last executing test programs: 27m0.478191358s ago: executing program 32 (id=81): socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$radio(&(0x7f0000000140), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) iopl(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="090000008100000003000000ffffffff160100009828445fec5af8e2b6747ead4f9d3dee01dc284487e5ee7167019aa0445a2982e882c8fe3918de1a95a8acac6a89cba241ed79f0c57801a46573cfefab9e9438ed81f1ae26e5f9e569f4c300000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x181480, 0x0) readahead(r1, 0x0, 0x0) 23m48.580209597s ago: executing program 33 (id=575): rt_sigaction(0x16, 0x0, 0x0, 0x8, &(0x7f0000001540)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet_tcp(0x2, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) rseq(0x0, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x3}, 0x6) 23m40.473663982s ago: executing program 34 (id=592): socket$pppoe(0x18, 0x1, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x1000)=nil) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x40, 0x0) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = socket(0x1e, 0x1, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1e, 0x20, 0x4, 0xff, 0x3, 0x7, @remote}, 0x10) 19m6.873820742s ago: executing program 35 (id=1120): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = gettid() ioprio_set$pid(0x1, r1, 0x2003) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) sched_setscheduler(r2, 0x1, &(0x7f0000000500)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000440)="52013a0f41e0fd5dc142cfae2b864ea05b57749ec3331d897a74c59c316aef4fa5ad2e5d514e41e0fd1db0c014ff9cadd19606bbd17412c5aaffa114bc15e37760727c12b9972dc9b2f283b269d3e6182d120aa6fa2bc852638f95ee77dc8f80d074d6d2050065b931c438cb707a4de7bbbce46e86a3b25b1c05d62ee54e84cbf5", 0x81, r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f}}, 0xffffffffffffffe4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0x8d5}, {0xa, 0x4e24, 0x7f, @local, 0x80000000}, r8, 0x808}}, 0x48) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000340)='bond_slave_0\x00', 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r8, 0xffc3, 0x10, 0x10, 0x0, @in={0x2, 0x4, @empty}, @in={0x2, 0x4f24, @remote={0xac, 0xc}}}}, 0x118) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) r10 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x8087) 16m7.488627647s ago: executing program 36 (id=1418): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, r3, 0x0, 0x5, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r3}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, r3, 0x0, 0x4, 0x3}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r3, 0x0, 0x81, 0x80000000080}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r3, 0x0, &(0x7f00003bd000/0x3000)=nil, 0x3000, 0x80}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) 15m49.901840696s ago: executing program 1 (id=1483): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c643c, &(0x7f0000000300)) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000001080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x3231564e, 0x0, 0x0, [{}, {}, {}, {}, {0x0, 0x16}]}}) ioprio_set$uid(0x3, 0x0, 0x2000) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f00000000c0)=""/136, &(0x7f0000000180)=0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000c80)={0x8, 0x100008b}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(r3, &(0x7f0000001880)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000c40), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 15m49.487692393s ago: executing program 1 (id=1484): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r1, &(0x7f0000000140)=""/230, 0xe6, 0x10000, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0x9a, "1153452d90d8e42e3bd769182e07fd1f2c88a8bfbd63d936f5b82923a881334cf0508423a5bf84c27b911321b6a1d56b1a9cb9ac6a6e1524aa9743fcf007a5037e953ddea2948067e04460968826ae6568e3d116727dff6bb7ebd9bec209a5594fa23353d62546e2e8b6427e0cbde30e6ef409530ebd237378d5a0eea55466a6928b8fe1c52229e7c89b8000b67671b18ee2f952f5cfaf212f30"}, &(0x7f0000000040)=0xa2) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000080)=r3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240001000000000904000002ffffff000905ff", @ANYBLOB='*'], 0x0) 15m47.3928745s ago: executing program 1 (id=1490): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) 15m47.054831671s ago: executing program 1 (id=1493): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@delqdisc={0x2c, 0x25, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x3}, {0xa, 0xfff3}, {0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4009000}, 0x801) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0) r3 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4f2, 0x1236, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40210500000005e15dd52f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 15m43.270918971s ago: executing program 1 (id=1505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9461a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x4, 0x7}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x30, 0x0, 0x0, [{0x1, 0xdfc, 0x1, 0x4, '['}]}, 0x0, 0x0, 0x0, 0x0}) getdents(r5, &(0x7f0000000700)=""/90, 0x5a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) preadv(0xffffffffffffffff, &(0x7f0000003540), 0x0, 0xfffffffe, 0xd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080"], 0x1f4}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40010) 15m42.165213069s ago: executing program 1 (id=1507): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x30c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2e702, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r1, 0x2000000, 0x16, 0x0, &(0x7f0000000380)="0990ddc848000092733a80c6907c26f0e5ab52894ed7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000080), 0x0) 15m25.761487678s ago: executing program 37 (id=1507): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x30c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2e702, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r1, 0x2000000, 0x16, 0x0, &(0x7f0000000380)="0990ddc848000092733a80c6907c26f0e5ab52894ed7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000080), 0x0) 12m31.73601232s ago: executing program 5 (id=1949): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = gettid() ioprio_set$pid(0x1, r1, 0x2003) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) sched_setscheduler(r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000440)="52013a0f41e0fd5dc142cfae2b864ea05b57749ec3331d897a74c59c316aef4fa5ad2e5d514e41e0fd1db0c014ff9cadd19606bbd17412c5aaffa114bc15e37760727c12b9972dc9b2f283b269d3e6182d120aa6fa2bc852638f95ee77dc8f80d074d6d2050065b931c438cb707a4de7bbbce46e86a3b25b1c05d62ee54e84cbf5", 0x81, r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0x8d5}, {0xa, 0x4e24, 0x7f, @local, 0x80000000}, 0xffffffffffffffff, 0x808}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0xffc3, 0x10, 0x10, 0x0, @in={0x2, 0x4, @empty}, @in={0x2, 0x4f24, @remote={0xac, 0xc}}}}, 0x118) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x4080) 12m30.282295355s ago: executing program 5 (id=1955): socket(0x200000100000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000400000000000a0000000000000000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff00000000000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r0}, 0x10) r1 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x9c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000100)='./file0\x00') r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "e5e81571c97b166978ff61fcfd2409b2b73e0f936ed774de107de8a9041b5113"}) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) 12m28.574366806s ago: executing program 5 (id=1960): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in=@local, @in6=@mcast1}, {@in=@broadcast}, @in6=@loopback, {0xffff}, {0x0, 0x48a9, 0x0, 0xfffffffffffffffe}}, 0x0, 0x800000}}, 0xf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) mkdir(&(0x7f0000000140)='./file0\x00', 0x42) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x80000) socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0xbe952926be63d77d, 0xfffe, 0x19, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, r6, {0x1}}, 0x18) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYRES8=r7, @ANYRESDEC], 0x0) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}]}}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0xa) ioctl$FIONREAD(r8, 0x541b, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 12m28.20680201s ago: executing program 9 (id=1965): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x4c}}, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000140)='7Q', 0x2}], 0x1) creat(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000640)=ANY=[@ANYBLOB="a800000000000080e8dec85a44e0f01cf138ee1fe6e1a2ac1fd2be1c2d88"], 0xa8) ioctl$IOMMU_VFIO_IOAS$GET(r6, 0x3b88, &(0x7f0000000180)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000), 0x2004008, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="9c76657273690afa4a6f6e3d3970323012302e752c6e6f78617474722c6166091900000000000030303030303030302ddef3bc12bb0e8fc105ce21d9f89505067ab0"]) r8 = syz_io_uring_setup(0x233b, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) ioctl$FIOCLEX(r0, 0x5451) io_uring_enter(r8, 0x207a98, 0xffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d0aed1081320460256e60102030109021200010000000009048200000da1b60079da8fc6b26ecab4eaca4e7e33bc40dbceed568ac806bfccbf9d3442a009dc9c2847f430c7f9c775e7cbc14260cb4068206891229069cbf9f4489243babda587c48cf255d4894e1c8c149dcad528"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 12m25.352068704s ago: executing program 6 (id=1968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80e85411, &(0x7f00000022c0)) socket$kcm(0x29, 0x5be43b229b3845b0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) quotactl$Q_SETQUOTA(0x0, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r4 = fsopen(&(0x7f0000000300)='ubifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x8, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r5) r7 = syz_io_uring_setup(0x27f3, 0x0, &(0x7f0000000200), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x3, 0x400, 0x0, 0x2}, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r7, 0x184c, 0x0, 0x0, 0x0, 0x0) write(r5, 0x0, 0x0) 12m24.228929011s ago: executing program 3 (id=1970): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x0, 0x2000c810) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r7, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff) fsmount(r7, 0x1, 0x1) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x200000000000000}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f00000000c0)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r8, 0x8010500d, &(0x7f00000001c0)) 12m22.775005321s ago: executing program 3 (id=1971): socket(0x200000100000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000400000000000a0000000000000000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff00000000000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r0}, 0x10) r1 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x9c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000100)='./file0\x00') openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) 12m21.569643442s ago: executing program 5 (id=1972): bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYRESDEC=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000680)={0x1, 'C'}, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000180001801400020073797a5f74756e0000000000000000000500030000000000050002"], 0x3c}}, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000003f80)={0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000003e00)={0x4c, 0x13, 0x1, 0x70bd27, 0x25dfdbfc, {0x27, 0x7, 0x5, 0x7, {0x4e23, 0x4e20, [0x7fff, 0x34, 0xc, 0x7ff], [0x3, 0x80000001, 0x8, 0xbf16], 0x0, [0x6, 0x3]}, 0x0, 0xa}}, 0x4c}, 0x1, 0x0, 0x0, 0x4041}, 0x20000080) exit(0x1) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x18}, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @rand_addr=0x64010102}, {0x0, @link_local}, 0x4a, {0x2, 0x0, @rand_addr=0x64010100}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x8, {0x2, 0x4e22, @empty}, 'batadv0\x00'}) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 12m21.568616822s ago: executing program 9 (id=1973): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xe6) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = open(0x0, 0x60840, 0x1d2) fcntl$setlease(r6, 0x400, 0x0) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000180)={0x80, 0x7, 0x3, 0x8, 0xb, "b8a5a42327f8600b"}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') read$hiddev(r8, &(0x7f0000000100)=""/100, 0x64) ioctl$UI_END_FF_UPLOAD(r7, 0x406855c9, &(0x7f0000000480)={0xfffffffc, 0x0, {0x0, 0x0, 0x200, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x5879}}}}) fsmount(r5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14d080, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f00000000c0)=@t={0x4, 0x6, 0xd2, 0xe}) writev(r9, &(0x7f0000000080)=[{&(0x7f0000000100)="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", 0xfd}, {&(0x7f0000000200)="a5d2e564cf390ec52f459b2c9338533737bfe5cc78910d7964099a7fff9e63803b0ccc237bff5abf94584ee17149449b859a084f7d16459eabafd5c63765b56e1f2f2a9533b3e4a0a1328723a8c525b0f50fd07a767828fca2dab3e63a5fc9f2742828a06d3ea296a49f6d3ca579844ecbe26404f30546426a5b6e90d4c2c3bb777a29a335d16cabd68ca8d17b12635f65d54ed8e1f9db5508c3c341947f454800529fcc2ca21eb519c51f0353a0d78b20c9c154", 0xb4}, {&(0x7f0000000000)="a35dbb551628baf3c63103a9be", 0xd}], 0x3) syz_init_net_socket$ax25(0x3, 0x3, 0x7) 12m21.561158894s ago: executing program 6 (id=1974): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r2, &(0x7f0000000280)=""/26, 0x1a, 0x40000000, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast2}, 0x3, 0x2, 0x2, 0x2}}, 0x80) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0xce9e1000) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000180)={[{@subsystem='hugetlb'}, {@cpuset_v2_mode}, {@subsystem='cpuacct'}]}) r3 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@updsa={0x154, 0x1a, 0x1, 0x70bd26, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@empty}, {@in, 0x0, 0x6c}, @in6=@private1, {0x4000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@loopback}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x154}}, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12m19.884663375s ago: executing program 3 (id=1975): chdir(0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 12m19.644822501s ago: executing program 9 (id=1977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x40, 0x2, 0x2, 0x801, 0x0, 0x7000000, {0x2}, [@CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0xfffffffffffffe35, 0x2, @rand_addr=0x64010100}}}]}]}, 0x40}}, 0x0) 12m19.367633775s ago: executing program 9 (id=1979): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_disconnect(r3) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f00000002c0)={0x18, 0x0, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) (async) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000040)={0x28, 0x0, r6, r1, 0x0, 0x0, 0x0, 0xe8, &(0x7f00000002c0)="e377166b3428cad318d24e3e8f7f8cf60a10e4ba3a9f96fecc1ac2da4e3d21098e25bf54d458ae5916ecaba36e7fba7c4d6ec655111570f08dae4ba8465db74bbc913a5293d681befe37b85b4726031102c1bd70b904333ad88395a23dc5d9f4847b54184da263b292384fa6a059d7577bbbd57fd2538698e22ba9026d276a55bca78b851f44c274b4788d101f2024d01a11af67b6a62e3f26969e640892731a248c3eb00af12edcea50d12504b3c2bb60f916026e704f0eaa4d11959abcdb979e888c8a5255fa25098470b562436515d3292e1ec03482a1f8aa891714a3837e75a41faafb1b44a5"}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x100000000000000}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) (async) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r10, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x800}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r13}, {0x8}, {0x8, 0x1, r14}, {0x8}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x8040804}, 0x20000010) 12m19.339903648s ago: executing program 6 (id=1980): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000040)=0x2000) fcntl$notify(r0, 0x402, 0x29) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x8d03, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2000) pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 12m19.246356493s ago: executing program 3 (id=1982): socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'virt_wifi0\x00'}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x6ddf2614, 0x1) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x5}, 0x10001}, {{&(0x7f0000000240)=@sco={0x1f, @none}, 0x0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/11}, {&(0x7f0000000380)=""/105}, {&(0x7f0000000180)=""/10}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/222}, {&(0x7f0000000640)=""/41}, {&(0x7f0000000680)=""/59}, {&(0x7f0000000740)=""/249}, {&(0x7f0000000840)=""/246}], 0x0, &(0x7f0000000a00)=""/4096}, 0xd}], 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmmsg$sock(r3, &(0x7f0000003bc0), 0x4000000000002ca, 0x4040014) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ptype\x00') fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, 0x0, 0x0, 0x0) 12m19.008605829s ago: executing program 6 (id=1983): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c\f\xc6\xbfTB&~?\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x2) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x8087) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000040)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0xffffffff, 0xffffffff}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r3 = open(&(0x7f0000007fc0)='./bus\x00', 0x60342, 0x2c) pwritev2(r3, &(0x7f0000000680)=[{&(0x7f0000000100)="90", 0x1}], 0x1, 0x8000, 0x20400036, 0x20) openat$smackfs_netlabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x1e8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x520) r6 = userfaultfd(0x80000) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000480)) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f00000001c0)={0x48}) r8 = socket$isdn(0x22, 0x2, 0x25) r9 = socket$isdn(0x22, 0x2, 0x4) dup3(r9, r8, 0x0) 12m18.226223257s ago: executing program 5 (id=1985): socket(0x200000100000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000400000000000a0000000000000000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff00000000000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r0}, 0x10) r1 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x9c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000100)='./file0\x00') openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) 12m17.922270087s ago: executing program 6 (id=1986): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000000c0)='/dev/input/event#\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000340)='cbc(cast6)\x00') r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='net/ip6_tables_targets\x00') r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0) 12m17.878720875s ago: executing program 3 (id=1987): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x44}, {0x0}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x20, 0x0) 12m17.686690908s ago: executing program 5 (id=1988): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1a, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="660a00000000df0061114c0000000000850000005400000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12m17.149595139s ago: executing program 38 (id=1988): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1a, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="660a00000000df0061114c0000000000850000005400000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12m17.13645536s ago: executing program 9 (id=1990): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x0, 0x0, 0x0, {{{@in=@local, @in6=@mcast1}, {@in=@broadcast}, @in6=@loopback, {0xffff}, {0x0, 0x48a9, 0x0, 0xfffffffffffffffe}}, 0x0, 0x800000}}, 0xf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) mkdir(&(0x7f0000000140)='./file0\x00', 0x42) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x80000) socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xbe952926be63d77d, 0xfffe, 0x19, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, r5, {0x1}}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYRES8=r6, @ANYRESDEC], 0x0) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0xa) ioctl$FIONREAD(r7, 0x541b, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 12m17.135912407s ago: executing program 3 (id=1991): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000000240)='cgroup\x00\x98@N)\xa08\x9ep3\x8aXb\xcc\xb3\xbfp\xd6\xe2gF4\xee\xd3\xf1\x00\x00\x00\x00\x00\x00\x00\xab\xe1\xe66\xef\x96R\xa4\xa7\xdf+z4?\xcf~\xe9\xb6\x87\xde\x80ud\xef\x9f(\x84,:\xf2\x87\x84\xc2\xac\xef\xe4\xdfno?\xb1+\x98h\x80\xe2\x82\a_IL\xdd\xcdl\\\x1d\xb1y\x95j\xd6N\xa4\x94\x1ad\xaf~\xf5\\\xa8\xdd>\x1e\xd8?\xe4)\x9eO\x89\xfb\xdc\x82\xb7\xa0\xa5\xfc\xd6J\xd2\xe8\xf3mn\xee\x84\x88\x92tYD\x87\xbe\xd8\x8ar*U\xde\xf2P\xbe\x84\xbd \xc2\xba\xaf\xef\xa0\xde\x7fH\xceT\xc6\x1a\xb7\xc1\xc6\x11~\x10Q\xceUU.\xc9\xfb\xeb\xe1\xdc\'|\xa6\xec\xa9\x87Q\xfc\x9d\x8a3B\xc8\xe04\x176\x9f\xc8`\x00\x1d[f-\xa1'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000040)) sendfile(r1, r1, 0x0, 0x7ffff000) 12m17.00142907s ago: executing program 39 (id=1991): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd0, &(0x7f0000000240)='cgroup\x00\x98@N)\xa08\x9ep3\x8aXb\xcc\xb3\xbfp\xd6\xe2gF4\xee\xd3\xf1\x00\x00\x00\x00\x00\x00\x00\xab\xe1\xe66\xef\x96R\xa4\xa7\xdf+z4?\xcf~\xe9\xb6\x87\xde\x80ud\xef\x9f(\x84,:\xf2\x87\x84\xc2\xac\xef\xe4\xdfno?\xb1+\x98h\x80\xe2\x82\a_IL\xdd\xcdl\\\x1d\xb1y\x95j\xd6N\xa4\x94\x1ad\xaf~\xf5\\\xa8\xdd>\x1e\xd8?\xe4)\x9eO\x89\xfb\xdc\x82\xb7\xa0\xa5\xfc\xd6J\xd2\xe8\xf3mn\xee\x84\x88\x92tYD\x87\xbe\xd8\x8ar*U\xde\xf2P\xbe\x84\xbd \xc2\xba\xaf\xef\xa0\xde\x7fH\xceT\xc6\x1a\xb7\xc1\xc6\x11~\x10Q\xceUU.\xc9\xfb\xeb\xe1\xdc\'|\xa6\xec\xa9\x87Q\xfc\x9d\x8a3B\xc8\xe04\x176\x9f\xc8`\x00\x1d[f-\xa1'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000040)) sendfile(r1, r1, 0x0, 0x7ffff000) 12m16.991828016s ago: executing program 6 (id=1992): chdir(&(0x7f0000000480)='./cgroup\x00') mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 12m16.991434676s ago: executing program 40 (id=1992): chdir(&(0x7f0000000480)='./cgroup\x00') mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 12m16.901527069s ago: executing program 9 (id=1994): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9461a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x4, 0x7}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x30, 0x0, 0x0, [{0x1, 0xdfc, 0x1, 0x4, '['}]}, 0x0, 0x0, 0x0, 0x0}) getdents(r5, &(0x7f0000000700)=""/90, 0x5a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffe, 0xd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080"], 0x1f4}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40010) 12m16.443552045s ago: executing program 41 (id=1994): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9461a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x4, 0x7}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x30, 0x0, 0x0, [{0x1, 0xdfc, 0x1, 0x4, '['}]}, 0x0, 0x0, 0x0, 0x0}) getdents(r5, &(0x7f0000000700)=""/90, 0x5a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffe, 0xd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000080"], 0x1f4}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40010) 31.658553581s ago: executing program 8 (id=3784): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, 0x0, 0x0) 31.529798433s ago: executing program 8 (id=3786): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB="490900000000000000001500000004002b8008000300", @ANYRES32=r2, @ANYBLOB="08002a0000000000050029000100000020002b8004000380080001000104"], 0x58}}, 0x0) 31.188854401s ago: executing program 8 (id=3789): r0 = socket$kcm(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x18, 0x24, 0x301, 0x0, 0x0, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="94"], 0x8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r3}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(r2) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, 0x3}) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3}}, @ip_tos_u8={{0x11, 0x29, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 30.794334558s ago: executing program 8 (id=3791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffff90, &(0x7f00000002c0)=0x115) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f0336082608123a2c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 28.884825323s ago: executing program 8 (id=3794): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x2, @remote, 'team_slave_1\x00'}}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x100) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000100)={0xa70, 0x1ff, 0x1, 'queue0\x00', 0x8}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) 27.639594177s ago: executing program 8 (id=3799): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) close(0x4) (fail_nth: 1) 15.438375278s ago: executing program 0 (id=3836): fsopen(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20020, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf250400000008000300050000001400018005000200410e88cd4a2b3b9998ae65691398f4c99abe3ad6d2eca305ee0c858dddb30482e61f6d865ce0b677a41f9e11fc5c215454ee1cd1897d0443b18a017f7f0113477a6fb170113de3a877fd5ef6f8b9fbd7977c033fd5e6b6b401b70fa73b2ace355eccecc370963224822f93cac175bd363e3f5b5c1307890f75ff17f46eebf7773c688ad62b33577fc37a8360b96ed498a4beb63b44de91dfd3e8f7b06464e393ac5a2af49b1c1e8748f08f4063d57c570d4f104a94e4ab643f280beda27f5c", @ANYRES32=0x0, @ANYBLOB="08000200020000000500050000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0xfffffffc, 0x2}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(r5, &(0x7f0000000000)='4\x00', 0x2) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) 11.540302665s ago: executing program 4 (id=3849): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000000000950000000000000046682d562c31aa909594c57a164463536e83a7f6ac12a8b52f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ac052a0200000000000109022400010000000009040000010300020009210000f6012200000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="2001"], 0x0}) 11.455102048s ago: executing program 42 (id=3799): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x3, 0x2, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) close(0x4) (fail_nth: 1) 10.670402928s ago: executing program 0 (id=3851): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x4, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffff9, 0x6, 0x10000000, 0x41c2, 0x9}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000440)=@hci={0x1f, 0x4788, 0x2}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='\'', 0x1}], 0x1}, 0x0) r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x2000, 0xfffffffd, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x24, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x80}, 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtaction={0xac, 0x30, 0xb, 0x0, 0x0, {}, [{0x98, 0x1, [@m_gact={0x94, 0x1, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0x6, 0x6, 0x0, 0x10}}, @TCA_GACT_PARMS={0x0, 0x2, {0x3, 0x0, 0x2, 0x4}}, @TCA_GACT_PROB={0x0, 0x3, {0x1, 0x260c, 0x9740aa64001af6d0}}]}, {0x50, 0x6, "4343a6f7cfe1589b32a3ec285734d9a10232c47e98b5b064d58524dd78267940c81f92eaef01bd9ce4bdda671e27a4e8d816a5669efc6bb436d30b40f25a8e66aac7b32e8cc11a7765be43f2"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r9, 0x80044d41, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x4924b68, 0x0) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r11 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r11, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 9.630907778s ago: executing program 4 (id=3853): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex_waitv(&(0x7f0000002940)=[{0x0, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2c4601, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = syz_io_uring_complete(0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r4, 0x0, 0xfffffffffffffffe, 0x2}) (fail_nth: 6) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000340)={0x28, 0x6, r4, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2b8000000000000}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000080)={0x28, 0x6, r4, 0x0, &(0x7f0000000000)="97288ae9cdbc446ddf0fddcbbdd54a9e17b2e7cb7eb14f663bb139f8d54206b84f674b875fcc9725817b8b3f71646a079ae9972e75008b69f9033c5c90825bbd9ad8691df24d450cc0364f89d74bdd2763f51fc3be9d385029c139098dd0b12ea08cc40e5346bc1a89b50d", 0x6b, 0xf7}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT_TABLE(r6, 0x0, 0xcf, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) 9.480777388s ago: executing program 0 (id=3856): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}}, 0x4800) r3 = syz_open_dev$video(&(0x7f0000000040), 0x100000001, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000140)={0x0, 0x59565955, 0x280}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x2681, @empty, 0xab0b}], 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKRRPART(r1, 0x125f, 0x0) 9.196955045s ago: executing program 0 (id=3858): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x14, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='affs\x00', 0x0, &(0x7f0000000140)='grpquota') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x447f, &(0x7f0000000100)={0x0, 0x31b3, 0x4, 0x3, 0x3b4}, 0x0, 0x0) syz_clone(0x80000480, 0x0, 0x0, 0x0, 0x0, 0x0) mlockall(0x7) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) r3 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) syz_usb_control_io(r3, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x5, @string={0x5, 0x3, '\x00\x00\x00'}}, 0x0, 0x0, 0x0}, 0x0) 6.44968423s ago: executing program 4 (id=3861): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x48}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x2}]}}]}, 0x44}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0xffffff80, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB='@\fI'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000040)={0x80, 0x6, 0x302, 0x0, 0xe0, 0xff, 0x0}) 6.090565339s ago: executing program 7 (id=3864): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB='b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1803000000000000000000009f000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r3) sendmmsg$unix(r2, 0x0, 0x0, 0x0) 5.915336948s ago: executing program 7 (id=3865): fsopen(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20020, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf250400000008000300050000001400018005000200410e88cd4a2b3b9998ae65691398f4c99abe3ad6d2eca305ee0c858dddb30482e61f6d865ce0b677a41f9e11fc5c215454ee1cd1897d0443b18a017f7f0113477a6fb170113de3a877fd5ef6f8b9fbd7977c033fd5e6b6b401b70fa73b2ace355eccecc370963224822f93cac175bd363e3f5b5c1307890f75ff17f46eebf7773c688ad62b33577fc37a8360b96ed498a4beb63b44de91dfd3e8f7b06464e393ac5a2af49b1c1e8748f08f4063d57c570d4f104a94e4ab643f280beda27f5c", @ANYRES32=0x0, @ANYBLOB="08000200020000000500050000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0xfffffffc, 0x2}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(r5, &(0x7f0000000000)='4\x00', 0x2) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) 4.991132953s ago: executing program 2 (id=3866): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000280)={r0}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x44828) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) 4.950668471s ago: executing program 7 (id=3867): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x5ed000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f00000001c0)={0x28, 0x10000, 0x0, r2, 0xffffffffffffffff, 0x4, 0x8, 0x37096f}) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x231, &(0x7f0000000500)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}) syz_io_uring_submit(r4, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, 0x0, 0x168) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='UP\x00\x00\x00\x00\x00\x00'], 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0xc0403d11, 0x0) 4.784619818s ago: executing program 2 (id=3868): r0 = socket$kcm(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, 0x3}) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3}}, @ip_tos_u8={{0x11, 0x29, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 4.542679485s ago: executing program 0 (id=3869): syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x80, {0x0, 0x1}, {0x49, 0x2}, @rumble={0x4ee9, 0x7}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) unshare(0x50000000) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x1091, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f00000003c0)={0xa, 0x4e21, @multicast2}, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000036c000/0x1000)=nil, 0x1000, 0x16) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r6) prctl$PR_SET_PTRACER(0x59616d61, r6) prctl$PR_SET_PTRACER(0x59616d61, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) 4.473074013s ago: executing program 2 (id=3870): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a05fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed00000f030000000000001d44000000000000730a04fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ae5d82ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef77997e344e61482808c02b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8d8c12f5d7df14c8008"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x40001b6, 0x0) close(r1) 4.047590645s ago: executing program 7 (id=3871): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000480)=0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002"], 0x5c, 0x2) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r5, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/950], 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r6, &(0x7f0000000d80)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 3.988298457s ago: executing program 2 (id=3872): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000000000950000000000000046682d562c31aa909594c57a164463536e83a7f6ac12a8b52f0d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f4, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ac052a0200000000000109022400010000000009040000010300020009210000f6012200000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 3.120098713s ago: executing program 4 (id=3873): keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[@ANYBLOB='enkcs'], 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a68f7d1638e82c4e5a669c6aee3c8e2210c8f75827a2310001c3e6f085c0639e9c1a517c1644640211e7382ddcdef46e67b06674bdabd6348c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000006, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f00000001c0)=""/2, 0x26, 0x2, 0x1, 0x0, 0x0, @void, @value}, 0x28) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.841563816s ago: executing program 7 (id=3874): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x80fe, 0x0) 1.287409382s ago: executing program 7 (id=3875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x40}, {0x28, 0x2, 0x2, 0xffffadba}, {0x6}]}, 0x10) syz_emit_ethernet(0x22f8, &(0x7f00000027c0)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b000100000000090400000187a00f000905029054"], 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES8]) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$watch_queue(r7, &(0x7f0000000e00)=""/4096, 0x1000) ioctl$TIOCSTI(r7, 0x5412, 0x0) r8 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) pwritev(r8, &(0x7f0000000040)=[{&(0x7f0000000480)="f6", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r5, r8, 0x0, 0x2) syz_io_uring_setup(0x4eb4, &(0x7f00000001c0)={0x0, 0x6d8d, 0x8, 0x2, 0xf0}, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.190671215s ago: executing program 4 (id=3876): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x897}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x103) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x20, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = epoll_create1(0x0) fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(0xffffffffffffffff) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x10000, 0xf1}}, 0x50) unshare(0x28000600) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 535.187495ms ago: executing program 2 (id=3877): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000280)={r0}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x44828) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) 432.62924ms ago: executing program 4 (id=3878): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x14, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='affs\x00', 0x0, &(0x7f0000000140)='grpquota') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x447f, &(0x7f0000000100)={0x0, 0x31b3, 0x4, 0x3, 0x3b4}, 0x0, 0x0) syz_clone(0x80000480, 0x0, 0x0, 0x0, 0x0, 0x0) mlockall(0x7) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) r3 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) syz_usb_control_io(r3, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x5, @string={0x5, 0x3, '\x00\x00\x00'}}, 0x0, 0x0, 0x0}, 0x0) 71.033004ms ago: executing program 0 (id=3879): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ftruncate(r0, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$fuse(0xffffff9c, &(0x7f0000000880), 0x2, 0x0) r2 = openat$dlm_plock(0xffffff9c, &(0x7f00000008c0), 0x200040, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000900)=r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x24}}, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x84002, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000080)=0x6, 0x8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f00000000c0)={0x32b, @tick=0xaa1414ac}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 0s ago: executing program 2 (id=3880): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@alg={0xe0, 0x10, 0x1, 0x0, 0x3, {{'aegis128\x00'}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4c000}, 0x4008004) (fail_nth: 5) kernel console output (not intermixed with test programs): 2.264339][T19934] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1552.506205][T19960] 9pnet_fd: Insufficient options for proto=fd [ 1553.146583][T19265] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1553.409846][T19265] usb 5-1: Using ep0 maxpacket: 8 [ 1553.670832][T19265] usb 5-1: config 0 has an invalid interface number: 130 but max is 0 [ 1553.688872][T19265] usb 5-1: config 0 has no interface number 0 [ 1553.732759][T19265] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 1553.760403][T19265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.768800][T19265] usb 5-1: Product: syz [ 1553.773004][T19265] usb 5-1: Manufacturer: syz [ 1553.777886][T19265] usb 5-1: SerialNumber: syz [ 1553.793214][T19265] usb 5-1: config 0 descriptor?? [ 1553.820407][T19265] as10x_usb: device has been detected [ 1553.835565][T19265] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 1553.880679][T19265] usb 5-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 1553.930787][T19265] as10x_usb: error during firmware upload part1 [ 1553.944909][ T5872] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 1553.945552][T19265] Registered device PCTV Systems picoStick (74e) [ 1554.003970][T10621] Bluetooth: hci1: command 0x0406 tx timeout [ 1554.052982][T19265] usb 5-1: USB disconnect, device number 58 [ 1554.112511][T19265] Unregistered device PCTV Systems picoStick (74e) [ 1554.126683][T19265] as10x_usb: device has been disconnected [ 1554.170475][ T5872] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1554.207471][ T5872] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1554.255443][ T5872] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1554.292261][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.317597][ T5872] usb 1-1: Product: syz [ 1554.327061][ T5872] usb 1-1: Manufacturer: syz [ 1554.336503][ T5872] usb 1-1: SerialNumber: syz [ 1554.341431][T10621] Bluetooth: hci0: command 0x0406 tx timeout [ 1554.436734][T10621] Bluetooth: hci3: command 0x0406 tx timeout [ 1554.442897][T10621] Bluetooth: hci2: command 0x0406 tx timeout [ 1555.910169][ T5872] usb 1-1: 0:2 : does not exist [ 1555.931883][ T5872] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1556.217611][ T5872] usb 1-1: USB disconnect, device number 46 [ 1556.230823][T10621] Bluetooth: hci1: command 0x0406 tx timeout [ 1556.570253][T10621] Bluetooth: hci0: command 0x0406 tx timeout [ 1556.656623][T10621] Bluetooth: hci3: command 0x0406 tx timeout [ 1556.663328][T10621] Bluetooth: hci2: command 0x0406 tx timeout [ 1557.947086][T20014] affs: No valid root block on device nbd7 [ 1558.087318][T20018] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3379'. [ 1558.350420][ T5872] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1558.542086][ T5872] usb 8-1: Using ep0 maxpacket: 16 [ 1558.613564][ T5872] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.665730][ T5872] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1558.759522][ T5872] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1558.792495][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.896225][ T5872] usb 8-1: Product: syz [ 1558.900449][ T5872] usb 8-1: Manufacturer: syz [ 1558.915889][ T5872] usb 8-1: SerialNumber: syz [ 1559.380294][ T5872] usb 8-1: 0:2 : does not exist [ 1559.514805][T19265] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1559.689261][T19265] usb 1-1: Using ep0 maxpacket: 16 [ 1559.694719][ T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1559.705130][T19265] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1559.750248][T19265] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1559.799522][T19265] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1559.830360][T19265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.874731][T19265] usb 1-1: config 0 descriptor?? [ 1559.886343][ T9] usb 5-1: config 0 has an invalid descriptor of length 86, skipping remainder of the config [ 1559.917986][T19265] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input42 [ 1559.931391][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1559.951767][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1559.967433][ T5872] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1560.003505][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.033691][ T5872] usb 8-1: USB disconnect, device number 42 [ 1560.039165][ T9] usb 5-1: config 0 descriptor?? [ 1560.152111][T19265] usb 1-1: USB disconnect, device number 47 [ 1560.164172][T11391] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1560.433495][ T9] usb 5-1: string descriptor 0 read error: -71 [ 1560.498732][T20043] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3389'. [ 1560.517647][T20043] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3389'. [ 1560.546122][ T9] usb 5-1: USB disconnect, device number 59 [ 1560.553077][T20045] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3389'. [ 1560.562534][T20045] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3389'. [ 1560.571964][T20045] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3389'. [ 1560.582609][T20045] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3389'. [ 1560.674540][T11391] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1560.688793][T11391] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1560.820163][T11391] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1560.829435][T11391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.859362][T11391] usb 3-1: Product: syz [ 1560.869920][T11391] usb 3-1: Manufacturer: syz [ 1560.893535][T11391] usb 3-1: SerialNumber: syz [ 1561.609286][T11391] usb 3-1: 0:2 : does not exist [ 1561.644600][T11391] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1561.763464][T11391] usb 3-1: USB disconnect, device number 36 [ 1563.060191][T20070] 9pnet_fd: Insufficient options for proto=fd [ 1563.183295][T20059] ALSA: mixer_oss: invalid OSS volume '' [ 1563.671013][T20082] affs: No valid root block on device nbd8 [ 1563.972434][T19265] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1564.487084][T11391] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1564.535103][T19265] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1564.754352][T11391] usb 9-1: Using ep0 maxpacket: 16 [ 1564.777745][T11391] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1564.798313][T11391] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1564.816239][T19265] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1564.836704][T19265] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1564.846872][T19265] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1564.860120][T19265] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1564.869239][T19265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.942819][T19265] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1564.962485][T19265] usb 1-1: invalid MIDI out EP 0 [ 1565.011226][T11391] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1565.021012][T11391] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.029089][T11391] usb 9-1: Product: syz [ 1565.073821][T11391] usb 9-1: Manufacturer: syz [ 1565.078508][T11391] usb 9-1: SerialNumber: syz [ 1565.107737][T19265] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1565.825860][ T5872] usb 1-1: USB disconnect, device number 48 [ 1566.103369][T19265] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1566.113467][T11391] usb 9-1: 0:2 : does not exist [ 1566.120852][T20083] Invalid source name [ 1566.128667][T20083] UBIFS error (pid: 20083): cannot open "/dev/sg0", error -22 [ 1566.274633][T19265] usb 8-1: config 0 has an invalid descriptor of length 86, skipping remainder of the config [ 1566.293540][T19265] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1566.302796][T19265] usb 8-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1566.317465][T19265] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.332357][T19265] usb 8-1: config 0 descriptor?? [ 1566.549044][T11391] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1566.562769][T19265] usb 8-1: string descriptor 0 read error: -71 [ 1566.587203][T11391] usb 9-1: USB disconnect, device number 45 [ 1566.593693][T19265] usb 8-1: USB disconnect, device number 43 [ 1567.682227][ T5872] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 1567.932765][ T5872] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.980813][ T5872] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1568.019456][ T5872] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1568.033443][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.060277][ T5872] usb 5-1: Product: syz [ 1568.064679][ T5872] usb 5-1: Manufacturer: syz [ 1568.078622][T20118] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3412'. [ 1568.114400][ T5872] usb 5-1: SerialNumber: syz [ 1568.164955][T20118] kvm: user requested TSC rate below hardware speed [ 1568.345012][ T58] usb 9-1: new low-speed USB device number 46 using dummy_hcd [ 1568.409342][ T5872] usb 5-1: 0:2 : does not exist [ 1568.444594][ T5872] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1568.490457][ T5872] usb 5-1: USB disconnect, device number 60 [ 1568.516108][ T58] usb 9-1: Invalid ep0 maxpacket: 32 [ 1568.665973][ T58] usb 9-1: new low-speed USB device number 47 using dummy_hcd [ 1568.836725][ T58] usb 9-1: Invalid ep0 maxpacket: 32 [ 1568.864286][ T58] usb usb9-port1: attempt power cycle [ 1569.104331][T20132] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3416'. [ 1569.113403][T20132] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3416'. [ 1569.431878][ T58] usb 9-1: new low-speed USB device number 48 using dummy_hcd [ 1569.457355][ T58] usb 9-1: Invalid ep0 maxpacket: 32 [ 1569.610712][ T58] usb 9-1: new low-speed USB device number 49 using dummy_hcd [ 1569.701110][ T58] usb 9-1: Invalid ep0 maxpacket: 32 [ 1569.713714][ T58] usb usb9-port1: unable to enumerate USB device [ 1569.788468][T20144] netlink: 'syz.7.3421': attribute type 13 has an invalid length. [ 1570.846943][ T58] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1571.611436][ T58] usb 3-1: config 0 has an invalid descriptor of length 22, skipping remainder of the config [ 1571.621851][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1571.634960][ T58] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1571.644197][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.676122][ T58] usb 3-1: config 0 descriptor?? [ 1571.704823][ T58] appletouch 3-1:0.0: Could not find int-in endpoint [ 1571.723588][ T58] appletouch 3-1:0.0: probe with driver appletouch failed with error -5 [ 1571.735251][ T58] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1571.960442][T20163] syz.8.3427: attempt to access beyond end of device [ 1571.960442][T20163] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1573.455401][T19265] usb 9-1: new full-speed USB device number 50 using dummy_hcd [ 1573.777865][T19265] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.789567][T19265] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1574.589095][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1574.712254][ T58] usb 3-1: USB disconnect, device number 37 [ 1574.798939][T19265] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1574.808170][T19265] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.816503][T19265] usb 9-1: Product: syz [ 1574.820753][T19265] usb 9-1: Manufacturer: syz [ 1574.825489][T19265] usb 9-1: SerialNumber: syz [ 1574.907157][T20183] netlink: 'syz.4.3433': attribute type 13 has an invalid length. [ 1575.080843][T19265] usb 9-1: 0:2 : does not exist [ 1575.089274][T19265] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1575.118419][T19265] usb 9-1: USB disconnect, device number 50 [ 1576.417010][ T5872] usb 5-1: new low-speed USB device number 61 using dummy_hcd [ 1576.810290][ T5872] usb 5-1: Invalid ep0 maxpacket: 32 [ 1577.111897][ T5872] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 1577.292975][ T5872] usb 5-1: Invalid ep0 maxpacket: 32 [ 1577.303333][ T5872] usb usb5-port1: attempt power cycle [ 1577.588688][ T58] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1578.340919][ T5872] usb 5-1: new low-speed USB device number 63 using dummy_hcd [ 1579.053566][ T5872] usb 5-1: device descriptor read/8, error -71 [ 1579.096035][ T58] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.106425][ T58] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1579.118566][ T58] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1579.130741][ T58] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1579.145702][ T58] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1579.159777][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.181783][ T58] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1579.193711][ T58] usb 9-1: invalid MIDI out EP 0 [ 1579.453493][T19265] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1579.614775][ T58] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1579.695410][ T58] usb 9-1: USB disconnect, device number 51 [ 1579.821332][T19265] usb 8-1: config 0 has an invalid descriptor of length 22, skipping remainder of the config [ 1579.832173][T19265] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1579.846973][T20202] Invalid source name [ 1579.856683][T20202] UBIFS error (pid: 20202): cannot open "/dev/sg0", error -22 [ 1579.866531][T19265] usb 8-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1579.926878][T19265] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.946613][T19265] usb 8-1: config 0 descriptor?? [ 1579.960288][T19265] appletouch 8-1:0.0: Could not find int-in endpoint [ 1580.135482][T19265] appletouch 8-1:0.0: probe with driver appletouch failed with error -5 [ 1580.180154][T19265] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1581.849977][T20245] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3452'. [ 1582.077912][T20250] fuse: Bad value for 'fd' [ 1582.152796][T20251] 9pnet_fd: Insufficient options for proto=fd [ 1583.152869][ T58] usb 9-1: new low-speed USB device number 52 using dummy_hcd [ 1583.525600][ T5872] usb 8-1: USB disconnect, device number 44 [ 1583.728194][ T58] usb 9-1: config 1 interface 0 altsetting 4 endpoint 0x82 is Bulk; changing to Interrupt [ 1583.821776][ T58] usb 9-1: config 1 interface 0 altsetting 4 endpoint 0x3 is Bulk; changing to Interrupt [ 1583.838866][ T58] usb 9-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1584.571715][ T58] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1584.581756][ T58] usb 9-1: string descriptor 0 read error: -22 [ 1584.648069][ T5872] usb 8-1: new low-speed USB device number 45 using dummy_hcd [ 1584.685330][ T58] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1584.708292][ T58] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.786819][T20245] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1584.805918][T20245] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1584.838191][ T5872] usb 8-1: Invalid ep0 maxpacket: 32 [ 1584.845674][ T58] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 1584.990335][ T5872] usb 8-1: new low-speed USB device number 46 using dummy_hcd [ 1585.172147][ T5872] usb 8-1: Invalid ep0 maxpacket: 32 [ 1585.193400][ T5872] usb usb8-port1: attempt power cycle [ 1585.281761][ T58] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1585.557056][ T58] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.585854][ T58] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1585.608854][ T58] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1585.634046][ T5872] usb 8-1: new low-speed USB device number 47 using dummy_hcd [ 1585.656674][T19265] usb 9-1: USB disconnect, device number 52 [ 1585.662450][ T58] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1585.676218][ T58] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1585.685779][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.704956][ T58] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1585.712942][ T58] usb 5-1: invalid MIDI out EP 0 [ 1585.729348][ T5872] usb 8-1: Invalid ep0 maxpacket: 32 [ 1586.965255][ T5872] usb 8-1: new low-speed USB device number 48 using dummy_hcd [ 1588.039144][ T58] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1588.050870][ T58] usb 5-1: USB disconnect, device number 65 [ 1588.056864][ T5872] usb 8-1: device not accepting address 48, error -71 [ 1591.077649][ T5872] usb usb8-port1: unable to enumerate USB device [ 1593.544157][T20311] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3470'. [ 1593.553523][T20311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3470'. [ 1593.562713][T20311] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3470'. [ 1593.575603][T20311] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3470'. [ 1593.822376][T20311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3470'. [ 1593.832014][T20311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3470'. [ 1594.845429][T20319] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3475'. [ 1595.826754][T20322] 9pnet_fd: Insufficient options for proto=fd [ 1595.913311][T20319] kvm: user requested TSC rate below hardware speed [ 1596.172553][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1597.205299][T19265] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1598.129519][T19265] usb 3-1: Using ep0 maxpacket: 8 [ 1598.135232][ T9] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.145575][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1598.164112][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1598.174749][ T9] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1598.266131][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1598.453036][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.826713][T19265] usb 3-1: device descriptor read/all, error -71 [ 1598.839114][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1598.869063][ T9] usb 5-1: invalid MIDI out EP 0 [ 1598.915976][T20352] input: syz0 as /devices/virtual/input/input43 [ 1599.145130][ T9] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1600.261284][T11391] usb 5-1: USB disconnect, device number 66 [ 1600.285516][T20364] affs: No valid root block on device nbd7 [ 1602.227594][ T58] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1602.811362][ T58] usb 8-1: Using ep0 maxpacket: 16 [ 1602.818996][ T58] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.884963][ T58] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1603.597139][T20381] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3490'. [ 1603.623070][ T58] usb 8-1: string descriptor 0 read error: -71 [ 1603.651711][ T58] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1603.708413][ T58] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.709794][T20381] kvm: user requested TSC rate below hardware speed [ 1603.740708][ T58] usb 8-1: can't set config #1, error -71 [ 1603.768019][ T58] usb 8-1: USB disconnect, device number 49 [ 1603.997578][T11391] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1604.317195][ T58] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1605.398557][T11391] usb 5-1: Using ep0 maxpacket: 16 [ 1605.405712][T11391] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1605.416820][T11391] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1605.426721][T11391] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1605.505473][T11391] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1605.514840][T11391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.534636][T11391] usb 5-1: config 0 descriptor?? [ 1605.614752][T20392] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3494'. [ 1605.623793][T20392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3494'. [ 1605.632775][T20392] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3494'. [ 1605.641872][T20392] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3494'. [ 1605.651469][ T58] usb 8-1: Using ep0 maxpacket: 16 [ 1605.661225][T20392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3494'. [ 1605.670236][T20392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3494'. [ 1605.685168][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1605.697323][ T58] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1605.719357][ T58] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.740682][ T58] usb 8-1: Product: syz [ 1605.745333][ T58] usb 8-1: Manufacturer: syz [ 1605.750297][ T58] usb 8-1: SerialNumber: syz [ 1605.775231][ T58] usb 8-1: config 0 descriptor?? [ 1605.797499][ T58] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1605.835587][ T58] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1605.849464][T20398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3495'. [ 1605.860191][T20400] 9pnet_fd: Insufficient options for proto=fd [ 1605.917184][T20398] kvm: user requested TSC rate below hardware speed [ 1605.968459][T20403] virt_wifi0 speed is unknown, defaulting to 1000 [ 1605.984895][T11391] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0909.0017/input/input44 [ 1606.093711][T11391] uclogic 0003:28BD:0909.0017: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.4-1/input0 [ 1606.189668][T19265] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1606.216586][T11391] usb 5-1: USB disconnect, device number 67 [ 1606.255473][T20388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1606.287967][T20388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1606.321114][T20411] netlink: 'syz.0.3498': attribute type 13 has an invalid length. [ 1606.371585][T19265] usb 9-1: Using ep0 maxpacket: 8 [ 1606.390528][T19265] usb 9-1: config 0 has an invalid interface number: 130 but max is 0 [ 1606.405935][T19265] usb 9-1: config 0 has no interface number 0 [ 1606.430269][T19265] usb 9-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 1606.456675][T19265] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.481421][T19265] usb 9-1: Product: syz [ 1606.486782][T19265] usb 9-1: Manufacturer: syz [ 1606.491827][T19265] usb 9-1: SerialNumber: syz [ 1606.499105][T19265] usb 9-1: config 0 descriptor?? [ 1606.508127][T19265] as10x_usb: device has been detected [ 1606.514829][T19265] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 1606.543613][T19265] usb 9-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 1606.560162][T20414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3499'. [ 1606.571352][T19265] as10x_usb: error during firmware upload part1 [ 1606.578276][T19265] Registered device PCTV Systems picoStick (74e) [ 1606.588027][ T58] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1606.732579][T11391] usb 9-1: USB disconnect, device number 53 [ 1606.751438][T11391] Unregistered device PCTV Systems picoStick (74e) [ 1606.752524][T11391] as10x_usb: device has been disconnected [ 1606.842260][T19265] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1606.931490][T20419] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3501'. [ 1607.698928][T19265] usb 1-1: Using ep0 maxpacket: 16 [ 1608.115094][T19265] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1608.128748][T19265] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1608.138662][T19265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.165955][T19265] usb 1-1: config 0 descriptor?? [ 1608.193439][T19265] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input45 [ 1608.307471][ T58] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1608.315585][ T58] em28xx 8-1:0.0: board has no eeprom [ 1610.610757][ T58] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1610.618802][ T58] em28xx 8-1:0.0: dvb set to bulk mode. [ 1610.631853][ T5872] em28xx 8-1:0.0: Binding DVB extension [ 1610.837817][ T58] usb 8-1: USB disconnect, device number 50 [ 1611.065338][ T58] em28xx 8-1:0.0: Disconnecting em28xx [ 1611.143405][ T5872] em28xx 8-1:0.0: Registering input extension [ 1611.167406][ T58] em28xx 8-1:0.0: Closing input extension [ 1611.478549][T19265] bcm5974 1-1:0.0: could not read from device [ 1611.741709][ T58] em28xx 8-1:0.0: Freeing device [ 1611.762892][ T5178] bcm5974 1-1:0.0: could not read from device [ 1611.779807][T19265] input: failed to attach handler mousedev to device input45, error: -5 [ 1611.801838][ T5178] bcm5974 1-1:0.0: could not read from device [ 1611.826070][T19265] usb 1-1: USB disconnect, device number 49 [ 1611.839112][T20452] __nla_validate_parse: 5 callbacks suppressed [ 1611.839130][T20452] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3510'. [ 1611.839363][ T5178] bcm5974 1-1:0.0: could not read from device [ 1612.432106][T20455] netlink: 'syz.0.3509': attribute type 13 has an invalid length. [ 1612.716762][ T58] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1612.718511][T20465] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3513'. [ 1612.735926][T20465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3513'. [ 1612.745343][T20465] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3513'. [ 1612.758342][T20465] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3513'. [ 1612.787776][T20465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3513'. [ 1612.797638][T20465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3513'. [ 1612.871200][T20467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3512'. [ 1612.965881][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 84, setting to 64 [ 1612.999558][ T58] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1614.048824][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.135102][ T58] usb 8-1: config 0 descriptor?? [ 1614.593421][ T58] ath6kl: Failed to submit usb control message: -71 [ 1614.600226][ T58] ath6kl: unable to send the bmi data to the device: -71 [ 1615.290791][ T58] ath6kl: Unable to send get target info: -71 [ 1615.336584][T20482] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3515'. [ 1615.352159][T20482] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3515'. [ 1615.416670][ T58] ath6kl: Failed to init ath6kl core: -71 [ 1615.428809][ T58] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1615.889814][ T58] usb 8-1: USB disconnect, device number 51 [ 1619.401609][T20501] __nla_validate_parse: 4 callbacks suppressed [ 1619.401630][T20501] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3521'. [ 1619.416967][T20501] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3521'. [ 1619.426089][T20501] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3521'. [ 1619.435102][T20501] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3521'. [ 1619.564155][T20501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3521'. [ 1619.573047][T20501] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3521'. [ 1619.676221][T20506] netlink: 'syz.7.3523': attribute type 13 has an invalid length. [ 1620.667532][T20512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3525'. [ 1620.690006][T20512] kvm: user requested TSC rate below hardware speed [ 1620.785068][T20524] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3528'. [ 1620.795097][T20524] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3528'. [ 1620.804266][T20524] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3528'. [ 1621.407319][T20527] virt_wifi0 speed is unknown, defaulting to 1000 [ 1621.789699][ T58] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1622.223244][ T58] usb 8-1: config 0 has an invalid descriptor of length 18, skipping remainder of the config [ 1622.244721][ T58] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1622.446048][ T58] usb 8-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1622.455541][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.516535][ T58] usb 8-1: config 0 descriptor?? [ 1622.558946][ T58] appletouch 8-1:0.0: Could not find int-in endpoint [ 1622.565704][ T58] appletouch 8-1:0.0: probe with driver appletouch failed with error -5 [ 1623.253473][ T58] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1623.342061][T20544] netlink: 'syz.8.3534': attribute type 13 has an invalid length. [ 1624.104838][T20541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.792117][ T9] usb 8-1: USB disconnect, device number 52 [ 1625.422226][T19265] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1625.561788][T20572] __nla_validate_parse: 3 callbacks suppressed [ 1625.561826][T20572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3543'. [ 1625.595824][T19265] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1625.671138][T19265] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1625.769035][T20575] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3542'. [ 1625.778638][T20575] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3542'. [ 1625.788551][T20575] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3542'. [ 1625.799408][T20575] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3542'. [ 1625.954814][T19265] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1625.997003][T20575] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3542'. [ 1626.006842][T20575] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3542'. [ 1626.114369][ T5872] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1626.117143][T19265] usb 9-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1626.172422][T19265] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.247335][T19265] usb 9-1: config 0 descriptor?? [ 1626.343486][ T5872] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1626.362852][ T5872] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1626.374399][ T5872] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1626.384472][ T5872] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1626.398120][ T5872] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1626.426143][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.451635][ T5872] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1626.459610][ T5872] usb 5-1: invalid MIDI out EP 0 [ 1626.521620][ T5872] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1626.549401][T20582] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3545'. [ 1626.634271][T20584] netlink: 'syz.2.3546': attribute type 13 has an invalid length. [ 1626.692846][T19265] playstation 0003:054C:0BA0.0018: unbalanced collection at end of report description [ 1626.704899][T19265] playstation 0003:054C:0BA0.0018: Parse failed [ 1626.711326][T19265] playstation 0003:054C:0BA0.0018: probe with driver playstation failed with error -22 [ 1626.716753][ T5872] usb 5-1: USB disconnect, device number 68 [ 1627.059047][T20561] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1627.066085][T20578] Invalid source name [ 1627.078148][T20578] UBIFS error (pid: 20578): cannot open "/dev/sg0", error -22 [ 1627.132212][T19265] usb 9-1: USB disconnect, device number 54 [ 1627.206236][ T58] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1627.895709][ T58] usb 8-1: config 0 has an invalid descriptor of length 18, skipping remainder of the config [ 1627.912622][ T58] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1627.925846][ T58] usb 8-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1627.936306][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.961999][ T58] usb 8-1: config 0 descriptor?? [ 1627.987297][ T58] appletouch 8-1:0.0: Could not find int-in endpoint [ 1627.994623][ T58] appletouch 8-1:0.0: probe with driver appletouch failed with error -5 [ 1628.015593][ T58] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1628.607611][T20606] affs: No valid root block on device nbd2 [ 1628.704132][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1628.859116][T20612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3557'. [ 1628.880928][ T9] usb 1-1: config 0 has an invalid descriptor of length 18, skipping remainder of the config [ 1629.008988][T20612] kvm: user requested TSC rate below hardware speed [ 1629.097899][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1629.111311][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1629.120400][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.130412][ T9] usb 1-1: config 0 descriptor?? [ 1629.138529][ T9] appletouch 1-1:0.0: Could not find int-in endpoint [ 1629.146867][ T9] appletouch 1-1:0.0: probe with driver appletouch failed with error -5 [ 1629.156811][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1629.933272][ T5863] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1629.997129][ T58] usb 8-1: USB disconnect, device number 53 [ 1630.093868][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 1630.100988][ T5863] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1630.122286][ T5863] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1630.203283][ T5863] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1630.213240][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.221395][ T5863] usb 3-1: Product: syz [ 1630.226576][ T5863] usb 3-1: Manufacturer: syz [ 1630.231653][ T5863] usb 3-1: SerialNumber: syz [ 1631.380408][ T5863] usb 3-1: 0:2 : does not exist [ 1631.734136][ T5863] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1631.991167][ T5863] usb 3-1: USB disconnect, device number 40 [ 1631.995943][ T9] usb 1-1: USB disconnect, device number 50 [ 1632.283591][T20641] 9pnet_fd: Insufficient options for proto=fd [ 1633.335572][T20654] affs: No valid root block on device nbd7 [ 1633.473637][T20659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3571'. [ 1633.493463][ T9] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1633.531096][T20659] kvm: user requested TSC rate below hardware speed [ 1633.803486][ T5863] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1633.975086][ T5863] usb 8-1: Using ep0 maxpacket: 16 [ 1633.982179][ T5863] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1633.996061][T19265] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1634.001723][ T5863] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1634.017248][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 1634.027815][ T9] usb 9-1: config 0 has an invalid interface number: 130 but max is 0 [ 1634.028738][ T5863] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1634.036154][ T9] usb 9-1: config 0 has no interface number 0 [ 1634.041864][ T9] usb 9-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 1634.055613][ T5863] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.075236][ T5863] usb 8-1: Product: syz [ 1634.079288][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.079414][ T5863] usb 8-1: Manufacturer: syz [ 1634.096316][ T9] usb 9-1: Product: syz [ 1634.101753][ T5863] usb 8-1: SerialNumber: syz [ 1634.105506][ T9] usb 9-1: Manufacturer: syz [ 1634.108593][ T58] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1634.117011][ T9] usb 9-1: SerialNumber: syz [ 1634.134710][ T9] usb 9-1: config 0 descriptor?? [ 1634.151803][ T9] as10x_usb: device has been detected [ 1634.157583][T19265] usb 5-1: Using ep0 maxpacket: 16 [ 1634.165712][T19265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1634.176195][ T9] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 1634.193211][T19265] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1634.205537][T19265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.214629][T19265] usb 5-1: Product: syz [ 1634.219083][ T9] usb 9-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 1634.229423][T19265] usb 5-1: Manufacturer: syz [ 1634.236140][ T9] as10x_usb: error during firmware upload part1 [ 1634.250839][T19265] usb 5-1: SerialNumber: syz [ 1634.260239][ T9] Registered device PCTV Systems picoStick (74e) [ 1634.267522][T19265] usb 5-1: config 0 descriptor?? [ 1634.284590][ T58] usb 1-1: Using ep0 maxpacket: 16 [ 1634.292283][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1634.294549][T19265] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1634.308705][ T58] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1634.328611][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.331933][T19265] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1634.363065][ T58] usb 1-1: Product: syz [ 1634.373224][ T58] usb 1-1: Manufacturer: syz [ 1634.377887][ T58] usb 1-1: SerialNumber: syz [ 1634.382857][ T9] usb 9-1: USB disconnect, device number 55 [ 1634.387813][ T58] usb 1-1: config 0 descriptor?? [ 1634.417153][ T58] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1634.427844][ T9] Unregistered device PCTV Systems picoStick (74e) [ 1634.434315][ T58] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1634.437559][ T9] as10x_usb: device has been disconnected [ 1634.571930][ T5863] usb 8-1: 0:2 : does not exist [ 1634.758753][T20671] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3575'. [ 1634.768339][T20671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3575'. [ 1634.778762][T20671] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3575'. [ 1634.788567][T20671] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3575'. [ 1634.839702][T20656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1634.863833][T20656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1634.878285][T20671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3575'. [ 1634.887796][T20671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3575'. [ 1635.201135][T20666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1635.398358][T19265] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1635.405384][T20666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1635.724908][T20677] fuse: Bad value for 'fd' [ 1635.801115][T20678] 9pnet_fd: Insufficient options for proto=fd [ 1635.883385][ T58] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1636.018351][T19265] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1636.051025][T19265] em28xx 5-1:0.0: board has no eeprom [ 1636.134610][T19265] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1636.163101][T19265] em28xx 5-1:0.0: dvb set to bulk mode. [ 1636.185461][ T9] em28xx 5-1:0.0: Binding DVB extension [ 1636.207508][T19265] usb 5-1: USB disconnect, device number 69 [ 1636.229126][T19265] em28xx 5-1:0.0: Disconnecting em28xx [ 1636.320561][ T9] em28xx 5-1:0.0: Registering input extension [ 1636.330564][T19265] em28xx 5-1:0.0: Closing input extension [ 1636.366755][T19265] em28xx 5-1:0.0: Freeing device [ 1636.401713][ T5872] usb 9-1: new full-speed USB device number 56 using dummy_hcd [ 1636.522816][ T58] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1636.541047][ T58] em28xx 1-1:0.0: board has no eeprom [ 1636.547935][ T5863] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1636.582388][ T5863] usb 8-1: USB disconnect, device number 54 [ 1636.636324][ T58] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1636.644345][ T58] em28xx 1-1:0.0: dvb set to bulk mode. [ 1636.651852][ T5872] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.662970][T19803] em28xx 1-1:0.0: Binding DVB extension [ 1636.668654][ T5872] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1636.682170][ T5872] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1636.696419][ T58] usb 1-1: USB disconnect, device number 51 [ 1636.709536][ T5872] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.718745][ T58] em28xx 1-1:0.0: Disconnecting em28xx [ 1636.742991][ T5872] usb 9-1: Product: syz [ 1636.758211][ T5872] usb 9-1: Manufacturer: syz [ 1636.762875][ T5872] usb 9-1: SerialNumber: syz [ 1636.796300][T19803] em28xx 1-1:0.0: Registering input extension [ 1636.829464][ T58] em28xx 1-1:0.0: Closing input extension [ 1636.853330][ T58] em28xx 1-1:0.0: Freeing device [ 1637.036411][T19265] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1637.051203][T20681] 9pnet_fd: Insufficient options for proto=fd [ 1637.209369][T19265] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1637.994468][T19265] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1638.014446][ T5872] usb 9-1: 0:2 : does not exist [ 1638.034913][ T5872] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1638.053676][T19265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.068723][ T5872] usb 9-1: USB disconnect, device number 56 [ 1638.153943][T19265] usb 3-1: config 0 descriptor?? [ 1638.279823][T19265] appletouch 3-1:0.0: Could not find int-in endpoint [ 1638.286960][T19265] appletouch 3-1:0.0: probe with driver appletouch failed with error -5 [ 1638.449801][T19265] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1640.132464][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1640.596711][ T5872] usb 3-1: USB disconnect, device number 41 [ 1640.676172][T20716] fuse: Bad value for 'fd' [ 1640.741268][T20719] 9pnet_fd: Insufficient options for proto=fd [ 1643.786678][T20741] binder_alloc: 20739: binder_alloc_buf, no vma [ 1646.401024][T20766] fuse: Bad value for 'fd' [ 1646.580528][T20768] 9pnet_fd: Insufficient options for proto=fd [ 1648.597500][T20778] 9pnet_fd: Insufficient options for proto=fd [ 1648.764361][T20784] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3610'. [ 1648.773916][T20784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3610'. [ 1648.783296][T20784] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3610'. [ 1648.793666][T20784] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3610'. [ 1648.856638][T20784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3610'. [ 1648.865713][T20784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3610'. [ 1650.042576][ T58] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1651.710248][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 1651.815627][T20805] 9pnet_fd: Insufficient options for proto=fd [ 1651.933095][ T58] usb 1-1: device descriptor read/all, error -71 [ 1652.191298][ T5872] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1656.977711][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 1657.231161][ T5872] usb 3-1: config 0 has an invalid interface number: 130 but max is 0 [ 1657.312245][ T5872] usb 3-1: config 0 has no interface number 0 [ 1657.701707][ T5872] usb 3-1: string descriptor 0 read error: -71 [ 1657.709117][ T5872] usb 3-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 1657.719863][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.833111][ T5872] usb 3-1: config 0 descriptor?? [ 1657.844886][ T5872] usb 3-1: can't set config #0, error -71 [ 1657.852545][ T5872] usb 3-1: USB disconnect, device number 42 [ 1658.762179][T20819] block nbd4: not configured, cannot reconfigure [ 1658.852152][T20826] FAULT_INJECTION: forcing a failure. [ 1658.852152][T20826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1658.865429][T20826] CPU: 0 UID: 0 PID: 20826 Comm: syz.4.3624 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1658.876244][T20826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1658.886354][T20826] Call Trace: [ 1658.889656][T20826] [ 1658.892616][T20826] dump_stack_lvl+0x241/0x360 [ 1658.897353][T20826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1658.902607][T20826] ? __pfx__printk+0x10/0x10 [ 1658.907236][T20826] ? __pfx_lock_release+0x10/0x10 [ 1658.912285][T20826] should_fail_ex+0x3b0/0x4e0 [ 1658.916985][T20826] _copy_from_user+0x2f/0xc0 [ 1658.921604][T20826] copy_msghdr_from_user+0xae/0x680 [ 1658.926833][T20826] ? __lock_acquire+0x1397/0x2100 [ 1658.931881][T20826] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1658.937707][T20826] ? __fget_files+0x2a/0x410 [ 1658.942309][T20826] ? __fget_files+0x2a/0x410 [ 1658.946916][T20826] do_recvmmsg+0x3bd/0xab0 [ 1658.951362][T20826] ? __pfx_do_recvmmsg+0x10/0x10 [ 1658.956342][T20826] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1658.962256][T20826] ? ksys_write+0x22a/0x2b0 [ 1658.966779][T20826] ? __pfx_lock_release+0x10/0x10 [ 1658.971823][T20826] ? vfs_write+0x730/0xd30 [ 1658.976269][T20826] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1658.982273][T20826] ? __fget_files+0x2a/0x410 [ 1658.986887][T20826] __x64_sys_recvmmsg+0x199/0x250 [ 1658.991926][T20826] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1658.997488][T20826] ? do_syscall_64+0x100/0x230 [ 1659.002271][T20826] ? do_syscall_64+0xb6/0x230 [ 1659.006981][T20826] do_syscall_64+0xf3/0x230 [ 1659.011496][T20826] ? clear_bhb_loop+0x35/0x90 [ 1659.016208][T20826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.022133][T20826] RIP: 0033:0x7f30c4985d29 [ 1659.026562][T20826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1659.046282][T20826] RSP: 002b:00007f30c56e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1659.054716][T20826] RAX: ffffffffffffffda RBX: 00007f30c4b75fa0 RCX: 00007f30c4985d29 [ 1659.062694][T20826] RDX: 0000000000000004 RSI: 00000000200086c0 RDI: 0000000000000003 [ 1659.070690][T20826] RBP: 00007f30c56e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1659.078687][T20826] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 1659.086672][T20826] R13: 0000000000000000 R14: 00007f30c4b75fa0 R15: 00007ffecb6e2e78 [ 1659.094690][T20826] [ 1659.097837][ C0] vkms_vblank_simulate: vblank timer overrun [ 1659.113263][T20829] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3621'. [ 1659.971861][T20839] 9pnet_fd: Insufficient options for proto=fd [ 1661.225165][ T9] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1662.056357][T20850] block nbd7: not configured, cannot reconfigure [ 1663.057301][T20856] netlink: 'syz.7.3632': attribute type 13 has an invalid length. [ 1663.544710][ T9] usb 5-1: device not accepting address 70, error -71 [ 1663.745871][T19265] usb 9-1: new full-speed USB device number 57 using dummy_hcd [ 1663.758787][T11391] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1664.058385][T19265] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.286566][T19265] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1664.515677][T19265] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1664.528349][T19265] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.549617][T19265] usb 9-1: Product: syz [ 1664.554147][T19265] usb 9-1: Manufacturer: syz [ 1664.558805][T19265] usb 9-1: SerialNumber: syz [ 1664.564750][T11391] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 1664.583453][T11391] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1664.626078][T11391] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1664.663119][T11391] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1664.702815][T11391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.718571][T11391] usb 3-1: config 0 descriptor?? [ 1664.824639][T19265] usb 9-1: 0:2 : does not exist [ 1664.834800][T19265] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1664.903706][T19265] usb 9-1: USB disconnect, device number 57 [ 1664.945245][ T9] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1664.957340][T11391] appletouch 3-1:0.0: Failed to read mode from device. [ 1664.980875][T11391] appletouch 3-1:0.0: probe with driver appletouch failed with error -5 [ 1664.992448][T11391] usb 3-1: USB disconnect, device number 43 [ 1665.212765][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1665.224753][ T9] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1665.232992][ T9] usb 5-1: config 0 has no interface number 0 [ 1665.233042][ T9] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1666.900514][ T9] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1666.909726][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.918545][ T9] usb 5-1: Product: syz [ 1666.932724][ T9] usb 5-1: Manufacturer: syz [ 1666.937587][ T9] usb 5-1: SerialNumber: syz [ 1667.018154][ T9] usb 5-1: config 0 descriptor?? [ 1667.073257][T20903] 9pnet_fd: Insufficient options for proto=fd [ 1667.414780][ T5872] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1667.521302][ T9] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1667.533025][ T9] usb 5-1: USB disconnect, device number 72 [ 1668.677006][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 1668.723140][ T5872] usb 3-1: config 0 has an invalid interface number: 130 but max is 0 [ 1668.731543][ T5872] usb 3-1: config 0 has no interface number 0 [ 1668.741807][ T5872] usb 3-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 1668.762024][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.770196][ T5872] usb 3-1: Product: syz [ 1668.774779][ T5872] usb 3-1: Manufacturer: syz [ 1668.779404][ T5872] usb 3-1: SerialNumber: syz [ 1668.786294][ T5872] usb 3-1: config 0 descriptor?? [ 1668.796075][ T5872] as10x_usb: device has been detected [ 1668.801925][ T5872] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 1668.826961][ T5872] usb 3-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 1669.383586][ T5872] as10x_usb: error during firmware upload part1 [ 1669.584928][ T5872] Registered device PCTV Systems picoStick (74e) [ 1669.689801][ T5872] usb 3-1: USB disconnect, device number 44 [ 1669.848966][ T5872] Unregistered device PCTV Systems picoStick (74e) [ 1669.859446][ T5872] as10x_usb: device has been disconnected [ 1670.313710][ T9] usb 9-1: new full-speed USB device number 58 using dummy_hcd [ 1670.522449][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.660113][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1670.860703][ T9] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1670.889408][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.934867][ T9] usb 9-1: Product: syz [ 1671.089351][ T9] usb 9-1: Manufacturer: syz [ 1671.113743][ T9] usb 9-1: SerialNumber: syz [ 1672.107539][ T9] usb 9-1: 0:2 : does not exist [ 1672.161491][ T9] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1672.279167][T20950] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1672.288389][T20950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1672.298018][T20950] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1672.323447][T20950] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1672.352140][T20950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1672.361352][T20950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1672.740533][T20944] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3661'. [ 1672.749624][T20944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3661'. [ 1672.758586][T20944] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3661'. [ 1672.767706][T20944] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3661'. [ 1672.984185][ T9] usb 9-1: USB disconnect, device number 58 [ 1673.029743][T20953] netlink: 'syz.4.3664': attribute type 13 has an invalid length. [ 1673.997706][T20955] block nbd2: not configured, cannot reconfigure [ 1676.125829][ T9] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1676.362769][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 1676.369907][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1676.527423][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1676.807561][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.822542][ T9] usb 8-1: Product: syz [ 1676.826801][ T9] usb 8-1: Manufacturer: syz [ 1676.842563][ T9] usb 8-1: SerialNumber: syz [ 1676.869623][ T9] usb 8-1: config 0 descriptor?? [ 1676.936868][ T9] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1676.982445][ T9] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1677.763395][T19803] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1677.853115][T20969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1677.933065][T20969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1677.975539][T20993] netlink: 'syz.4.3676': attribute type 13 has an invalid length. [ 1678.672421][T19803] usb 9-1: Using ep0 maxpacket: 8 [ 1678.918367][T19803] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1678.927671][T19803] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.970768][T19803] usb 9-1: Product: syz [ 1679.021062][T19803] usb 9-1: Manufacturer: syz [ 1679.048538][T19803] usb 9-1: SerialNumber: syz [ 1679.084849][T19803] usb 9-1: config 0 descriptor?? [ 1679.362860][T19803] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1679.579581][ T9] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1679.676991][ T9] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1679.685062][ T9] em28xx 8-1:0.0: board has no eeprom [ 1679.794555][ T9] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1679.850958][ T5872] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1679.878035][ T9] em28xx 8-1:0.0: dvb set to bulk mode. [ 1679.914176][T11391] em28xx 8-1:0.0: Binding DVB extension [ 1680.033964][ T5872] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1680.230670][ T5872] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1680.381170][ T5872] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1680.414263][ T9] usb 8-1: USB disconnect, device number 55 [ 1680.422752][ T9] em28xx 8-1:0.0: Disconnecting em28xx [ 1680.529311][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.550027][T11391] em28xx 8-1:0.0: Registering input extension [ 1680.557417][ T9] em28xx 8-1:0.0: Closing input extension [ 1680.563399][ T5872] usb 3-1: Product: syz [ 1680.563534][ T5872] usb 3-1: Manufacturer: syz [ 1680.610206][ T5872] usb 3-1: SerialNumber: syz [ 1680.685726][ T9] em28xx 8-1:0.0: Freeing device [ 1680.702033][T19803] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1680.955793][T19803] usb 9-1: USB disconnect, device number 59 [ 1682.092587][ T5872] usb 3-1: 0:2 : does not exist [ 1683.101033][ T5872] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1683.136365][T20940] Set syz1 is full, maxelem 65536 reached [ 1683.295383][T21022] netlink: 'syz.4.3684': attribute type 10 has an invalid length. [ 1683.333653][ T5872] usb 3-1: USB disconnect, device number 45 [ 1684.109903][T21022] team0: Port device geneve1 added [ 1684.184736][T21026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.708412][T21061] __nla_validate_parse: 2 callbacks suppressed [ 1686.708454][T21061] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3693'. [ 1686.917856][T21061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3693'. [ 1687.727027][T21061] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3693'. [ 1687.784859][T21061] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3693'. [ 1688.080339][T21054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3693'. [ 1688.089248][T21054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3693'. [ 1688.229411][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1688.427791][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1688.449433][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1688.587670][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.596014][ T9] usb 3-1: Product: syz [ 1688.600337][ T9] usb 3-1: Manufacturer: syz [ 1688.605060][ T9] usb 3-1: SerialNumber: syz [ 1689.106544][ T9] usb 3-1: config 0 descriptor?? [ 1689.888490][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1689.888803][T21078] syz_tun: entered allmulticast mode [ 1691.331831][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1691.390403][T19265] usb 8-1: new full-speed USB device number 56 using dummy_hcd [ 1691.751719][ T9] usb 3-1: USB disconnect, device number 46 [ 1691.919456][T19265] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 1691.943671][T19265] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1691.955938][T19265] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1691.969608][T19265] usb 8-1: config 1 has no interface number 0 [ 1691.976847][T19265] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1691.989366][T19265] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1692.002589][T19265] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1692.050959][T19265] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.076741][T19265] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 1692.301432][T19265] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 1693.505429][T19265] snd_usb_pod 8-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1693.812679][T19803] usb 8-1: USB disconnect, device number 56 [ 1693.839492][T19803] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 1695.086790][T21075] syz_tun: left allmulticast mode [ 1695.103605][ T5872] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1695.386432][T21122] FAULT_INJECTION: forcing a failure. [ 1695.386432][T21122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1695.399692][T21122] CPU: 1 UID: 0 PID: 21122 Comm: syz.2.3711 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1695.410482][T21122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1695.420564][T21122] Call Trace: [ 1695.423862][T21122] [ 1695.426826][T21122] dump_stack_lvl+0x241/0x360 [ 1695.431551][T21122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1695.436784][T21122] ? __pfx__printk+0x10/0x10 [ 1695.441418][T21122] ? __pfx_lock_release+0x10/0x10 [ 1695.446485][T21122] should_fail_ex+0x3b0/0x4e0 [ 1695.451281][T21122] _copy_from_user+0x2f/0xc0 [ 1695.455929][T21122] copy_msghdr_from_user+0xae/0x680 [ 1695.461178][T21122] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1695.467019][T21122] ? __fget_files+0x2a/0x410 [ 1695.471650][T21122] ? __fget_files+0x2a/0x410 [ 1695.476274][T21122] __sys_sendmsg+0x209/0x350 [ 1695.480918][T21122] ? __pfx___sys_sendmsg+0x10/0x10 [ 1695.486122][T21122] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1695.492484][T21122] ? do_syscall_64+0x100/0x230 [ 1695.497293][T21122] ? do_syscall_64+0xb6/0x230 [ 1695.502110][T21122] do_syscall_64+0xf3/0x230 [ 1695.506646][T21122] ? clear_bhb_loop+0x35/0x90 [ 1695.511358][T21122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.517288][T21122] RIP: 0033:0x7f19f2185d29 [ 1695.521728][T21122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1695.541452][T21122] RSP: 002b:00007f19effd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1695.550020][T21122] RAX: ffffffffffffffda RBX: 00007f19f2376160 RCX: 00007f19f2185d29 [ 1695.558033][T21122] RDX: 0000000004000040 RSI: 00000000200000c0 RDI: 0000000000000008 [ 1695.566133][T21122] RBP: 00007f19effd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1695.574252][T21122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1695.582289][T21122] R13: 0000000000000000 R14: 00007f19f2376160 R15: 00007ffd24d023c8 [ 1695.590314][T21122] [ 1696.514201][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 1696.527055][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1696.549063][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1696.594501][ T5872] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1696.684635][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.301145][ T5872] usb 5-1: config 0 descriptor?? [ 1697.321430][ T5872] usb 5-1: can't set config #0, error -71 [ 1697.371222][ T5872] usb 5-1: USB disconnect, device number 73 [ 1697.808516][T19265] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1698.346622][T19265] usb 9-1: Using ep0 maxpacket: 8 [ 1701.754133][T21151] block nbd2: not configured, cannot reconfigure [ 1702.371021][T19265] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1702.388039][T19265] usb 9-1: can't read configurations, error -71 [ 1702.835296][T21163] 9pnet_fd: Insufficient options for proto=fd [ 1703.190307][T21183] 9pnet_fd: Insufficient options for proto=fd [ 1705.820427][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1705.869724][ T5872] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1706.147954][T19265] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1706.337133][T19265] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 84, setting to 64 [ 1706.385738][T19265] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1707.060072][T19265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.070329][T19265] usb 1-1: config 0 descriptor?? [ 1707.077026][ T5872] usb 5-1: Using ep0 maxpacket: 8 [ 1707.118215][ T5872] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1707.137808][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.146031][ T5872] usb 5-1: Product: syz [ 1707.150238][ T5872] usb 5-1: Manufacturer: syz [ 1707.155576][ T5872] usb 5-1: SerialNumber: syz [ 1707.180839][ T5872] usb 5-1: config 0 descriptor?? [ 1707.414480][ T5872] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1707.494062][T19265] ath6kl: Failed to submit usb control message: -71 [ 1707.500820][T19265] ath6kl: unable to send the bmi data to the device: -71 [ 1707.508083][T19265] ath6kl: Unable to send get target info: -71 [ 1707.528695][T19265] ath6kl: Failed to init ath6kl core: -71 [ 1707.554532][T19265] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1707.575609][T19265] usb 1-1: USB disconnect, device number 54 [ 1707.667215][T19803] usb 8-1: new full-speed USB device number 57 using dummy_hcd [ 1708.064571][T19803] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.090058][T19803] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1708.429276][T19803] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1708.541607][T19803] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.574573][T19803] usb 8-1: Product: syz [ 1708.578990][ T5872] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1708.596789][T19803] usb 8-1: Manufacturer: syz [ 1708.616075][ T5872] usb 5-1: USB disconnect, device number 74 [ 1708.623479][T19803] usb 8-1: SerialNumber: syz [ 1708.683200][T21225] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3744'. [ 1708.692336][T21225] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3744'. [ 1708.701312][T21225] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3744'. [ 1708.710391][T21225] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3744'. [ 1708.753157][T21225] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3744'. [ 1708.762740][T21225] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3744'. [ 1710.290865][T19803] usb 8-1: 0:2 : does not exist [ 1710.384938][T19803] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1711.001905][T19803] usb 8-1: USB disconnect, device number 57 [ 1711.628724][T21248] evm: overlay not supported [ 1712.807108][T19265] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1712.943499][T21269] FAULT_INJECTION: forcing a failure. [ 1712.943499][T21269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1712.958764][T21269] CPU: 0 UID: 0 PID: 21269 Comm: syz.8.3759 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1712.969577][T21269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1712.979664][T21269] Call Trace: [ 1712.982985][T21269] [ 1712.985947][T21269] dump_stack_lvl+0x241/0x360 [ 1712.990679][T21269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1712.995913][T21269] ? __pfx__printk+0x10/0x10 [ 1713.000564][T21269] ? __pfx_lock_release+0x10/0x10 [ 1713.005634][T21269] should_fail_ex+0x3b0/0x4e0 [ 1713.010343][T21269] _copy_from_user+0x2f/0xc0 [ 1713.014978][T21269] copy_msghdr_from_user+0xae/0x680 [ 1713.020227][T21269] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1713.026078][T21269] ? __fget_files+0x2a/0x410 [ 1713.030719][T21269] ? __fget_files+0x2a/0x410 [ 1713.035355][T21269] __sys_sendmsg+0x209/0x350 [ 1713.039996][T21269] ? __pfx_lock_release+0x10/0x10 [ 1713.045059][T21269] ? __pfx___sys_sendmsg+0x10/0x10 [ 1713.050229][T21269] ? __pfx_vfs_write+0x10/0x10 [ 1713.055058][T21269] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1713.061429][T21269] ? do_syscall_64+0x100/0x230 [ 1713.066243][T21269] ? do_syscall_64+0xb6/0x230 [ 1713.070967][T21269] do_syscall_64+0xf3/0x230 [ 1713.075515][T21269] ? clear_bhb_loop+0x35/0x90 [ 1713.080232][T21269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1713.086213][T21269] RIP: 0033:0x7f4cf1b85d29 [ 1713.090666][T21269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1713.110311][T21269] RSP: 002b:00007f4cf2a0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1713.118767][T21269] RAX: ffffffffffffffda RBX: 00007f4cf1d75fa0 RCX: 00007f4cf1b85d29 [ 1713.126807][T21269] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1713.134808][T21269] RBP: 00007f4cf2a0a090 R08: 0000000000000000 R09: 0000000000000000 [ 1713.142848][T21269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1713.150857][T21269] R13: 0000000000000000 R14: 00007f4cf1d75fa0 R15: 00007ffc91592988 [ 1713.158879][T21269] [ 1713.162035][ C0] vkms_vblank_simulate: vblank timer overrun [ 1713.498771][T19265] usb 5-1: Using ep0 maxpacket: 16 [ 1713.505780][T19265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1713.570322][T19265] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1713.626233][T19265] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.676656][T19265] usb 5-1: Product: syz [ 1713.702429][T19265] usb 5-1: Manufacturer: syz [ 1713.720301][T19265] usb 5-1: SerialNumber: syz [ 1713.771097][T19265] usb 5-1: config 0 descriptor?? [ 1713.804522][T19265] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1713.833617][T19265] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1713.887205][ T9] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1714.154294][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 1714.512578][T21283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1714.566477][T21283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1714.668356][ T9] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1714.677734][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.694140][ T9] usb 9-1: Product: syz [ 1715.035290][ T9] usb 9-1: Manufacturer: syz [ 1715.040753][ T9] usb 9-1: SerialNumber: syz [ 1715.169100][ T9] usb 9-1: config 0 descriptor?? [ 1715.621312][ T9] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1715.654366][T19265] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1716.101334][ T5863] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1716.317090][ T5863] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1716.328078][ T5863] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1716.698311][ T9] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1716.710800][ T9] usb 9-1: USB disconnect, device number 62 [ 1716.792379][T21303] FAULT_INJECTION: forcing a failure. [ 1716.792379][T21303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1716.809497][ T5863] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1716.820181][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1716.828356][ T5863] usb 3-1: SerialNumber: syz [ 1716.828701][T19265] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1716.843156][T21303] CPU: 1 UID: 0 PID: 21303 Comm: syz.7.3769 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1716.843504][T19265] em28xx 5-1:0.0: board has no eeprom [ 1716.853950][T21303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1716.853971][T21303] Call Trace: [ 1716.853981][T21303] [ 1716.853993][T21303] dump_stack_lvl+0x241/0x360 [ 1716.854032][T21303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1716.854065][T21303] ? __pfx__printk+0x10/0x10 [ 1716.854096][T21303] ? __pfx_lock_release+0x10/0x10 [ 1716.854130][T21303] should_fail_ex+0x3b0/0x4e0 [ 1716.854159][T21303] _copy_from_user+0x2f/0xc0 [ 1716.854204][T21303] do_tcp_setsockopt+0x29e/0x2540 [ 1716.854243][T21303] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 1716.854288][T21303] ? __pfx_lock_acquire+0x10/0x10 [ 1716.854314][T21303] ? tcp_setsockopt+0x3e/0xf0 [ 1716.854349][T21303] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1716.854384][T21303] do_sock_setsockopt+0x3af/0x720 [ 1716.936003][T21303] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1716.941599][T21303] ? __fget_files+0x395/0x410 [ 1716.946295][T21303] ? __fget_files+0x2a/0x410 [ 1716.950912][T21303] __x64_sys_setsockopt+0x1ee/0x280 [ 1716.956129][T21303] do_syscall_64+0xf3/0x230 [ 1716.960667][T21303] ? clear_bhb_loop+0x35/0x90 [ 1716.965452][T21303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.971363][T21303] RIP: 0033:0x7fd359b85d29 [ 1716.975811][T21303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1716.995518][T21303] RSP: 002b:00007fd35a91f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1717.003946][T21303] RAX: ffffffffffffffda RBX: 00007fd359d75fa0 RCX: 00007fd359b85d29 [ 1717.011928][T21303] RDX: 0000000000000016 RSI: 0000000000000006 RDI: 0000000000000003 [ 1717.019907][T21303] RBP: 00007fd35a91f090 R08: 0000000020000149 R09: 0000000000000000 [ 1717.027885][T21303] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 1717.035868][T21303] R13: 0000000000000000 R14: 00007fd359d75fa0 R15: 00007ffc70c20848 [ 1717.043868][T21303] [ 1717.295835][T19265] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1717.305190][T19265] em28xx 5-1:0.0: dvb set to bulk mode. [ 1717.310879][ T9] em28xx 5-1:0.0: Binding DVB extension [ 1717.322322][ T5863] usb 3-1: 0:2 : does not exist [ 1717.340230][T19265] usb 5-1: USB disconnect, device number 75 [ 1717.347003][T19265] em28xx 5-1:0.0: Disconnecting em28xx [ 1717.389161][ T5863] usb 3-1: USB disconnect, device number 47 [ 1717.759982][ T9] em28xx 5-1:0.0: Registering input extension [ 1717.766383][T19265] em28xx 5-1:0.0: Closing input extension [ 1717.786421][T19265] em28xx 5-1:0.0: Freeing device [ 1717.851205][T21314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3772'. [ 1717.860384][T21314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3772'. [ 1717.906528][T21316] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3772'. [ 1718.994718][T21334] FAULT_INJECTION: forcing a failure. [ 1718.994718][T21334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1719.007888][T21334] CPU: 0 UID: 0 PID: 21334 Comm: syz.8.3777 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1719.018685][T21334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1719.028784][T21334] Call Trace: [ 1719.032090][T21334] [ 1719.035053][T21334] dump_stack_lvl+0x241/0x360 [ 1719.039775][T21334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1719.045009][T21334] ? __pfx__printk+0x10/0x10 [ 1719.049634][T21334] ? __pfx_lock_release+0x10/0x10 [ 1719.054709][T21334] should_fail_ex+0x3b0/0x4e0 [ 1719.059430][T21334] _copy_from_user+0x2f/0xc0 [ 1719.064067][T21334] copy_msghdr_from_user+0xae/0x680 [ 1719.069344][T21334] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1719.075207][T21334] ? __fget_files+0x2a/0x410 [ 1719.079831][T21334] ? __fget_files+0x2a/0x410 [ 1719.084462][T21334] __sys_sendmsg+0x209/0x350 [ 1719.089099][T21334] ? __pfx_lock_release+0x10/0x10 [ 1719.094177][T21334] ? __pfx___sys_sendmsg+0x10/0x10 [ 1719.099355][T21334] ? __pfx_vfs_write+0x10/0x10 [ 1719.104162][T21334] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1719.110595][T21334] ? do_syscall_64+0x100/0x230 [ 1719.115394][T21334] ? do_syscall_64+0xb6/0x230 [ 1719.120123][T21334] do_syscall_64+0xf3/0x230 [ 1719.124764][T21334] ? clear_bhb_loop+0x35/0x90 [ 1719.129473][T21334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.135391][T21334] RIP: 0033:0x7f4cf1b85d29 [ 1719.139818][T21334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1719.159437][T21334] RSP: 002b:00007f4cf29c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1719.167876][T21334] RAX: ffffffffffffffda RBX: 00007f4cf1d76160 RCX: 00007f4cf1b85d29 [ 1719.175864][T21334] RDX: 0000000000040004 RSI: 00000000200002c0 RDI: 000000000000000a [ 1719.183846][T21334] RBP: 00007f4cf29c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1719.191849][T21334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1719.199826][T21334] R13: 0000000000000000 R14: 00007f4cf1d76160 R15: 00007ffc91592988 [ 1719.207818][T21334] [ 1719.210888][ C0] vkms_vblank_simulate: vblank timer overrun [ 1720.048717][T21339] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3779'. [ 1720.561354][T21346] FAULT_INJECTION: forcing a failure. [ 1720.561354][T21346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1720.590035][T21346] CPU: 1 UID: 0 PID: 21346 Comm: syz.7.3781 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1720.600868][T21346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1720.610958][T21346] Call Trace: [ 1720.614277][T21346] [ 1720.617246][T21346] dump_stack_lvl+0x241/0x360 [ 1720.621976][T21346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1720.627231][T21346] ? __pfx__printk+0x10/0x10 [ 1720.631859][T21346] ? __pfx_lock_release+0x10/0x10 [ 1720.636931][T21346] should_fail_ex+0x3b0/0x4e0 [ 1720.641653][T21346] _copy_from_user+0x2f/0xc0 [ 1720.646276][T21346] __sys_bpf+0x1a4/0x810 [ 1720.650540][T21346] ? __pfx___sys_bpf+0x10/0x10 [ 1720.655329][T21346] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1720.661336][T21346] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1720.667695][T21346] ? do_syscall_64+0x100/0x230 [ 1720.672491][T21346] __x64_sys_bpf+0x7c/0x90 [ 1720.676931][T21346] do_syscall_64+0xf3/0x230 [ 1720.681463][T21346] ? clear_bhb_loop+0x35/0x90 [ 1720.686244][T21346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1720.692159][T21346] RIP: 0033:0x7fd359b85d29 [ 1720.696600][T21346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1720.716255][T21346] RSP: 002b:00007fd35a91f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1720.724686][T21346] RAX: ffffffffffffffda RBX: 00007fd359d75fa0 RCX: 00007fd359b85d29 [ 1720.732702][T21346] RDX: 0000000000000070 RSI: 00000000200000c0 RDI: 0000000000000005 [ 1720.740679][T21346] RBP: 00007fd35a91f090 R08: 0000000000000000 R09: 0000000000000000 [ 1720.748663][T21346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1720.756746][T21346] R13: 0000000000000000 R14: 00007fd359d75fa0 R15: 00007ffc70c20848 [ 1720.764746][T21346] [ 1721.263575][ T5863] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1721.445084][ T5863] usb 5-1: Using ep0 maxpacket: 16 [ 1721.471817][ T5863] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1721.484663][ T5863] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1721.545951][ T5863] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1721.573622][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.620216][ T5863] usb 5-1: Product: syz [ 1721.658931][ T5863] usb 5-1: Manufacturer: syz [ 1721.688357][ T5863] usb 5-1: SerialNumber: syz [ 1722.160479][ T5863] usb 5-1: 0:2 : does not exist [ 1722.166043][ T5872] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1722.331870][T21375] FAULT_INJECTION: forcing a failure. [ 1722.331870][T21375] name failslab, interval 1, probability 0, space 0, times 0 [ 1722.369303][ T5872] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1722.404195][ T5872] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1722.713685][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1722.725467][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1722.735435][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1722.781698][ T5872] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1722.794024][ T5872] usb 1-1: New USB device strings: Mfr=11, Product=108, SerialNumber=0 [ 1722.807359][ T5863] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1722.824210][ T5872] usb 1-1: Product: syz [ 1722.859562][T21378] input: syz1 as /devices/virtual/input/input53 [ 1723.176135][ T5872] usb 1-1: Manufacturer: syz [ 1723.218405][T21375] CPU: 1 UID: 0 PID: 21375 Comm: syz.2.3792 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1723.229248][T21375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1723.239436][T21375] Call Trace: [ 1723.242760][T21375] [ 1723.245803][T21375] dump_stack_lvl+0x241/0x360 [ 1723.250528][T21375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1723.255766][T21375] ? __pfx__printk+0x10/0x10 [ 1723.260393][T21375] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 1723.266401][T21375] ? __pfx___might_resched+0x10/0x10 [ 1723.271734][T21375] should_fail_ex+0x3b0/0x4e0 [ 1723.276442][T21375] should_failslab+0xac/0x100 [ 1723.281155][T21375] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1723.286989][T21375] ? __alloc_skb+0x1c3/0x440 [ 1723.291621][T21375] __alloc_skb+0x1c3/0x440 [ 1723.296066][T21375] ? __lock_acquire+0x1397/0x2100 [ 1723.301125][T21375] ? __pfx___alloc_skb+0x10/0x10 [ 1723.306105][T21375] alloc_skb_with_frags+0xc3/0x820 [ 1723.311246][T21375] ? validate_chain+0x11e/0x5920 [ 1723.316221][T21375] ? __pfx_lock_acquire+0x10/0x10 [ 1723.321281][T21375] sock_alloc_send_pskb+0x91a/0xa60 [ 1723.326529][T21375] ? __lock_acquire+0x1397/0x2100 [ 1723.331586][T21375] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1723.337356][T21375] tun_get_user+0xcf6/0x48a0 [ 1723.341998][T21375] ? __lock_acquire+0x1397/0x2100 [ 1723.347077][T21375] ? __pfx_tun_get_user+0x10/0x10 [ 1723.352496][T21375] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1723.357988][T21375] ? tun_get+0x1e/0x2f0 [ 1723.362184][T21375] ? __pfx_lock_release+0x10/0x10 [ 1723.367248][T21375] ? tun_get+0x1e/0x2f0 [ 1723.371433][T21375] ? tun_get+0x27d/0x2f0 [ 1723.375713][T21375] tun_chr_write_iter+0x10d/0x1f0 [ 1723.380774][T21375] vfs_write+0xaeb/0xd30 [ 1723.385062][T21375] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1723.390637][T21375] ? __pfx_vfs_write+0x10/0x10 [ 1723.395442][T21375] ? __fget_files+0x2a/0x410 [ 1723.400060][T21375] ? __fget_files+0x2a/0x410 [ 1723.404691][T21375] ksys_write+0x18f/0x2b0 [ 1723.409056][T21375] ? __pfx_ksys_write+0x10/0x10 [ 1723.413941][T21375] ? do_syscall_64+0x100/0x230 [ 1723.418754][T21375] ? do_syscall_64+0xb6/0x230 [ 1723.423472][T21375] do_syscall_64+0xf3/0x230 [ 1723.428016][T21375] ? clear_bhb_loop+0x35/0x90 [ 1723.432721][T21375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.438650][T21375] RIP: 0033:0x7f19f21847df [ 1723.443094][T21375] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1723.462727][T21375] RSP: 002b:00007f19f2ee6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1723.471176][T21375] RAX: ffffffffffffffda RBX: 00007f19f2375fa0 RCX: 00007f19f21847df [ 1723.479172][T21375] RDX: 000000000000fdef RSI: 0000000020000180 RDI: 00000000000000c8 [ 1723.487166][T21375] RBP: 00007f19f2ee6090 R08: 0000000000000000 R09: 0000000000000000 [ 1723.495160][T21375] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000001 [ 1723.503162][T21375] R13: 0000000000000000 R14: 00007f19f2375fa0 R15: 00007ffd24d023c8 [ 1723.511176][T21375] [ 1723.636599][ T5872] usb 1-1: config 0 descriptor?? [ 1723.650547][ T5863] usb 5-1: USB disconnect, device number 76 [ 1725.001472][T21399] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3799'. [ 1725.170933][T21404] FAULT_INJECTION: forcing a failure. [ 1725.170933][T21404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1725.184171][T21404] CPU: 1 UID: 0 PID: 21404 Comm: syz.2.3797 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1725.194968][T21404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1725.205046][T21404] Call Trace: [ 1725.208348][T21404] [ 1725.211307][T21404] dump_stack_lvl+0x241/0x360 [ 1725.216026][T21404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1725.221263][T21404] ? __pfx__printk+0x10/0x10 [ 1725.225900][T21404] should_fail_ex+0x3b0/0x4e0 [ 1725.230616][T21404] _copy_from_user+0x2f/0xc0 [ 1725.235263][T21404] move_addr_to_kernel+0x82/0x150 [ 1725.240323][T21404] __sys_connect+0xb6/0x2d0 [ 1725.244856][T21404] ? __fget_files+0x2a/0x410 [ 1725.249493][T21404] ? __pfx___sys_connect+0x10/0x10 [ 1725.254648][T21404] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1725.261013][T21404] ? do_syscall_64+0x100/0x230 [ 1725.265822][T21404] __x64_sys_connect+0x7a/0x90 [ 1725.270633][T21404] do_syscall_64+0xf3/0x230 [ 1725.275174][T21404] ? clear_bhb_loop+0x35/0x90 [ 1725.279897][T21404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.285824][T21404] RIP: 0033:0x7f19f2185d29 [ 1725.290266][T21404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1725.309919][T21404] RSP: 002b:00007f19effd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1725.318394][T21404] RAX: ffffffffffffffda RBX: 00007f19f2376160 RCX: 00007f19f2185d29 [ 1725.326403][T21404] RDX: 000000000000001e RSI: 0000000020000000 RDI: 0000000000000005 [ 1725.334408][T21404] RBP: 00007f19effd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1725.342418][T21404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1725.350420][T21404] R13: 0000000000000000 R14: 00007f19f2376160 R15: 00007ffd24d023c8 [ 1725.358450][T21404] [ 1726.379559][T19265] usb 1-1: USB disconnect, device number 55 [ 1727.687317][T21415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3804'. [ 1728.197609][T19265] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1728.394261][T19265] usb 8-1: Using ep0 maxpacket: 8 [ 1728.474885][T19265] usb 8-1: config 2 has an invalid interface number: 31 but max is 0 [ 1728.971548][T19265] usb 8-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 1728.980301][T19265] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1728.991158][T19265] usb 8-1: config 2 has no interface number 0 [ 1728.998057][T19265] usb 8-1: config 2 interface 31 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1729.011197][T19265] usb 8-1: config 2 interface 31 has no altsetting 0 [ 1729.081331][T21436] FAULT_INJECTION: forcing a failure. [ 1729.081331][T21436] name failslab, interval 1, probability 0, space 0, times 0 [ 1729.094897][T21436] CPU: 0 UID: 0 PID: 21436 Comm: syz.0.3809 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1729.105736][T21436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1729.115825][T21436] Call Trace: [ 1729.119136][T21436] [ 1729.122095][T21436] dump_stack_lvl+0x241/0x360 [ 1729.126821][T21436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1729.132065][T21436] ? __pfx__printk+0x10/0x10 [ 1729.136709][T21436] ? kmem_cache_alloc_noprof+0x48/0x380 [ 1729.142300][T21436] ? __pfx___might_resched+0x10/0x10 [ 1729.147630][T21436] ? __schedule+0x19b4/0x4be0 [ 1729.152349][T21436] should_fail_ex+0x3b0/0x4e0 [ 1729.157064][T21436] should_failslab+0xac/0x100 [ 1729.161789][T21436] ? getname_flags+0xb7/0x540 [ 1729.166492][T21436] kmem_cache_alloc_noprof+0x70/0x380 [ 1729.171913][T21436] getname_flags+0xb7/0x540 [ 1729.176453][T21436] __se_sys_quotactl+0x202/0xa30 [ 1729.181433][T21436] ? __pfx___se_sys_quotactl+0x10/0x10 [ 1729.186927][T21436] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1729.193290][T21436] ? do_syscall_64+0x100/0x230 [ 1729.198105][T21436] ? do_syscall_64+0xb6/0x230 [ 1729.202828][T21436] do_syscall_64+0xf3/0x230 [ 1729.207389][T21436] ? clear_bhb_loop+0x35/0x90 [ 1729.212122][T21436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1729.218049][T21436] RIP: 0033:0x7f1230f85d29 [ 1729.222496][T21436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1729.242134][T21436] RSP: 002b:00007f122edf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 1729.250579][T21436] RAX: ffffffffffffffda RBX: 00007f1231176160 RCX: 00007f1230f85d29 [ 1729.258581][T21436] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 1729.266577][T21436] RBP: 00007f122edf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1729.274575][T21436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1729.282599][T21436] R13: 0000000000000000 R14: 00007f1231176160 R15: 00007ffc9c4cf7c8 [ 1729.290628][T21436] [ 1729.293754][ C0] vkms_vblank_simulate: vblank timer overrun [ 1729.699105][T19265] usb 8-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1729.708305][T19265] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.727464][T19265] usb 8-1: Product: syz [ 1729.736695][T19265] usb 8-1: Manufacturer: syz [ 1729.751945][T19265] usb 8-1: SerialNumber: syz [ 1729.987060][ T5872] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1730.179598][ T5872] usb 5-1: Using ep0 maxpacket: 16 [ 1730.202714][ T5872] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.221410][ T5872] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1730.361951][ T5872] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1730.393792][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.424843][ T5872] usb 5-1: Product: syz [ 1730.449589][ T5872] usb 5-1: Manufacturer: syz [ 1730.450708][T19265] ch9200 8-1:2.31: probe with driver ch9200 failed with error -22 [ 1730.454231][ T5872] usb 5-1: SerialNumber: syz [ 1730.465861][T19265] usb 8-1: USB disconnect, device number 58 [ 1730.788839][ T5863] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1730.931956][ T5872] usb 5-1: 0:2 : does not exist [ 1730.962237][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 1730.974229][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1730.987739][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1730.998602][ T5863] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1731.007785][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.021008][ T5863] usb 1-1: config 0 descriptor?? [ 1731.253232][ T5863] appletouch 1-1:0.0: Failed to read mode from device. [ 1731.268947][ T5863] appletouch 1-1:0.0: probe with driver appletouch failed with error -5 [ 1731.302681][ T5863] usb 1-1: USB disconnect, device number 56 [ 1731.364996][ T5872] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1731.393842][ T5872] usb 5-1: USB disconnect, device number 77 [ 1731.906812][T21458] FAULT_INJECTION: forcing a failure. [ 1731.906812][T21458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1731.921983][T21458] CPU: 0 UID: 0 PID: 21458 Comm: syz.2.3817 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1731.932810][T21458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1731.942912][T21458] Call Trace: [ 1731.946224][T21458] [ 1731.949186][T21458] dump_stack_lvl+0x241/0x360 [ 1731.953917][T21458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1731.959170][T21458] ? __pfx__printk+0x10/0x10 [ 1731.959780][T21460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3818'. [ 1731.963796][T21458] ? __pfx_lock_release+0x10/0x10 [ 1731.977823][T21458] should_fail_ex+0x3b0/0x4e0 [ 1731.982540][T21458] _copy_from_user+0x2f/0xc0 [ 1731.987159][T21458] copy_msghdr_from_user+0xae/0x680 [ 1731.992390][T21458] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1731.998217][T21458] ? __fget_files+0x2a/0x410 [ 1732.002825][T21458] ? __fget_files+0x2a/0x410 [ 1732.007433][T21458] __sys_sendmmsg+0x32b/0x720 [ 1732.012137][T21458] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1732.017453][T21458] ? __pfx_lock_release+0x10/0x10 [ 1732.022492][T21458] ? kstrtouint_from_user+0x128/0x190 [ 1732.027906][T21458] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1732.033818][T21458] ? ksys_write+0x22a/0x2b0 [ 1732.038334][T21458] ? __pfx_lock_release+0x10/0x10 [ 1732.043379][T21458] ? vfs_write+0x730/0xd30 [ 1732.047820][T21458] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1732.053497][T21458] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1732.059505][T21458] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1732.065860][T21458] ? do_syscall_64+0x100/0x230 [ 1732.070648][T21458] __x64_sys_sendmmsg+0xa0/0xb0 [ 1732.075514][T21458] do_syscall_64+0xf3/0x230 [ 1732.080048][T21458] ? clear_bhb_loop+0x35/0x90 [ 1732.084735][T21458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.090647][T21458] RIP: 0033:0x7f19f2185d29 [ 1732.095175][T21458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1732.114806][T21458] RSP: 002b:00007f19f2ee6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1732.123267][T21458] RAX: ffffffffffffffda RBX: 00007f19f2375fa0 RCX: 00007f19f2185d29 [ 1732.131250][T21458] RDX: 0000000000000001 RSI: 0000000020005c00 RDI: 0000000000000004 [ 1732.139231][T21458] RBP: 00007f19f2ee6090 R08: 0000000000000000 R09: 0000000000000000 [ 1732.147230][T21458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1732.155209][T21458] R13: 0000000000000000 R14: 00007f19f2375fa0 R15: 00007ffd24d023c8 [ 1732.163211][T21458] [ 1732.166319][ C0] vkms_vblank_simulate: vblank timer overrun [ 1733.880191][T21493] FAULT_INJECTION: forcing a failure. [ 1733.880191][T21493] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.929607][T21493] CPU: 1 UID: 0 PID: 21493 Comm: syz.2.3828 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1733.940436][T21493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1733.950513][T21493] Call Trace: [ 1733.953807][T21493] [ 1733.956766][T21493] dump_stack_lvl+0x241/0x360 [ 1733.961460][T21493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1733.966676][T21493] ? __pfx__printk+0x10/0x10 [ 1733.971284][T21493] ? fs_reclaim_acquire+0x93/0x130 [ 1733.976409][T21493] ? __pfx___might_resched+0x10/0x10 [ 1733.981733][T21493] should_fail_ex+0x3b0/0x4e0 [ 1733.986422][T21493] should_failslab+0xac/0x100 [ 1733.991118][T21493] __kmalloc_noprof+0xdd/0x4c0 [ 1733.995890][T21493] ? kstrtouint_from_user+0x128/0x190 [ 1734.001271][T21493] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1734.007005][T21493] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1734.012572][T21493] tomoyo_path_number_perm+0x236/0x860 [ 1734.018047][T21493] ? __lock_acquire+0x1397/0x2100 [ 1734.023088][T21493] ? tomoyo_path_number_perm+0x206/0x860 [ 1734.028735][T21493] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1734.034766][T21493] ? __fget_files+0x2a/0x410 [ 1734.039368][T21493] ? __fget_files+0x2a/0x410 [ 1734.043969][T21493] security_file_ioctl+0xc6/0x2a0 [ 1734.049002][T21493] __se_sys_ioctl+0x46/0x170 [ 1734.053610][T21493] do_syscall_64+0xf3/0x230 [ 1734.058144][T21493] ? clear_bhb_loop+0x35/0x90 [ 1734.062837][T21493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.068750][T21493] RIP: 0033:0x7f19f2185d29 [ 1734.073178][T21493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1734.092792][T21493] RSP: 002b:00007f19f2ee6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1734.101241][T21493] RAX: ffffffffffffffda RBX: 00007f19f2375fa0 RCX: 00007f19f2185d29 [ 1734.109222][T21493] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000004 [ 1734.117648][T21493] RBP: 00007f19f2ee6090 R08: 0000000000000000 R09: 0000000000000000 [ 1734.125628][T21493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1734.133649][T21493] R13: 0000000000000000 R14: 00007f19f2375fa0 R15: 00007ffd24d023c8 [ 1734.141678][T21493] [ 1734.177840][T21493] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1734.313815][T21503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1734.346252][T21503] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3832'. [ 1734.483453][T19265] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1734.531304][ T5872] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1734.610206][T21508] FAULT_INJECTION: forcing a failure. [ 1734.610206][T21508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1734.623483][T21508] CPU: 0 UID: 0 PID: 21508 Comm: syz.4.3831 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1734.634276][T21508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1734.644353][T21508] Call Trace: [ 1734.647655][T21508] [ 1734.650615][T21508] dump_stack_lvl+0x241/0x360 [ 1734.655329][T21508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1734.660562][T21508] ? __pfx__printk+0x10/0x10 [ 1734.665194][T21508] ? snprintf+0xda/0x120 [ 1734.669475][T21508] should_fail_ex+0x3b0/0x4e0 [ 1734.674199][T21508] _copy_to_user+0x31/0xb0 [ 1734.678658][T21508] simple_read_from_buffer+0xca/0x150 [ 1734.684092][T21508] proc_fail_nth_read+0x1e9/0x250 [ 1734.689242][T21508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1734.694832][T21508] ? rw_verify_area+0x55e/0x6f0 [ 1734.699716][T21508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1734.705310][T21508] vfs_read+0x1fc/0xb70 [ 1734.709525][T21508] ? __pfx___mutex_lock+0x10/0x10 [ 1734.714596][T21508] ? __pfx_vfs_read+0x10/0x10 [ 1734.719299][T21508] ? __fget_files+0x2a/0x410 [ 1734.723912][T21508] ? __fget_files+0x395/0x410 [ 1734.728612][T21508] ? __fget_files+0x2a/0x410 [ 1734.733237][T21508] ksys_read+0x18f/0x2b0 [ 1734.737514][T21508] ? __pfx_ksys_read+0x10/0x10 [ 1734.742336][T21508] ? __secure_computing+0x25d/0x370 [ 1734.747586][T21508] do_syscall_64+0xf3/0x230 [ 1734.752131][T21508] ? clear_bhb_loop+0x35/0x90 [ 1734.756839][T21508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.762770][T21508] RIP: 0033:0x7f30c498473c [ 1734.767216][T21508] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1734.786850][T21508] RSP: 002b:00007f30c27d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1734.795300][T21508] RAX: ffffffffffffffda RBX: 00007f30c4b76160 RCX: 00007f30c498473c [ 1734.803297][T21508] RDX: 000000000000000f RSI: 00007f30c27d50a0 RDI: 0000000000000007 [ 1734.811293][T21508] RBP: 00007f30c27d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1734.819285][T21508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1734.827279][T21508] R13: 0000000000000000 R14: 00007f30c4b76160 R15: 00007ffecb6e2e78 [ 1734.835291][T21508] [ 1734.838373][ C0] vkms_vblank_simulate: vblank timer overrun [ 1734.852635][ T29] audit: type=1326 audit(1736835470.438:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21500 comm="syz.4.3831" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f30c4985d29 code=0x0 [ 1734.907146][T19265] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 1734.925878][T19265] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1734.945829][T19265] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1734.956089][T19265] usb 8-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1734.965831][T19265] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.991408][T19265] usb 8-1: config 0 descriptor?? [ 1735.107751][ T5863] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1735.131065][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 1735.143870][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1735.155017][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1735.165143][ T5872] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1735.174540][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.185457][ T5872] usb 1-1: config 0 descriptor?? [ 1735.301178][T21514] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3834'. [ 1735.305374][ T5863] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1735.311567][T19265] appletouch 8-1:0.0: Failed to read mode from device. [ 1735.428983][T21514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3834'. [ 1735.459019][T19265] appletouch 8-1:0.0: probe with driver appletouch failed with error -5 [ 1735.460404][ T5863] usb 3-1: config 1 interface 0 has no altsetting 1 [ 1735.478582][T21514] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3834'. [ 1735.559196][ T5872] appletouch 1-1:0.0: Failed to read mode from device. [ 1735.566969][ T5872] appletouch 1-1:0.0: probe with driver appletouch failed with error -5 [ 1735.579589][T21514] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3834'. [ 1735.606871][T21515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3834'. [ 1735.616864][T21515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3834'. [ 1735.721744][ T5863] usb 3-1: New USB device found, idVendor=0536, idProduct=a4a8, bcdDevice= 0.40 [ 1735.737431][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.773823][ T5863] usb 3-1: Product: syz [ 1735.791670][T19265] usb 1-1: USB disconnect, device number 57 [ 1735.798070][ T5863] usb 3-1: Manufacturer: syz [ 1735.798162][ T5863] usb 3-1: SerialNumber: syz [ 1735.906380][ T9] usb 8-1: USB disconnect, device number 59 [ 1736.081259][ T5863] usb 3-1: USB disconnect, device number 48 [ 1738.239254][T21536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3839'. [ 1738.278979][T21537] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3836'. [ 1738.289110][T21537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3836'. [ 1738.298389][T21537] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3836'. [ 1738.307591][T21537] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3836'. [ 1738.325985][T21537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3836'. [ 1738.335053][T21537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3836'. [ 1739.790287][ T5863] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1740.136994][ T5863] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1740.145916][ T5863] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1740.157267][ T5863] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1740.166581][ T5863] usb 8-1: config 1 has no interface number 1 [ 1740.175611][ T5863] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1740.901756][ T5863] usb 8-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x5F, changing to 0xF [ 1740.913607][ T5863] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1741.021917][ T5863] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1741.032002][ T5863] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.040041][ T5863] usb 8-1: Product: syz [ 1741.045012][ T5863] usb 8-1: Manufacturer: syz [ 1741.049812][ T5863] usb 8-1: SerialNumber: syz [ 1741.345730][T21556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1741.458434][T19265] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1741.654933][T19265] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 1741.708757][T19265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1741.771287][T19265] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1741.799218][T19265] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1741.828956][T19265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1741.883856][T19265] usb 5-1: config 0 descriptor?? [ 1742.055855][T10621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1742.069983][T10621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1742.080576][T10621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1742.089905][T10621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1742.097770][T10621] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1742.105610][T10621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1742.123034][T19265] appletouch 5-1:0.0: Failed to read mode from device. [ 1742.149054][T19265] appletouch 5-1:0.0: probe with driver appletouch failed with error -5 [ 1742.154171][T21574] virt_wifi0 speed is unknown, defaulting to 1000 [ 1742.306383][T21580] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3851'. [ 1742.315636][T21580] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3851'. [ 1742.325427][T21580] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3851'. [ 1742.341513][T19265] usb 5-1: USB disconnect, device number 78 [ 1742.463968][T21574] chnl_net:caif_netlink_parms(): no params data found [ 1742.600818][ T5863] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 1742.630708][T21574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1742.654567][T21574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1742.673806][ T5863] usb 8-1: USB disconnect, device number 60 [ 1742.693003][T21574] bridge_slave_0: entered allmulticast mode [ 1742.727063][T21574] bridge_slave_0: entered promiscuous mode [ 1742.765287][T21574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1742.795305][T21574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.810039][T21574] bridge_slave_1: entered allmulticast mode [ 1742.826863][T21574] bridge_slave_1: entered promiscuous mode [ 1742.879348][T21574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1742.909785][T21574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1742.975648][T21574] team0: Port device team_slave_0 added [ 1743.002222][T21574] team0: Port device team_slave_1 added [ 1743.081773][T21574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1743.115246][T21574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1743.157097][T21574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1743.182144][T21597] trusted_key: encrypted_key: insufficient parameters specified [ 1743.264927][ T5863] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 1743.340796][T21574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1743.347820][T21574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1743.504093][ T5863] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1743.515864][T21574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1743.526304][ T5863] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1743.647094][ T5863] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1743.705488][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.079081][T21596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1745.101093][T21609] FAULT_INJECTION: forcing a failure. [ 1745.101093][T21609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1745.104365][T10621] Bluetooth: hci3: command tx timeout [ 1745.132768][T21609] CPU: 0 UID: 0 PID: 21609 Comm: syz.4.3853 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1745.143607][T21609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1745.153729][T21609] Call Trace: [ 1745.157049][T21609] [ 1745.160017][T21609] dump_stack_lvl+0x241/0x360 [ 1745.164752][T21609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1745.170011][T21609] ? __pfx__printk+0x10/0x10 [ 1745.174661][T21609] ? snprintf+0xda/0x120 [ 1745.178986][T21609] should_fail_ex+0x3b0/0x4e0 [ 1745.183711][T21609] _copy_to_user+0x31/0xb0 [ 1745.188190][T21609] simple_read_from_buffer+0xca/0x150 [ 1745.193619][T21609] proc_fail_nth_read+0x1e9/0x250 [ 1745.198732][T21609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1745.204337][T21609] ? rw_verify_area+0x55e/0x6f0 [ 1745.209225][T21609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1745.214810][T21609] vfs_read+0x1fc/0xb70 [ 1745.219023][T21609] ? __pfx___mutex_lock+0x10/0x10 [ 1745.224088][T21609] ? __pfx_vfs_read+0x10/0x10 [ 1745.228808][T21609] ? __fget_files+0x2a/0x410 [ 1745.233436][T21609] ? __fget_files+0x395/0x410 [ 1745.238153][T21609] ? __fget_files+0x2a/0x410 [ 1745.242791][T21609] ksys_read+0x18f/0x2b0 [ 1745.247077][T21609] ? __pfx_ksys_read+0x10/0x10 [ 1745.252386][T21609] ? do_syscall_64+0x100/0x230 [ 1745.257183][T21609] ? do_syscall_64+0xb6/0x230 [ 1745.261896][T21609] do_syscall_64+0xf3/0x230 [ 1745.266449][T21609] ? clear_bhb_loop+0x35/0x90 [ 1745.271152][T21609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.277072][T21609] RIP: 0033:0x7f30c498473c [ 1745.281502][T21609] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1745.301130][T21609] RSP: 002b:00007f30c27f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1745.309567][T21609] RAX: ffffffffffffffda RBX: 00007f30c4b76080 RCX: 00007f30c498473c [ 1745.317568][T21609] RDX: 000000000000000f RSI: 00007f30c27f60a0 RDI: 0000000000000007 [ 1745.325556][T21609] RBP: 00007f30c27f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1745.333539][T21609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1745.341540][T21609] R13: 0000000000000000 R14: 00007f30c4b76080 R15: 00007ffecb6e2e78 [ 1745.349545][T21609] [ 1745.352718][ C0] vkms_vblank_simulate: vblank timer overrun [ 1745.777527][T19803] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1745.991052][T19803] usb 1-1: Using ep0 maxpacket: 16 [ 1746.062622][ T5863] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 1746.099220][ T5863] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input58 [ 1746.155255][T21574] hsr_slave_0: entered promiscuous mode [ 1746.177584][T21574] hsr_slave_1: entered promiscuous mode [ 1746.193796][ T5863] input: failed to attach handler kbd to device input58, error: -5 [ 1746.209741][T21574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1746.219953][T21574] Cannot create hsr debugfs directory [ 1746.243330][ T5863] usb 5-1: USB disconnect, device number 79 [ 1746.255482][T19803] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1746.265770][T19803] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1746.301671][T19803] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1746.313457][T19803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.321507][T19803] usb 1-1: Product: syz [ 1746.325780][T19803] usb 1-1: Manufacturer: syz [ 1746.330404][T19803] usb 1-1: SerialNumber: syz [ 1746.664268][ T5863] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1746.770239][T21626] __nla_validate_parse: 3 callbacks suppressed [ 1746.770375][T21626] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3865'. [ 1746.786815][T21626] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3865'. [ 1746.787735][T19803] usb 1-1: 0:2 : does not exist [ 1746.801454][T21626] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3865'. [ 1746.811997][T21626] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3865'. [ 1746.857697][T21626] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3865'. [ 1746.867084][T21626] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3865'. [ 1746.918089][ T5863] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1746.971995][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.086387][ T5863] usb 5-1: config 0 descriptor?? [ 1747.104294][ T5863] cp210x 5-1:0.0: cp210x converter detected [ 1747.259171][T19803] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1747.402456][T19986] Bluetooth: hci3: command tx timeout [ 1747.681286][T19803] usb 1-1: USB disconnect, device number 58 [ 1747.909965][T21616] xt_hashlimit: max too large, truncated to 1048576 [ 1748.056858][T21616] xt_limit: Overflow, try lower: 0/0 [ 1748.058262][ T5863] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1748.240264][ T5863] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1748.524474][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1748.632907][T19265] usb 5-1: USB disconnect, device number 80 [ 1748.644376][T19265] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1748.700162][T19265] cp210x 5-1:0.0: device disconnected [ 1748.706311][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1748.723651][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1748.738636][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.746708][ T9] usb 1-1: Product: syz [ 1748.754736][ T9] usb 1-1: Manufacturer: syz [ 1748.759396][ T9] usb 1-1: SerialNumber: syz [ 1748.771141][ T9] usb 1-1: config 0 descriptor?? [ 1748.909515][ T5863] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1748.949067][T21574] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1748.959340][T21574] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1748.970430][T21574] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1748.980703][T21574] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1748.995883][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1749.072600][T21574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1749.093544][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 1749.106242][T21574] 8021q: adding VLAN 0 to HW filter on device team0 [ 1749.114210][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1749.134487][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 1749.141676][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1749.143811][ T5863] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1749.163596][T19943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1749.170764][T19943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1749.175274][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.191559][ T5863] usb 3-1: config 0 descriptor?? [ 1749.421969][ T5863] appletouch 3-1:0.0: Failed to read mode from device. [ 1749.456003][ T5863] appletouch 3-1:0.0: probe with driver appletouch failed with error -5 [ 1749.593841][T19986] Bluetooth: hci3: command tx timeout [ 1751.303605][T21574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1751.364994][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1751.546198][T21663] 9pnet_fd: Insufficient options for proto=fd [ 1751.547903][T21574] veth0_vlan: entered promiscuous mode [ 1751.604555][ T58] usb 1-1: USB disconnect, device number 59 [ 1751.818033][T19986] Bluetooth: hci3: command tx timeout [ 1751.913652][ T9] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1751.953494][T19265] usb 3-1: USB disconnect, device number 49 [ 1752.053411][T21574] veth1_vlan: entered promiscuous mode [ 1752.082348][T21574] veth0_macvtap: entered promiscuous mode [ 1752.091977][T21574] veth1_macvtap: entered promiscuous mode [ 1752.108417][T21574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1752.119010][T21574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1752.128956][T21574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1752.139567][T21574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1752.149516][T21574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1752.160084][T21574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1752.170002][T21574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1752.180553][T21574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1752.191782][T21574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1752.202340][T21574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1752.212234][T21574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1752.222788][T21574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1752.234189][T21574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1752.244296][T21574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1752.255379][T21574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1752.265234][T21574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1752.276022][T21574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1752.286137][T21574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1752.296906][T21574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1752.307028][T21574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1752.318374][T21574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1752.329255][T21574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1752.340082][T21574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1752.352518][T21574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1752.386122][T21574] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.396125][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 84, setting to 64 [ 1752.407572][ T9] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1752.422887][T21574] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.431853][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.440772][T21574] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.453901][T21574] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.463866][ T9] usb 8-1: config 0 descriptor?? [ 1752.593312][T21675] FAULT_INJECTION: forcing a failure. [ 1752.593312][T21675] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.608314][T21675] CPU: 0 UID: 0 PID: 21675 Comm: syz.2.3880 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1752.619138][T21675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1752.629226][T21675] Call Trace: [ 1752.632524][T21675] [ 1752.635459][T21675] dump_stack_lvl+0x241/0x360 [ 1752.640156][T21675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1752.645383][T21675] ? __pfx__printk+0x10/0x10 [ 1752.650182][T21675] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 1752.656171][T21675] ? __pfx___might_resched+0x10/0x10 [ 1752.661507][T21675] should_fail_ex+0x3b0/0x4e0 [ 1752.666213][T21675] should_failslab+0xac/0x100 [ 1752.670949][T21675] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1752.676789][T21675] ? __alloc_skb+0x1c3/0x440 [ 1752.681426][T21675] __alloc_skb+0x1c3/0x440 [ 1752.685878][T21675] ? __pfx___alloc_skb+0x10/0x10 [ 1752.690872][T21675] ? netlink_ack_tlv_len+0x6e/0x200 [ 1752.696084][T21675] netlink_ack+0x145/0xa50 [ 1752.700515][T21675] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1752.706431][T21675] netlink_rcv_skb+0x262/0x430 [ 1752.711218][T21675] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 1752.716918][T21675] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1752.722291][T21675] crypto_netlink_rcv+0x2a/0x40 [ 1752.726122][T21672] ------------[ cut here ]------------ [ 1752.727169][T21675] netlink_unicast+0x7f6/0x990 [ 1752.727226][T21675] ? __pfx_netlink_unicast+0x10/0x10 [ 1752.733035][T21672] platform vkms: [drm] vblank wait timed out on crtc 0 [ 1752.737740][T21675] ? __virt_addr_valid+0x45f/0x530 [ 1752.737776][T21675] ? __phys_addr_symbol+0x2f/0x70 [ 1752.737801][T21675] ? __check_object_size+0x47a/0x730 [ 1752.737842][T21675] netlink_sendmsg+0x8e4/0xcb0 [ 1752.737883][T21675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1752.737923][T21675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1752.737957][T21675] __sock_sendmsg+0x221/0x270 [ 1752.737997][T21675] ____sys_sendmsg+0x52a/0x7e0 [ 1752.738036][T21675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1752.748032][T21672] WARNING: CPU: 1 PID: 21672 at drivers/gpu/drm/drm_vblank.c:1307 drm_wait_one_vblank+0x97c/0xa00 [ 1752.750170][T21675] ? __fget_files+0x2a/0x410 [ 1752.750201][T21675] ? __fget_files+0x2a/0x410 [ 1752.750233][T21675] __sys_sendmsg+0x269/0x350 [ 1752.755358][T21672] Modules linked in: [ 1752.760331][T21675] ? __pfx_lock_release+0x10/0x10 [ 1752.760368][T21675] ? __pfx___sys_sendmsg+0x10/0x10 [ 1752.765651][T21672] [ 1752.770418][T21675] ? __pfx_vfs_write+0x10/0x10 [ 1752.770499][T21675] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1752.775735][T21672] CPU: 1 UID: 0 PID: 21672 Comm: syz.0.3879 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1752.781006][T21675] ? do_syscall_64+0x100/0x230 [ 1752.781049][T21675] ? do_syscall_64+0xb6/0x230 [ 1752.781085][T21675] do_syscall_64+0xf3/0x230 [ 1752.781117][T21675] ? clear_bhb_loop+0x35/0x90 [ 1752.781144][T21675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1752.781177][T21675] RIP: 0033:0x7f19f2185d29 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1752.781200][T21675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1752.781221][T21675] RSP: 002b:00007f19f2ee6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1752.781247][T21675] RAX: ffffffffffffffda RBX: 00007f19f2375fa0 RCX: 00007f19f2185d29 [ 1752.781265][T21675] RDX: 0000000004008004 RSI: 0000000020000080 RDI: 0000000000000003 [ 1752.785923][T21672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1752.790676][T21675] RBP: 00007f19f2ee6090 R08: 0000000000000000 R09: 0000000000000000 [ 1752.790696][T21675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1752.790731][T21675] R13: 0000000000000000 R14: 00007f19f2375fa0 R15: 00007ffd24d023c8 [ 1752.796007][T21672] RIP: 0010:drm_wait_one_vblank+0x97c/0xa00 [ 1752.806608][T21675] [ 1752.806668][ C0] vkms_vblank_simulate: vblank timer overrun [ 1752.811238][T21672] Code: 80 3c 08 00 74 08 4c 89 ff e8 b0 fe 99 fc 49 8b 1f 48 c7 c7 00 69 71 8c 4c 89 f6 48 89 da 8b 5c 24 0c 89 d9 e8 55 c5 f6 fb 90 <0f> 0b 90 90 49 be 00 00 00 00 00 fc ff df e9 68 fb ff ff 44 89 e9 [ 1753.004389][T21672] RSP: 0018:ffffc90003ebfac0 EFLAGS: 00010246 [ 1753.010520][T21672] RAX: e291e45ea7288100 RBX: 0000000000000000 RCX: 0000000000080000 [ 1753.019142][T21672] RDX: ffffc9000e679000 RSI: 0000000000015de9 RDI: 0000000000015dea [ 1753.027276][T21672] RBP: ffffc90003ebfc00 R08: ffffffff816019e2 R09: 1ffffffff284e31b [ 1753.035301][T21672] R10: dffffc0000000000 R11: fffffbfff284e31c R12: 1ffff920007d7f64 [ 1753.043480][T21672] R13: 0000000000018f5f R14: ffffffff8c84c6e0 R15: ffff8880252cb010 [ 1753.051574][T21672] FS: 00007f1231cf26c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1753.060623][T21672] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1753.067504][T21672] CR2: 00007f30c4ca0300 CR3: 000000006d9ce000 CR4: 00000000003526f0 [ 1753.075855][T21672] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1753.083929][T21672] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1753.092025][T21672] Call Trace: [ 1753.095340][T21672] [ 1753.098305][T21672] ? __warn+0x165/0x4d0 [ 1753.102600][T21672] ? drm_wait_one_vblank+0x97c/0xa00 [ 1753.107946][T21672] ? report_bug+0x2b3/0x500 [ 1753.112575][T21672] ? drm_wait_one_vblank+0x97c/0xa00 [ 1753.117933][T21672] ? handle_bug+0x60/0x90 [ 1753.122769][T21672] ? exc_invalid_op+0x1a/0x50 [ 1753.127520][T21672] ? asm_exc_invalid_op+0x1a/0x20 [ 1753.132719][T21672] ? __warn_printk+0x292/0x360 [ 1753.137545][T21672] ? drm_wait_one_vblank+0x97c/0xa00 [ 1753.142979][T21672] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1753.149220][T21672] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1753.155413][T21672] ? drm_vblank_get+0x173/0x270 [ 1753.160327][T21672] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 1753.166722][T21672] drm_fb_helper_ioctl+0x114/0x140 [ 1753.171903][T21672] do_fb_ioctl+0x40a/0x7b0 [ 1753.176693][T21672] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1753.181712][T21672] ? smk_tskacc+0x300/0x370 [ 1753.186863][T21672] ? smack_file_ioctl+0x29e/0x3a0 [ 1753.191970][T21672] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1753.197493][T21672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1753.203882][T21672] ? __pfx_fb_ioctl+0x10/0x10 [ 1753.208690][T21672] __se_sys_ioctl+0xf5/0x170 [ 1753.213332][T21672] do_syscall_64+0xf3/0x230 [ 1753.217964][T21672] ? clear_bhb_loop+0x35/0x90 [ 1753.222694][T21672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1753.228719][T21672] RIP: 0033:0x7f1230f85d29 [ 1753.233185][T21672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1753.252922][T21672] RSP: 002b:00007f1231cf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1753.261925][T21672] RAX: ffffffffffffffda RBX: 00007f1231175fa0 RCX: 00007f1230f85d29 [ 1753.269940][T21672] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000006 [ 1753.278058][T21672] RBP: 00007f1231001b08 R08: 0000000000000000 R09: 0000000000000000 [ 1753.286407][T21672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1753.294808][T21672] R13: 0000000000000000 R14: 00007f1231175fa0 R15: 00007ffc9c4cf7c8 [ 1753.302869][T21672] [ 1753.305972][T21672] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1753.313307][T21672] CPU: 1 UID: 0 PID: 21672 Comm: syz.0.3879 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1753.324100][T21672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1753.334194][T21672] Call Trace: [ 1753.337513][T21672] [ 1753.340488][T21672] dump_stack_lvl+0x241/0x360 [ 1753.345224][T21672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1753.350480][T21672] ? __pfx__printk+0x10/0x10 [ 1753.355112][T21672] ? _printk+0xd5/0x120 [ 1753.359333][T21672] ? __init_begin+0x41000/0x41000 [ 1753.364412][T21672] ? vscnprintf+0x5d/0x90 [ 1753.368795][T21672] panic+0x349/0x880 [ 1753.372731][T21672] ? __warn+0x174/0x4d0 [ 1753.376922][T21672] ? __pfx_panic+0x10/0x10 [ 1753.381399][T21672] __warn+0x344/0x4d0 [ 1753.385422][T21672] ? drm_wait_one_vblank+0x97c/0xa00 [ 1753.390773][T21672] report_bug+0x2b3/0x500 [ 1753.395154][T21672] ? drm_wait_one_vblank+0x97c/0xa00 [ 1753.400505][T21672] handle_bug+0x60/0x90 [ 1753.404751][T21672] exc_invalid_op+0x1a/0x50 [ 1753.409302][T21672] asm_exc_invalid_op+0x1a/0x20 [ 1753.414206][T21672] RIP: 0010:drm_wait_one_vblank+0x97c/0xa00 [ 1753.420155][T21672] Code: 80 3c 08 00 74 08 4c 89 ff e8 b0 fe 99 fc 49 8b 1f 48 c7 c7 00 69 71 8c 4c 89 f6 48 89 da 8b 5c 24 0c 89 d9 e8 55 c5 f6 fb 90 <0f> 0b 90 90 49 be 00 00 00 00 00 fc ff df e9 68 fb ff ff 44 89 e9 [ 1753.439797][T21672] RSP: 0018:ffffc90003ebfac0 EFLAGS: 00010246 [ 1753.445946][T21672] RAX: e291e45ea7288100 RBX: 0000000000000000 RCX: 0000000000080000 [ 1753.453956][T21672] RDX: ffffc9000e679000 RSI: 0000000000015de9 RDI: 0000000000015dea [ 1753.462052][T21672] RBP: ffffc90003ebfc00 R08: ffffffff816019e2 R09: 1ffffffff284e31b [ 1753.470071][T21672] R10: dffffc0000000000 R11: fffffbfff284e31c R12: 1ffff920007d7f64 [ 1753.478080][T21672] R13: 0000000000018f5f R14: ffffffff8c84c6e0 R15: ffff8880252cb010 [ 1753.486098][T21672] ? __warn_printk+0x292/0x360 [ 1753.490917][T21672] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1753.496607][T21672] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1753.502725][T21672] ? drm_vblank_get+0x173/0x270 [ 1753.507749][T21672] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 1753.513511][T21672] drm_fb_helper_ioctl+0x114/0x140 [ 1753.518700][T21672] do_fb_ioctl+0x40a/0x7b0 [ 1753.523180][T21672] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1753.528182][T21672] ? smk_tskacc+0x300/0x370 [ 1753.532755][T21672] ? smack_file_ioctl+0x29e/0x3a0 [ 1753.537840][T21672] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1753.543285][T21672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1753.549699][T21672] ? __pfx_fb_ioctl+0x10/0x10 [ 1753.554430][T21672] __se_sys_ioctl+0xf5/0x170 [ 1753.559047][T21672] do_syscall_64+0xf3/0x230 [ 1753.563603][T21672] ? clear_bhb_loop+0x35/0x90 [ 1753.568331][T21672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1753.574264][T21672] RIP: 0033:0x7f1230f85d29 [ 1753.578698][T21672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1753.598343][T21672] RSP: 002b:00007f1231cf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1753.606790][T21672] RAX: ffffffffffffffda RBX: 00007f1231175fa0 RCX: 00007f1230f85d29 [ 1753.614790][T21672] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000006 [ 1753.622778][T21672] RBP: 00007f1231001b08 R08: 0000000000000000 R09: 0000000000000000 [ 1753.630770][T21672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1753.638784][T21672] R13: 0000000000000000 R14: 00007f1231175fa0 R15: 00007ffc9c4cf7c8 [ 1753.646808][T21672] [ 1753.650219][T21672] Kernel Offset: disabled [ 1753.654655][T21672] Rebooting in 86400 seconds..