) 6.075069174s ago: executing program 1 (id=2881): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xd8, &(0x7f0000000300)={@local, @random="33bce997321f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xca, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e24, 0xb6, 0x0, @opaque="cbcfcd2720d3f97eef3130e23712b81f2af667192f380ca9067103abbc1e80b96b03cabb310cea5265d6644bcfff66c27813e38a4d3952cfb9dac4253656a5715b58599b70b34cfe28731b78f83ccb845632c8bdeb488fe29258ccc2a7c848c05cb7d9e46ecbba1a273b7ce5564661c79e4423c9235e0c6c584ed6c9df09f933ad06c6ec2c65d8ec83b59d6ca836952efa1c61e51b1b360a60973cb9a426c2165c7ea0c2fb58a83fccda882657ec"}}}}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000001f00)=""/102373, 0x18fe5}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r3 = gettid() tkill(r3, 0x11) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_emit_ethernet(0xe, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000bc0)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000500)={0x40, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.568939231s ago: executing program 2 (id=2882): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/173, 0xad}], 0x1, 0xfffffffc, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, {[@nop, @nop, @window={0x3, 0x3}, @sack={0x5, 0x2}, @timestamp={0x8, 0xa}, @generic={0x1, 0xb, "2b26b5a27acf19fc23"}, @fastopen={0x22, 0x5, "ce2781"}]}}}}}}}}, 0x0) gettid() write$cgroup_pid(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYRES32, @ANYBLOB="a2ff6f24de7964abf142b788ea95d6a6a85d5da6"], &(0x7f0000000080)='GPL\x00', 0x0, 0x52, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setscheduler(0x0, 0x1, 0x0) getpid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000002c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) mknod(&(0x7f00000007c0)='./file1\x00', 0x8, 0x9) mount(&(0x7f0000000e00)=@loop={'/dev/loop', 0x0}, &(0x7f0000000e40)='./file1\x00', &(0x7f0000000e80)='exfat\x00', 0x200001a, &(0x7f0000000ec0)='smackfstransmute') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="c14600000000000000000700000008000b00", @ANYRES32=r5, @ANYBLOB="0c0099000000000000000000140004006d6163766c616e31000000000000000005005300010000000800050002000000"], 0x4c}}, 0x0) unshare(0x10200) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) 5.467796562s ago: executing program 2 (id=2883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100000000000004) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.926898207s ago: executing program 4 (id=2884): r0 = socket(0x28, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x9, 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003940)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r2, 0x0) accept$inet6(r2, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) fcntl$getown(r1, 0x9) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = accept4$unix(r3, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000740)={'#! ', './file0'}, 0xb) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000), 0x3a}, 0x2) 3.895176855s ago: executing program 0 (id=2885): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000015406ee000100000000000000000000000000001800018062ff018008000100ac1414bb08000200ac0314bb180002801400018008000100ac1e000108000200ac141400"], 0x44}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000002"], 0x24d8}], 0x1}, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f35"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x4040800) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000001b80)=""/65, 0x41}, {&(0x7f0000006900)=""/4096, 0x1000}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f0000002cc0)=""/87, 0x57}, {&(0x7f00000058c0)=""/4097, 0x1001}, {&(0x7f0000000500)=""/105, 0x69}], 0x6}, 0x8}], 0x2, 0x40000002, 0x0) 3.780028264s ago: executing program 2 (id=2886): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100000000000004) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5d0e14c6c946eeb44fe63275c00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.567294625s ago: executing program 0 (id=2887): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001fffffff080001006e00000008000300", @ANYRES32=r5], 0x60}}, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000f2d07c40501d277aef61000c00000000000000000000030004"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x0, 0xf1, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdf, 0x3, 0x1, 0x2, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x6}, [@mixer_unit={0x5, 0x24, 0x4, 0x1, 0xf}, @feature_unit={0x9, 0x24, 0x6, 0x0, 0x0, 0x1, [0x1], 0x1}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0xbe, "d1"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x100, 0x1, 0x3, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3f, 0x3, 0x7f, 0x9, "", "23b1da"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x9, 0x3e, 0x5, "60d705"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1f, 0x3, 0x9, {0x7, 0x25, 0x1, 0x1, 0x0, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x0, 0x40, 0x6a, "993b6cd1d0"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf8, 0x3, 0x3c, 0x6, "8b05f93cf0b66ddd1e"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x81, 0x3, 0x1f, 0x6, "70cd", "de06cc"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x57, 0x1001}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf7, 0x1, 0x4, 0x4, "", "ab85"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x40, 0x4, 0x6, 0x2, "494ad2fbf6d7cbe5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xff, 0x1f, 0x86, {0x7, 0x25, 0x1, 0x82, 0x1, 0x8}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x1, 0x3f, 0x1, 0xff, 0x6}, 0x54, &(0x7f0000000180)={0x5, 0xf, 0x54, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x4, 0xf0f, 0x9, [0x0, 0xc0]}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x9, 0xf000, 0xfb, [0xf0]}, @generic={0x21, 0x10, 0xa, "fddfa0427216fb801ca1ebb625459d8fa5ca2072f424b94c7d06be0e5043"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x1, 0xb4, 0x3ff}]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r7, 0x402, 0x29) fcntl$setsig(r7, 0xa, 0x21) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='coredump_filter\x00') pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc050) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0) read$char_usb(r1, &(0x7f0000000080)=""/139, 0xfdef) 2.564579539s ago: executing program 3 (id=2888): socket(0x18, 0x5, 0xfffffffc) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02c8000c00080001"], 0x11) syz_emit_vhci(0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_vhci(&(0x7f0000000780)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/43, 0x0, 0x4000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000001c0)=0x10000001) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0xcd5, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000008c0)=ANY=[@ANYRES32=0x0, @ANYRES8], 0x9) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20980, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 2.262253492s ago: executing program 1 (id=2889): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x2000400) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) r2 = creat(0x0, 0x188) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}]}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, 0x0) linkat(r2, &(0x7f0000000600)='./file0/file0\x00', r4, &(0x7f0000000640)='./file0\x00', 0x1000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000300)={0x4, 0x5, 0x8, 0x0, 0x2}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x1c}}, 0x0) 2.217363644s ago: executing program 2 (id=2890): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0xfffffffe, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000, 0x0, 0xfffffffffffffc52}, 0x28) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.267089074s ago: executing program 3 (id=2891): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$kcm(0x2b, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r6, r6}, &(0x7f00000001c0)=""/166, 0xa6, &(0x7f0000000140)={&(0x7f0000000040)={'crc32c\x00'}, &(0x7f0000000080)='h', 0x1}) 1.05917206s ago: executing program 1 (id=2892): r0 = socket$inet6(0xa, 0x3, 0x2) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = dup2(r1, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000002c00)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev, 0x73}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="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"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'virt_wifi0\x00', @random="0e0000200200"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) unshare(0x22020400) unshare(0x2a020400) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001280)={'erspan0\x00', &(0x7f0000001200)={'ip_vti0\x00', 0x0, 0xc0, 0x1, 0x8001, 0x6, {{0xa, 0x4, 0x2, 0x28, 0x28, 0x67, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@lsrr={0x83, 0xb, 0x1f, [@empty, @private=0xa010102]}, @rr={0x7, 0x7, 0xf0, [@multicast1]}]}}}}}) bpf$TOKEN_CREATE(0x24, &(0x7f00000012c0)={0x0, r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x14, 0x3, 0x8, 0x88a, 0x1022, r2, 0x8000, '\x00', r5, r2, 0x4, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r4}, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x1400) 741.092245ms ago: executing program 4 (id=2893): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/173, 0xad}], 0x1, 0xfffffffc, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000006340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, {[@nop, @nop, @window={0x3, 0x3}, @sack={0x5, 0x2}, @timestamp={0x8, 0xa}, @generic={0x1, 0xb, "2b26b5a27acf19fc23"}, @fastopen={0x22, 0x5, "ce2781"}]}}}}}}}}, 0x0) gettid() write$cgroup_pid(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYRES32, @ANYBLOB="a2ff6f24de7964abf142b788ea95d6a6a85d5da6"], &(0x7f0000000080)='GPL\x00', 0x0, 0x52, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setscheduler(0x0, 0x1, 0x0) getpid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000002c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) mknod(&(0x7f00000007c0)='./file1\x00', 0x8, 0x9) mount(&(0x7f0000000e00)=@loop={'/dev/loop', 0x0}, &(0x7f0000000e40)='./file1\x00', &(0x7f0000000e80)='exfat\x00', 0x200001a, &(0x7f0000000ec0)='smackfstransmute') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="c14600000000000000000700000008000b00", @ANYRES32=r5, @ANYBLOB="0c0099000000000000000000140004006d6163766c616e31000000000000000005005300010000000800050002000000"], 0x4c}}, 0x0) unshare(0x10200) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) 718.193648ms ago: executing program 1 (id=2894): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_MKDIRAT={0x25, 0x1, 0x0, r0, 0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x80, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0x911}}, {{{0x9, 0x5, 0x81, 0x3, 0x3df, 0x4, 0x1, 0x7}}}}}]}}]}}, 0x0) 546.033563ms ago: executing program 4 (id=2895): r0 = socket$inet6(0xa, 0x3, 0x2) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = dup2(r1, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000002c00)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev, 0x73}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb3421143c5c4ded0f06affc524dcf3208272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a2666343392fda11504800f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd60ba0f013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a90139264a9ee8081973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'virt_wifi0\x00', @random="0e0000200200"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) unshare(0x22020400) unshare(0x2a020400) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001280)={'erspan0\x00', &(0x7f0000001200)={'ip_vti0\x00', 0x0, 0xc0, 0x1, 0x8001, 0x6, {{0xa, 0x4, 0x2, 0x28, 0x28, 0x67, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@lsrr={0x83, 0xb, 0x1f, [@empty, @private=0xa010102]}, @rr={0x7, 0x7, 0xf0, [@multicast1]}]}}}}}) bpf$TOKEN_CREATE(0x24, &(0x7f00000012c0)={0x0, r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x14, 0x3, 0x8, 0x88a, 0x1022, r2, 0x8000, '\x00', r5, r2, 0x4, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r4}, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x1400) 0s ago: executing program 4 (id=2896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000100)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$dupfd(r2, 0x0, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa7664012d42961e1445ce83def332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5bb6f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767030090a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a976774"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (fail_nth: 1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r6, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) unshare(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) memfd_create(0x0, 0x3) kernel console output (not intermixed with test programs): 0 [ 1266.125025][T15772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1266.135116][T15772] Call Trace: [ 1266.138424][T15772] [ 1266.141379][T15772] dump_stack_lvl+0x241/0x360 [ 1266.146098][T15772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1266.151336][T15772] ? __pfx__printk+0x10/0x10 [ 1266.155969][T15772] ? fs_reclaim_acquire+0x93/0x140 [ 1266.161159][T15772] ? __pfx___might_resched+0x10/0x10 [ 1266.166489][T15772] should_fail_ex+0x3b0/0x4e0 [ 1266.171205][T15772] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1266.176968][T15772] should_failslab+0xac/0x100 [ 1266.181681][T15772] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1266.187446][T15772] __kmalloc_noprof+0xd8/0x400 [ 1266.192249][T15772] ? kfree+0x4e/0x360 [ 1266.196285][T15772] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1266.201887][T15772] tomoyo_path_number_perm+0x23a/0x880 [ 1266.207391][T15772] ? tomoyo_path_number_perm+0x208/0x880 [ 1266.213059][T15772] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1266.219113][T15772] ? __fget_files+0x29/0x470 [ 1266.223727][T15772] ? __fget_files+0x3f6/0x470 [ 1266.228418][T15772] ? __fget_files+0x29/0x470 [ 1266.233050][T15772] security_file_ioctl+0x75/0xb0 [ 1266.238015][T15772] __se_sys_ioctl+0x47/0x170 [ 1266.242624][T15772] do_syscall_64+0xf3/0x230 [ 1266.247144][T15772] ? clear_bhb_loop+0x35/0x90 [ 1266.251831][T15772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.257734][T15772] RIP: 0033:0x7fe690b7def9 [ 1266.262155][T15772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1266.281775][T15772] RSP: 002b:00007fe6909f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1266.290219][T15772] RAX: ffffffffffffffda RBX: 00007fe690d35f80 RCX: 00007fe690b7def9 [ 1266.298204][T15772] RDX: 0000000020001c40 RSI: 000000008400ae8e RDI: 0000000000000008 [ 1266.306185][T15772] RBP: 00007fe6909f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1266.314168][T15772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1266.322147][T15772] R13: 0000000000000000 R14: 00007fe690d35f80 R15: 00007ffe62f86588 [ 1266.330145][T15772] [ 1266.558432][T15772] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1266.792943][T15643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.823233][T15643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.856420][T15643] bridge_slave_0: entered allmulticast mode [ 1266.879759][T15643] bridge_slave_0: entered promiscuous mode [ 1266.958247][T15643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.988361][T15643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.022909][T15643] bridge_slave_1: entered allmulticast mode [ 1267.109077][T15643] bridge_slave_1: entered promiscuous mode [ 1267.142451][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1267.149220][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1267.443168][ T2937] hsr_slave_0: left promiscuous mode [ 1267.509520][ T2937] hsr_slave_1: left promiscuous mode [ 1267.522954][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1267.535089][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1267.543980][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1267.552046][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1267.592857][T14336] Bluetooth: hci3: unexpected event 0x04 length: 14 > 10 [ 1267.607987][ T2937] veth1_macvtap: left promiscuous mode [ 1267.623498][ T2937] veth0_macvtap: left promiscuous mode [ 1267.629298][ T2937] veth1_vlan: left promiscuous mode [ 1267.635254][ T2937] veth0_vlan: left promiscuous mode [ 1267.810534][ T5267] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1269.019785][ T5267] usb 1-1: Using ep0 maxpacket: 32 [ 1269.169866][ T5267] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1269.252966][ T5267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1269.280527][ T5267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1269.411090][ T5267] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1269.426436][ T5267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.457872][ T5267] usb 1-1: config 0 descriptor?? [ 1269.478940][T15817] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1269.514473][ T5267] hub 1-1:0.0: USB hub found [ 1269.680035][T15834] afs: Unknown parameter 'dyl' [ 1269.831764][T14336] Bluetooth: hci3: command 0x0406 tx timeout [ 1270.237628][ T5267] hub 1-1:0.0: 2 ports detected [ 1273.721939][ T5267] hub 1-1:0.0: set hub depth failed [ 1273.818023][ T5267] usb 1-1: USB disconnect, device number 51 [ 1273.889319][T15843] FAULT_INJECTION: forcing a failure. [ 1273.889319][T15843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1273.911676][T15843] CPU: 0 UID: 0 PID: 15843 Comm: syz.0.2655 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 1273.922602][T15843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1273.932696][T15843] Call Trace: [ 1273.936004][T15843] [ 1273.939055][T15843] dump_stack_lvl+0x241/0x360 [ 1273.943785][T15843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1273.949115][T15843] ? __pfx__printk+0x10/0x10 [ 1273.953746][T15843] ? __pfx_lock_release+0x10/0x10 [ 1273.958828][T15843] should_fail_ex+0x3b0/0x4e0 [ 1273.963556][T15843] _copy_from_user+0x2f/0xe0 [ 1273.968208][T15843] copy_msghdr_from_user+0xae/0x680 [ 1273.973543][T15843] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1273.979403][T15843] do_recvmmsg+0x40f/0xae0 [ 1273.983878][T15843] ? __pfx_lock_release+0x10/0x10 [ 1273.988956][T15843] ? __pfx_do_recvmmsg+0x10/0x10 [ 1273.993968][T15843] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1273.999916][T15843] ? ksys_write+0x23e/0x2c0 [ 1274.004463][T15843] ? __pfx_lock_release+0x10/0x10 [ 1274.009526][T15843] ? vfs_write+0x7c4/0xc90 [ 1274.013970][T15843] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1274.019639][T15843] ? __fget_files+0x3f6/0x470 [ 1274.024380][T15843] __x64_sys_recvmmsg+0x199/0x250 [ 1274.029469][T15843] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1274.035070][T15843] ? do_syscall_64+0x100/0x230 [ 1274.039885][T15843] ? do_syscall_64+0xb6/0x230 [ 1274.044612][T15843] do_syscall_64+0xf3/0x230 [ 1274.049156][T15843] ? clear_bhb_loop+0x35/0x90 [ 1274.053872][T15843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.059804][T15843] RIP: 0033:0x7f11e857def9 [ 1274.064260][T15843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1274.083896][T15843] RSP: 002b:00007f11e93e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1274.092319][T15843] RAX: ffffffffffffffda RBX: 00007f11e8735f80 RCX: 00007f11e857def9 [ 1274.100293][T15843] RDX: 0400000000000179 RSI: 0000000020000480 RDI: 0000000000000004 [ 1274.108270][T15843] RBP: 00007f11e93e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1274.116258][T15843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1274.119705][T15849] vivid-003: ================= START STATUS ================= [ 1274.124239][T15843] R13: 0000000000000000 R14: 00007f11e8735f80 R15: 00007ffe9ffad8b8 [ 1274.124280][T15843] [ 1274.154128][T15849] vivid-003: Radio HW Seek Mode: Bounded [ 1274.170722][T15849] vivid-003: Radio Programmable HW Seek: false [ 1274.181887][T15849] vivid-003: RDS Rx I/O Mode: Block I/O [ 1274.192298][T15849] vivid-003: Generate RBDS Instead of RDS: false [ 1274.203592][T15849] vivid-003: RDS Reception: true [ 1274.224319][T15849] vivid-003: RDS Program Type: 0 inactive [ 1274.235010][T15849] vivid-003: RDS PS Name: inactive [ 1274.249695][T15849] vivid-003: RDS Radio Text: inactive [ 1274.269094][T15849] vivid-003: RDS Traffic Announcement: false inactive [ 1274.285717][T15849] vivid-003: RDS Traffic Program: false inactive [ 1274.307669][T15849] vivid-003: RDS Music: false inactive [ 1274.321625][T15849] vivid-003: ================== END STATUS ================== [ 1274.994961][ T2937] team0 (unregistering): Port device team_slave_1 removed [ 1275.060520][ T2937] team0 (unregistering): Port device team_slave_0 removed [ 1275.236946][ T5267] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1275.274344][ T8] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1275.454689][ T5267] usb 1-1: Using ep0 maxpacket: 8 [ 1275.476020][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1275.486279][ T5267] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1275.507644][ T8] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1275.516862][ T5267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.526044][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.534315][ T5267] usb 1-1: Product: syz [ 1275.541157][ T5267] usb 1-1: Manufacturer: syz [ 1275.545801][ T5267] usb 1-1: SerialNumber: syz [ 1275.555612][ T8] usb 2-1: config 0 descriptor?? [ 1275.564216][ T5267] usb 1-1: config 0 descriptor?? [ 1275.595896][ T8] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1275.814213][ T5267] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1275.901670][T15643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1275.953480][T15816] team0: Port device syz_tun added [ 1276.057976][T15643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1276.132010][ T8] gspca_sonixj: reg_r err -32 [ 1276.138386][ T8] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 1276.252342][T15643] team0: Port device team_slave_0 added [ 1276.295784][T15643] team0: Port device team_slave_1 added [ 1276.402855][T15643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1276.431008][T15643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1276.605989][T15643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1276.661718][T15643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1276.687265][T15643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1276.763142][T15643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1276.783775][T15857] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1276.827608][ T5267] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1276.907002][ T5267] usb 1-1: USB disconnect, device number 52 [ 1277.027755][T15643] hsr_slave_0: entered promiscuous mode [ 1277.071480][T15643] hsr_slave_1: entered promiscuous mode [ 1277.402664][T15881] netlink: 'syz.3.2662': attribute type 3 has an invalid length. [ 1277.426938][T15881] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2662'. [ 1277.946449][T15288] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1278.047746][T15898] FAULT_INJECTION: forcing a failure. [ 1278.047746][T15898] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.071058][T15898] CPU: 1 UID: 0 PID: 15898 Comm: syz.3.2665 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 1278.082065][T15898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1278.092156][T15898] Call Trace: [ 1278.095453][T15898] [ 1278.098397][T15898] dump_stack_lvl+0x241/0x360 [ 1278.103122][T15898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1278.108366][T15898] ? __pfx__printk+0x10/0x10 [ 1278.113000][T15898] ? fs_reclaim_acquire+0x93/0x140 [ 1278.118156][T15898] ? __pfx___might_resched+0x10/0x10 [ 1278.123489][T15898] should_fail_ex+0x3b0/0x4e0 [ 1278.128213][T15898] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1278.133991][T15898] should_failslab+0xac/0x100 [ 1278.138718][T15898] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1278.144475][T15898] __kmalloc_noprof+0xd8/0x400 [ 1278.149252][T15898] ? kfree+0x4e/0x360 [ 1278.153260][T15898] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1278.158866][T15898] tomoyo_path_number_perm+0x23a/0x880 [ 1278.164370][T15898] ? tomoyo_path_number_perm+0x208/0x880 [ 1278.170030][T15898] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1278.176073][T15898] ? __fget_files+0x29/0x470 [ 1278.180693][T15898] ? __fget_files+0x3f6/0x470 [ 1278.185390][T15898] ? __fget_files+0x29/0x470 [ 1278.190006][T15898] security_file_ioctl+0x75/0xb0 [ 1278.194988][T15898] __se_sys_ioctl+0x47/0x170 [ 1278.199619][T15898] do_syscall_64+0xf3/0x230 [ 1278.204147][T15898] ? clear_bhb_loop+0x35/0x90 [ 1278.208838][T15898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.214737][T15898] RIP: 0033:0x7fadc977def9 [ 1278.219166][T15898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1278.238812][T15898] RSP: 002b:00007fadca58d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1278.247259][T15898] RAX: ffffffffffffffda RBX: 00007fadc9935f80 RCX: 00007fadc977def9 [ 1278.255249][T15898] RDX: 0000000020000080 RSI: 0000000000005404 RDI: 0000000000000004 [ 1278.263243][T15898] RBP: 00007fadca58d090 R08: 0000000000000000 R09: 0000000000000000 [ 1278.271246][T15898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1278.279336][T15898] R13: 0000000000000000 R14: 00007fadc9935f80 R15: 00007ffd099d11b8 [ 1278.287339][T15898] [ 1278.323331][T15898] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1278.330173][T15288] usb 1-1: Using ep0 maxpacket: 32 [ 1278.349176][T15288] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1278.388107][T15288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1278.444523][T15288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1278.487812][T15288] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1278.496950][T15288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.532421][T14645] usb 2-1: USB disconnect, device number 84 [ 1278.551230][T15288] usb 1-1: config 0 descriptor?? [ 1278.607525][T15892] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1278.619675][T15288] hub 1-1:0.0: USB hub found [ 1278.915539][T15288] hub 1-1:0.0: 2 ports detected [ 1279.194788][T15917] syz.3.2668(15917): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1279.235837][ T5317] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1279.322417][T15918] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2667'. [ 1279.507078][ T5317] usb 2-1: Using ep0 maxpacket: 16 [ 1279.573521][ T5317] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1279.602052][T15288] usb 1-1: USB disconnect, device number 53 [ 1279.639443][ T5317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.715934][ T5317] usb 2-1: Product: syz [ 1279.720269][ T5317] usb 2-1: Manufacturer: syz [ 1279.797951][ T5317] usb 2-1: SerialNumber: syz [ 1279.843517][ T5317] usb 2-1: config 0 descriptor?? [ 1279.855078][T15643] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1279.900462][ T5317] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1279.925396][T15643] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1279.943184][ T5317] usb 2-1: Detected FT-X [ 1279.977890][T15643] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1280.012287][T15643] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1280.069688][ T46] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1280.081088][ T5267] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1280.172673][T15910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1280.182811][ T5317] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1280.240674][ T5317] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1280.292756][ T5317] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 1280.308360][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 1280.309669][ T5267] usb 4-1: Using ep0 maxpacket: 16 [ 1280.333533][ T5317] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1280.344177][ T46] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1280.370831][ T5267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1280.373725][ T46] usb 5-1: config 0 has no interface number 0 [ 1280.407021][ T5317] usb 2-1: USB disconnect, device number 85 [ 1280.450873][ T5317] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1280.469644][ T5267] usb 4-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1280.503328][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1280.512462][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.515998][ T5267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.524962][ T5317] ftdi_sio 2-1:0.0: device disconnected [ 1280.574202][T15643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1280.581258][ T5267] usb 4-1: Product: syz [ 1280.582522][ T46] usb 5-1: Product: syz [ 1280.590428][T15930] FAULT_INJECTION: forcing a failure. [ 1280.590428][T15930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1280.609829][ T5267] usb 4-1: Manufacturer: syz [ 1280.633072][ T46] usb 5-1: Manufacturer: syz [ 1280.638914][ T5267] usb 4-1: SerialNumber: syz [ 1280.645241][ T46] usb 5-1: SerialNumber: syz [ 1280.662680][T15930] CPU: 1 UID: 0 PID: 15930 Comm: syz.0.2670 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 1280.673533][T15930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1280.683633][T15930] Call Trace: [ 1280.686951][T15930] [ 1280.689911][T15930] dump_stack_lvl+0x241/0x360 [ 1280.694640][T15930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1280.699884][T15930] ? __pfx__printk+0x10/0x10 [ 1280.704527][T15930] ? __pfx_lock_release+0x10/0x10 [ 1280.709603][T15930] should_fail_ex+0x3b0/0x4e0 [ 1280.710017][ T5267] usb 4-1: config 0 descriptor?? [ 1280.714357][T15930] _copy_from_user+0x2f/0xe0 [ 1280.714394][T15930] copy_msghdr_from_user+0xae/0x680 [ 1280.714429][T15930] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1280.732225][ T5267] kobil_sct 4-1:0.0: KOBIL USB smart card terminal converter detected [ 1280.734963][T15930] __sys_sendmsg+0x23d/0x3a0 [ 1280.735009][T15930] ? __pfx___sys_sendmsg+0x10/0x10 [ 1280.752878][T15930] ? vfs_write+0x7c4/0xc90 [ 1280.757355][T15930] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1280.763703][T15930] ? do_syscall_64+0x100/0x230 [ 1280.768482][T15930] ? do_syscall_64+0xb6/0x230 [ 1280.773170][T15930] do_syscall_64+0xf3/0x230 [ 1280.777686][T15930] ? clear_bhb_loop+0x35/0x90 [ 1280.782465][T15930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.788373][T15930] RIP: 0033:0x7f11e857def9 [ 1280.792799][T15930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1280.812428][T15930] RSP: 002b:00007f11e93e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1280.820861][T15930] RAX: ffffffffffffffda RBX: 00007f11e8735f80 RCX: 00007f11e857def9 [ 1280.828904][T15930] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 1280.836882][T15930] RBP: 00007f11e93e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1280.844863][T15930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1280.852844][T15930] R13: 0000000000000000 R14: 00007f11e8735f80 R15: 00007ffe9ffad8b8 [ 1280.860841][T15930] [ 1280.872629][ T5267] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1280.886253][T15643] 8021q: adding VLAN 0 to HW filter on device team0 [ 1280.912240][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.919528][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1280.959313][ T46] usb 5-1: config 0 descriptor?? [ 1281.123346][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.130586][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1281.309385][T15938] FAULT_INJECTION: forcing a failure. [ 1281.309385][T15938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1281.412058][T15938] CPU: 0 UID: 0 PID: 15938 Comm: syz.1.2672 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 1281.422917][T15938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1281.433019][T15938] Call Trace: [ 1281.436334][T15938] [ 1281.439307][T15938] dump_stack_lvl+0x241/0x360 [ 1281.444050][T15938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1281.449297][T15938] ? __pfx__printk+0x10/0x10 [ 1281.453942][T15938] should_fail_ex+0x3b0/0x4e0 [ 1281.458686][T15938] _copy_from_user+0x2f/0xe0 [ 1281.463324][T15938] move_addr_to_kernel+0x82/0x150 [ 1281.468403][T15938] __sys_sendto+0x2a3/0x4f0 [ 1281.472959][T15938] ? __pfx___sys_sendto+0x10/0x10 [ 1281.478049][T15938] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1281.484065][T15938] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1281.490515][T15938] __x64_sys_sendto+0xde/0x100 [ 1281.495310][T15938] do_syscall_64+0xf3/0x230 [ 1281.499840][T15938] ? clear_bhb_loop+0x35/0x90 [ 1281.504545][T15938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.510633][T15938] RIP: 0033:0x7fe690b7def9 [ 1281.515061][T15938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1281.534699][T15938] RSP: 002b:00007fe6909f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1281.543138][T15938] RAX: ffffffffffffffda RBX: 00007fe690d35f80 RCX: 00007fe690b7def9 [ 1281.551119][T15938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1281.559097][T15938] RBP: 00007fe6909f8090 R08: 0000000020000140 R09: 0000000000000014 [ 1281.567095][T15938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1281.575076][T15938] R13: 0000000000000000 R14: 00007fe690d35f80 R15: 00007ffe62f86588 [ 1281.583073][T15938] [ 1281.819990][ T29] audit: type=1326 audit(1726441181.509:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15934 comm="syz.0.2671" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11e857def9 code=0x0 [ 1282.511474][T15643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1282.713608][ T5317] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1282.765989][T15643] veth0_vlan: entered promiscuous mode [ 1282.815141][T15643] veth1_vlan: entered promiscuous mode [ 1282.933728][T15643] veth0_macvtap: entered promiscuous mode [ 1282.962605][ T5317] usb 1-1: Using ep0 maxpacket: 8 [ 1282.978614][ T5317] usb 1-1: config 0 has an invalid interface number: 63 but max is 0 [ 1282.978733][T15643] veth1_macvtap: entered promiscuous mode [ 1283.000887][ T5317] usb 1-1: config 0 has no interface number 0 [ 1283.016550][T15288] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1283.044678][ T5317] usb 1-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=d5.e7 [ 1283.068712][ T5317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.074126][T15643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.103369][ T5317] usb 1-1: Product: syz [ 1283.121896][ T5317] usb 1-1: Manufacturer: syz [ 1283.122199][T15643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.136390][ T5317] usb 1-1: SerialNumber: syz [ 1283.167843][ T5317] usb 1-1: config 0 descriptor?? [ 1283.176818][T15643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.212004][ T46] usb 5-1: USB disconnect, device number 90 [ 1283.224362][T15643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.252742][T15643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.263795][T15643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.265899][T15288] usb 2-1: Using ep0 maxpacket: 16 [ 1283.274619][T15643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.289776][T15288] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1283.310502][T15288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.325675][T15643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.344103][T15288] usb 2-1: config 0 descriptor?? [ 1283.354541][T15288] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1283.376143][T15643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.395200][T15643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.405275][T15643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.427456][T15953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1283.438753][T15643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.458904][T15643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1283.469074][T15953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1283.528531][T15643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.575739][T15643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.612789][T15643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.642379][T15643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.678093][T15643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.732014][T15643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.741940][T15643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.814934][T15643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.851715][T15643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.866567][T15288] gspca_sonixj: reg_r err -32 [ 1283.871458][T15288] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 1283.891763][T15643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.947893][T15643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.979059][T15643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.013021][T15643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1284.030985][T15288] usb 4-1: USB disconnect, device number 74 [ 1284.119143][T15643] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.156253][T15643] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.157566][T15288] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1284.229598][T15643] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.245390][T15981] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1284.295055][T15643] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.305108][T15288] kobil_sct 4-1:0.0: device disconnected [ 1284.453885][T15960] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1288.636591][ T5317] quatech2 1-1:0.63: Quatech 2nd gen USB to Serial Driver converter detected [ 1288.637030][ T5267] usb 2-1: USB disconnect, device number 86 [ 1288.771422][ T7498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1288.781813][ T5317] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1288.788793][ T5317] quatech2 1-1:0.63: probe with driver quatech2 failed with error -71 [ 1288.807893][ T7498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1288.889489][ T5317] usb 1-1: USB disconnect, device number 54 [ 1288.995319][ T9263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.032090][ T9263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.388256][T16010] ufs: You didn't specify the type of your ufs filesystem [ 1289.388256][T16010] [ 1289.388256][T16010] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1289.388256][T16010] [ 1289.388256][T16010] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1289.436106][T16010] ufs: ufstype=old is supported read-only [ 1289.521511][T16010] ufs: ufs_fill_super(): bad magic number [ 1289.588794][T16019] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.2683'. [ 1289.923669][T16024] FAULT_INJECTION: forcing a failure. [ 1289.923669][T16024] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.993516][T16024] CPU: 1 UID: 0 PID: 16024 Comm: syz.3.2684 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 1290.004376][T16024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1290.014466][T16024] Call Trace: [ 1290.017774][T16024] [ 1290.020716][T16024] dump_stack_lvl+0x241/0x360 [ 1290.025461][T16024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1290.030713][T16024] ? __pfx__printk+0x10/0x10 [ 1290.035356][T16024] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 1290.040962][T16024] ? __pfx___might_resched+0x10/0x10 [ 1290.046315][T16024] should_fail_ex+0x3b0/0x4e0 [ 1290.051052][T16024] ? getname_flags+0xb7/0x540 [ 1290.055770][T16024] should_failslab+0xac/0x100 [ 1290.060482][T16024] ? getname_flags+0xb7/0x540 [ 1290.065174][T16024] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1290.070568][T16024] getname_flags+0xb7/0x540 [ 1290.075090][T16024] __x64_sys_mknod+0x79/0xa0 [ 1290.079696][T16024] do_syscall_64+0xf3/0x230 [ 1290.084216][T16024] ? clear_bhb_loop+0x35/0x90 [ 1290.088944][T16024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.094860][T16024] RIP: 0033:0x7fadc977def9 [ 1290.099283][T16024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1290.118910][T16024] RSP: 002b:00007fadca58d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1290.127344][T16024] RAX: ffffffffffffffda RBX: 00007fadc9935f80 RCX: 00007fadc977def9 [ 1290.135330][T16024] RDX: 0000000000000000 RSI: 0000000008001420 RDI: 0000000020000040 [ 1290.143309][T16024] RBP: 00007fadca58d090 R08: 0000000000000000 R09: 0000000000000000 [ 1290.151286][T16024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1290.159271][T16024] R13: 0000000000000000 R14: 00007fadc9935f80 R15: 00007ffd099d11b8 [ 1290.167283][T16024] [ 1291.010463][T14336] Bluetooth: Wrong link type (-71) [ 1292.439470][ T25] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1292.483178][T16045] netlink: 'syz.4.2689': attribute type 3 has an invalid length. [ 1292.507562][T16045] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2689'. [ 1292.667873][ T25] usb 3-1: New USB device found, idVendor=0af0, idProduct=7201, bcdDevice=ad.9d [ 1292.708928][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.766940][ T25] usb 3-1: config 0 descriptor?? [ 1293.075902][T16040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.051362][T16040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.087934][ T5267] usb 3-1: USB disconnect, device number 80 [ 1294.180166][T16065] FAULT_INJECTION: forcing a failure. [ 1294.180166][T16065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1294.226579][T16065] CPU: 0 UID: 0 PID: 16065 Comm: syz.0.2693 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 1294.237402][T16065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1294.247492][T16065] Call Trace: [ 1294.250811][T16065] [ 1294.253755][T16065] dump_stack_lvl+0x241/0x360 [ 1294.258453][T16065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1294.263662][T16065] ? __pfx__printk+0x10/0x10 [ 1294.268266][T16065] ? __pfx_lock_release+0x10/0x10 [ 1294.273311][T16065] should_fail_ex+0x3b0/0x4e0 [ 1294.278024][T16065] _copy_from_user+0x2f/0xe0 [ 1294.282656][T16065] do_sock_getsockopt+0x1d1/0x7e0 [ 1294.287708][T16065] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1294.293357][T16065] ? __fget_files+0x3f6/0x470 [ 1294.298054][T16065] __sys_getsockopt+0x271/0x330 [ 1294.303011][T16065] ? __pfx___sys_getsockopt+0x10/0x10 [ 1294.308398][T16065] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1294.314743][T16065] ? do_syscall_64+0x100/0x230 [ 1294.319532][T16065] __x64_sys_getsockopt+0xb5/0xd0 [ 1294.324587][T16065] do_syscall_64+0xf3/0x230 [ 1294.329109][T16065] ? clear_bhb_loop+0x35/0x90 [ 1294.333830][T16065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.339742][T16065] RIP: 0033:0x7f11e857def9 [ 1294.344166][T16065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1294.363782][T16065] RSP: 002b:00007f11e93e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1294.372212][T16065] RAX: ffffffffffffffda RBX: 00007f11e8735f80 RCX: 00007f11e857def9 [ 1294.380190][T16065] RDX: 0000000000000001 RSI: 0000000000000106 RDI: 0000000000000006 [ 1294.388165][T16065] RBP: 00007f11e93e6090 R08: 0000000020000080 R09: 0000000000000000 [ 1294.396145][T16065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1294.404122][T16065] R13: 0000000000000000 R14: 00007f11e8735f80 R15: 00007ffe9ffad8b8 [ 1294.412118][T16065] [ 1294.874869][T14336] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 1294.884325][T14336] Bluetooth: Wrong link type (-71) [ 1295.677789][T14336] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1295.687525][T14336] Bluetooth: hci6: Injecting HCI hardware error event [ 1295.706799][T14336] Bluetooth: hci6: hardware error 0x00 [ 1296.031985][T16079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2695'. [ 1296.517381][T14645] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1296.708844][T16098] random: crng reseeded on system resumption [ 1296.736197][T14645] usb 3-1: Using ep0 maxpacket: 8 [ 1296.765461][T14645] usb 3-1: config 150 has an invalid interface number: 225 but max is 0 [ 1296.776041][ T25] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1296.796792][T14645] usb 3-1: config 150 has no interface number 0 [ 1296.821617][T14645] usb 3-1: config 150 interface 225 has no altsetting 0 [ 1296.839008][T14645] usb 3-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=1a.3f [ 1296.858843][T14645] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.889564][T14645] usb 3-1: Product: syz [ 1296.901000][T14645] usb 3-1: Manufacturer: syz [ 1296.918215][T14645] usb 3-1: SerialNumber: syz [ 1296.992735][ T25] usb 4-1: device descriptor read/64, error -71 [ 1297.111101][T16112] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.2703'. [ 1297.217926][T14645] radio-si470x 3-1:150.225: could not find interrupt in endpoint [ 1297.240713][T14645] radio-si470x 3-1:150.225: probe with driver radio-si470x failed with error -5 [ 1297.272950][T14645] usbhid 3-1:150.225: couldn't find an input interrupt endpoint [ 1297.286257][ T25] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1297.299650][T14645] usb 3-1: USB disconnect, device number 81 [ 1297.458720][ T25] usb 4-1: device descriptor read/64, error -71 [ 1297.600694][ T25] usb usb4-port1: attempt power cycle [ 1297.621111][ T46] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1297.837755][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 1297.852734][ T46] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1297.870237][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.898885][ T46] usb 1-1: Product: syz [ 1297.913654][T14645] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1297.913753][ T46] usb 1-1: Manufacturer: syz [ 1297.965156][ T46] usb 1-1: SerialNumber: syz [ 1297.972640][ T46] usb 1-1: config 0 descriptor?? [ 1298.065509][T14336] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1298.076173][ T25] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1298.120542][ T25] usb 4-1: device descriptor read/8, error -71 [ 1298.121020][T14645] usb 5-1: Using ep0 maxpacket: 8 [ 1298.145057][T14645] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1298.156620][T14645] usb 5-1: New USB device found, idVendor=0baf, idProduct=00f5, bcdDevice=df.c2 [ 1298.173921][T14645] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.192982][T14645] usb 5-1: Product: syz [ 1298.203905][T14645] usb 5-1: Manufacturer: syz [ 1298.223627][T14645] usb 5-1: SerialNumber: syz [ 1298.227868][ T46] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1298.240519][T16125] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2706'. [ 1298.253739][T14645] usb 5-1: config 0 descriptor?? [ 1298.276794][T14645] usb 5-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF5) Rev (0XDFC2): Eagle I [ 1298.444518][ T25] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1298.455365][T14645] usb 5-1: reset high-speed USB device number 91 using dummy_hcd [ 1298.532966][ T25] usb 4-1: device descriptor read/8, error -71 [ 1298.715973][ T25] usb usb4-port1: unable to enumerate USB device [ 1298.927718][T16130] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2707'. [ 1299.204518][T14645] usb 5-1: device descriptor read/64, error -71 [ 1299.291150][T14336] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1299.300377][T14336] Bluetooth: hci3: Injecting HCI hardware error event [ 1299.311036][ T46] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1299.311322][T14336] Bluetooth: hci3: hardware error 0x00 [ 1299.359445][ T46] usb 1-1: USB disconnect, device number 55 [ 1299.517750][T14645] usb 5-1: reset high-speed USB device number 91 using dummy_hcd [ 1299.854518][T16132] autofs: Unknown parameter '0x0000000000000000' [ 1300.138914][T14645] usb 5-1: failed to restore interface 0 altsetting 225 (error=-71) [ 1300.168241][T14645] usb 5-1: [UEAGLE-ATM] interface 1 not found [ 1300.179522][T14645] ueagle-atm 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1300.191420][T14645] usb 5-1: USB disconnect, device number 91 [ 1301.158415][ T46] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1301.380842][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 1301.393213][ T46] usb 4-1: config 0 has an invalid interface number: 234 but max is 1 [ 1301.411366][T16138] caif0 speed is unknown, defaulting to 1000 [ 1301.414911][ T46] usb 4-1: config 0 has no interface number 1 [ 1301.492720][ T46] usb 4-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=47.83 [ 1301.503351][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.512388][ T46] usb 4-1: Product: syz [ 1301.516810][ T46] usb 4-1: Manufacturer: syz [ 1301.522031][ T46] usb 4-1: SerialNumber: syz [ 1301.540651][ T46] usb 4-1: config 0 descriptor?? [ 1301.628843][T14336] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1301.695736][ T46] usb 4-1: unknown number of interfaces: 2 [ 1302.014492][T16152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2711'. [ 1302.036676][T16152] netlink: 'syz.4.2711': attribute type 14 has an invalid length. [ 1302.188362][T16155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2712'. [ 1302.376814][T16157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2713'. [ 1302.815674][T16159] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2714'. [ 1302.878200][T16166] ufs: You didn't specify the type of your ufs filesystem [ 1302.878200][T16166] [ 1302.878200][T16166] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1302.878200][T16166] [ 1302.878200][T16166] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1302.912813][T16166] ufs: ufstype=old is supported read-only [ 1302.940789][T16166] ufs: ufs_fill_super(): bad magic number [ 1303.151134][ T5278] usb 4-1: USB disconnect, device number 79 [ 1303.211771][ T46] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1303.259793][T16179] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2719'. [ 1303.471533][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 1303.478787][ T46] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1303.506948][ T46] usb 3-1: config 0 has no interface number 0 [ 1303.551173][ T46] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1303.592109][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.624088][ T46] usb 3-1: Product: syz [ 1303.639531][ T46] usb 3-1: Manufacturer: syz [ 1303.646080][ T46] usb 3-1: SerialNumber: syz [ 1303.654086][ T46] usb 3-1: config 0 descriptor?? [ 1303.669836][ T5267] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1303.731756][ T5278] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1303.903817][ T46] usb 3-1: USB disconnect, device number 82 [ 1303.933053][ T5267] usb 2-1: Using ep0 maxpacket: 32 [ 1303.952351][ T5267] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1303.977329][ T5278] usb 4-1: Using ep0 maxpacket: 16 [ 1303.993727][ T5267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1304.013844][ T5267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1304.027365][ T5278] usb 4-1: config 7 has an invalid interface number: 247 but max is 0 [ 1304.049694][ T5278] usb 4-1: config 7 has no interface number 0 [ 1304.075524][ T5267] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1304.086837][ T5278] usb 4-1: config 7 interface 247 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1304.114686][ T5267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.136816][ T5278] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 1304.163329][ T5267] usb 2-1: config 0 descriptor?? [ 1304.169617][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.187034][ T5278] usb 4-1: Product: syz [ 1304.191447][ T5278] usb 4-1: Manufacturer: syz [ 1304.191665][T16185] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1304.200665][ T5278] usb 4-1: SerialNumber: syz [ 1304.253709][ T5267] hub 2-1:0.0: USB hub found [ 1304.267343][ T5278] ni6501 4-1:7.247: driver 'ni6501' failed to auto-configure device. [ 1304.587826][ T5267] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1304.850999][ T5267] usbhid 2-1:0.0: can't add hid device: -71 [ 1304.868493][ T5267] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1304.934432][ T6016] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1304.953724][ T5267] usb 2-1: USB disconnect, device number 87 [ 1305.217707][ T6016] usb 3-1: Using ep0 maxpacket: 32 [ 1305.229603][ T6016] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1305.290719][ T6016] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1305.349922][ T6016] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1305.374339][ T6016] usb 3-1: Product: syz [ 1305.394016][ T6016] usb 3-1: Manufacturer: syz [ 1305.398693][ T6016] usb 3-1: SerialNumber: syz [ 1305.420844][ T6016] usb 3-1: config 0 descriptor?? [ 1305.463807][T16189] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1306.239529][T16189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.267389][T16189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.311541][T16189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.328486][ T5278] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 1306.349935][ T5278] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 1306.359619][T16189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.374159][ T5278] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 1306.394936][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2724'. [ 1306.408397][ T5278] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 1306.450419][ T5278] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1306.489516][ T5278] usb 3-1: USB disconnect, device number 83 [ 1306.517389][ T5267] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1306.733418][ T5267] usb 5-1: Using ep0 maxpacket: 8 [ 1306.741185][ T5267] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1306.753681][ T5267] usb 5-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 1306.776010][ T5267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.786613][ T5267] usb 5-1: Product: syz [ 1306.795592][ T5267] usb 5-1: Manufacturer: syz [ 1306.805598][ T5267] usb 5-1: SerialNumber: syz [ 1306.869621][T16205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2728'. [ 1306.874239][T16206] FAULT_INJECTION: forcing a failure. [ 1306.874239][T16206] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.892057][T16206] CPU: 0 UID: 0 PID: 16206 Comm: syz.0.2729 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 1306.902863][T16206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1306.912936][T16206] Call Trace: [ 1306.916222][T16206] [ 1306.919152][T16206] dump_stack_lvl+0x241/0x360 [ 1306.923865][T16206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1306.929087][T16206] ? __pfx__printk+0x10/0x10 [ 1306.933689][T16206] ? fs_reclaim_acquire+0x93/0x140 [ 1306.938807][T16206] ? __pfx___might_resched+0x10/0x10 [ 1306.944107][T16206] should_fail_ex+0x3b0/0x4e0 [ 1306.948791][T16206] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1306.954520][T16206] should_failslab+0xac/0x100 [ 1306.959205][T16206] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1306.964948][T16206] __kmalloc_noprof+0xd8/0x400 [ 1306.969729][T16206] ? kfree+0x4e/0x360 [ 1306.973748][T16206] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1306.979309][T16206] tomoyo_path_number_perm+0x23a/0x880 [ 1306.984786][T16206] ? tomoyo_path_number_perm+0x208/0x880 [ 1306.990432][T16206] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1306.996474][T16206] ? __fget_files+0x29/0x470 [ 1307.001065][T16206] ? __fget_files+0x3f6/0x470 [ 1307.005738][T16206] ? __fget_files+0x29/0x470 [ 1307.010342][T16206] security_file_ioctl+0x75/0xb0 [ 1307.015290][T16206] __se_sys_ioctl+0x47/0x170 [ 1307.019877][T16206] do_syscall_64+0xf3/0x230 [ 1307.024375][T16206] ? clear_bhb_loop+0x35/0x90 [ 1307.029057][T16206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.034962][T16206] RIP: 0033:0x7f11e857def9 [ 1307.039378][T16206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1307.058986][T16206] RSP: 002b:00007f11e93e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1307.067414][T16206] RAX: ffffffffffffffda RBX: 00007f11e8735f80 RCX: 00007f11e857def9 [ 1307.075387][T16206] RDX: 00000000200002c0 RSI: 000000000000541b RDI: 0000000000000004 [ 1307.083359][T16206] RBP: 00007f11e93e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1307.091336][T16206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1307.099318][T16206] R13: 0000000000000000 R14: 00007f11e8735f80 R15: 00007ffe9ffad8b8 [ 1307.107320][T16206] [ 1307.126486][T16206] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1307.264540][T16208] ufs: You didn't specify the type of your ufs filesystem [ 1307.264540][T16208] [ 1307.264540][T16208] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1307.264540][T16208] [ 1307.264540][T16208] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1307.334843][ T5278] usb 4-1: USB disconnect, device number 80 [ 1307.439809][T16208] ufs: ufstype=old is supported read-only [ 1307.461663][T16208] ufs: ufs_fill_super(): bad magic number [ 1307.673999][T16217] caif0 speed is unknown, defaulting to 1000 [ 1308.346975][T15288] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1308.433845][ T6016] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1308.554027][T15288] usb 4-1: Using ep0 maxpacket: 16 [ 1308.568833][T15288] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1308.578413][T15288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.588635][T15288] usb 4-1: Product: syz [ 1308.594334][T15288] usb 4-1: Manufacturer: syz [ 1308.600631][T15288] usb 4-1: SerialNumber: syz [ 1308.614961][T15288] usb 4-1: config 0 descriptor?? [ 1308.623817][T15288] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1308.637131][T15288] usb 4-1: Detected FT-X [ 1308.669645][ T6016] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1308.683827][ T6016] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1308.705866][ T6016] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1308.774733][ T6016] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1308.793239][ T5267] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input98 [ 1308.835715][ T4660] bcm5974 5-1:1.0: could not read from device [ 1308.857076][ T6016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.885198][ T5267] usb 5-1: USB disconnect, device number 92 [ 1308.909477][ T4660] bcm5974 5-1:1.0: could not read from device [ 1308.919853][T15288] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1308.935364][T16224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1308.949905][ T4660] bcm5974 5-1:1.0: could not read from device [ 1308.959179][ T5277] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1308.973795][ T6016] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1308.985281][ T4660] bcm5974 5-1:1.0: could not read from device [ 1309.018525][T15288] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1309.064587][T15288] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1309.138574][T15288] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1309.194228][T15288] usb 4-1: USB disconnect, device number 81 [ 1309.202905][ T5277] usb 1-1: Using ep0 maxpacket: 16 [ 1309.256113][ T5277] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.256796][T15288] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1309.283711][ T6016] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1309.358784][ T5277] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1309.361972][T16239] xt_cgroup: invalid path, errno=-2 [ 1309.400570][ T5277] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1309.434616][T15288] ftdi_sio 4-1:0.0: device disconnected [ 1309.482514][T16238] udevd[16238]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1309.498966][ T5277] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 1309.572135][ T5277] usb 1-1: Product: syz [ 1309.576367][ T5277] usb 1-1: Manufacturer: syz [ 1309.614930][ T5267] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1309.661202][T16241] caif0 speed is unknown, defaulting to 1000 [ 1309.730722][ T5277] usb 1-1: config 0 descriptor?? [ 1309.842143][ T5267] usb 5-1: Using ep0 maxpacket: 16 [ 1309.873606][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1309.942274][ T5267] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1309.980989][ T5267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.029443][ T5267] usb 5-1: Product: syz [ 1310.055838][ T5267] usb 5-1: Manufacturer: syz [ 1310.078170][ T5267] usb 5-1: SerialNumber: syz [ 1310.109531][ T5267] usb 5-1: config 0 descriptor?? [ 1310.130922][ T5267] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 1310.198756][ T5267] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1310.211596][T16253] ufs: You didn't specify the type of your ufs filesystem [ 1310.211596][T16253] [ 1310.211596][T16253] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1310.211596][T16253] [ 1310.211596][T16253] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1310.309702][T16253] ufs: ufstype=old is supported read-only [ 1310.334272][T16253] ufs: ufs_fill_super(): bad magic number [ 1310.728616][T16262] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2743'. [ 1310.776130][ T25] usb 2-1: USB disconnect, device number 88 [ 1312.103240][ T5267] usb 1-1: USB disconnect, device number 56 [ 1312.539809][ T5267] usb 5-1: USB disconnect, device number 93 [ 1312.631972][ T5267] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1312.714557][ T5267] kobil_sct 5-1:0.0: device disconnected [ 1313.080850][T16309] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2755'. [ 1313.119589][ T5277] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1313.178355][T16311] FAULT_INJECTION: forcing a failure. [ 1313.178355][T16311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1313.235872][T16311] CPU: 1 UID: 0 PID: 16311 Comm: syz.1.2757 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 1313.246761][T16311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1313.256824][T16311] Call Trace: [ 1313.260127][T16311] [ 1313.263066][T16311] dump_stack_lvl+0x241/0x360 [ 1313.267911][T16311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1313.273145][T16311] ? __pfx__printk+0x10/0x10 [ 1313.277769][T16311] ? __pfx_lock_release+0x10/0x10 [ 1313.282848][T16311] ? vfs_write+0x7c4/0xc90 [ 1313.287304][T16311] should_fail_ex+0x3b0/0x4e0 [ 1313.292016][T16311] _copy_from_user+0x2f/0xe0 [ 1313.296653][T16311] __sys_bpf+0x1a4/0x810 [ 1313.300953][T16311] ? __pfx___sys_bpf+0x10/0x10 [ 1313.305775][T16311] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1313.311817][T16311] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1313.318212][T16311] ? do_syscall_64+0x100/0x230 [ 1313.323085][T16311] __x64_sys_bpf+0x7c/0x90 [ 1313.327521][T16311] do_syscall_64+0xf3/0x230 [ 1313.332043][T16311] ? clear_bhb_loop+0x35/0x90 [ 1313.336751][T16311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.342662][T16311] RIP: 0033:0x7fe690b7def9 [ 1313.347113][T16311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1313.366759][T16311] RSP: 002b:00007fe6909f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1313.375292][T16311] RAX: ffffffffffffffda RBX: 00007fe690d35f80 RCX: 00007fe690b7def9 [ 1313.383269][T16311] RDX: 0000000000000070 RSI: 00000000200000c0 RDI: 0000000000000005 [ 1313.391238][T16311] RBP: 00007fe6909f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1313.399215][T16311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1313.407209][T16311] R13: 0000000000000000 R14: 00007fe690d35f80 R15: 00007ffe62f86588 [ 1313.415197][T16311] [ 1313.419805][ T5277] usb 3-1: Using ep0 maxpacket: 32 [ 1313.453030][ T5277] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1313.494864][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1313.529844][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1313.576268][ T5277] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1313.608095][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.636921][ T5277] usb 3-1: config 0 descriptor?? [ 1313.644943][T14645] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1313.664842][T16297] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1313.698652][ T5277] hub 3-1:0.0: USB hub found [ 1313.883289][T14645] usb 5-1: Using ep0 maxpacket: 16 [ 1313.891647][T14645] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.907524][T14645] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1313.943711][ T5277] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1313.962756][T14645] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1313.988000][T14645] usb 5-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 1313.997724][T14645] usb 5-1: Product: syz [ 1314.008478][T14645] usb 5-1: Manufacturer: syz [ 1314.048540][T14645] usb 5-1: config 0 descriptor?? [ 1314.094897][T16323] Bluetooth: MGMT ver 1.23 [ 1314.202077][ T5277] usbhid 3-1:0.0: can't add hid device: -71 [ 1314.216788][ T5277] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1314.283023][ T5277] usb 3-1: USB disconnect, device number 84 [ 1315.133800][T15839] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.158995][T16331] overlayfs: statfs failed on './file0' [ 1315.218360][ T5278] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1315.326513][T15839] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.422896][ T5278] usb 3-1: Using ep0 maxpacket: 16 [ 1315.452830][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1315.524353][ T5278] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1315.556322][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.572300][ T5278] usb 3-1: Product: syz [ 1315.580743][ T5278] usb 3-1: Manufacturer: syz [ 1315.589063][ T5278] usb 3-1: SerialNumber: syz [ 1315.598704][ T5278] usb 3-1: config 0 descriptor?? [ 1315.604155][T15839] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.618020][ T5278] kobil_sct 3-1:0.0: KOBIL USB smart card terminal converter detected [ 1315.647324][T16345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1315.679268][T16345] syz.0.2769: attempt to access beyond end of device [ 1315.679268][T16345] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1315.695834][T16345] SQUASHFS error: Failed to read block 0x0: -5 [ 1315.703044][ T5278] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1315.745740][T16345] unable to read squashfs_super_block [ 1315.887759][T15839] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.223597][ T25] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1316.345003][T15839] bridge_slave_1: left allmulticast mode [ 1316.367539][T15839] bridge_slave_1: left promiscuous mode [ 1316.373540][T15839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.391349][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1316.413134][T15839] bridge_slave_0: left allmulticast mode [ 1316.421558][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1316.434562][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1316.435125][T15839] bridge_slave_0: left promiscuous mode [ 1316.478410][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1316.487709][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1316.499916][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1316.502335][T15839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.516249][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1316.524403][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1316.536255][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1316.550515][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1316.560087][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.585565][ T25] usb 4-1: config 0 descriptor?? [ 1316.587260][ T5277] usb 5-1: USB disconnect, device number 94 [ 1317.127518][T16347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1317.158982][T16347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.210713][ T25] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 1317.232600][ T25] plantronics 0003:047F:FFFF.003C: No inputs registered, leaving [ 1317.251548][ T5277] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1317.305193][ T25] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1317.491213][ T5277] usb 5-1: Using ep0 maxpacket: 32 [ 1317.502938][ T5277] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1317.527359][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1317.550131][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1317.562865][ T5277] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1317.587460][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.609065][ T5277] usb 5-1: config 0 descriptor?? [ 1317.618586][T16353] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1317.638065][ T5277] hub 5-1:0.0: USB hub found [ 1317.686240][ T25] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1317.895865][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.925341][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1317.932286][ T5277] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1317.938196][ T25] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1317.963319][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.979945][ T25] usb 1-1: config 0 descriptor?? [ 1318.214646][ T5277] usbhid 5-1:0.0: can't add hid device: -71 [ 1318.233764][ T5277] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1318.299886][ T5277] usb 5-1: USB disconnect, device number 95 [ 1318.326415][ T5317] usb 3-1: USB disconnect, device number 85 [ 1318.380071][ T5317] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1318.421937][ T5317] kobil_sct 3-1:0.0: device disconnected [ 1318.458756][T15839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1318.491470][ T25] hid (null): bogus close delimiter [ 1318.506267][T15839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1318.551168][T15839] bond0 (unregistering): Released all slaves [ 1318.567392][T16359] overlayfs: conflicting options: nfs_export=on,index=off [ 1318.567589][T16360] overlayfs: conflicting options: nfs_export=on,index=off [ 1318.708840][ T25] usb 1-1: string descriptor 0 read error: -22 [ 1318.781767][ T5232] Bluetooth: hci1: command tx timeout [ 1318.786585][T16350] caif0 speed is unknown, defaulting to 1000 [ 1319.225096][ T25] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.003D/input/input100 [ 1319.519470][ T25] uclogic 0003:256C:006D.003D: input,hidraw1: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 1319.655186][ T5267] usb 4-1: USB disconnect, device number 82 [ 1321.055873][ T5232] Bluetooth: hci1: command tx timeout [ 1321.310715][ T25] usb 1-1: USB disconnect, device number 57 [ 1322.032325][T15839] hsr_slave_0: left promiscuous mode [ 1322.064678][T15839] hsr_slave_1: left promiscuous mode [ 1322.103641][T15839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1322.128623][T15839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.137443][T15839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1322.185860][T15839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1322.201607][T16411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1322.392089][ T5277] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1322.681175][ T5277] usb 3-1: Using ep0 maxpacket: 8 [ 1323.102478][ T5277] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 1323.111416][ T5277] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.144520][T16415] syz.0.2782: attempt to access beyond end of device [ 1323.144520][T16415] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1323.166973][T16415] SQUASHFS error: Failed to read block 0x0: -5 [ 1323.182211][T16415] unable to read squashfs_super_block [ 1323.234578][ T5277] usb 3-1: config 135 has no interface number 0 [ 1323.265029][ T5277] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 1323.289689][ T5232] Bluetooth: hci1: command tx timeout [ 1323.305108][T15839] veth1_macvtap: left promiscuous mode [ 1323.330753][ T5277] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 1323.338920][T15839] veth0_macvtap: left promiscuous mode [ 1323.347962][ T5277] usb 3-1: config 135 interface 230 has no altsetting 0 [ 1323.361174][ T5277] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1323.372182][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.383557][ T5277] usb 3-1: Product: syz [ 1323.391204][ T5277] usb 3-1: Manufacturer: syz [ 1323.396410][ T5277] usb 3-1: SerialNumber: syz [ 1323.418617][T15839] veth1_vlan: left promiscuous mode [ 1323.442732][T15839] veth0_vlan: left promiscuous mode [ 1323.651827][ T5277] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 1323.667990][ T5277] usb 3-1: No valid video chain found. [ 1323.975472][T15288] usb 3-1: USB disconnect, device number 86 [ 1324.910654][ T5232] Bluetooth: hci2: unexpected event 0x04 length: 14 > 10 [ 1325.541235][ T5232] Bluetooth: hci1: command tx timeout [ 1326.458126][T15839] team0 (unregistering): Port device team_slave_1 removed [ 1327.089502][T15839] team0 (unregistering): Port device team_slave_0 removed [ 1327.107055][ T5232] Bluetooth: hci2: command 0x0406 tx timeout [ 1327.177308][T14645] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1327.388419][T14645] usb 4-1: Using ep0 maxpacket: 16 [ 1327.406644][T14645] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1327.417540][T14645] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.441808][T14645] usb 4-1: config 0 descriptor?? [ 1327.451652][T14645] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1327.529622][ T7498] smc: removing ib device syz1 [ 1328.046914][T14645] gspca_sonixj: reg_r err -32 [ 1328.056834][T14645] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 1328.486648][T16350] chnl_net:caif_netlink_parms(): no params data found [ 1328.513644][T16437] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1328.598253][T16450] FAULT_INJECTION: forcing a failure. [ 1328.598253][T16450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1328.654650][T16450] CPU: 0 UID: 0 PID: 16450 Comm: syz.0.2795 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 1328.665472][T16450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1328.675520][T16450] Call Trace: [ 1328.678818][T16450] [ 1328.681747][T16450] dump_stack_lvl+0x241/0x360 [ 1328.686437][T16450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1328.691663][T16450] ? __pfx__printk+0x10/0x10 [ 1328.696274][T16450] ? __pfx_lock_release+0x10/0x10 [ 1328.701323][T16450] should_fail_ex+0x3b0/0x4e0 [ 1328.706007][T16450] _copy_from_user+0x2f/0xe0 [ 1328.710605][T16450] copy_msghdr_from_user+0xae/0x680 [ 1328.715826][T16450] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1328.721665][T16450] __sys_sendmsg+0x23d/0x3a0 [ 1328.726265][T16450] ? __pfx___sys_sendmsg+0x10/0x10 [ 1328.731385][T16450] ? vfs_write+0x7c4/0xc90 [ 1328.735874][T16450] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1328.742213][T16450] ? do_syscall_64+0x100/0x230 [ 1328.746976][T16450] ? do_syscall_64+0xb6/0x230 [ 1328.751682][T16450] do_syscall_64+0xf3/0x230 [ 1328.756199][T16450] ? clear_bhb_loop+0x35/0x90 [ 1328.760882][T16450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.766788][T16450] RIP: 0033:0x7f11e857def9 [ 1328.771208][T16450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1328.790824][T16450] RSP: 002b:00007f11e93e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1328.799259][T16450] RAX: ffffffffffffffda RBX: 00007f11e8735f80 RCX: 00007f11e857def9 [ 1328.807235][T16450] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000004 [ 1328.815201][T16450] RBP: 00007f11e93e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1328.823166][T16450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1328.831139][T16450] R13: 0000000000000000 R14: 00007f11e8735f80 R15: 00007ffe9ffad8b8 [ 1328.839142][T16450] [ 1328.975346][ T5278] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1329.192317][ T5278] usb 5-1: Using ep0 maxpacket: 16 [ 1329.205546][ T5278] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1329.226181][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.278512][ T5278] usb 5-1: config 0 descriptor?? [ 1329.307252][ T5278] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1329.345125][T16350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.367934][T16350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.393025][T16350] bridge_slave_0: entered allmulticast mode [ 1329.457189][T16350] bridge_slave_0: entered promiscuous mode [ 1329.565342][T16350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.593212][T16350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.600533][T16350] bridge_slave_1: entered allmulticast mode [ 1329.866523][T16350] bridge_slave_1: entered promiscuous mode [ 1330.253165][ T5278] gspca_sonixj: reg_r err -110 [ 1330.328079][ T5278] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 1330.460421][T14645] usb 4-1: USB disconnect, device number 83 [ 1330.949242][T16442] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1331.128185][T16350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1331.153179][T14645] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1331.392310][T14645] usb 4-1: Using ep0 maxpacket: 32 [ 1331.871285][T14645] usb 4-1: config 0 has an invalid interface number: 111 but max is 1 [ 1331.900264][T14645] usb 4-1: config 0 has no interface number 1 [ 1331.929647][T16350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1331.951088][T14645] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1331.972495][T14645] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.008454][T14645] usb 4-1: Product: syz [ 1332.020069][T14645] usb 4-1: Manufacturer: syz [ 1332.029480][T14645] usb 4-1: SerialNumber: syz [ 1332.056405][T14645] usb 4-1: config 0 descriptor?? [ 1332.095228][T16350] team0: Port device team_slave_0 added [ 1332.132648][T16350] team0: Port device team_slave_1 added [ 1332.205771][T15288] usb 5-1: USB disconnect, device number 96 [ 1332.310029][T16350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1332.332594][T16350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1332.338834][T14645] snd-usb-6fire 4-1:0.111: unable to receive device firmware state. [ 1332.435465][T14645] snd-usb-6fire 4-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 1332.456264][T16350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1332.524664][T14645] usb 4-1: USB disconnect, device number 84 [ 1332.556473][T16350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1332.607961][T16350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1332.678191][T16350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1333.016740][T15288] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1333.417579][T15288] usb 5-1: Using ep0 maxpacket: 8 [ 1333.475495][T15288] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 1333.528487][T15288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.582528][T15288] usb 5-1: Product: syz [ 1333.586758][T15288] usb 5-1: Manufacturer: syz [ 1333.607132][T16350] hsr_slave_0: entered promiscuous mode [ 1333.633847][T15288] usb 5-1: SerialNumber: syz [ 1333.650459][T16350] hsr_slave_1: entered promiscuous mode [ 1333.687694][T15288] usb 5-1: config 0 descriptor?? [ 1333.703749][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1333.719568][T16350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1333.732170][T15288] option 5-1:0.0: GSM modem (1-port) converter detected [ 1333.753291][T16350] Cannot create hsr debugfs directory [ 1333.959406][ T5277] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1334.188439][ T5277] usb 1-1: Using ep0 maxpacket: 32 [ 1334.209883][ T5277] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1334.248799][ T5277] usb 1-1: New USB device found, idVendor=0421, idProduct=04df, bcdDevice=d5.3b [ 1334.265937][ T6016] usb 5-1: USB disconnect, device number 97 [ 1334.294965][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.314272][ T6016] option 5-1:0.0: device disconnected [ 1334.317020][ T5277] usb 1-1: Product: syz [ 1334.343217][ T5277] usb 1-1: Manufacturer: syz [ 1334.347965][ T5277] usb 1-1: SerialNumber: syz [ 1334.405404][ T5277] usb 1-1: config 0 descriptor?? [ 1334.425833][T16519] FAULT_INJECTION: forcing a failure. [ 1334.425833][T16519] name failslab, interval 1, probability 0, space 0, times 0 [ 1334.435277][ T5277] usb 1-1: bad CDC descriptors [ 1334.446406][ T5277] cdc_acm 1-1:0.0: Zero length descriptor references [ 1334.452802][T16519] CPU: 1 UID: 0 PID: 16519 Comm: syz.2.2806 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 1334.463926][T16519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1334.474019][T16519] Call Trace: [ 1334.477324][T16519] [ 1334.478684][ T5277] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 1334.480260][T16519] dump_stack_lvl+0x241/0x360 [ 1334.480299][T16519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1334.480326][T16519] ? __pfx__printk+0x10/0x10 [ 1334.480353][T16519] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1334.480387][T16519] ? __pfx___might_resched+0x10/0x10 [ 1334.480424][T16519] should_fail_ex+0x3b0/0x4e0 [ 1334.480456][T16519] should_failslab+0xac/0x100 [ 1334.480485][T16519] ? __alloc_skb+0x1c3/0x440 [ 1334.480514][T16519] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1334.480553][T16519] __alloc_skb+0x1c3/0x440 [ 1334.480587][T16519] ? __pfx___alloc_skb+0x10/0x10 [ 1334.480618][T16519] ? netlink_autobind+0xd6/0x2f0 [ 1334.480643][T16519] ? netlink_autobind+0x2b0/0x2f0 [ 1334.480674][T16519] netlink_sendmsg+0x638/0xcb0 [ 1334.480713][T16519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1334.480747][T16519] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1334.480777][T16519] ? security_socket_sendmsg+0x87/0xb0 [ 1334.480806][T16519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1334.480830][T16519] __sock_sendmsg+0x221/0x270 [ 1334.480858][T16519] sock_write_iter+0x2dd/0x400 [ 1334.480894][T16519] ? __pfx_sock_write_iter+0x10/0x10 [ 1334.480953][T16519] do_iter_readv_writev+0x60a/0x890 [ 1334.480995][T16519] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1334.481034][T16519] ? bpf_lsm_file_permission+0x9/0x10 [ 1334.610609][T16519] ? security_file_permission+0x7f/0xa0 [ 1334.616180][T16519] ? rw_verify_area+0x1d2/0x6b0 [ 1334.621049][T16519] vfs_writev+0x37c/0xbb0 [ 1334.625398][T16519] ? __pfx_lock_acquire+0x10/0x10 [ 1334.630439][T16519] ? __pfx_vfs_writev+0x10/0x10 [ 1334.635300][T16519] ? vfs_write+0x7c4/0xc90 [ 1334.639737][T16519] ? __fget_files+0x29/0x470 [ 1334.644348][T16519] do_writev+0x1b1/0x350 [ 1334.648605][T16519] ? __pfx_do_writev+0x10/0x10 [ 1334.653379][T16519] ? do_syscall_64+0x100/0x230 [ 1334.658153][T16519] ? do_syscall_64+0xb6/0x230 [ 1334.662862][T16519] do_syscall_64+0xf3/0x230 [ 1334.667408][T16519] ? clear_bhb_loop+0x35/0x90 [ 1334.672100][T16519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.678010][T16519] RIP: 0033:0x7f989f17def9 [ 1334.682437][T16519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1334.702048][T16519] RSP: 002b:00007f98a005c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1334.710472][T16519] RAX: ffffffffffffffda RBX: 00007f989f335f80 RCX: 00007f989f17def9 [ 1334.718457][T16519] RDX: 0000000000000002 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1334.726443][T16519] RBP: 00007f98a005c090 R08: 0000000000000000 R09: 0000000000000000 [ 1334.734511][T16519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1334.742489][T16519] R13: 0000000000000000 R14: 00007f989f335f80 R15: 00007ffef4073eb8 [ 1334.750483][T16519] [ 1334.908508][T16506] tmpfs: Bad value for 'nr_inodes' [ 1334.931765][T16506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.976574][T16506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.992241][ T6016] usb 1-1: USB disconnect, device number 58 [ 1337.819442][T16547] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2812'. [ 1337.935829][T16552] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.2814'. [ 1339.104437][T16552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2814'. [ 1339.326283][T16350] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1339.383197][T16350] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1339.440864][T16350] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1339.508008][T16350] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1339.562399][T16568] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.2817'. [ 1339.593591][T16563] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2816'. [ 1339.602615][T16563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2816'. [ 1339.642363][T16563] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2816'. [ 1339.712600][T16563] netlink: 'syz.0.2816': attribute type 2 has an invalid length. [ 1339.725978][T16563] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2816'. [ 1340.002932][T16350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1340.161306][T16350] 8021q: adding VLAN 0 to HW filter on device team0 [ 1340.250140][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.257347][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1340.285335][T16582] ufs: You didn't specify the type of your ufs filesystem [ 1340.285335][T16582] [ 1340.285335][T16582] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1340.285335][T16582] [ 1340.285335][T16582] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1340.393265][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.400512][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.452651][T16582] ufs: ufstype=old is supported read-only [ 1340.565918][T16582] ufs: ufs_fill_super(): bad magic number [ 1340.663062][T16350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1341.164024][ T6016] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1341.391511][ T6016] usb 1-1: Using ep0 maxpacket: 8 [ 1341.406269][ T6016] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1341.437889][ T6016] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.480115][ T6016] usb 1-1: Product: syz [ 1341.500053][ T6016] usb 1-1: Manufacturer: syz [ 1341.505159][ T6016] usb 1-1: SerialNumber: syz [ 1341.534092][ T6016] usb 1-1: config 0 descriptor?? [ 1341.567715][T16350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1341.787034][T16350] veth0_vlan: entered promiscuous mode [ 1341.788159][ T6016] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1341.846088][T16350] veth1_vlan: entered promiscuous mode [ 1341.974987][T16350] veth0_macvtap: entered promiscuous mode [ 1342.017694][T16350] veth1_macvtap: entered promiscuous mode [ 1342.063387][ T5322] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1342.106144][T16350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.135619][T16350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.156448][T16350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.172245][T16350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.190365][T16350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.201222][T16350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.213992][T16350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.241100][T16350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.264852][T16350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.278741][T16350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.291921][ T5322] usb 4-1: Using ep0 maxpacket: 32 [ 1342.297542][T16350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.307382][ T5322] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1342.319505][T16350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.323349][ T5322] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1342.341631][T16350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1342.380560][T16350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.402149][T16350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.404683][ T5322] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1342.434753][T16350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.464085][ T5322] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1342.491909][ T5322] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1342.494812][T16350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.519988][ T5322] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1342.539410][T16350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.544640][ T5322] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1342.572346][T16350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.609181][ T5322] usb 4-1: Product: syz [ 1342.613622][T16350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.635818][ T5322] usb 4-1: Manufacturer: syz [ 1342.640658][ T5322] usb 4-1: SerialNumber: syz [ 1342.640876][T16350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.648402][T16350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.710403][T16350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.731289][T16350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.744478][T16350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.788817][T16350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1342.789975][ T5322] usb 4-1: config 0 descriptor?? [ 1342.820441][ T6016] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1342.867621][ T5322] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1342.892359][ T6016] usb 1-1: USB disconnect, device number 59 [ 1342.896076][T16350] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.935268][ T5322] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1342.943015][T16350] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.954794][T16350] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.967066][T16350] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.314065][ T2937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.346919][ T2937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.377946][ T5322] usb 4-1: USB disconnect, device number 85 [ 1343.401356][ T5322] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1343.455396][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.516443][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1343.938799][ T5267] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1344.154564][ T5267] usb 5-1: Using ep0 maxpacket: 16 [ 1344.714576][ T5267] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1344.760903][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.833096][ T5267] usb 5-1: config 0 descriptor?? [ 1344.856325][ T5267] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1345.189498][ T5322] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1345.459358][ T5267] gspca_sonixj: reg_w1 err -110 [ 1345.518539][ T5267] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 1348.197709][ T5322] usb 3-1: Using ep0 maxpacket: 16 [ 1348.313849][ T5277] usb 5-1: USB disconnect, device number 98 [ 1348.494078][ T25] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1349.166920][ T5322] usb 3-1: device descriptor read/all, error -71 [ 1349.539087][T14645] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 1349.994215][ T46] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 1350.105026][T14645] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1350.129334][T14645] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 1350.146023][T14645] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1350.226829][T14645] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1350.275406][T14645] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1350.292951][T14645] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1350.301091][T14645] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 1350.312320][T14645] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1350.367077][T14645] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1350.401396][T14645] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1350.428268][T16676] FAULT_INJECTION: forcing a failure. [ 1350.428268][T16676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1350.448276][T16676] CPU: 0 UID: 0 PID: 16676 Comm: syz.1.2838 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 1350.459088][T16676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1350.469165][T16676] Call Trace: [ 1350.472450][T16676] [ 1350.475398][T16676] dump_stack_lvl+0x241/0x360 [ 1350.480102][T16676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1350.485345][T16676] ? __pfx__printk+0x10/0x10 [ 1350.489944][T16676] ? __pfx_lock_release+0x10/0x10 [ 1350.494978][T16676] ? vfs_write+0x7c4/0xc90 [ 1350.499410][T16676] should_fail_ex+0x3b0/0x4e0 [ 1350.504120][T16676] _copy_from_user+0x2f/0xe0 [ 1350.508737][T16676] __sys_bpf+0x1a4/0x810 [ 1350.512990][T16676] ? __pfx___sys_bpf+0x10/0x10 [ 1350.517770][T16676] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1350.523764][T16676] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1350.530100][T16676] ? do_syscall_64+0x100/0x230 [ 1350.534871][T16676] __x64_sys_bpf+0x7c/0x90 [ 1350.539293][T16676] do_syscall_64+0xf3/0x230 [ 1350.543797][T16676] ? clear_bhb_loop+0x35/0x90 [ 1350.548490][T16676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.554396][T16676] RIP: 0033:0x7ff4e757def9 [ 1350.558830][T16676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1350.559891][ T46] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1350.578459][T16676] RSP: 002b:00007ff4e8445038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1350.578497][T16676] RAX: ffffffffffffffda RBX: 00007ff4e7735f80 RCX: 00007ff4e757def9 [ 1350.578516][T16676] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000004 [ 1350.578531][T16676] RBP: 00007ff4e8445090 R08: 0000000000000000 R09: 0000000000000000 [ 1350.578553][T16676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.578567][T16676] R13: 0000000000000000 R14: 00007ff4e7735f80 R15: 00007fffe67aaf08 [ 1350.578603][T16676] [ 1350.671270][T14645] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1350.700021][T14645] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 1350.738743][T14645] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1350.762436][T14645] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1350.815695][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.842647][ T46] usb 5-1: config 0 descriptor?? [ 1351.035801][T14645] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1351.052648][T14645] usb 1-1: string descriptor 0 read error: -22 [ 1351.059962][T14645] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1351.069429][T14645] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.085842][T14645] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1351.099418][T15288] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1351.175565][ T46] usb 5-1: string descriptor 0 read error: -71 [ 1351.190512][ T46] pwc: Samsung MPC-C10 USB webcam detected. [ 1351.199666][T16685] FAULT_INJECTION: forcing a failure. [ 1351.199666][T16685] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.200573][ T46] pwc: send_video_command error -71 [ 1351.239769][ T46] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1351.244855][T16685] CPU: 0 UID: 0 PID: 16685 Comm: syz.1.2841 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 1351.254995][ T46] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1351.258031][T16685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1351.258054][T16685] Call Trace: [ 1351.258067][T16685] [ 1351.258080][T16685] dump_stack_lvl+0x241/0x360 [ 1351.288272][ T46] usb 5-1: USB disconnect, device number 99 [ 1351.288301][T16685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1351.299412][T16685] ? __pfx__printk+0x10/0x10 [ 1351.304046][T16685] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1351.310075][T16685] ? __pfx___might_resched+0x10/0x10 [ 1351.315432][T16685] ? __lock_acquire+0x137a/0x2040 [ 1351.320506][T16685] should_fail_ex+0x3b0/0x4e0 [ 1351.325221][T16685] should_failslab+0xac/0x100 [ 1351.329932][T16685] ? __alloc_skb+0x1c3/0x440 [ 1351.334556][T16685] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1351.340402][T16685] __alloc_skb+0x1c3/0x440 [ 1351.344854][T16685] ? validate_chain+0x11e/0x5900 [ 1351.349826][T16685] ? __pfx___alloc_skb+0x10/0x10 [ 1351.354795][T16685] ? __lock_acquire+0x1f70/0x2040 [ 1351.359866][T16685] alloc_skb_with_frags+0xc3/0x770 [ 1351.365048][T16685] ? mark_lock+0x9a/0x350 [ 1351.369434][T16685] ? __lock_acquire+0x137a/0x2040 [ 1351.374701][T16685] sock_alloc_send_pskb+0x91a/0xa60 [ 1351.375116][T15288] usb 3-1: Using ep0 maxpacket: 8 [ 1351.379942][T16685] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1351.379979][T16685] ? smack_socket_sendmsg+0x172/0x540 [ 1351.395688][T15288] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1351.396086][T16685] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1351.396128][T16685] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 1351.417364][T16685] hci_sock_sendmsg+0x22b/0x11c0 [ 1351.419782][T15288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.422335][T16685] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1351.435811][T16685] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1351.441133][T16685] ? security_socket_sendmsg+0x87/0xb0 [ 1351.446634][T16685] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1351.452050][T16685] __sock_sendmsg+0x221/0x270 [ 1351.456772][T16685] sock_write_iter+0x2dd/0x400 [ 1351.461595][T16685] ? __pfx_sock_write_iter+0x10/0x10 [ 1351.462766][T15288] usb 3-1: Product: syz [ 1351.466920][T16685] ? bpf_lsm_file_permission+0x9/0x10 [ 1351.466960][T16685] ? security_file_permission+0x7f/0xa0 [ 1351.467003][T16685] vfs_write+0xa72/0xc90 [ 1351.486370][T16685] ? __pfx_sock_write_iter+0x10/0x10 [ 1351.491720][T16685] ? __pfx_vfs_write+0x10/0x10 [ 1351.492405][T15288] usb 3-1: Manufacturer: syz [ 1351.496537][T16685] ksys_write+0x1a0/0x2c0 [ 1351.496587][T16685] ? __pfx_ksys_write+0x10/0x10 [ 1351.510398][T16685] ? do_syscall_64+0x100/0x230 [ 1351.515210][T16685] ? do_syscall_64+0xb6/0x230 [ 1351.519940][T16685] do_syscall_64+0xf3/0x230 [ 1351.524263][T15288] usb 3-1: SerialNumber: syz [ 1351.524465][T16685] ? clear_bhb_loop+0x35/0x90 [ 1351.533767][T16685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.539704][T16685] RIP: 0033:0x7ff4e757def9 [ 1351.544167][T16685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1351.561753][T15288] usb 3-1: config 0 descriptor?? [ 1351.563783][T16685] RSP: 002b:00007ff4e8445038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1351.563815][T16685] RAX: ffffffffffffffda RBX: 00007ff4e7735f80 RCX: 00007ff4e757def9 [ 1351.575846][ T25] usb 4-1: device descriptor read/64, error -71 [ 1351.577145][T16685] RDX: 0000000000000007 RSI: 0000000020000080 RDI: 0000000000000004 [ 1351.599407][T16685] RBP: 00007ff4e8445090 R08: 0000000000000000 R09: 0000000000000000 [ 1351.607588][T16685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1351.615594][T16685] R13: 0000000000000000 R14: 00007ff4e7735f80 R15: 00007fffe67aaf08 [ 1351.623622][T16685] [ 1351.699588][T16667] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2835'. [ 1351.838324][T15288] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1351.885285][ T5232] Bluetooth: hci1: unexpected event 0x04 length: 14 > 10 [ 1351.890009][ T25] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1351.922413][ T46] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1352.230287][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 1352.267915][ T25] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1352.338749][ T46] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1352.350691][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 1352.360033][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.368396][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.376627][ T25] usb 4-1: Product: syz [ 1352.382522][ T25] usb 4-1: Manufacturer: syz [ 1352.387264][ T25] usb 4-1: SerialNumber: syz [ 1352.411765][ T46] usb 5-1: config 0 descriptor?? [ 1353.359554][T15288] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1353.448997][ T46] usb 5-1: string descriptor 0 read error: -71 [ 1353.464369][ T46] pwc: Samsung MPC-C10 USB webcam detected. [ 1353.470969][ T46] pwc: send_video_command error -71 [ 1353.476569][ T46] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1353.484427][ T46] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1353.501270][ T46] usb 5-1: USB disconnect, device number 100 [ 1353.596756][T15288] usb 1-1: USB disconnect, device number 60 [ 1353.646906][T16702] syz.1.2843[16702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1353.647296][T16702] syz.1.2843[16702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1353.856850][T16713] FAULT_INJECTION: forcing a failure. [ 1353.856850][T16713] name failslab, interval 1, probability 0, space 0, times 0 [ 1353.881444][T16713] CPU: 1 UID: 0 PID: 16713 Comm: syz.4.2844 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 1353.892227][T16713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1353.902384][T16713] Call Trace: [ 1353.905671][T16713] [ 1353.908608][T16713] dump_stack_lvl+0x241/0x360 [ 1353.913303][T16713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1353.918509][T16713] ? __pfx__printk+0x10/0x10 [ 1353.923123][T16713] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 1353.928799][T16713] ? __pfx___might_resched+0x10/0x10 [ 1353.934111][T16713] should_fail_ex+0x3b0/0x4e0 [ 1353.938835][T16713] ? mas_alloc_nodes+0x26c/0x840 [ 1353.943775][T16713] should_failslab+0xac/0x100 [ 1353.948468][T16713] ? mas_alloc_nodes+0x26c/0x840 [ 1353.953451][T16713] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1353.958846][T16713] mas_alloc_nodes+0x26c/0x840 [ 1353.963622][T16713] mas_preallocate+0xfca/0x1730 [ 1353.968498][T16713] ? __pfx_mas_preallocate+0x10/0x10 [ 1353.973798][T16713] ? up_write+0x1a9/0x590 [ 1353.978141][T16713] ? __pfx_up_write+0x10/0x10 [ 1353.982824][T16713] ? __mas_set_range+0x133/0x3c0 [ 1353.987792][T16713] vma_merge+0x1854/0x2690 [ 1353.992268][T16713] ? __pfx_vma_merge+0x10/0x10 [ 1353.997081][T16713] ? __pfx___might_resched+0x10/0x10 [ 1354.002388][T16713] vma_modify+0xb8/0x350 [ 1354.006656][T16713] userfaultfd_release+0x413/0x900 [ 1354.011788][T16713] ? __pfx_userfaultfd_release+0x10/0x10 [ 1354.017435][T16713] ? __pfx___might_resched+0x10/0x10 [ 1354.022735][T16713] ? __pfx_lock_release+0x10/0x10 [ 1354.027783][T16713] ? __pfx_userfaultfd_release+0x10/0x10 [ 1354.033434][T16713] __fput+0x24a/0x8a0 [ 1354.037441][T16713] __x64_sys_close+0x7f/0x110 [ 1354.042155][T16713] do_syscall_64+0xf3/0x230 [ 1354.046666][T16713] ? clear_bhb_loop+0x35/0x90 [ 1354.051361][T16713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.057142][ T5232] Bluetooth: hci1: command tx timeout [ 1354.057250][T16713] RIP: 0033:0x7fa536f7def9 [ 1354.057274][T16713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1354.086686][T16713] RSP: 002b:00007fa537d59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1354.095137][T16713] RAX: ffffffffffffffda RBX: 00007fa537136130 RCX: 00007fa536f7def9 [ 1354.103131][T16713] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1354.111103][T16713] RBP: 00007fa537d59090 R08: 0000000000000000 R09: 0000000000000000 [ 1354.119089][T16713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1354.127093][T16713] R13: 0000000000000001 R14: 00007fa537136130 R15: 00007fff71bfbed8 [ 1354.135116][T16713] [ 1355.308588][ T25] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input101 [ 1355.380594][ T4660] bcm5974 4-1:1.0: could not read from device [ 1355.423963][ T25] usb 4-1: USB disconnect, device number 87 [ 1355.491367][T14645] usb 3-1: USB disconnect, device number 89 [ 1355.976572][ T46] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1355.978324][T16736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1356.145109][T16736] syz.3.2848: attempt to access beyond end of device [ 1356.145109][T16736] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1356.160070][T16736] SQUASHFS error: Failed to read block 0x0: -5 [ 1356.166541][T16736] unable to read squashfs_super_block [ 1356.256243][T15288] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1356.320999][ T25] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1356.332336][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 1356.360683][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1356.439497][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1356.529496][T15288] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1356.698878][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 1356.704328][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1356.715013][T15288] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1356.730306][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1356.745578][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1356.756922][T15288] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1356.770674][ T25] usb 2-1: New USB device found, idVendor=0421, idProduct=04df, bcdDevice=d5.3b [ 1356.796637][ T46] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1356.809414][T15288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.819569][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.827621][ T25] usb 2-1: Product: syz [ 1356.837108][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.856167][T16738] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1356.864105][ T25] usb 2-1: Manufacturer: syz [ 1356.868902][ T25] usb 2-1: SerialNumber: syz [ 1356.874099][ T46] usb 5-1: Product: syz [ 1356.885111][ T46] usb 5-1: Manufacturer: syz [ 1356.898971][T15288] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1356.908670][ T25] usb 2-1: config 0 descriptor?? [ 1356.918696][ T46] usb 5-1: SerialNumber: syz [ 1356.929011][ T25] usb 2-1: bad CDC descriptors [ 1356.942672][ T46] usb 5-1: config 0 descriptor?? [ 1356.987694][ T25] cdc_acm 2-1:0.0: Zero length descriptor references [ 1356.995697][ T46] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1357.007151][ T25] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 1357.019297][ T46] imon 5-1:0.0: unable to initialize intf0, err -19 [ 1357.069306][ T46] imon:imon_probe: failed to initialize context! [ 1357.099914][ T46] imon 5-1:0.0: unable to register, err -19 [ 1357.264178][ T46] usb 5-1: USB disconnect, device number 101 [ 1357.308703][ T5267] usb 1-1: USB disconnect, device number 61 [ 1357.314832][T16743] tmpfs: Bad value for 'nr_inodes' [ 1357.340580][T16743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1357.391745][T16743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1357.463763][T15288] usb 2-1: USB disconnect, device number 89 [ 1357.588805][T14645] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1357.805514][T14645] usb 3-1: Using ep0 maxpacket: 32 [ 1357.819023][T14645] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1357.851156][T14645] usb 3-1: New USB device found, idVendor=0421, idProduct=04df, bcdDevice=d5.3b [ 1357.874612][T14645] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.910998][T14645] usb 3-1: Product: syz [ 1357.929558][T14645] usb 3-1: Manufacturer: syz [ 1357.934315][T14645] usb 3-1: SerialNumber: syz [ 1357.996523][T14645] usb 3-1: config 0 descriptor?? [ 1358.034091][T14645] usb 3-1: bad CDC descriptors [ 1358.039487][T14645] cdc_acm 3-1:0.0: Zero length descriptor references [ 1358.065297][T14645] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 1358.277298][T16754] tmpfs: Bad value for 'nr_inodes' [ 1358.319846][T16754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.367140][T16754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.377941][T16779] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2858'. [ 1358.405219][ T5267] usb 3-1: USB disconnect, device number 90 [ 1358.412464][T14645] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1358.791289][T14645] usb 4-1: Using ep0 maxpacket: 32 [ 1359.073643][T14645] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1359.098439][T16754] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.2854'. [ 1359.124303][T14645] usb 4-1: New USB device found, idVendor=0421, idProduct=04df, bcdDevice=d5.3b [ 1359.132039][T16754] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.2854'. [ 1359.142818][T14645] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.168098][T14645] usb 4-1: Product: syz [ 1359.175162][T14645] usb 4-1: Manufacturer: syz [ 1359.189174][T14645] usb 4-1: SerialNumber: syz [ 1359.198965][T14645] usb 4-1: config 0 descriptor?? [ 1359.207097][T14645] usb 4-1: bad CDC descriptors [ 1359.212456][T14645] cdc_acm 4-1:0.0: Zero length descriptor references [ 1359.227437][T14645] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 1359.387387][ T5277] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1359.429904][T16772] tmpfs: Bad value for 'nr_inodes' [ 1359.437188][T16772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.457166][T16772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.466668][T14645] usb 4-1: USB disconnect, device number 88 [ 1359.582257][ T5277] usb 2-1: Using ep0 maxpacket: 8 [ 1359.589273][ T5277] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1359.603768][ T5277] usb 2-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 1359.612901][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.625557][ T5277] usb 2-1: Product: syz [ 1359.629781][ T5277] usb 2-1: Manufacturer: syz [ 1359.634390][ T5277] usb 2-1: SerialNumber: syz [ 1360.092418][T15288] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1360.476577][T15288] usb 3-1: Using ep0 maxpacket: 8 [ 1360.566490][T15288] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1360.594023][T15288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.635748][T15288] usb 3-1: Product: syz [ 1360.663372][T15288] usb 3-1: Manufacturer: syz [ 1360.948684][T15288] usb 3-1: SerialNumber: syz [ 1360.970170][T15288] usb 3-1: config 0 descriptor?? [ 1361.412336][T15288] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1361.499029][T16805] xt_time: unknown flags 0xc [ 1361.740821][T16811] pimreg: entered allmulticast mode [ 1361.867431][ T5277] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input102 [ 1361.896400][ T4660] bcm5974 2-1:1.0: could not read from device [ 1361.902861][ T5278] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1361.941235][ T4660] bcm5974 2-1:1.0: could not read from device [ 1361.952695][ T5277] usb 2-1: USB disconnect, device number 90 [ 1362.124183][ T5232] Bluetooth: hci1: unexpected event 0x04 length: 14 > 10 [ 1362.129897][ T5278] usb 1-1: Using ep0 maxpacket: 32 [ 1362.167101][ T5278] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1362.179592][ T5278] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1362.190362][ T5278] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1362.222341][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1362.238459][ T5278] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1362.377526][ T5241] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1362.934190][ T5241] usb 5-1: Using ep0 maxpacket: 32 [ 1362.980231][ T5241] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1363.405928][ T5241] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1363.418889][T15288] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1363.421285][ T5278] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1363.429771][ T5241] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1363.470726][ T5278] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1363.483168][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.495452][ T5277] usb 3-1: USB disconnect, device number 91 [ 1363.528286][ T5241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1363.537491][ T5278] usb 1-1: config 0 descriptor?? [ 1363.550823][ T5241] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1363.575913][T16822] exfat: Bad value for 'smackfstransmute' [ 1363.580387][ T8] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1363.583838][ T5241] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1363.611743][T16822] netlink: 'syz.1.2870': attribute type 4 has an invalid length. [ 1363.634017][ T5241] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1363.643169][ T5241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.728293][ T5241] usb 5-1: config 0 descriptor?? [ 1363.786655][ T5278] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 62 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1363.806943][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1363.825992][ T8] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1363.855417][ T8] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1363.868791][ T5278] usb 1-1: USB disconnect, device number 62 [ 1363.911855][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1363.945506][ T5278] usblp0: removed [ 1363.958772][T16829] Bluetooth: MGMT ver 1.23 [ 1363.975780][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1364.016041][ T5241] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 102 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1364.043705][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1364.054693][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1364.719931][ T5232] Bluetooth: hci1: command tx timeout [ 1364.860386][ T8] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1364.887571][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.913073][ T5241] usb 5-1: USB disconnect, device number 102 [ 1364.944397][ T5241] usblp0: removed [ 1364.975527][ T5232] Bluetooth: hci1: unexpected event 0x04 length: 14 > 10 [ 1364.983373][ T8] usb 4-1: config 0 descriptor?? [ 1365.010575][ T5278] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1365.737894][ T5241] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1365.940812][ T8] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 89 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1365.961717][ T8] usb 4-1: USB disconnect, device number 89 [ 1365.971357][ T8] usblp0: removed [ 1366.491344][T16844] FAULT_INJECTION: forcing a failure. [ 1366.491344][T16844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1366.700495][ T46] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1367.144473][ T5232] Bluetooth: hci1: command tx timeout [ 1367.245983][T16844] CPU: 1 UID: 0 PID: 16844 Comm: syz.2.2878 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 1367.256829][T16844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1367.266919][T16844] Call Trace: [ 1367.270250][T16844] [ 1367.273185][T16844] dump_stack_lvl+0x241/0x360 [ 1367.277924][T16844] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1367.283133][T16844] ? __pfx__printk+0x10/0x10 [ 1367.287865][T16844] ? snprintf+0xda/0x120 [ 1367.292137][T16844] should_fail_ex+0x3b0/0x4e0 [ 1367.296830][T16844] _copy_to_user+0x2f/0xb0 [ 1367.301282][T16844] simple_read_from_buffer+0xca/0x150 [ 1367.306673][T16844] proc_fail_nth_read+0x1ec/0x260 [ 1367.311723][T16844] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1367.317302][T16844] ? rw_verify_area+0x520/0x6b0 [ 1367.322196][T16844] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1367.326728][T16855] xt_time: unknown flags 0xc [ 1367.327775][T16844] vfs_read+0x204/0xbc0 [ 1367.336605][T16844] ? __pfx_lock_release+0x10/0x10 [ 1367.341683][T16844] ? __pfx_vfs_read+0x10/0x10 [ 1367.346407][T16844] ? __fget_files+0x29/0x470 [ 1367.351025][T16844] ? __fget_files+0x3f6/0x470 [ 1367.355728][T16844] ksys_read+0x1a0/0x2c0 [ 1367.360088][T16844] ? __pfx_ksys_read+0x10/0x10 [ 1367.364872][T16844] ? do_syscall_64+0x100/0x230 [ 1367.369658][T16844] ? do_syscall_64+0xb6/0x230 [ 1367.374351][T16844] do_syscall_64+0xf3/0x230 [ 1367.378887][T16844] ? clear_bhb_loop+0x35/0x90 [ 1367.383587][T16844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.389498][T16844] RIP: 0033:0x7f989f17c93c [ 1367.393922][T16844] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1367.413537][T16844] RSP: 002b:00007f98a005c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1367.421993][T16844] RAX: ffffffffffffffda RBX: 00007f989f335f80 RCX: 00007f989f17c93c [ 1367.429974][T16844] RDX: 000000000000000f RSI: 00007f98a005c0a0 RDI: 0000000000000006 [ 1367.437956][T16844] RBP: 00007f98a005c090 R08: 0000000000000000 R09: 0000000000000000 [ 1367.445936][T16844] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1367.453935][T16844] R13: 0000000000000000 R14: 00007f989f335f80 R15: 00007ffef4073eb8 [ 1367.461941][T16844] [ 1367.774392][T16846] input: syz0 as /devices/virtual/input/input103 [ 1368.132612][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 1368.159074][ T46] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1368.168411][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.176947][ T46] usb 2-1: Product: syz [ 1368.181146][ T46] usb 2-1: Manufacturer: syz [ 1368.186605][ T46] usb 2-1: SerialNumber: syz [ 1368.196906][ T46] usb 2-1: config 0 descriptor?? [ 1368.470307][ T46] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1368.490368][ T46] usb 2-1: Detected FT-X [ 1368.543629][T15288] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1368.692726][ T46] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1368.697765][T16841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1368.720707][ T46] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1368.732231][ T46] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 1368.742050][ T46] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1368.754892][ T46] usb 2-1: USB disconnect, device number 91 [ 1368.761943][T15288] usb 4-1: Using ep0 maxpacket: 16 [ 1368.778668][ T46] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1368.790738][T15288] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 1368.799743][T15288] usb 4-1: config 0 has no interface number 0 [ 1368.806988][ T46] ftdi_sio 2-1:0.0: device disconnected [ 1368.814104][T15288] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 72, changing to 10 [ 1368.828020][T15288] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 49273, setting to 1024 [ 1368.845686][T15288] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1368.854911][T15288] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1368.863280][T15288] usb 4-1: Product: syz [ 1368.868184][ T5241] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1368.877928][T15288] usb 4-1: Manufacturer: syz [ 1368.882729][T15288] usb 4-1: SerialNumber: syz [ 1368.889509][ T25] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1368.900445][T15288] usb 4-1: config 0 descriptor?? [ 1368.908071][T15288] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 1368.916212][T15288] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 1368.926425][T15288] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 1368.938375][T15288] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1368.948775][T15288] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 1368.962020][T15288] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1368.974113][T15288] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 1368.990957][T15288] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1369.002601][T15288] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 1369.013436][T15288] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1369.072801][ T5241] usb 5-1: Using ep0 maxpacket: 8 [ 1369.094627][ T5241] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1369.125151][ T25] usb 1-1: config 2 has an invalid interface number: 48 but max is 0 [ 1369.145324][ T25] usb 1-1: config 2 has no interface number 0 [ 1369.154949][ T5241] usb 5-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 1369.173752][ T25] usb 1-1: config 2 interface 48 has no altsetting 0 [ 1369.190792][ T5241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.209738][ T25] usb 1-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=a0.c8 [ 1369.224297][ T5241] usb 5-1: Product: syz [ 1369.231400][ T5241] usb 5-1: Manufacturer: syz [ 1369.236499][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.245252][ T5241] usb 5-1: SerialNumber: syz [ 1369.263581][ T25] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1369.284854][ T25] cxusb: set interface failed [ 1369.291463][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 1369.303174][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1369.315669][ T25] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1369.334657][ T25] usb 1-1: media controller created [ 1369.414376][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1369.529620][ T25] DVB: Unable to find symbol lgdt330x_attach() [ 1369.536176][ T25] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1369.553655][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 1369.559704][ T25] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 1369.631887][ T5278] usb 1-1: USB disconnect, device number 64 [ 1369.715248][ T5278] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1369.746009][T15288] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1369.914581][T16868] exfat: Bad value for 'smackfstransmute' [ 1369.922703][T16868] netlink: 'syz.2.2882': attribute type 4 has an invalid length. [ 1369.950846][T15288] usb 2-1: Using ep0 maxpacket: 8 [ 1369.971089][T15288] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1369.981945][T15288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.992393][T15288] usb 2-1: Product: syz [ 1369.997116][T15288] usb 2-1: Manufacturer: syz [ 1370.001935][T15288] usb 2-1: SerialNumber: syz [ 1370.011770][T15288] usb 2-1: config 0 descriptor?? [ 1371.320039][T15288] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1371.393969][ T5241] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input104 [ 1371.416315][ T4660] bcm5974 5-1:1.0: could not read from device [ 1371.635528][ T5241] usb 5-1: USB disconnect, device number 104 [ 1371.737286][ T5277] usb 4-1: USB disconnect, device number 90 [ 1371.755441][ T5277] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1371.768869][T16876] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.2885'. [ 1371.818903][ T5277] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1371.880224][T16874] block nbd0: shutting down sockets [ 1371.944988][ T5277] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1372.912166][ T5277] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1372.971472][ T5277] keyspan 4-1:0.107: device disconnected [ 1373.101826][T16885] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2887'. [ 1373.117974][ T5232] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1373.165973][T15288] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1373.308066][T15288] usb 2-1: USB disconnect, device number 92 [ 1373.463279][T16894] xt_time: unknown flags 0xc [ 1373.558263][ T46] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1373.699072][ T5241] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1373.809752][ T46] usb 1-1: no configurations [ 1373.874753][ T46] usb 1-1: can't read configurations, error -22 [ 1373.972492][ T5241] usb 3-1: Using ep0 maxpacket: 16 [ 1374.004950][ T5241] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1374.048025][ T5241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.079939][ T5241] usb 3-1: config 0 descriptor?? [ 1374.100165][ T46] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1374.110518][ T5241] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1374.322244][ T46] usb 1-1: no configurations [ 1374.338549][ T46] usb 1-1: can't read configurations, error -22 [ 1374.350988][ T46] usb usb1-port1: attempt power cycle [ 1374.625484][ T5241] gspca_sonixj: reg_r err -32 [ 1374.652477][ T5241] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 1374.802004][T16902] exfat: Bad value for 'smackfstransmute' [ 1374.808121][ T46] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1374.828262][T16902] netlink: 'syz.4.2893': attribute type 4 has an invalid length. [ 1374.848958][ T46] usb 1-1: no configurations [ 1374.853613][ T46] usb 1-1: can't read configurations, error -22 [ 1375.108610][T16892] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1375.482956][ T46] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1375.584611][ T8] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1375.715241][ T46] usb 1-1: no configurations [ 1375.719913][ T46] usb 1-1: can't read configurations, error -22 [ 1375.730897][ T46] usb usb1-port1: unable to enumerate USB device [ 1375.857180][T16912] FAULT_INJECTION: forcing a failure. [ 1375.857180][T16912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1375.857285][T16912] [ 1375.857292][T16912] ====================================================== [ 1375.857301][T16912] WARNING: possible circular locking dependency detected [ 1375.857311][T16912] 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 Not tainted [ 1375.857323][T16912] ------------------------------------------------------ [ 1375.857332][T16912] syz.4.2896/16912 is trying to acquire lock: [ 1375.857344][T16912] ffffffff8e613cb8 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x20/0xa0 [ 1375.857400][T16912] [ 1375.857400][T16912] but task is already holding lock: [ 1375.857407][T16912] ffff8880b883e998 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 1375.857459][T16912] [ 1375.857459][T16912] which lock already depends on the new lock. [ 1375.857459][T16912] [ 1375.857466][T16912] [ 1375.857466][T16912] the existing dependency chain (in reverse order) is: [ 1375.857475][T16912] [ 1375.857475][T16912] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 1375.857503][T16912] lock_acquire+0x1ed/0x550 [ 1375.857530][T16912] _raw_spin_lock_nested+0x31/0x40 [ 1375.857550][T16912] raw_spin_rq_lock_nested+0x2a/0x140 [ 1375.857575][T16912] task_fork_fair+0x61/0x1e0 [ 1375.857609][T16912] sched_cgroup_fork+0x37c/0x410 [ 1375.857628][T16912] copy_process+0x2217/0x3dc0 [ 1375.857655][T16912] kernel_clone+0x223/0x880 [ 1375.857683][T16912] user_mode_thread+0x132/0x1a0 [ 1375.857711][T16912] rest_init+0x23/0x300 [ 1375.857736][T16912] start_kernel+0x47a/0x500 [ 1375.857764][T16912] x86_64_start_reservations+0x2a/0x30 [ 1375.857787][T16912] x86_64_start_kernel+0x9f/0xa0 [ 1375.857828][T16912] common_startup_64+0x13e/0x147 [ 1375.857851][T16912] [ 1375.857851][T16912] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 1375.857880][T16912] lock_acquire+0x1ed/0x550 [ 1375.857908][T16912] _raw_spin_lock_irqsave+0xd5/0x120 [ 1375.857938][T16912] try_to_wake_up+0xb0/0x1470 [ 1375.857969][T16912] up+0x72/0x90 [ 1375.857989][T16912] console_unlock+0x22f/0x4d0 [ 1375.858009][T16912] vprintk_emit+0x5dc/0x7c0 [ 1375.858029][T16912] dev_vprintk_emit+0x2ae/0x330 [ 1375.858048][T16912] dev_printk_emit+0xdd/0x120 [ 1375.858067][T16912] _dev_notice+0x122/0x170 [ 1375.858085][T16912] usb_get_configuration+0xe6c/0x4dc0 [ 1375.858107][T16912] usb_new_device+0x14a/0x19a0 [ 1375.858130][T16912] hub_event+0x2d6d/0x5150 [ 1375.858155][T16912] process_scheduled_works+0xa2c/0x1830 [ 1375.858183][T16912] worker_thread+0x870/0xd30 [ 1375.858210][T16912] kthread+0x2f0/0x390 [ 1375.858241][T16912] ret_from_fork+0x4b/0x80 [ 1375.858269][T16912] ret_from_fork_asm+0x1a/0x30 [ 1375.858300][T16912] [ 1375.858300][T16912] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 1375.858328][T16912] validate_chain+0x18e0/0x5900 [ 1375.858348][T16912] __lock_acquire+0x137a/0x2040 [ 1375.858376][T16912] lock_acquire+0x1ed/0x550 [ 1375.858403][T16912] _raw_spin_lock_irqsave+0xd5/0x120 [ 1375.858434][T16912] down_trylock+0x20/0xa0 [ 1375.858456][T16912] __down_trylock_console_sem+0x109/0x250 [ 1375.858480][T16912] vprintk_emit+0x2aa/0x7c0 [ 1375.858500][T16912] _printk+0xd5/0x120 [ 1375.858519][T16912] should_fail_ex+0x391/0x4e0 [ 1375.858540][T16912] strncpy_from_user+0x36/0x2e0 [ 1375.858559][T16912] strncpy_from_user_nofault+0x71/0x140 [ 1375.858592][T16912] bpf_probe_read_user_str+0x2a/0x70 [ 1375.858628][T16912] bpf_prog_bc7c5c6b9645592f+0x3d/0x3f [ 1375.858645][T16912] bpf_trace_run4+0x334/0x590 [ 1375.858669][T16912] __traceiter_sched_switch+0x98/0xd0 [ 1375.858690][T16912] __schedule+0x253f/0x4a10 [ 1375.858720][T16912] preempt_schedule_irq+0xfb/0x1c0 [ 1375.858752][T16912] irqentry_exit+0x5e/0x90 [ 1375.858773][T16912] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1375.858800][T16912] __sanitizer_cov_trace_pc+0x8/0x70 [ 1375.858828][T16912] fput+0x14/0x210 [ 1375.858851][T16912] ksys_write+0x267/0x2c0 [ 1375.858878][T16912] do_syscall_64+0xf3/0x230 [ 1375.858901][T16912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.858926][T16912] [ 1375.858926][T16912] other info that might help us debug this: [ 1375.858926][T16912] [ 1375.858934][T16912] Chain exists of: [ 1375.858934][T16912] (console_sem).lock --> &p->pi_lock --> &rq->__lock [ 1375.858934][T16912] [ 1375.858967][T16912] Possible unsafe locking scenario: [ 1375.858967][T16912] [ 1375.858974][T16912] CPU0 CPU1 [ 1375.858981][T16912] ---- ---- [ 1375.858987][T16912] lock(&rq->__lock); [ 1375.859001][T16912] lock(&p->pi_lock); [ 1375.859017][T16912] lock(&rq->__lock); [ 1375.859032][T16912] lock((console_sem).lock); [ 1375.859046][T16912] [ 1375.859046][T16912] *** DEADLOCK *** [ 1375.859046][T16912] [ 1375.859053][T16912] 2 locks held by syz.4.2896/16912: [ 1375.859066][T16912] #0: ffff8880b883e998 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 1375.859122][T16912] #1: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590 [ 1375.859176][T16912] [ 1375.859176][T16912] stack backtrace: [ 1375.859183][T16912] CPU: 1 UID: 0 PID: 16912 Comm: syz.4.2896 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 1375.859208][T16912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1375.859223][T16912] Call Trace: [ 1375.859232][T16912] [ 1375.859241][T16912] dump_stack_lvl+0x241/0x360 [ 1375.859282][T16912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1375.859313][T16912] ? print_circular_bug+0x130/0x1a0 [ 1375.859338][T16912] check_noncircular+0x36a/0x4a0 [ 1375.859365][T16912] ? __pfx_check_noncircular+0x10/0x10 [ 1375.859387][T16912] ? lockdep_lock+0x123/0x2b0 [ 1375.859424][T16912] validate_chain+0x18e0/0x5900 [ 1375.859462][T16912] ? __pfx_validate_chain+0x10/0x10 [ 1375.859483][T16912] ? __pfx_prb_first_seq+0x10/0x10 [ 1375.859523][T16912] ? this_cpu_in_panic+0x4f/0x80 [ 1375.859555][T16912] ? _prb_read_valid+0xa39/0xac0 [ 1375.859596][T16912] ? mark_lock+0x9a/0x350 [ 1375.859635][T16912] __lock_acquire+0x137a/0x2040 [ 1375.859675][T16912] lock_acquire+0x1ed/0x550 [ 1375.859703][T16912] ? down_trylock+0x20/0xa0 [ 1375.859728][T16912] ? __pfx_desc_update_last_finalized+0x10/0x10 [ 1375.859763][T16912] ? __pfx_lock_acquire+0x10/0x10 [ 1375.859791][T16912] ? rcu_is_watching+0x15/0xb0 [ 1375.859844][T16912] ? vprintk_store+0xd3e/0x1160 [ 1375.859874][T16912] _raw_spin_lock_irqsave+0xd5/0x120 [ 1375.859907][T16912] ? down_trylock+0x20/0xa0 [ 1375.859931][T16912] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1375.859966][T16912] ? validate_chain+0x11e/0x5900 [ 1375.859993][T16912] down_trylock+0x20/0xa0 [ 1375.860020][T16912] __down_trylock_console_sem+0x109/0x250 [ 1375.860048][T16912] ? _printk+0xd5/0x120 [ 1375.860068][T16912] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 1375.860098][T16912] ? __pfx_validate_chain+0x10/0x10 [ 1375.860121][T16912] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1375.860151][T16912] vprintk_emit+0x2aa/0x7c0 [ 1375.860175][T16912] ? __pfx_vprintk_emit+0x10/0x10 [ 1375.860199][T16912] ? __pfx_validate_chain+0x10/0x10 [ 1375.860223][T16912] ? mark_lock+0x9a/0x350 [ 1375.860260][T16912] _printk+0xd5/0x120 [ 1375.860286][T16912] ? __pfx__printk+0x10/0x10 [ 1375.860317][T16912] should_fail_ex+0x391/0x4e0 [ 1375.860343][T16912] strncpy_from_user+0x36/0x2e0 [ 1375.860368][T16912] strncpy_from_user_nofault+0x71/0x140 [ 1375.860406][T16912] bpf_probe_read_user_str+0x2a/0x70 [ 1375.860440][T16912] ? bpf_trace_run4+0x244/0x590 [ 1375.860464][T16912] bpf_prog_bc7c5c6b9645592f+0x3d/0x3f [ 1375.860484][T16912] bpf_trace_run4+0x334/0x590 [ 1375.860510][T16912] ? rcu_read_lock_sched_held+0x8d/0x130 [ 1375.860543][T16912] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 1375.860577][T16912] ? __pfx_bpf_trace_run4+0x10/0x10 [ 1375.860625][T16912] ? __pfx_probe_sched_switch+0x10/0x10 [ 1375.860653][T16912] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 1375.860680][T16912] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 1375.860704][T16912] __traceiter_sched_switch+0x98/0xd0 [ 1375.860732][T16912] __schedule+0x253f/0x4a10 [ 1375.860778][T16912] ? __pfx___schedule+0x10/0x10 [ 1375.860815][T16912] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1375.860852][T16912] ? preempt_schedule_irq+0xf0/0x1c0 [ 1375.860888][T16912] preempt_schedule_irq+0xfb/0x1c0 [ 1375.860923][T16912] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1375.860968][T16912] irqentry_exit+0x5e/0x90 [ 1375.860990][T16912] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1375.861019][T16912] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 1375.861050][T16912] Code: 8b 3d bc 26 75 0c 48 89 de 5b e9 53 76 58 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 c0 d6 03 00 65 8b 15 50 4a 70 7e 81 e2 00 01 ff 00 [ 1375.861070][T16912] RSP: 0018:ffffc90004327de8 EFLAGS: 00000293 [ 1375.861089][T16912] RAX: ffffffff8209d5c4 RBX: dffffc0000000000 RCX: ffff888026839e00 [ 1375.861107][T16912] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888030678c80 [ 1375.861122][T16912] RBP: ffffc90004327f00 R08: ffffffff8208ed5b R09: 1ffff92000864fb4 [ 1375.861140][T16912] R10: dffffc0000000000 R11: fffff52000864fb5 R12: 0000000000000001 [ 1375.861157][T16912] R13: 1ffff92000864fcc R14: ffff888030678c83 R15: ffff888030678c80 [ 1375.861180][T16912] ? ksys_write+0x24b/0x2c0 [ 1375.861209][T16912] ? fput+0x14/0x210 [ 1375.861239][T16912] fput+0x14/0x210 [ 1375.861266][T16912] ksys_write+0x267/0x2c0 [ 1375.861296][T16912] ? irqentry_exit+0x63/0x90 [ 1375.861318][T16912] ? lockdep_hardirqs_on+0x99/0x150 [ 1375.861343][T16912] ? __pfx_ksys_write+0x10/0x10 [ 1375.861381][T16912] do_syscall_64+0xf3/0x230 [ 1375.861406][T16912] ? clear_bhb_loop+0x35/0x90 [ 1375.861436][T16912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.861463][T16912] RIP: 0033:0x7fa536f7c9df [ 1375.861482][T16912] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 1375.861501][T16912] RSP: 002b:00007fa537d59030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1375.861523][T16912] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007fa536f7c9df [ 1375.861539][T16912] RDX: 0000000000000001 RSI: 00007fa537d59090 RDI: 000000000000000a [ 1375.861554][T16912] RBP: 00007fa537d59090 R08: 0000000000000000 R09: 00007fa537d58df7 [ 1375.861570][T16912] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1375.861584][T16912] R13: 0000000000000000 R14: 00007fa537136130 R15: 00007fff71bfbed8 [ 1375.861615][T16912] [ 1376.874459][T16912] CPU: 1 UID: 0 PID: 16912 Comm: syz.4.2896 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 1376.885212][T16912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1376.895273][T16912] Call Trace: [ 1376.898572][T16912] [ 1376.901503][T16912] dump_stack_lvl+0x241/0x360 [ 1376.906193][T16912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1376.911387][T16912] ? __pfx__printk+0x10/0x10 [ 1376.915975][T16912] should_fail_ex+0x3b0/0x4e0 [ 1376.920647][T16912] strncpy_from_user+0x36/0x2e0 [ 1376.925508][T16912] strncpy_from_user_nofault+0x71/0x140 [ 1376.931076][T16912] bpf_probe_read_user_str+0x2a/0x70 [ 1376.936414][T16912] ? bpf_trace_run4+0x244/0x590 [ 1376.941260][T16912] bpf_prog_bc7c5c6b9645592f+0x3d/0x3f [ 1376.946711][T16912] bpf_trace_run4+0x334/0x590 [ 1376.951384][T16912] ? rcu_read_lock_sched_held+0x8d/0x130 [ 1376.957016][T16912] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 1376.963169][T16912] ? __pfx_bpf_trace_run4+0x10/0x10 [ 1376.968378][T16912] ? __pfx_probe_sched_switch+0x10/0x10 [ 1376.973920][T16912] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 1376.980681][T16912] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 1376.986742][T16912] __traceiter_sched_switch+0x98/0xd0 [ 1376.992114][T16912] __schedule+0x253f/0x4a10 [ 1376.996628][T16912] ? __pfx___schedule+0x10/0x10 [ 1377.001480][T16912] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1377.007467][T16912] ? preempt_schedule_irq+0xf0/0x1c0 [ 1377.012770][T16912] preempt_schedule_irq+0xfb/0x1c0 [ 1377.017901][T16912] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1377.023628][T16912] irqentry_exit+0x5e/0x90 [ 1377.028036][T16912] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1377.033491][T16912] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 1377.039559][T16912] Code: 8b 3d bc 26 75 0c 48 89 de 5b e9 53 76 58 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 c0 d6 03 00 65 8b 15 50 4a 70 7e 81 e2 00 01 ff 00 [ 1377.059160][T16912] RSP: 0018:ffffc90004327de8 EFLAGS: 00000293 [ 1377.065223][T16912] RAX: ffffffff8209d5c4 RBX: dffffc0000000000 RCX: ffff888026839e00 [ 1377.073194][T16912] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888030678c80 [ 1377.081158][T16912] RBP: ffffc90004327f00 R08: ffffffff8208ed5b R09: 1ffff92000864fb4 [ 1377.089144][T16912] R10: dffffc0000000000 R11: fffff52000864fb5 R12: 0000000000000001 [ 1377.097107][T16912] R13: 1ffff92000864fcc R14: ffff888030678c83 R15: ffff888030678c80 [ 1377.105179][T16912] ? ksys_write+0x24b/0x2c0 [ 1377.109679][T16912] ? fput+0x14/0x210 [ 1377.113587][T16912] fput+0x14/0x210 [ 1377.117329][T16912] ksys_write+0x267/0x2c0 [ 1377.121658][T16912] ? irqentry_exit+0x63/0x90 [ 1377.126242][T16912] ? lockdep_hardirqs_on+0x99/0x150 [ 1377.131441][T16912] ? __pfx_ksys_write+0x10/0x10 [ 1377.136297][T16912] do_syscall_64+0xf3/0x230 [ 1377.140798][T16912] ? clear_bhb_loop+0x35/0x90 [ 1377.145476][T16912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.151368][T16912] RIP: 0033:0x7fa536f7c9df [ 1377.155774][T16912] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 1377.175376][T16912] RSP: 002b:00007fa537d59030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1377.183783][T16912] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007fa536f7c9df [ 1377.191769][T16912] RDX: 0000000000000001 RSI: 00007fa537d59090 RDI: 000000000000000a [ 1377.199736][T16912] RBP: 00007fa537d59090 R08: 0000000000000000 R09: 00007fa537d58df7 [ 1377.207698][T16912] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1377.215750][T16912] R13: 0000000000000000 R14: 00007fa537136130 R15: 00007fff71bfbed8 [ 1377.223739][T16912] [ 1377.246574][T16885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1377.256489][T16885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1377.290724][ T5278] usb 3-1: USB disconnect, device number 92 [ 1377.339937][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 1378.376271][ T8] usb 2-1: device descriptor read/all, error -71 [ 1383.634582][ T2937] bridge_slave_1: left allmulticast mode [ 1383.640324][ T2937] bridge_slave_1: left promiscuous mode [ 1383.646858][ T2937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.655324][ T2937] bridge_slave_0: left allmulticast mode [ 1383.661191][ T2937] bridge_slave_0: left promiscuous mode [ 1383.667011][ T2937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.830523][ T2937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1383.841867][ T2937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1383.854626][ T2937] bond0 (unregistering): Released all slaves [ 1383.866865][ T2937] bond1 (unregistering): Released all slaves [ 1384.138833][ T2937] hsr_slave_0: left promiscuous mode [ 1384.146667][ T2937] hsr_slave_1: left promiscuous mode [ 1384.152579][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1384.160054][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1384.169528][ T2937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1384.177038][ T2937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1384.191822][ T2937] veth1_macvtap: left promiscuous mode [ 1384.197400][ T2937] veth0_macvtap: left promiscuous mode [ 1384.202973][ T2937] veth1_vlan: left promiscuous mode [ 1384.208409][ T2937] veth0_vlan: left promiscuous mode [ 1384.408960][ T2937] team0 (unregistering): Port device team_slave_1 removed [ 1384.441557][ T2937] team0 (unregistering): Port device team_slave_0 removed