last executing test programs: 30m55.554348143s ago: executing program 32 (id=323): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newtaction={0xd0, 0x30, 0x1, 0x0, 0x0, {}, [{0xbc, 0x1, [@m_ct={0x70, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x30, 0x6, "7bd2e51e0f591e8c4c04f471c84a6b84232429270dcf3be4194ed2f7487884ead7e774af6e41c9cb6a1bc204"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000580), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x28012, r1, 0x1000000) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB=';\x00\x00\x00', @ANYBLOB="000427bd7000ffdbdf25020000000800040002000000080002000700000008000700ac1414bb0800010069666500"], 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x20040000) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000000080)) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000080)={'syz1\x00', {0x0, 0x0, 0xfffe}, 0x27, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3bc1, 0x4b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000000, 0xffffffff], [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x2], [0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) 30m38.663875088s ago: executing program 33 (id=367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000004008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000300), &(0x7f0000000340)=r0}, 0x20) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f00000000c0)) r6 = dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') getdents64(r8, 0xffffffffffffffff, 0x43) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40000c0) r9 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) write$rfkill(r6, &(0x7f0000000040)={0x2, 0x3, 0x3, 0x1}, 0x8) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000000)=0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0xfac02}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 27m9.026663385s ago: executing program 34 (id=948): mkdir(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, &(0x7f0000000040)=""/36, &(0x7f0000000200)=0x24) mmap(&(0x7f0000593000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='f2fs_map_blocks\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, 0x0, &(0x7f0000000340)) write$cgroup_pressure(r1, &(0x7f0000000380)={'full', 0x20, 0xb, 0x20, 0xe7ca}, 0x2f) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r0, r6, &(0x7f0000000440)=0xedbd, 0x6) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x73b, {r2}, {0x0}, 0x97}) quotactl_fd$Q_GETINFO(r9, 0x0, r10, &(0x7f0000000400)) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r8, 0xc1205531, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x0, '\x00', '\x00', '\x00', 0x6, 0x1, 0x0, 0x40, "57d4915b52cdfd588ea56ed6c1ca719a"}) write$smackfs_ipv6host(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='0x0000000000000002:0x0000000000000007:0x0000000000000007:0x0000000000000004:0x000000000000000c:0x0000000000000401:0x0000000000000004:0x000100000000008a/00000000000000000032 )'], 0xd2) 24m40.190760992s ago: executing program 35 (id=1331): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x4c, 0x87, 0xc8, 0x10, 0x6cd, 0x115, 0x1a1e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x60, 0x48, 0xfe, 0x0, [], [{{0x9, 0x5, 0x3, 0x3}}]}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x3eaf, &(0x7f0000000100)={0x0, 0x58ac}) 21m22.609380224s ago: executing program 36 (id=1885): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, 0x0, &(0x7f0000000180)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000002500)={0xa, 0x4e21, 0xebc, @private1, 0x2}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') 18m7.696803581s ago: executing program 9 (id=2424): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netlink\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r11 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r11, 0x40044160, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r7, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) preadv(r3, &(0x7f0000000600)=[{&(0x7f0000000000)=""/176, 0xb0}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f0000000240)=""/254, 0xfe}, {&(0x7f00000003c0)=""/90, 0x5a}, {0x0}, {0x0}, {&(0x7f0000000540)=""/164, 0xa4}], 0x7, 0x0, 0xfffffffb) 18m5.547846946s ago: executing program 9 (id=2427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) read$alg(0xffffffffffffffff, &(0x7f0000000900)=""/4096, 0x1000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000380)='GPL\x00', 0xec5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/96, 0x60}], 0x1}, 0xc}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000800)=""/213, 0xd5}], 0x1}, 0x7e0}], 0x2, 0x60002000, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) syz_emit_vhci(0x0, 0xe) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000008, 0x4010, 0xffffffffffffffff, 0x4000) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 18m2.707479131s ago: executing program 9 (id=2433): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5c}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f000000ae80)={&(0x7f0000002980)=ANY=[@ANYBLOB="1c000000070601010000000000000000050000000500010007000000c75b8483fd001e21865135dd89c13ea1c5f26abbf08c99450e8a38f984a6cc98cb6e8fa7940f96a1278398c579286fdd078b00de9f91dc23fd6373dffb4e58e074c357cb88f01c15aed5a0f4dee5e81d167ee7b7830455ca407648eaa8b44279f618404f8f39491c590f8e1f78335499bacb8f0bbac84073a3b4fd37"], 0x1c}, 0x1, 0x0, 0x0, 0x24040805}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) timer_create(0x2, &(0x7f0000000240)={0x0, 0x9, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r7, 0x0, &(0x7f0000000300), 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000001c0)="662a325de33e6465660fd971f90fc7a8f900640f20d10f20e06635010000000f22e00f330f23a8d8d821f86635c00000b00f23f8380fecaa00a0a00f01c865260f302a2a01c8", 0x46}], 0x1, 0x32, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) recvmmsg(r6, &(0x7f000000af00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000480)=""/125, 0x7d}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/52, 0x34}, {&(0x7f0000001500)=""/125, 0x7d}, {&(0x7f0000001580)=""/207, 0xcf}], 0x5}, 0x10}, {{&(0x7f0000001700)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/169, 0xa9}, {&(0x7f0000002840)=""/233, 0xe9}, {&(0x7f0000002940)=""/20, 0x14}, {&(0x7f0000002ac0)=""/186, 0xba}], 0x5, &(0x7f000000b140)=""/144, 0x90}, 0x7}, {{&(0x7f0000002b80)=@vsock, 0x80, &(0x7f0000004c40)=[{&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/23, 0x17}], 0x3, &(0x7f0000004c80)=""/4096, 0x1000}, 0xffff}, {{&(0x7f0000005c80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000005f80)=[{&(0x7f0000005d00)=""/220, 0xdc}, {&(0x7f0000005e00)=""/25, 0x19}, {&(0x7f0000005e40)=""/38, 0x26}, {&(0x7f0000005e80)=""/110, 0x6e}, {&(0x7f0000005f00)=""/75, 0x4b}], 0x5, &(0x7f0000006000)=""/22, 0x16}, 0x8001}, {{&(0x7f0000006040)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000007380)=[{&(0x7f00000060c0)=""/172, 0xac}, {&(0x7f0000006180)=""/7, 0x7}, {&(0x7f00000061c0)=""/4096, 0x1000}, {&(0x7f00000071c0)=""/239, 0xef}, {&(0x7f00000072c0)=""/161, 0xa1}], 0x5, &(0x7f0000007400)=""/92, 0x5c}, 0x10}, {{&(0x7f0000007480)=@ax25={{0x3, @default}, [@null, @remote, @rose, @default, @rose, @default, @bcast]}, 0x80, &(0x7f0000007680)=[{&(0x7f0000007500)=""/53, 0x35}, {&(0x7f0000007540)=""/87, 0x57}, {&(0x7f00000075c0)=""/86, 0x56}, {&(0x7f0000007640)=""/39, 0x27}], 0x4, &(0x7f00000076c0)=""/4096, 0x1000}, 0x1000}, {{0x0, 0x0, &(0x7f0000009b80)=[{&(0x7f00000086c0)=""/242, 0xf2}, {&(0x7f00000087c0)}, {&(0x7f0000008800)=""/204, 0xcc}, {&(0x7f0000008900)=""/242, 0xf2}, {&(0x7f0000008a00)=""/252, 0xfc}, {&(0x7f0000008b00)=""/4083, 0xff3}, {&(0x7f0000009b00)=""/71, 0x47}], 0x7, &(0x7f0000009c00)=""/98, 0x62}, 0x80000000}, {{&(0x7f0000009c80)=@rc={0x1f, @fixed}, 0x80, &(0x7f000000ad80)=[{&(0x7f0000009d00)=""/4096, 0x1000}, {&(0x7f000000ad00)=""/113, 0x71}], 0x2, &(0x7f000000adc0)=""/131, 0x83}}, {{0x0, 0x0, &(0x7f000000ae80), 0x0, &(0x7f000000aec0)=""/40, 0x28}, 0x80000000}], 0x9, 0x0, 0x0) 18m0.059836131s ago: executing program 9 (id=2439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) read$alg(0xffffffffffffffff, &(0x7f0000000900)=""/4096, 0x1000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/96, 0x60}], 0x1}, 0xc}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000800)=""/213, 0xd5}], 0x1}, 0x7e0}], 0x2, 0x60002000, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) syz_emit_vhci(0x0, 0xe) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000008, 0x4010, 0xffffffffffffffff, 0x4000) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 17m58.105175796s ago: executing program 9 (id=2443): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netlink\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r10 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r10, 0x40044160, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r6, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) setsockopt$inet6_mtu(r7, 0x29, 0x17, 0x0, 0x0) preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000000)=""/176, 0xb0}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f0000000240)=""/254, 0xfe}, {&(0x7f00000003c0)=""/90, 0x5a}, {0x0}, {0x0}, {&(0x7f0000000540)=""/164, 0xa4}], 0x7, 0x0, 0xfffffffb) 17m57.013551834s ago: executing program 9 (id=2445): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) prlimit64(0x0, 0x8, &(0x7f0000000140)={0xa, 0x8f}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) io_setup(0x3, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = socket(0x28, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) write$tcp_congestion(r1, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r6, r7, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4095, 0xfff, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xc8, 0x1, 0x0}, &(0x7f0000001380)=0x40) 17m42.615470994s ago: executing program 37 (id=2445): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) prlimit64(0x0, 0x8, &(0x7f0000000140)={0xa, 0x8f}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) io_setup(0x3, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = socket(0x28, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) write$tcp_congestion(r1, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r6, r7, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4095, 0xfff, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xc8, 0x1, 0x0}, &(0x7f0000001380)=0x40) 14m21.871458667s ago: executing program 5 (id=2979): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019640)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000002480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000040)) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x9}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0x16}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r5], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 14m20.169499435s ago: executing program 5 (id=2980): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000008500000072000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000240)='kfree\x00', r0}, 0x18) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000c80)={0x20, 0xe, 0x2, {0x2, 0x7e8e703122aff25f}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="200005000008475528f8a9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) 14m18.132985742s ago: executing program 5 (id=2987): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x10000, 0x0, 0x1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25, 0x0, 0xfeff}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:.', 0x0) 14m14.774419209s ago: executing program 5 (id=2992): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x2e020080) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0xcb0a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffe, @loopback}, 0x1c) 14m14.443126426s ago: executing program 5 (id=2995): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newtaction={0xd0, 0x30, 0x1, 0x0, 0x0, {}, [{0xbc, 0x1, [@m_ct={0x70, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x30, 0x6, "7bd2e51e0f591e8c4c04f471c84a6b84232429270dcf3be4194ed2f7487884ead7e774af6e41c9cb6a1bc204"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) syz_open_dev$vivid(&(0x7f0000000580), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x28012, r1, 0x1000000) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6", 0x19}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB=';\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x20040000) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000000080)) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000080)={'syz1\x00', {0x0, 0x0, 0xfffe}, 0x27, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3bc1, 0x4b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000000, 0xffffffff], [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x2], [0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) 14m8.074941616s ago: executing program 5 (id=3010): openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0xe, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28a140, 0x40) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_targets\x00') preadv(r1, &(0x7f0000003400)=[{&(0x7f0000001f00)=""/83, 0x53}], 0x1, 0x37, 0xfff5) 14m7.246693163s ago: executing program 38 (id=3010): openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0xe, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28a140, 0x40) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_targets\x00') preadv(r1, &(0x7f0000003400)=[{&(0x7f0000001f00)=""/83, 0x53}], 0x1, 0x37, 0xfff5) 11m41.24805859s ago: executing program 4 (id=3389): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/dev\x00') read$char_usb(r0, &(0x7f0000000140)=""/189, 0xfffffecd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x101000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) fstat(r4, &(0x7f0000000000)) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0307000000000000000008000000680004800400078013000100"], 0x7c}}, 0x0) 11m39.974468406s ago: executing program 4 (id=3392): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') ioctl$TCSETSF(r0, 0x5404, &(0x7f00000191c0)={0x80000, 0x5, 0x3, 0x80000000, 0x15, "7903e7ba86f4291ae978aae4e4f67d4684ea0b"}) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086021440f4151500bffd010203010902120001010000000904"], 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) unshare(0xe020600) fcntl$notify(r1, 0x402, 0x80000000) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000019200)={&(0x7f0000019240)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, r2, 0x81}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303fb5a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb01", 0x24}], 0x1) 11m37.084318315s ago: executing program 4 (id=3400): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netlink\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r9 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r9, 0x40044160, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) setsockopt$inet6_mtu(r6, 0x29, 0x17, 0x0, 0x0) preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000000)=""/176, 0xb0}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f0000000240)=""/254, 0xfe}, {&(0x7f00000003c0)=""/90, 0x5a}, {0x0}, {0x0}, {&(0x7f0000000540)=""/164, 0xa4}], 0x7, 0x0, 0xfffffffb) 11m35.349812527s ago: executing program 4 (id=3403): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='gid=', @ANYRESHEX]) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800f5ffffffffffffff0000000000009500d05400000000221b79d6eea33d83747498ad9d69fab2b9a2a9a9446441109fde599ec3718c3ab826ec07648d404ac041d8097d8092601fe9fdb61d1bd32a9e091b4fda416597803ec4680cb5d7288aa53c0a8a544ccdf35a16cdbfd3438503393a1599d648f949298762d374a48e43d2fb70f1ff10f9c32051ef6bf8d6fa996b59c0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='xen_mc_extend_args\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_usb_disconnect(0xffffffffffffffff) shutdown(r5, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x1c, r6, 0x1, 0x70bd26, 0x0, {0x7}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14391a024d0a4bd9c90091ec6f9882ef1bdb0000"], 0x14}}, 0x8840) 11m32.601874674s ago: executing program 4 (id=3407): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='gid=', @ANYRESHEX]) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800f5ffffffffffffff0000000000009500d05400000000221b79d6eea33d83747498ad9d69fab2b9a2a9a9446441109fde599ec3718c3ab826ec07648d404ac041d8097d8092601fe9fdb61d1bd32a9e091b4fda416597803ec4680cb5d7288aa53c0a8a544ccdf35a16cdbfd3438503393a1599d648f949298762d374a48e43d2fb70f1ff10f9c32051ef6bf8d6fa996b59c0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='xen_mc_extend_args\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="27d13f309906fca7afad", 0xa}, {&(0x7f00000004c0)="e408db430c65119fe3864eb6897cf08233c2ac59094ddac228e80b0f792c553bdf3a397ea8b943c14b7e2ece369f1d1e5fbc2dfde79e351d7c83b92ae61e6722bf1b1ee4966fbeada465df567556f9e2b1f1c3e6872a283882f0759efe1901f6f898dce43c4648b4a87a73426df052956c69a28aebf7c9e4a7eccb797c11fb6d89276c8657ab81e0ced896cd59872756542144155898cd84ec77ce96235777689f2990f042667af195766648f76e94bc3321a5b84409b64154db6b6db7dd645329c338e53981e4e08de956e0d6f1bef9433aab9852054bc2d6ecd30239cc20a8e9cdf9304d4e", 0xe6}], 0x2}}], 0x2, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) shutdown(r5, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x1c, r6, 0x1, 0x70bd26, 0x0, {0x7}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14391a024d0a4bd9c90091ec6f9882ef1bdb0000"], 0x14}}, 0x8840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000640)='virtio_transport_alloc_pkt\x00'}, 0x18) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='jfs\x00', 0x0, &(0x7f0000000340)) 11m30.679743308s ago: executing program 4 (id=3410): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="00042cbd7000fbdbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c9e1f1c586f7073000000000500830000000000"], 0x84}}, 0x4884) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x169) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000540)={0x28, 0x0, 0x0, @local}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) close_range(0xffffffffffffffff, r2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYRES8=r5], 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x40800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket(0x28, 0x1, 0x0) recvmmsg$unix(r9, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x8000000}, {{0x0, 0x0, 0x0}}], 0x2, 0x2102, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) shutdown(r10, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, 0x0, 0x0) 11m15.8615252s ago: executing program 39 (id=3410): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="00042cbd7000fbdbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c9e1f1c586f7073000000000500830000000000"], 0x84}}, 0x4884) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x169) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000540)={0x28, 0x0, 0x0, @local}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) close_range(0xffffffffffffffff, r2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000f8ffffff000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000f00c0000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000030000000000000008000000000000008000000000000000000064756d6d79300000000000000000000069705f76746930000000000000000000697036746e6c30000000000000000000aaaaaaaaaabb0001000000000180c20000000000000000000000b8000000b8000000e80000006970000000000000000000000000000000000000000000a823c565625b8d720020000000000000007f000001ac14140000000000000000000084520400000000000000000000000041554449540000bcb92dfff07fca000000466ef58f5dc8438b000000000000000800"/376]}, 0x1f0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYRES8=r5], 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x40800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket(0x28, 0x1, 0x0) recvmmsg$unix(r9, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x8000000}, {{0x0, 0x0, 0x0}}], 0x2, 0x2102, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) shutdown(r10, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, 0x0, 0x0) 4m47.379818782s ago: executing program 0 (id=4387): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='gid=']) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800f5ffffffffffffff0000000000009500d05400000000221b79d6eea33d83747498ad9d69fab2b9a2a9a9446441109fde599ec3718c3ab826ec07648d404ac041d8097d8092601fe9fdb61d1bd32a9e091b4fda416597803ec4680cb5d7288aa53c0a8a544ccdf35a16cdbfd3438503393a1599d648f949298762d374a48e43d2fb70f1ff10f9c32051ef6bf8d6fa996b59c0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='xen_mc_extend_args\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="27d13f309906fca7afad", 0xa}, {&(0x7f00000004c0)="e408db430c65119fe3864eb6897cf08233c2ac59094ddac228e80b0f792c553bdf3a397ea8b943c14b7e2ece369f1d1e5fbc2dfde79e351d7c83b92ae61e6722bf1b1ee4966fbeada465df567556f9e2b1f1c3e6872a283882f0759efe1901f6f898dce43c4648b4a87a73426df052956c69a28aebf7c9e4a7eccb797c11fb6d89276c8657ab81e0ced896cd59872756542144155898cd84ec77ce96235777689f2990f042667af195766648f76e94bc3321a5b84409b64154db6b6db7dd645329c338e53981e4e08de956e0d6f1bef9433aab9852054bc2d6ecd30239cc20a8e9cdf9304d4e", 0xe6}], 0x2}}], 0x2, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) shutdown(r5, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x1c, r6, 0x1, 0x70bd26, 0x0, {0x7}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14391a024d0a4bd9c90091ec6f9882ef1bdb0000"], 0x14}}, 0x8840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000640)='virtio_transport_alloc_pkt\x00'}, 0x18) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='jfs\x00', 0x0, &(0x7f0000000340)) 4m45.282906756s ago: executing program 0 (id=4391): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6, 0x1}, {0xffff, 0xffff}, {0x10, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}, @TCA_HHF_RESET_TIMEOUT={0x8}]}}]}, 0x40}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netlink\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r11 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x4) r12 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r12, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r13 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r13, 0x40044160, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r8, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) setsockopt$inet6_mtu(r10, 0x29, 0x17, 0x0, 0x0) preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000000)=""/176, 0xb0}, {&(0x7f00000000c0)=""/250, 0xfa}, {&(0x7f0000000240)=""/254, 0xfe}, {&(0x7f00000003c0)=""/90, 0x5a}, {0x0}, {&(0x7f0000000540)=""/164, 0xa4}], 0x6, 0x0, 0xfffffffb) 4m44.594830344s ago: executing program 0 (id=4392): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x3a) syz_open_dev$loop(0x0, 0xffffffff, 0x80000) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000000)="b2f585c7", 0x4, 0x84, &(0x7f0000000100)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x6, @private0, 0x2}}, 0x24) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000540)={0xffffffff7fffffff, 0x20, 0x0, 0x20, 0x4}, 0x48) set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x8) r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001b00)={'syz_tun\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 4m44.540776123s ago: executing program 2 (id=4393): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b27d4030000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x2, 0x9}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12a35}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000009c0)={0x148, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x10}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x68}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3ff}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x3ff}, {0x8, 0x15, 0x6}}]}, 0x148}}, 0x4000000) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000002c0)="b005489ac5c38fae73b910faa40a6ff96c7599a88c6ff5cf6bddd5edefb8e47b5e280306713a63b713364300b1167c624f0aa5fe9a6f118bc3201d4167f02b6295b0344a5967f2a5a0f3d3da549cd7dbeb0dc19cd1d73568189f3fa8e7aa87a7e156c0b107b0ee610a1754feccb7ba1e9b069eb21d2251a7da4e7468843888fad2c263855a033a3c701b9292d5339026b54f145b48757f9674d030a116604696e2a5603e02688800af1f2faf4131f09ad4bacccef5b7eae89a0abeceab8454002560fbdd0c647d8234a34cc9a97847de1049913e25f83ce4fee0c53693346eef56f0f7028b44c773f1eb", 0xea, 0x0) socket(0x840000000002, 0x3, 0xff) 4m43.070368129s ago: executing program 2 (id=4396): mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) mount$afs(&(0x7f0000000480)=ANY=[@ANYBLOB="2373797a31037379"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000000"]) 4m43.00356027s ago: executing program 2 (id=4397): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000240)='kfree\x00', r0}, 0x18) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="200005000008475528f8a9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) 4m40.641408009s ago: executing program 0 (id=4402): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="000ff4000000f40452fd76d66a9bc16b5b90c9467d6a723fcc87912e8605ad6879afe8cd33b69231b019d28b94c7f99cfd1d569abc6245914ea77529dbc2b3209b09ce551646ff3f149641da61c85124934aa8737771b1537b120f7f5d112ab8609deb4de43554300109845c2661fe69399863589eed7a5cc0f7be74e5ed3125fb535413ab47bb43451cb4c230963f1f0b6f518f59f3f7fdf82e3e44a0142571fe23935e3ba63209a68ad792383ee29bb884f4d3e4e33431979fae6d73f70d88e597a6e8a70d55e6fee56cf19f49dd4513e81819743e478d4fcf97fcf329b1db0ed5fbcbc21b40437cfecf4642446000"/250], &(0x7f00000003c0)={0x0, 0x3, 0x79, @string={0x79, 0x3, "ba397a9a97ff1804f0c966a0f53349237e164c3aec085140125fc02e6c0364dcc8aa0878bd6854d2fcdcd8f05e0f1d19fe73e2ac9db9a95f6d406ffb0099a241d46941ca941ed2f599f0b35fcffd5495c4dd13e84639a6a7197d91338820c096906cebfba149b913e620f9361a6d8c1d2d924cad7310e2"}}}, &(0x7f0000000680)={0x44, &(0x7f0000000440)={0x0, 0x1, 0x5d, "d1a9ca4224231c2c0879db924f107ac228f29634e966d9e0ff494349eec02ea56df076a61fa177d637e63a6a7f80fdd5ad4f912f022b3597a21206d66699bb5fa25bdebe9b478e5f74a6b2cf6476b8ea16dc3531f2a995d0b384fd72bd"}, &(0x7f00000004c0)={0x0, 0xa, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x90}, &(0x7f0000000540)={0x20, 0x81, 0x1, '4'}, &(0x7f0000000580)={0x20, 0x82, 0x1, "97"}, &(0x7f00000005c0)={0x20, 0x83, 0x2, "8169"}, &(0x7f0000000600)={0x20, 0x84, 0x1, "c5"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "ebc042"}}) r1 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000)=0x0, &(0x7f0000000000)=0x0) r4 = syz_usb_connect$cdc_ecm(0x2, 0x81, &(0x7f0000000700)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x1, 0x1, 0xdb, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x9, 0x24, 0x6, 0x0, 0x0, "29fbd3e7"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xa, 0xa115, 0x100, 0xd}, [@mdlm_detail={0x11, 0x24, 0x13, 0xbe, "b9064149b28ca5be33ee5b90cc"}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x6}, @acm={0x4, 0x24, 0x2, 0x6}, @mdlm_detail={0x7, 0x24, 0x13, 0x8c, "60ea0b"}, @call_mgmt={0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x9, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x6, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3e, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0xc, 0x0, 0x2, 0x20, 0xe0}, 0xc, &(0x7f0000000800)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x4, 0x5}]}, 0x3, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x1420}}, {0x66, &(0x7f0000000880)=@string={0x66, 0x3, "4a88117dc57536bff0bda53742ba44606b0200aad7fa99f39acdddb7d4b85e1037d93919697a8818d48a8a105474492abee7fbdaaa8a7c21c49129884c432b69435d60f2d9411cc5e809f6ead6f2554c8aaa642fc67ce9a08cf5c1b1f868a6e077adfd87"}}, {0x28, &(0x7f0000000900)=@string={0x28, 0x3, "89ca120346d9dcd5a2d8daf52017bd9b663369dc283cc7b941d36a4e6237a2fb6c79093b81f8"}}]}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000a00)={0x14, &(0x7f0000000980)={0x20, 0xa, 0x2f, {0x2f, 0x7, "25487f992ed66cce9ee30aebffdca409bad529873406465c6186aacc0ff10242d2dd0fd009e97424df55ef3448"}}, &(0x7f00000009c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b80)={0x1c, &(0x7f0000000a40)={0x40, 0xb, 0xa9, "7c57f25fbcc6a5cbdc914e896e15f014bc905cff72a72e3d73aefd556f1f0e800bfb5799f8869089de748dac5a6a9b95213f24e6e5f031d587682787e77ba38c93d182bd80288809799f13959411e5a5ba96e3297885f2751be7a82002b0aa7fcc1b0d869b5b6a57420c8aeeac28882a0debf000ca5af3706cd65651fcae62ac48eda21ea990630092a39463c043be712cde175270fe218fa81923a8adbc7bcf558ffaa8c282cf836f"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x18}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x7}}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="20d51bb70000000000000000000400"], 0x0, 0x0, 0x0}, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) utimes(&(0x7f0000000100)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r5, 0x21, &(0x7f0000000240)={0x0, 0xb8e8, 0x2080, 0x0, 0xf9, 0x0, r1}, 0x1) lstat(&(0x7f0000000180)='./file0\x00', 0x0) write$binfmt_elf32(r5, &(0x7f0000001080)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x81, 0xe, 0x3, 0x8, 0x2, 0x3, 0x3, 0x48, 0x34, 0x293, 0x3ff, 0x76ba, 0x20, 0x1, 0x4, 0x81, 0x6a}, [{0x6, 0x7, 0x0, 0x7, 0x5, 0x200, 0x7}]}, 0x54) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}) 4m39.403462417s ago: executing program 2 (id=4404): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x20, 0x4, 0x0, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x1000, 0x0, 0x0, 0x0, 0xfffffffd]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast1}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@private}]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x37}}, {@multicast2}, {}]}, @noop, @noop, @lsrr={0x83, 0x7, 0x0, [@private]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x16, 0x1, {0x35, 0x8df, 0x7, 0x9, 0x1, 0xb, 0x2, 0x40, 0x8, 0xffff0000, 0x4, 0x1e, 0x0, 0xc0, 0x9, 0x7fff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x20000810) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) r7 = dup(r5) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000440)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000480)=0x2000006) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0xdc, 0x3, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_LABELS_MASK={0x10, 0x17, [0xc, 0x7, 0x8]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0x5c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x42}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}, @CTA_NAT_SRC={0x44, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2b}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x101}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40010}, 0x800) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) r11 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a40)="1c0000005e000faeefc0a6fa998757b6f17d700800f60b17d4090c93", 0x1c}], 0x1}, 0x4000) r12 = socket$caif_seqpacket(0x25, 0x5, 0x0) r13 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) close(r13) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r9, @ANYRES8=r12, @ANYBLOB=',wfdno=', @ANYRESDEC]) setsockopt$PNPIPE_ENCAP(r13, 0x113, 0x1, &(0x7f00000000c0), 0x4) 4m35.987402805s ago: executing program 0 (id=4413): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/dev\x00') read$char_usb(r0, &(0x7f0000000140)=""/189, 0xfffffecd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x101000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0307000000000000000008000000680004800400078013000100"], 0x7c}}, 0x0) 4m35.889923247s ago: executing program 2 (id=4415): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX]) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800f5ffffffffffffff0000000000009500d05400000000221b79d6eea33d83747498ad9d69fab2b9a2a9a9446441109fde599ec3718c3ab826ec07648d404ac041d8097d8092601fe9fdb61d1bd32a9e091b4fda416597803ec4680cb5d7288aa53c0a8a544ccdf35a16cdbfd3438503393a1599d648f949298762d374a48e43d2fb70f1ff10f9c32051ef6bf8d6fa996b59c0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='xen_mc_extend_args\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="27d13f309906fca7afad", 0xa}, {&(0x7f00000004c0)="e408db430c65119fe3864eb6897cf08233c2ac59094ddac228e80b0f792c553bdf3a397ea8b943c14b7e2ece369f1d1e5fbc2dfde79e351d7c83b92ae61e6722bf1b1ee4966fbeada465df567556f9e2b1f1c3e6872a283882f0759efe1901f6f898dce43c4648b4a87a73426df052956c69a28aebf7c9e4a7eccb797c11fb6d89276c8657ab81e0ced896cd59872756542144155898cd84ec77ce96235777689f2990f042667af195766648f76e94bc3321a5b84409b64154db6b6db7dd645329c338e53981e4e08de956e0d6f1bef9433aab9852054bc2d6ecd30239cc20a8e9cdf9304d4e", 0xe6}], 0x2}}], 0x2, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) shutdown(r5, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x1c, r6, 0x1, 0x70bd26, 0x0, {0x7}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14391a024d0a4bd9c90091ec6f9882ef1bdb0000"], 0x14}}, 0x8840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000640)='virtio_transport_alloc_pkt\x00'}, 0x18) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='jfs\x00', 0x0, &(0x7f0000000340)) 4m33.701344062s ago: executing program 2 (id=4416): syz_open_procfs(0x0, &(0x7f00000002c0)='net/dev\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x101000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) fstat(r3, &(0x7f0000000000)) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0307000000000000000008000000680004800400078013000100"], 0x7c}}, 0x0) 4m33.566265911s ago: executing program 0 (id=4419): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/dev\x00') read$char_usb(r0, &(0x7f0000000140)=""/189, 0xfffffecd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x101000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) fstat(r3, &(0x7f0000000000)) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0307000000000000000008000000680004800400078013000100"], 0x7c}}, 0x0) 4m18.45606147s ago: executing program 40 (id=4419): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/dev\x00') read$char_usb(r0, &(0x7f0000000140)=""/189, 0xfffffecd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x101000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) fstat(r3, &(0x7f0000000000)) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0307000000000000000008000000680004800400078013000100"], 0x7c}}, 0x0) 4m18.313294706s ago: executing program 41 (id=4416): syz_open_procfs(0x0, &(0x7f00000002c0)='net/dev\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x101000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) fstat(r3, &(0x7f0000000000)) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0307000000000000000008000000680004800400078013000100"], 0x7c}}, 0x0) 15.95587607s ago: executing program 1 (id=5018): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9461a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key(&(0x7f0000000200)='ceph\x00', 0x0, &(0x7f0000000280)="b4", 0x1, 0xfffffffffffffffe) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904"], 0x0) 12.251904109s ago: executing program 8 (id=5024): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f00000000c0)=0x33) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0xc061, 0x6, 0x538, 0x1d8, 0xf8, 0x378, 0x378, 0x378, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'ip_vti0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x3000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0xfff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x6) socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20208}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x2000, 0x2}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 12.078704975s ago: executing program 7 (id=5025): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800c00000000000000000006d0210008508f8ff63000000950000f0816d023a9516ab0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x7, 0x4, 0x4c8, 0x2f8, 0x0, 0x1e8, 0x3e0, 0x3e0, 0x3e0, 0x4, &(0x7f0000000180), {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xf5b1, '/usr/sbin/ntpd\x00'}}}, {{@arp={@rand_addr=0x64010100, @multicast2, 0xffffff00, 0xffffff00, 0x2, 0x4, {@mac=@remote, {[0xff, 0xff, 0xff, 0xcf4721e717516616, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x5, 0xf6b, 0x8000, 0xcc4, 0x8000, 0x400, 'veth0_macvtap\x00', 'netpci0\x00', {}, {}, 0x0, 0x10d}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @multicast2, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x7, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) 11.226375962s ago: executing program 7 (id=5027): r0 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) r1 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x500) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000008c0)="a6ef12c9e843", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRESHEX=0x0, @ANYRES8=r0, @ANYBLOB="e43ba524bc6b2e053c1aa8e04bf82bdcdfeaa4faa90160e26a0a79d2f3337211ac0e8008133bbe1ae6929e4c7531f8ff0aae708ae790505600460a3e19c9f61c83770b489df155b0df25696add1a89"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sched_getattr(0xffffffffffffffff, &(0x7f0000000080)={0x38}, 0x38, 0x0) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) capset(&(0x7f0000000380)={0x20071026, r2}, &(0x7f0000000580)={0xffffffbd, 0xfffffff7, 0x6, 0x8, 0x40, 0x4}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0100800022090080080000f74d362bc22fad1ade5ecff4657e4e1e47936fe243a60a138ab5be5330d0227874ec11257292ae7c42b3920700a7be83", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000005c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"], 0x80}}, 0x0) 11.192080563s ago: executing program 1 (id=5028): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg$inet(r2, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001280)="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", 0x2a7}, {&(0x7f0000000fc0)="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", 0x236}, {&(0x7f0000000040)="f605c5150a33e50dfd1ed8a0fd0600000000000000100300000000a0e5f73238747b60c78aed3b1c22dd641c434722021f804b0a20646466fae2a7544283d0a695e3b3ef6fad4c3c783b5b964a3667cc78185329a9eb70e44f1602ff209df634e39ad5fb8256360a1e3dcfe278d36de5f3dafa16791b6d2b5b4d0b892c9fb6d83892a6e4bfd3cc60adacf857bdedd89d51f3ccb673921b0b8fc06433d8398f2b84b7498b9f300ccd1ee9c5abf8e3bdc1f1db0fe941d6efc2f59a282e4aa53919d9f08840db716548539354b88a6303d697c0a0895928a96211a6ba6caa4abe122a6b937ed71fdd034b", 0xe9}, {&(0x7f0000000300)="b91e9e4875a7e047860e12ad5c2c9d8e6586570800181f24efbb559d21780449ee0af3707db165fd48b0f9f717144d2da17740ddf08799e83deb9cb8c41d0986806967a2e751e05239ac928201194bdb45866d3f8413022c000000000000", 0x5e}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x40040) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000040)={0x20, 0x9, 0x11, "0790fcc6c828d711efba22764d91ef0000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.077025579s ago: executing program 3 (id=5030): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r3, 0x11, 0x6}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.978709538s ago: executing program 6 (id=5031): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='gid=', @ANYRESHEX]) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800f5ffffffffffffff0000000000009500d05400000000221b79d6eea33d83747498ad9d69fab2b9a2a9a9446441109fde599ec3718c3ab826ec07648d404ac041d8097d8092601fe9fdb61d1bd32a9e091b4fda416597803ec4680cb5d7288aa53c0a8a544ccdf35a16cdbfd3438503393a1599d648f949298762d374a48e43d2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='xen_mc_extend_args\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="27d13f309906fca7afad", 0xa}, {&(0x7f00000004c0)="e408db430c65119fe3864eb6897cf08233c2ac59094ddac228e80b0f792c553bdf3a397ea8b943c14b7e2ece369f1d1e5fbc2dfde79e351d7c83b92ae61e6722bf1b1ee4966fbeada465df567556f9e2b1f1c3e6872a283882f0759efe1901f6f898dce43c4648b4a87a73426df052956c69a28aebf7c9e4a7eccb797c11fb6d89276c8657ab81e0ced896cd59872756542144155898cd84ec77ce96235777689f2990f042667af195766648f76e94bc3321a5b84409b64154db6b6db7dd645329c338e53981e4e08de956e0d6f1bef9433aab9852054bc2d6ecd30239cc20a8e9cdf9304d4e", 0xe6}], 0x2}}], 0x2, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0x6) shutdown(r5, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x1c, r6, 0x1, 0x70bd26, 0x0, {0x7}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14391a024d0a4bd9c90091ec6f9882ef1bdb0000"], 0x14}}, 0x8840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000640)='virtio_transport_alloc_pkt\x00'}, 0x18) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='jfs\x00', 0x0, &(0x7f0000000340)) 9.526953049s ago: executing program 6 (id=5032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f0000002b40)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/reserved_size', 0x2206, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x4}], 0x2c) sendto$inet6(r4, &(0x7f0000000440)="d6cb6b26ac59a80a2c09ecc9ab637ab9fb86674589c701ec2d96747d69d6cb9a4cdc816f3e7305bc006ba96438ebb37500691fe31117fa7e0f43ca390049d0303798ed2d603ce898306a17d65d444c976d000000f4a000000000000000", 0x5d, 0x4008015, &(0x7f0000000400)={0xa, 0x4e22, 0xc86, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) recvmmsg(r4, &(0x7f00000007c0), 0x10, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000580), 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x10, r6, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10010, r4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 8.519817988s ago: executing program 8 (id=5033): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) syz_io_uring_setup(0x6fe5, &(0x7f0000001100)={0x0, 0x0, 0x1, 0x0, 0x16e}, &(0x7f0000000100), &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00'}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x9, 0x0, 0x22}, 0x10) listen(0xffffffffffffffff, 0x3f9) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000001c00)=0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x80020000, 0x2, {0x5, @raw_data="439ed4c77a5c5885be9b70b538ec45e7ba36827b0dcf53cc22c46c7ddae950c8f87629ac052d399516111996f2b068d4314f1a6a19db3bdb291cb1a830152d32b2ad880e24ae29ce49a0ba071236284d59f28276b7b6322d4d3e89d8d8fb5d51ce9ef9dea4663ae9ce4c521f2918fad161726fe27dd15cc6520d466d80c07cd248fcf58332bf0ee0e5061d4377b24a0c253e86d27c5edcd2ae36ce31344898571a1a4f7f4af1de4747103ee0bb34830f53b67d1578af4dab6f19403d8c88fd8e00"}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c8e1f48"}, 0x0, 0x2, {}, 0xffffff82}) 8.500960945s ago: executing program 6 (id=5034): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b"], 0x15) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.486959097s ago: executing program 1 (id=5035): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) syz_io_uring_setup(0x6fe5, &(0x7f0000001100)={0x0, 0x0, 0x1, 0x0, 0x16e}, &(0x7f0000000100), &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00'}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x9, 0x0, 0x22}, 0x10) socket(0x1f, 0x80002, 0x4) listen(0xffffffffffffffff, 0x3f9) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x80020000, 0x2, {0x5, @raw_data="439ed4c77a5c5885be9b70b538ec45e7ba36827b0dcf53cc22c46c7ddae950c8f87629ac052d399516111996f2b068d4314f1a6a19db3bdb291cb1a830152d32b2ad880e24ae29ce49a0ba071236284d59f28276b7b6322d4d3e89d8d8fb5d51ce9ef9dea4663ae9ce4c521f2918fad161726fe27dd15cc6520d466d80c07cd248fcf58332bf0ee0e5061d4377b24a0c253e86d27c5edcd2ae36ce31344898571a1a4f7f4af1de4747103ee0bb34830f53b67d1578af4dab6f19403d8c88fd8e00"}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c8e1f48"}, 0x0, 0x2, {}, 0xffffff82}) 7.251434751s ago: executing program 1 (id=5036): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r1, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0], 0x0) 7.108061597s ago: executing program 3 (id=5037): r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1000002, 0x24952, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r3 = fanotify_init(0x200, 0x0) r4 = dup(r2) fanotify_mark(r3, 0x1, 0x40001059, r4, 0x0) pipe2(&(0x7f0000000040)={0x0, 0x0}, 0x0) write$FUSE_INIT(r6, &(0x7f0000003100)={0x50}, 0x50) tee(r5, r2, 0x8, 0x4) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10) pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 6.840678371s ago: executing program 6 (id=5038): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9461a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key(&(0x7f0000000200)='ceph\x00', 0x0, &(0x7f0000000280)="b4", 0x1, 0xfffffffffffffffe) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904"], 0x0) 6.363013736s ago: executing program 8 (id=5039): r0 = socket$netlink(0x10, 0x3, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f00000003c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x64010100}}, 0x24) listen(r3, 0x0) listen(r3, 0x6) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xe, 0x8b}, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000300), 0xd) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0x20, 0x1, 0x0, "0700000000000000000400"}) (async, rerun: 32) write$binfmt_elf64(r5, &(0x7f0000000380)=ANY=[@ANYRES8=r2], 0x78) (async, rerun: 32) socket$inet_dccp(0x2, 0x6, 0x0) (async) sched_setscheduler(0x0, 0x3, &(0x7f0000000400)=0x7) (async) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x4041) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="680000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800e00010069703665727370616e000000340002801400050000000000000000000000000000000001040012000800140083be00000500170001000000050016"], 0x68}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="c0dc6083ee0b077033bf6de74b7f25fbe7bd8f483e7ad54364e983943c48afa4435204e4176f6797d2edc50c64be2795ad2dcfd8ba0ee0881c9819e3acab1e0407b2d76357413906dc0955b9a6d2fb4baa75e588a10fe4b828971e9621419131d711bd7504b9c646f1cea4f6d230418fc27b3eceee1641a56c095897843f9321", @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf250f000000080006000600000014000180060004004e23000008000b00736970002800038008000500ffffffff140006000000000000000000000000000000000005000800010000005800028008000500050000000800090006000000080006000700000008000400070000001400010020010000000000000000000000000002080008000200000008000400050000000800060008000000060002004e21000008000400d67e000008000600ff0f0000080006000000000c0800050001000000"], 0xd0}, 0x1, 0x0, 0x0, 0x40800}, 0x400a840) 6.024034156s ago: executing program 8 (id=5040): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="41009700010001", 0x7) 5.928941588s ago: executing program 3 (id=5041): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x94, 0x0, &(0x7f0000000080)) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x8, 0x0, &(0x7f00000004c0)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002c000100000000000000000004000080080018800aac0f00f1977610950c44756a457c5a349291e2282b8342fc659f1f5a0346867d758021230ce2b4e50266cf3e3b60e5138ffd11bcfd9b64f1807fcfe2cd2aabe13806aba2ae8693a1c477"], 0x1c}], 0x1, 0x0, 0x0, 0x14080}, 0x0) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000340)) syz_emit_ethernet(0x26, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff00000000000088a8260081000100000c03000080000100006fbbbb585c5141e1"], &(0x7f0000000080)={0x0, 0x4, [0x72f, 0xd63, 0xe80, 0xa7f]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x36, 0x0, &(0x7f0000000040)="f6f4e9a100000000002a8bc686ddb7dbfc007024f8082d130827533e00000000000096f3e30307ae846a11fef93204856ea2f1fefaec", 0x0, 0x4, 0x0, 0x2, 0x0, &(0x7f0000000700)="0102", 0x0}, 0x50) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 5.851769201s ago: executing program 7 (id=5042): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) socket$nl_rdma(0x10, 0x3, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xeb) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r6, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r6, &(0x7f0000000100)='./file1\x00', r6, &(0x7f0000000240)='./file0\x00', 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.metacopy\x00') 5.851534464s ago: executing program 8 (id=5043): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c0000000109021200010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="200005000008475528f8a9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) 3.464317007s ago: executing program 3 (id=5044): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x35) ptrace(0x4208, r0) 3.303821182s ago: executing program 1 (id=5045): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1ff8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0xb, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$I2C_RETRIES(r2, 0x701, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001c000480180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ab8e30fd8f8d0f67a6fbaf9e3b4f16e57b101a4d6bb54812026d5d513eb6ade775c586ef3940a4229ee3b7b1ba0cea72a1c0e8c5983eb658fb4b9fa78e7838a38c16d511423"], 0x70}}, 0x0) mprotect(&(0x7f000008e000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000362000/0x2000)=nil, 0x2000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x12840f417ad9cacf, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x100, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) 3.301638132s ago: executing program 7 (id=5046): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) syz_io_uring_setup(0x6fe5, &(0x7f0000001100)={0x0, 0x0, 0x1, 0x0, 0x16e}, &(0x7f0000000100), &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00'}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x9, 0x0, 0x22}, 0x10) socket(0x1f, 0x80002, 0x4) listen(0xffffffffffffffff, 0x3f9) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x80020000, 0x2, {0x5, @raw_data="439ed4c77a5c5885be9b70b538ec45e7ba36827b0dcf53cc22c46c7ddae950c8f87629ac052d399516111996f2b068d4314f1a6a19db3bdb291cb1a830152d32b2ad880e24ae29ce49a0ba071236284d59f28276b7b6322d4d3e89d8d8fb5d51ce9ef9dea4663ae9ce4c521f2918fad161726fe27dd15cc6520d466d80c07cd248fcf58332bf0ee0e5061d4377b24a0c253e86d27c5edcd2ae36ce31344898571a1a4f7f4af1de4747103ee0bb34830f53b67d1578af4dab6f19403d8c88fd8e00"}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c8e1f48"}, 0x0, 0x2, {}, 0xffffff82}) 3.252558531s ago: executing program 3 (id=5047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800500140080ff000008000840000000000500050002000000050001000600000011000300686173683a"], 0x60}}, 0x0) syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = io_uring_setup(0x37ee, &(0x7f00000000c0)={0x0, 0x572e, 0x1212, 0x4, 0x10}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0xb, 0x81, 0x46d, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000e40cce470001000600000005000400000000000900020073797a31000000000500050002000000120003e6af466da27d2c51742c706f7274000000"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000090601080000000000000000050000000900020073797a310000000005000100070000000900000008000940fffefff40000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10004893}, 0x20010040) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x30008000) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)}, {&(0x7f0000000c40)="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", 0x148}], 0x3}}], 0x1, 0x4084) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0xbf, 0x4) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.912762607s ago: executing program 6 (id=5048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019640)=""/102400, 0x19000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008000ac000000001", 0x1c, 0x0, 0x0, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000040)) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x9}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x16}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r2], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 2.115094339s ago: executing program 8 (id=5049): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) syz_io_uring_setup(0x6fe5, &(0x7f0000001100)={0x0, 0x0, 0x1, 0x0, 0x16e}, &(0x7f0000000100), &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00'}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x9, 0x0, 0x22}, 0x10) listen(0xffffffffffffffff, 0x3f9) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000001c00)=0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r6, 0x4) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x80020000, 0x2, {0x5, @raw_data="439ed4c77a5c5885be9b70b538ec45e7ba36827b0dcf53cc22c46c7ddae950c8f87629ac052d399516111996f2b068d4314f1a6a19db3bdb291cb1a830152d32b2ad880e24ae29ce49a0ba071236284d59f28276b7b6322d4d3e89d8d8fb5d51ce9ef9dea4663ae9ce4c521f2918fad161726fe27dd15cc6520d466d80c07cd248fcf58332bf0ee0e5061d4377b24a0c253e86d27c5edcd2ae36ce31344898571a1a4f7f4af1de4747103ee0bb34830f53b67d1578af4dab6f19403d8c88fd8e00"}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c8e1f48"}, 0x0, 0x2, {}, 0xffffff82}) 2.114818128s ago: executing program 1 (id=5050): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$dri(&(0x7f00000004c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000640)) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, r1, 0x0) 2.101188757s ago: executing program 7 (id=5051): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2004}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20018000}, 0x4040) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) ptrace$getsig(0x4202, r3, 0x2, &(0x7f00000004c0)) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, 0x0) syz_open_procfs$namespace(r0, 0x0) mkdir(0x0, 0x0) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r5) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x52, 0x1, 0x0, 0x25dfdbff, {0x1c}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) 522.2867ms ago: executing program 7 (id=5052): ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000080)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xc, 0xffffffffffffffff, 0x80, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @null]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff00090000000905", @ANYRES8], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x58, r4, 0x1, 0x70bd2d, 0x259fdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4c0d0) 426.025591ms ago: executing program 6 (id=5053): r0 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) r1 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x500) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000008c0)="a6ef12c9e843", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYRESHEX=0x0, @ANYRES8=r0, @ANYBLOB="e43ba524bc6b2e053c1aa8e04bf82bdcdfeaa4faa90160e26a0a79d2f3337211ac0e8008133bbe1ae6929e4c7531f8ff0aae708ae790505600460a3e19c9f61c83770b489df155b0df25696add1a89"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sched_getattr(0xffffffffffffffff, &(0x7f0000000080)={0x38}, 0x38, 0x0) syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) capset(&(0x7f0000000380)={0x20071026, r2}, &(0x7f0000000580)={0xffffffbd, 0xfffffff7, 0x6, 0x8, 0x40, 0x4}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0100800022090080080000f74d362bc22fad1ade5ecff4657e4e1e47936fe243a60a138ab5be5330d0227874ec11257292ae7c42b3920700a7be83", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000005c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"], 0x80}}, 0x0) 0s ago: executing program 3 (id=5054): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r1, r1, 0x0, 0x5) connect$unix(r1, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000100), &(0x7f0000000180)=r1}, 0x20) clock_settime(0x0, &(0x7f0000000140)={0x77359400}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) sendfile(r1, r1, 0x0, 0x5) (async) connect$unix(r1, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000100), &(0x7f0000000180)=r1}, 0x20) (async) clock_settime(0x0, &(0x7f0000000140)={0x77359400}) (async) kernel console output (not intermixed with test programs): aces? [ 1873.040913][ T5901] hid-generic 0000:0000:0003.0054: unknown main item tag 0x0 [ 1873.049207][ T5901] hid-generic 0000:0000:0003.0054: unknown main item tag 0x0 [ 1873.079695][T15566] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1873.120082][ T9414] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1873.135682][ T5901] hid-generic 0000:0000:0003.0054: unknown main item tag 0x0 [ 1873.143217][T15566] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1873.151582][ T5901] hid-generic 0000:0000:0003.0054: unknown main item tag 0x0 [ 1873.160199][ T9414] pwc: recv_control_msg error -32 req 04 val 1000 [ 1873.172041][T15566] usb 4-1: config 0 descriptor?? [ 1873.187073][ T5901] hid-generic 0000:0000:0003.0054: unknown main item tag 0x0 [ 1873.202626][ T9414] pwc: recv_control_msg error -32 req 04 val 1300 [ 1873.238899][ T5901] hid-generic 0000:0000:0003.0054: unknown main item tag 0x0 [ 1873.259442][ T5901] hid-generic 0000:0000:0003.0054: unknown main item tag 0x0 [ 1873.275390][ T5901] hid-generic 0000:0000:0003.0054: unknown main item tag 0x0 [ 1873.284975][T22746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1873.291458][ T5901] hid-generic 0000:0000:0003.0054: unknown main item tag 0x0 [ 1873.301056][ T5901] hid-generic 0000:0000:0003.0054: unknown main item tag 0x0 [ 1873.308840][ T5901] hid-generic 0000:0000:0003.0054: unknown main item tag 0x0 [ 1873.308905][T22746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1873.317002][ T5901] hid-generic 0000:0000:0003.0054: unknown main item tag 0x0 [ 1873.331631][ T5901] hid-generic 0000:0000:0003.0054: unknown main item tag 0x0 [ 1873.339134][ T5901] hid-generic 0000:0000:0003.0054: unknown main item tag 0x0 [ 1873.346976][ T5901] hid-generic 0000:0000:0003.0054: unknown main item tag 0x0 [ 1873.370422][ T5901] hid-generic 0000:0000:0003.0054: unknown main item tag 0x0 [ 1873.378043][ T5901] hid-generic 0000:0000:0003.0054: unknown main item tag 0x0 [ 1873.385687][ T5901] hid-generic 0000:0000:0003.0054: unknown main item tag 0x0 [ 1873.393202][ T5901] hid-generic 0000:0000:0003.0054: unknown main item tag 0x0 [ 1873.402856][ T5901] hid-generic 0000:0000:0003.0054: unknown main item tag 0x0 [ 1873.414195][ T5901] hid-generic 0000:0000:0003.0054: unknown main item tag 0x0 [ 1873.422309][ T5901] hid-generic 0000:0000:0003.0054: unknown main item tag 0x0 [ 1873.429726][ T5901] hid-generic 0000:0000:0003.0054: unknown main item tag 0x0 [ 1873.442112][ T9414] pwc: recv_control_msg error -32 req 04 val 1400 [ 1873.450821][ T9414] pwc: recv_control_msg error -32 req 02 val 2000 [ 1873.459109][ T5901] hid-generic 0000:0000:0003.0054: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1873.471138][ T9414] pwc: recv_control_msg error -32 req 02 val 2100 [ 1873.478103][ T9414] pwc: recv_control_msg error -32 req 04 val 1500 [ 1873.485361][ T9414] pwc: recv_control_msg error -32 req 02 val 2500 [ 1873.492312][ T9414] pwc: recv_control_msg error -32 req 02 val 2400 [ 1873.499282][ T9414] pwc: recv_control_msg error -32 req 02 val 2600 [ 1874.448489][ T9414] pwc: recv_control_msg error -71 req 02 val 2800 [ 1874.455778][ T9414] pwc: recv_control_msg error -71 req 04 val 1100 [ 1874.466755][ T9414] pwc: recv_control_msg error -71 req 04 val 1200 [ 1874.734488][ T9414] pwc: Registered as video103. [ 1874.740551][ T9414] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input195 [ 1874.773395][ T9414] usb 7-1: USB disconnect, device number 123 [ 1875.751576][ T973] usb 4-1: USB disconnect, device number 66 [ 1876.079482][T22793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4637'. [ 1876.121152][T22795] FAULT_INJECTION: forcing a failure. [ 1876.121152][T22795] name failslab, interval 1, probability 0, space 0, times 0 [ 1876.149493][T22795] CPU: 1 UID: 0 PID: 22795 Comm: syz.6.4639 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 1876.160353][T22795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1876.170448][T22795] Call Trace: [ 1876.173755][T22795] [ 1876.176725][T22795] dump_stack_lvl+0x241/0x360 [ 1876.181452][T22795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1876.186715][T22795] ? __pfx__printk+0x10/0x10 [ 1876.191363][T22795] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 1876.196788][T22795] ? __pfx___might_resched+0x10/0x10 [ 1876.202113][T22795] should_fail_ex+0x3b0/0x4e0 [ 1876.206805][T22795] should_failslab+0xac/0x100 [ 1876.211521][T22795] __kmalloc_node_noprof+0xe1/0x4d0 [ 1876.216760][T22795] ? __kvmalloc_node_noprof+0x72/0x190 [ 1876.222357][T22795] __kvmalloc_node_noprof+0x72/0x190 [ 1876.227674][T22795] io_ring_ctx_alloc+0x51d/0x18b0 [ 1876.232734][T22795] ? io_uring_fill_params+0x442/0x840 [ 1876.238162][T22795] io_uring_create+0x40/0xc00 [ 1876.242883][T22795] __se_sys_io_uring_setup+0x2ba/0x330 [ 1876.248393][T22795] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1876.254424][T22795] ? do_syscall_64+0x100/0x230 [ 1876.259234][T22795] ? do_syscall_64+0xb6/0x230 [ 1876.263963][T22795] do_syscall_64+0xf3/0x230 [ 1876.268512][T22795] ? clear_bhb_loop+0x35/0x90 [ 1876.273216][T22795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1876.279122][T22795] RIP: 0033:0x7f9b8fb85d29 [ 1876.283542][T22795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1876.303155][T22795] RSP: 002b:00007f9b90990fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1876.311571][T22795] RAX: ffffffffffffffda RBX: 00007f9b8fd75fa0 RCX: 00007f9b8fb85d29 [ 1876.319562][T22795] RDX: 0000000020000140 RSI: 0000000020000080 RDI: 0000000000005ac0 [ 1876.327570][T22795] RBP: 0000000020000080 R08: 0000000000000000 R09: 0000000020000140 [ 1876.335570][T22795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1876.343577][T22795] R13: 0000000020000040 R14: 0000000000005ac0 R15: 0000000020000140 [ 1876.351618][T22795] [ 1877.976822][ T9414] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1878.738298][ T9414] usb 2-1: device descriptor read/64, error -71 [ 1879.434599][T22829] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1879.440639][T22829] syzkaller0: linktype set to 821 [ 1879.491624][ T9414] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1879.511549][T22829] program syz.6.4650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1879.620132][ T9414] usb 2-1: device descriptor read/64, error -71 [ 1879.637093][T22836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4652'. [ 1879.728255][T22836] bond1: entered promiscuous mode [ 1879.749074][ T9414] usb usb2-port1: attempt power cycle [ 1879.825085][T22839] FAULT_INJECTION: forcing a failure. [ 1879.825085][T22839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1879.838554][T22839] CPU: 1 UID: 0 PID: 22839 Comm: syz.6.4654 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 1879.849370][T22839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1879.859453][T22839] Call Trace: [ 1879.862752][T22839] [ 1879.865721][T22839] dump_stack_lvl+0x241/0x360 [ 1879.870440][T22839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1879.875681][T22839] ? __pfx__printk+0x10/0x10 [ 1879.880335][T22839] ? snprintf+0xda/0x120 [ 1879.884605][T22839] should_fail_ex+0x3b0/0x4e0 [ 1879.889311][T22839] _copy_to_user+0x31/0xb0 [ 1879.893775][T22839] simple_read_from_buffer+0xca/0x150 [ 1879.899193][T22839] proc_fail_nth_read+0x1e9/0x250 [ 1879.904270][T22839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1879.909862][T22839] ? rw_verify_area+0x55e/0x6f0 [ 1879.914744][T22839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1879.920332][T22839] vfs_read+0x1fc/0xb70 [ 1879.924530][T22839] ? __pfx___mutex_lock+0x10/0x10 [ 1879.929685][T22839] ? __pfx_vfs_read+0x10/0x10 [ 1879.934405][T22839] ? __fget_files+0x2a/0x410 [ 1879.939034][T22839] ? __fget_files+0x395/0x410 [ 1879.943748][T22839] ? __fget_files+0x2a/0x410 [ 1879.948386][T22839] ksys_read+0x18f/0x2b0 [ 1879.952679][T22839] ? __pfx_ksys_read+0x10/0x10 [ 1879.957483][T22839] ? do_syscall_64+0x100/0x230 [ 1879.962310][T22839] ? do_syscall_64+0xb6/0x230 [ 1879.967027][T22839] do_syscall_64+0xf3/0x230 [ 1879.971551][T22839] ? clear_bhb_loop+0x35/0x90 [ 1879.976237][T22839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1879.982147][T22839] RIP: 0033:0x7f9b8fb8473c [ 1879.986576][T22839] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1880.006189][T22839] RSP: 002b:00007f9b90991030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1880.014610][T22839] RAX: ffffffffffffffda RBX: 00007f9b8fd75fa0 RCX: 00007f9b8fb8473c [ 1880.022588][T22839] RDX: 000000000000000f RSI: 00007f9b909910a0 RDI: 0000000000000004 [ 1880.030562][T22839] RBP: 00007f9b90991090 R08: 0000000000000000 R09: 0000000000000000 [ 1880.038542][T22839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1880.046524][T22839] R13: 0000000000000000 R14: 00007f9b8fd75fa0 R15: 00007ffd43426ff8 [ 1880.054512][T22839] [ 1880.071653][T22836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1880.078408][T22842] 9pnet_fd: Insufficient options for proto=fd [ 1880.082442][T22842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4652'. [ 1880.249166][ T9414] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1880.987120][ T9414] usb 2-1: device descriptor read/8, error -71 [ 1881.239048][ T5901] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 1881.561026][ T5901] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1881.571592][ T5901] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1881.580873][ T5901] usb 7-1: config 1 has no interface number 0 [ 1881.587015][ T5901] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1881.598105][ T5901] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1881.611744][ T5901] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1881.626947][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.781510][ T5901] usb 7-1: Product: syz [ 1881.785978][ T5901] usb 7-1: Manufacturer: syz [ 1881.795265][ T5901] usb 7-1: SerialNumber: syz [ 1882.507616][T22842] bond1 (unregistering): Released all slaves [ 1883.384751][ T29] audit: type=1326 audit(10131.298:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22873 comm="syz.3.4661" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbc3985d29 code=0x0 [ 1884.038693][ T5901] cdc_ncm 7-1:1.1: bind() failure [ 1884.049297][ T5901] usb 7-1: USB disconnect, device number 124 [ 1885.213121][T22894] fuse: Unknown parameter 'ô' [ 1885.888843][T22911] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4670'. [ 1887.372562][T22930] ptrace attach of "./syz-executor exec"[17438] was attempted by ""[22930] [ 1888.163603][T20895] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1888.334911][T20895] usb 2-1: Using ep0 maxpacket: 8 [ 1888.345744][T20895] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1888.358276][T20895] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1888.369077][T20895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.391213][T20895] usb 2-1: Product: syz [ 1888.411035][T20895] usb 2-1: Manufacturer: syz [ 1888.418153][T20895] usb 2-1: SerialNumber: syz [ 1888.432243][T20895] usb 2-1: config 0 descriptor?? [ 1888.456315][T20895] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1888.477573][ T9414] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1889.612034][T20895] gspca_zc3xx: reg_w_i err -110 [ 1889.648759][ T9414] usb 9-1: Using ep0 maxpacket: 16 [ 1889.655841][T22945] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4679'. [ 1889.692072][ T9414] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1889.702025][ T9414] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1889.710544][ T9414] usb 9-1: Product: syz [ 1889.714749][ T9414] usb 9-1: Manufacturer: syz [ 1889.723109][ T9414] usb 9-1: SerialNumber: syz [ 1889.729953][ T9414] usb 9-1: config 0 descriptor?? [ 1890.009283][ T29] audit: type=1400 audit(10138.266:1930): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=22926 comm="syz.8.4675" saddr=172.30.0.9 daddr=172.20.20.170 [ 1890.043727][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1890.069652][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1890.077124][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1890.184855][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1890.193115][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1890.307527][ T973] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1890.422707][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1890.715461][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1890.742536][ T973] usb 4-1: config 0 has no interfaces? [ 1890.823359][T20895] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1890.830688][T20895] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1890.934377][ T973] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1890.943960][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1890.953365][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1890.961413][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1890.970077][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1890.984903][ T973] usb 4-1: config 0 descriptor?? [ 1890.991602][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1891.000833][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1891.012501][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1891.019936][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1891.052800][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1891.060270][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1891.066807][ T973] usb 9-1: USB disconnect, device number 18 [ 1891.081482][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1891.102230][T22967] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4685'. [ 1891.107858][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1891.148760][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1891.157869][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1891.166719][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1891.174445][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1891.182134][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1891.191515][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1891.208429][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1891.227314][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1891.234835][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1891.468571][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1891.481624][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1891.506881][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1891.757032][T22978] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input199 [ 1892.354801][T20895] usb 2-1: USB disconnect, device number 79 [ 1892.411644][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1892.419316][ T5865] hid-generic 0000:0000:0003.0055: unknown main item tag 0x0 [ 1892.448236][ T5865] hid-generic 0000:0000:0003.0055: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1892.519022][T22967] hsr_slave_1 (unregistering): left promiscuous mode [ 1894.007821][ T5865] usb 4-1: USB disconnect, device number 67 [ 1894.328055][ T9414] IPVS: starting estimator thread 0... [ 1895.029597][T23001] IPVS: using max 22 ests per chain, 52800 per kthread [ 1897.578863][T22074] Bluetooth: hci4: command 0x0405 tx timeout [ 1898.620680][T23030] Mount JFS Failure: -22 [ 1898.625066][T23030] jfs_mount failed w/return code = -22 [ 1899.733040][T23034] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4701'. [ 1900.008998][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.016518][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.024011][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.031647][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.039113][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.046602][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.054021][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.061617][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.069277][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.076849][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.084264][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.091768][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.099644][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.107520][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.115164][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.122646][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.130076][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.137584][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.145532][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.153006][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.160451][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.168048][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.175532][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.183113][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.190589][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.198672][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.206089][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.213574][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.221161][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.228752][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.236161][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.243663][ T5865] hid-generic 0000:0000:0003.0056: unknown main item tag 0x0 [ 1900.252182][ T5865] hid-generic 0000:0000:0003.0056: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1900.326132][T23050] nfs: Unexpected value for 'acl' [ 1900.515418][ T973] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1900.675148][ T9414] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1900.698951][ T973] usb 8-1: config 0 has no interfaces? [ 1900.704589][ T973] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1900.713720][ T973] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.732355][ T973] usb 8-1: config 0 descriptor?? [ 1900.832005][ T9414] usb 4-1: Using ep0 maxpacket: 8 [ 1900.862768][ T9414] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1900.875116][ T5865] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 1900.897318][ T9414] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1900.922924][ T9414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.941905][ T9414] usb 4-1: Product: syz [ 1900.948220][ T9414] usb 4-1: Manufacturer: syz [ 1900.959115][ T9414] usb 4-1: SerialNumber: syz [ 1901.012338][ T9414] usb 4-1: config 0 descriptor?? [ 1901.361614][ T5865] usb 7-1: device descriptor read/64, error -71 [ 1901.436413][T23065] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input201 [ 1901.648156][ T5865] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 1901.971608][ T5865] usb 7-1: device descriptor read/64, error -71 [ 1902.009738][ T9414] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1902.016601][ T9414] usb 4-1: selecting invalid altsetting 1 [ 1902.146457][ T5865] usb usb7-port1: attempt power cycle [ 1902.571592][ T5865] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 1902.610132][ T5865] usb 7-1: device descriptor read/8, error -71 [ 1902.701938][T23069] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4712'. [ 1902.712057][T23069] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4712'. [ 1902.731552][T23069] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4712'. [ 1902.744236][T23069] netlink: 88 bytes leftover after parsing attributes in process `syz.8.4712'. [ 1902.753580][T23069] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4712'. [ 1902.857285][ T5865] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1902.896106][ T5865] usb 7-1: device descriptor read/8, error -71 [ 1903.080358][ T8] usb 8-1: USB disconnect, device number 21 [ 1903.091046][ T5865] usb usb7-port1: unable to enumerate USB device [ 1903.198721][T23076] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4715'. [ 1903.860848][T23083] QAT: Device 5 not found [ 1904.005441][T23085] netlink: 112 bytes leftover after parsing attributes in process `syz.8.4717'. [ 1904.215224][T17333] usb 4-1: USB disconnect, device number 68 [ 1905.102751][T23099] Mount JFS Failure: -22 [ 1905.107217][T23099] jfs_mount failed w/return code = -22 [ 1906.892919][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1906.904280][T23112] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4727'. [ 1906.905456][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1906.955037][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1906.972720][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.015506][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.053026][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.078812][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.117962][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.149630][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.174627][ T9414] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1907.182688][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.204274][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.211751][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.231596][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.239707][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.303208][T23118] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4726'. [ 1907.317970][T23118] netlink: 'syz.7.4726': attribute type 39 has an invalid length. [ 1907.366731][ T9414] usb 4-1: config 0 has no interfaces? [ 1907.673500][ T9414] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1907.820242][ T9414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.838048][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.863339][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.879584][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.887038][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.903178][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.910844][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.918868][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.926298][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.933933][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.941433][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.945837][T17333] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1907.948933][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.963949][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.972016][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.979561][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.987131][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1907.994615][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1908.002841][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1908.010435][T15566] hid-generic 0000:0000:0003.0057: unknown main item tag 0x0 [ 1908.098634][ T9414] usb 4-1: config 0 descriptor?? [ 1908.107779][T15566] hid-generic 0000:0000:0003.0057: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1909.915297][T17333] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1909.925576][T17333] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1909.966118][T17333] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1909.994968][T17333] usb 7-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 1910.013377][T17333] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1910.089778][T17333] usb 7-1: config 0 descriptor?? [ 1910.114759][T17333] usb 7-1: can't set config #0, error -71 [ 1910.121647][T17333] usb 7-1: USB disconnect, device number 3 [ 1910.221092][ T973] usb 4-1: USB disconnect, device number 69 [ 1911.277710][T23143] netlink: 'syz.3.4736': attribute type 12 has an invalid length. [ 1911.288580][T23143] netlink: 'syz.3.4736': attribute type 29 has an invalid length. [ 1911.297155][T23143] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4736'. [ 1911.306434][T23143] netlink: 59 bytes leftover after parsing attributes in process `syz.3.4736'. [ 1911.339366][T23143] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4736'. [ 1911.770598][T23158] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4738'. [ 1914.340118][T19178] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1915.292980][T19178] usb 8-1: Using ep0 maxpacket: 16 [ 1915.302070][T19178] usb 8-1: config 7 has an invalid interface number: 46 but max is 0 [ 1915.320450][T19178] usb 8-1: config 7 has no interface number 0 [ 1915.344987][T23190] syzkaller1: entered promiscuous mode [ 1915.350724][T23189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4746'. [ 1915.354582][T19178] usb 8-1: config 7 interface 46 has no altsetting 0 [ 1915.369545][T23190] syzkaller1: entered allmulticast mode [ 1915.440452][T19178] usb 8-1: New USB device found, idVendor=9fdb, idProduct=cfba, bcdDevice=f1.37 [ 1915.472443][T19178] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.567574][T19178] usb 8-1: Product: syz [ 1915.572413][T19178] usb 8-1: Manufacturer: syz [ 1915.578766][T19178] usb 8-1: SerialNumber: syz [ 1915.586063][T23189] Can't find a SQUASHFS superblock on nullb0 [ 1916.123031][T23190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4745'. [ 1916.275181][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.284140][T19178] usb 8-1: USB disconnect, device number 22 [ 1916.284683][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.312788][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.320564][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.343950][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.360624][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.368068][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.389192][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.397342][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.397574][T23200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4748'. [ 1916.417844][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.425274][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.432903][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.440397][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.447880][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.455303][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.463372][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.471428][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.478909][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.486454][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.494286][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.502042][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.509538][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.518611][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.526174][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.534233][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.541774][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.549285][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.556796][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.564281][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.571758][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.579172][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.586651][ T5872] hid-generic 0000:0000:0003.0058: unknown main item tag 0x0 [ 1916.598861][ T5872] hid-generic 0000:0000:0003.0058: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1916.603610][T23202] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4749'. [ 1916.913661][T17333] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1917.180123][T22074] Bluetooth: hci0: command 0x0406 tx timeout [ 1917.809410][T23212] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4753'. [ 1917.823107][T17333] usb 9-1: config 0 has no interfaces? [ 1917.834483][T17333] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1917.871222][T17333] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.921525][T17333] usb 9-1: config 0 descriptor?? [ 1918.931364][T23224] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input202 [ 1920.106964][T23228] ptrace attach of "./syz-executor exec"[18269] was attempted by ""[23228] [ 1920.159561][T23228] dvmrp0: entered allmulticast mode [ 1920.203777][T23228] pimreg: entered allmulticast mode [ 1920.956224][T17333] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1921.082525][ T9414] usb 9-1: USB disconnect, device number 19 [ 1921.691047][T17333] usb 4-1: Using ep0 maxpacket: 16 [ 1921.972119][T17333] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1922.182920][T17333] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1922.199014][T17333] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1922.205748][T17333] usb 4-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 1922.215012][T17333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1922.314052][T17333] usb 4-1: config 0 descriptor?? [ 1922.544894][T19178] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1922.687723][T19178] usb 8-1: Using ep0 maxpacket: 32 [ 1922.695511][T19178] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1922.705651][T19178] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1922.723931][T17333] wacom 0003:056A:0029.0059: unknown main item tag 0x0 [ 1922.728036][T19178] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1922.731851][T17333] wacom 0003:056A:0029.0059: unknown main item tag 0x0 [ 1922.740762][T19178] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1922.755919][T19178] usb 8-1: Product: syz [ 1922.760114][T19178] usb 8-1: Manufacturer: syz [ 1922.763620][T17333] wacom 0003:056A:0029.0059: unknown main item tag 0x0 [ 1922.764798][T19178] usb 8-1: SerialNumber: syz [ 1922.777024][T17333] wacom 0003:056A:0029.0059: unknown main item tag 0x0 [ 1922.783066][T19178] usb 8-1: config 0 descriptor?? [ 1922.784110][T17333] wacom 0003:056A:0029.0059: unknown main item tag 0x0 [ 1922.797778][T17333] wacom 0003:056A:0029.0059: Unknown device_type for 'HID 056a:0029'. Assuming pen. [ 1922.810485][T17333] wacom 0003:056A:0029.0059: hidraw0: USB HID v0.40 Device [HID 056a:0029] on usb-dummy_hcd.3-1/input0 [ 1922.825250][T17333] input: Wacom Intuos5 S Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0029.0059/input/input203 [ 1924.696479][T15566] usb 8-1: USB disconnect, device number 23 [ 1924.874753][ T9414] usb 4-1: USB disconnect, device number 70 [ 1925.548198][ T5872] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1925.732508][ T5872] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1925.741919][ T5872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.756398][ T5872] usb 7-1: Product: syz [ 1925.765622][ T5872] usb 7-1: Manufacturer: syz [ 1925.770273][ T5872] usb 7-1: SerialNumber: syz [ 1925.908217][ T5872] usb 7-1: config 0 descriptor?? [ 1926.757312][ T5872] hso 7-1:0.0: Can't find BULK IN endpoint [ 1926.764324][ T5872] usb-storage 7-1:0.0: USB Mass Storage device detected [ 1927.592504][T23290] ptrace attach of "./syz-executor exec"[18269] was attempted by ""[23290] [ 1928.565158][T19178] usb 7-1: USB disconnect, device number 4 [ 1929.036257][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.054512][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.070600][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.101955][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.110328][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.155443][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.193596][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.204037][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.212477][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.220733][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.229608][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.237832][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.242642][T23302] netlink: 'syz.1.4772': attribute type 12 has an invalid length. [ 1929.253630][T23302] netlink: 'syz.1.4772': attribute type 29 has an invalid length. [ 1929.253771][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.269694][T23302] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4772'. [ 1929.269765][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.289649][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.293270][T23303] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4772'. [ 1929.307089][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.315369][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.320530][T23302] netlink: 59 bytes leftover after parsing attributes in process `syz.1.4772'. [ 1929.332660][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.342565][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.353579][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.363714][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.371821][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.380806][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.391643][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.401479][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.409342][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.418139][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.428403][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.438162][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.446183][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.454575][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.464397][T19178] hid-generic 0000:0000:0003.005A: unknown main item tag 0x0 [ 1929.716047][T19178] hid-generic 0000:0000:0003.005A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1930.368389][T15566] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1930.537775][T15566] usb 9-1: config 0 has no interfaces? [ 1930.558590][T23305] netlink: 'syz.6.4773': attribute type 12 has an invalid length. [ 1930.566792][T23305] netlink: 'syz.6.4773': attribute type 29 has an invalid length. [ 1930.567402][T15566] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1930.584112][T23305] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4773'. [ 1930.593735][T23305] netlink: 59 bytes leftover after parsing attributes in process `syz.6.4773'. [ 1930.605127][T23308] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4773'. [ 1930.628885][T15566] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.688190][T15566] usb 9-1: config 0 descriptor?? [ 1931.179485][T23311] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input206 [ 1932.221494][T20895] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1932.665385][T20895] usb 8-1: Using ep0 maxpacket: 32 [ 1932.759228][T20895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1932.862307][T20895] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1932.896532][T20895] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1932.917928][T20895] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1932.931818][T20895] usb 8-1: Product: syz [ 1932.938528][T20895] usb 8-1: Manufacturer: syz [ 1932.945514][T20895] usb 8-1: SerialNumber: syz [ 1932.956392][T20895] usb 8-1: config 0 descriptor?? [ 1933.119717][T23266] usb 9-1: USB disconnect, device number 20 [ 1934.910644][T23266] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 1934.933174][T15566] usb 8-1: USB disconnect, device number 24 [ 1935.047621][T23266] usb 9-1: device descriptor read/64, error -71 [ 1935.318761][T23266] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 1935.983762][T23343] netlink: 'syz.1.4784': attribute type 12 has an invalid length. [ 1935.992133][T23343] netlink: 'syz.1.4784': attribute type 29 has an invalid length. [ 1936.000244][T23343] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4784'. [ 1936.076126][T23343] netlink: 59 bytes leftover after parsing attributes in process `syz.1.4784'. [ 1936.121291][T23350] ptrace attach of "./syz-executor exec"[16665] was attempted by ""[23350] [ 1936.811637][T23350] dvmrp0: entered allmulticast mode [ 1936.821150][T23351] pimreg: entered allmulticast mode [ 1936.934014][T23266] usb 9-1: device descriptor read/64, error -71 [ 1937.039290][T23266] usb usb9-port1: attempt power cycle [ 1937.272786][T23360] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4786'. [ 1938.891639][T22074] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 1940.269051][T15566] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1941.036171][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.044924][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.052857][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.060641][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.068176][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.076068][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.083897][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.091627][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.099170][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.106712][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.114215][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.121710][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.129193][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.136875][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.144297][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.151993][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.159557][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.167086][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.174808][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.182737][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.190229][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.197722][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.205222][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.212691][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.220110][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.227793][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.235617][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.243123][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.250550][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.258059][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.265585][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.273343][T20895] hid-generic 0000:0000:0003.005B: unknown main item tag 0x0 [ 1941.289838][T20895] hid-generic 0000:0000:0003.005B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1941.317428][T15566] usb 8-1: Using ep0 maxpacket: 16 [ 1941.326443][T15566] usb 8-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1941.335608][T15566] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.343716][T15566] usb 8-1: Product: syz [ 1941.347975][T15566] usb 8-1: Manufacturer: syz [ 1941.352598][T15566] usb 8-1: SerialNumber: syz [ 1941.359547][T15566] usb 8-1: config 0 descriptor?? [ 1941.367272][T15566] ums-onetouch 8-1:0.0: USB Mass Storage device detected [ 1941.527278][ T9414] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1941.622299][T20895] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1941.672227][ T9414] usb 7-1: config 0 has no interfaces? [ 1941.677913][ T9414] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1941.689663][ T9414] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.700718][ T9414] usb 7-1: config 0 descriptor?? [ 1941.767779][T20895] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1941.784474][T20895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.804148][T20895] usb 4-1: config 0 descriptor?? [ 1941.955758][ T8] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 1942.109515][ T8] usb 9-1: device descriptor read/64, error -71 [ 1942.160297][T20895] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1942.169027][T20895] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1942.177283][T20895] [drm:udl_init] *ERROR* Selecting channel failed [ 1942.196022][T20895] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1942.202763][T20895] [drm] Initialized udl on minor 2 [ 1942.222383][T20895] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1942.233780][T20895] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1942.254648][T20895] usb 4-1: USB disconnect, device number 71 [ 1942.299301][T23401] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input207 [ 1942.699573][ T8] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 1942.880417][ T8] usb 9-1: device descriptor read/64, error -71 [ 1942.967271][T17333] usb 8-1: USB disconnect, device number 25 [ 1943.014304][ T8] usb usb9-port1: attempt power cycle [ 1943.652857][T23410] Mount JFS Failure: -22 [ 1943.657281][T23410] jfs_mount failed w/return code = -22 [ 1944.049792][ T8] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 1944.091429][ T8] usb 9-1: device descriptor read/8, error -71 [ 1944.135382][T20895] usb 7-1: USB disconnect, device number 5 [ 1944.140353][T23266] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 1944.328526][ T8] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 1944.342218][T23266] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1944.354879][ T8] usb 9-1: device descriptor read/8, error -71 [ 1944.373397][T23266] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1944.415904][T23266] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1944.425462][T23266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1944.433503][T23266] usb 2-1: SerialNumber: syz [ 1944.472115][ T8] usb usb9-port1: unable to enumerate USB device [ 1944.518732][T23266] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1944.605504][T23266] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1944.645357][T23266] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1944.728945][T23266] scsi host1: usb-storage 2-1:1.0 [ 1944.851737][ T9414] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1944.879937][T23425] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4804'. [ 1944.956038][T23422] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1945.005388][ T9414] usb 8-1: Using ep0 maxpacket: 32 [ 1945.267022][ T9414] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1945.454206][ T9414] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1945.593076][T23422] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4803'. [ 1945.607808][ T9414] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1945.625476][ T9414] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1945.636325][ T9414] usb 8-1: Product: syz [ 1945.640642][ T9414] usb 8-1: Manufacturer: syz [ 1945.648906][ T9414] usb 8-1: SerialNumber: syz [ 1945.671391][ T9414] usb 8-1: config 0 descriptor?? [ 1946.155864][T15566] usb 2-1: USB disconnect, device number 80 [ 1946.598128][ T9414] usb 8-1: USB disconnect, device number 26 [ 1947.315646][T23442] mkiss: ax0: crc mode is auto. [ 1949.121681][T23455] Mount JFS Failure: -22 [ 1949.126136][T23455] jfs_mount failed w/return code = -22 [ 1949.188347][T23459] ptrace attach of "./syz-executor exec"[17438] was attempted by ""[23459] [ 1949.540403][T23452] QAT: Device 5 not found [ 1949.932524][ T973] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1950.262488][T23266] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1950.313512][ T973] usb 8-1: Using ep0 maxpacket: 16 [ 1950.866538][T23266] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1950.881285][T23266] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1950.914766][T23266] usb 7-1: Product: syz [ 1950.919667][T23266] usb 7-1: Manufacturer: syz [ 1950.925449][T23266] usb 7-1: SerialNumber: syz [ 1950.947760][T23266] usb 7-1: config 0 descriptor?? [ 1951.904544][T23266] usb-storage 7-1:0.0: USB Mass Storage device detected [ 1951.929774][ T973] usb 8-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1951.939057][ T973] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.968530][ T973] usb 8-1: config 0 descriptor?? [ 1951.982136][ T973] usb 8-1: can't set config #0, error -71 [ 1952.199654][ T973] usb 8-1: USB disconnect, device number 27 [ 1952.718542][T23266] usb 7-1: USB disconnect, device number 6 [ 1954.759568][T23511] Mount JFS Failure: -22 [ 1954.764103][T23511] jfs_mount failed w/return code = -22 [ 1955.212397][T15566] usb 9-1: new low-speed USB device number 28 using dummy_hcd [ 1955.578793][T15566] usb 9-1: config 1 has an invalid interface descriptor of length 6, skipping [ 1955.587976][T15566] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1955.598191][T15566] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1955.608373][T15566] usb 9-1: config 1 has no interface number 1 [ 1955.618469][T15566] usb 9-1: string descriptor 0 read error: -22 [ 1955.640260][T15566] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1955.661692][T15566] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.949467][T15566] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1955.959458][T15566] usb 9-1: MIDIStreaming interface descriptor not found [ 1956.360415][T23502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1956.379268][T23502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1956.459998][T15566] usb 9-1: USB disconnect, device number 28 [ 1956.787946][T23520] kvm: kvm [23519]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 1956.987360][T23526] netlink: 'syz.6.4832': attribute type 12 has an invalid length. [ 1956.997204][T23526] netlink: 'syz.6.4832': attribute type 29 has an invalid length. [ 1957.005581][T23526] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4832'. [ 1957.014974][T23526] netlink: 59 bytes leftover after parsing attributes in process `syz.6.4832'. [ 1957.019734][T23520] kvm: kvm [23519]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 1957.096983][T23520] kvm: kvm [23519]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 1957.157283][T23526] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4832'. [ 1957.388654][T23520] kvm: kvm [23519]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 1957.431952][T23520] kvm: kvm [23519]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 1957.463645][T23520] kvm: kvm [23519]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 1957.793412][ T973] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1957.889848][ T8] usb 8-1: new low-speed USB device number 28 using dummy_hcd [ 1957.970624][ T973] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1957.995050][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.005201][ T973] usb 2-1: Product: syz [ 1958.009536][ T973] usb 2-1: Manufacturer: syz [ 1958.039738][ T973] usb 2-1: SerialNumber: syz [ 1958.071873][ T973] usb 2-1: config 0 descriptor?? [ 1958.093737][ T8] usb 8-1: config 1 has an invalid interface descriptor of length 6, skipping [ 1958.166667][ T8] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1958.978101][ T8] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1958.987473][ T8] usb 8-1: config 1 has no interface number 1 [ 1958.997592][ T8] usb 8-1: string descriptor 0 read error: -22 [ 1959.003965][ T8] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1959.013162][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.047732][ T8] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1959.081434][ T8] usb 8-1: MIDIStreaming interface descriptor not found [ 1959.137604][ T973] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1959.441098][T23530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1959.857104][T23557] Mount JFS Failure: -22 [ 1959.861420][T23557] jfs_mount failed w/return code = -22 [ 1960.117863][T23530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1960.190562][ T8] usb 8-1: USB disconnect, device number 28 [ 1960.255557][ T973] usb 2-1: USB disconnect, device number 81 [ 1961.981750][T23579] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4846'. [ 1962.416124][T23588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4848'. [ 1962.701030][T23594] ptrace attach of "./syz-executor exec"[18269] was attempted by ""[23594] [ 1962.806456][T23594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1963.480080][T23594] batadv_slave_1: entered promiscuous mode [ 1964.631026][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1964.639683][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1964.653183][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1964.683380][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1964.691682][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1964.833532][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1964.860490][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1964.886637][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.202907][T15566] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1965.212412][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.220321][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.228624][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.264331][T23616] Mount JFS Failure: -22 [ 1965.268813][T23616] jfs_mount failed w/return code = -22 [ 1965.282019][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.290114][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.298217][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.306266][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.314391][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.322814][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.331093][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.339120][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.347090][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.355000][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.363018][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.370890][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.378980][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.387267][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.395236][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.403335][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.411343][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.419262][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.427603][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.435620][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.443694][T20895] hid-generic 0000:0000:0003.005C: unknown main item tag 0x0 [ 1965.557170][T20895] hid-generic 0000:0000:0003.005C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1965.683742][ T973] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1965.715501][T15566] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1965.725222][T15566] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.733592][T15566] usb 4-1: Product: syz [ 1965.737915][T15566] usb 4-1: Manufacturer: syz [ 1965.742609][T15566] usb 4-1: SerialNumber: syz [ 1965.748952][T15566] usb 4-1: config 0 descriptor?? [ 1965.759876][T23266] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1965.836042][T19178] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 1965.843891][ T973] usb 9-1: config 0 has no interfaces? [ 1965.850184][ T973] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1965.859911][ T973] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1965.871399][ T973] usb 9-1: config 0 descriptor?? [ 1965.905797][T23266] usb 8-1: Using ep0 maxpacket: 8 [ 1965.912610][T23266] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1965.925123][T23266] usb 8-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1965.934326][T23266] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.946990][T23266] usb 8-1: Product: syz [ 1965.955234][T23266] usb 8-1: Manufacturer: syz [ 1965.961584][T23266] usb 8-1: SerialNumber: syz [ 1965.980541][T23266] usb 8-1: config 0 descriptor?? [ 1965.988210][T19178] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping [ 1965.989706][T23266] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1966.023046][T23266] usb 8-1: selecting invalid altsetting 1 [ 1966.114185][T15566] hso 4-1:0.0: Can't find BULK IN endpoint [ 1966.120613][T15566] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1966.128510][T19178] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1966.139123][T19178] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1966.148908][T19178] usb 2-1: config 1 has no interface number 1 [ 1966.162462][T19178] usb 2-1: string descriptor 0 read error: -22 [ 1966.168802][T19178] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1966.225426][T19178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.247836][T23266] usb 4-1: USB disconnect, device number 72 [ 1966.260567][T19178] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1966.299298][T19178] usb 2-1: MIDIStreaming interface descriptor not found [ 1966.897003][T23619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1966.923118][T23619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1966.958230][T23266] usb 2-1: USB disconnect, device number 82 [ 1967.956446][T15566] usb 9-1: USB disconnect, device number 29 [ 1968.384757][T23266] usb 8-1: USB disconnect, device number 29 [ 1968.478273][T23645] ptrace attach of "./syz-executor exec"[18269] was attempted by ""[23645] [ 1970.553694][T23665] FAULT_INJECTION: forcing a failure. [ 1970.553694][T23665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1970.568960][T23665] CPU: 1 UID: 0 PID: 23665 Comm: syz.6.4869 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 1970.579770][T23665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1970.589849][T23665] Call Trace: [ 1970.593152][T23665] [ 1970.596117][T23665] dump_stack_lvl+0x241/0x360 [ 1970.600842][T23665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1970.606068][T23665] ? __pfx__printk+0x10/0x10 [ 1970.610692][T23665] ? finish_task_switch+0x1ea/0x870 [ 1970.615918][T23665] ? __pfx_lock_release+0x10/0x10 [ 1970.620978][T23665] should_fail_ex+0x3b0/0x4e0 [ 1970.625682][T23665] _copy_from_user+0x2f/0xc0 [ 1970.630305][T23665] __sys_bpf+0x1a4/0x810 [ 1970.634578][T23665] ? __pfx___sys_bpf+0x10/0x10 [ 1970.639386][T23665] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1970.645397][T23665] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1970.651754][T23665] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1970.658111][T23665] __x64_sys_bpf+0x7c/0x90 [ 1970.662565][T23665] do_syscall_64+0xf3/0x230 [ 1970.667107][T23665] ? clear_bhb_loop+0x35/0x90 [ 1970.671820][T23665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1970.677748][T23665] RIP: 0033:0x7f9b8fb85d29 [ 1970.682188][T23665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1970.701810][T23665] RSP: 002b:00007f9b90991038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1970.710249][T23665] RAX: ffffffffffffffda RBX: 00007f9b8fd75fa0 RCX: 00007f9b8fb85d29 [ 1970.718250][T23665] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000012 [ 1970.726241][T23665] RBP: 00007f9b90991090 R08: 0000000000000000 R09: 0000000000000000 [ 1970.734234][T23665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1970.742234][T23665] R13: 0000000000000001 R14: 00007f9b8fd75fa0 R15: 00007ffd43426ff8 [ 1970.750249][T23665] [ 1970.777943][T23666] Mount JFS Failure: -22 [ 1970.782421][T23666] jfs_mount failed w/return code = -22 [ 1971.294817][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1971.303395][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1971.311595][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1971.319247][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1971.326976][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1971.335004][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1971.344453][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1971.353735][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1971.361148][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1971.368582][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1971.376003][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1971.383728][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1971.391111][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1971.458971][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1971.466430][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1971.863448][T15566] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1972.024838][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1972.033222][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1972.042401][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1972.069430][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1972.077302][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1972.085284][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1972.093368][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1972.101908][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1972.113149][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1972.125809][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1972.133410][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1972.141661][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1972.149737][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1972.158021][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1972.168153][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1972.178848][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1972.181897][T23682] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.4873'. [ 1972.186686][T19178] hid-generic 0000:0000:0003.005D: unknown main item tag 0x0 [ 1972.523894][T19178] hid-generic 0000:0000:0003.005D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1972.748748][T15566] usb 7-1: config 0 has no interfaces? [ 1972.754305][T15566] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1972.763912][T15566] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1972.779414][T15566] usb 7-1: config 0 descriptor?? [ 1974.064401][T23705] ptrace attach of "./syz-executor exec"[22063] was attempted by ""[23705] [ 1975.446011][T23705] dvmrp0: entered allmulticast mode [ 1975.454531][T23706] pimreg: entered allmulticast mode [ 1975.475926][ T8] usb 7-1: USB disconnect, device number 7 [ 1976.352813][T23717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4877'. [ 1976.884834][ T29] audit: type=1326 audit(10229.427:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23728 comm="syz.1.4882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b72b85d29 code=0x7ffc0000 [ 1976.912237][ T29] audit: type=1326 audit(10229.459:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23728 comm="syz.1.4882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b72b85d29 code=0x7ffc0000 [ 1976.938047][ T29] audit: type=1326 audit(10229.459:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23728 comm="syz.1.4882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b72b85d29 code=0x7ffc0000 [ 1977.014045][ T29] audit: type=1326 audit(10229.459:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23728 comm="syz.1.4882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b72b85d29 code=0x7ffc0000 [ 1977.035671][ T29] audit: type=1326 audit(10229.459:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23728 comm="syz.1.4882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f0b72b85d29 code=0x7ffc0000 [ 1977.059603][ T29] audit: type=1326 audit(10229.459:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23728 comm="syz.1.4882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b72b85d29 code=0x7ffc0000 [ 1977.081073][ T29] audit: type=1326 audit(10229.459:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23728 comm="syz.1.4882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0b72b85d29 code=0x7ffc0000 [ 1977.103333][ T29] audit: type=1326 audit(10229.459:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23728 comm="syz.1.4882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b72b85d29 code=0x7ffc0000 [ 1977.125110][ T29] audit: type=1326 audit(10229.459:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23728 comm="syz.1.4882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0b72b85d29 code=0x7ffc0000 [ 1977.147022][ T29] audit: type=1326 audit(10229.459:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23728 comm="syz.1.4882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b72b85d29 code=0x7ffc0000 [ 1980.403651][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.426880][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.434526][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.442095][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.449614][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.457304][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.464787][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.472214][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.480118][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.487975][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.495667][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.503393][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.511271][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.518698][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.526610][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.534130][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.541654][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.549096][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.556826][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.564374][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.571901][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.579443][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.586906][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.594398][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.602249][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.610146][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.617668][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.625116][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.632610][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.640130][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.647685][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.655173][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.673106][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.684759][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.692960][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.703435][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.713739][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.724657][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.739856][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.763333][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.777430][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.777966][ T9414] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1980.785249][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.802584][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.808057][T15566] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1980.810094][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.832034][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.844194][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.857776][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.878523][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.891473][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.903587][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.911262][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.920777][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.929403][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.939539][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.957105][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.959200][ T9414] usb 9-1: device descriptor read/64, error -71 [ 1980.966447][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1980.982896][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.991369][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1980.993634][T15566] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1980.999537][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1981.025821][T15566] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.025961][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1981.053187][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1981.062164][T15566] usb 2-1: Product: syz [ 1981.062370][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1981.073600][T15566] usb 2-1: Manufacturer: syz [ 1981.074013][T23266] hid-generic 0000:0000:0003.005E: unknown main item tag 0x0 [ 1981.085124][T15566] usb 2-1: SerialNumber: syz [ 1981.085973][ T973] hid-generic 0000:0000:0003.005F: unknown main item tag 0x0 [ 1981.209725][T15566] usb 2-1: config 0 descriptor?? [ 1981.239182][ T9414] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1981.239619][T23266] hid-generic 0000:0000:0003.005E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1981.290064][ T973] hid-generic 0000:0000:0003.005F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1981.578482][ T8] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1981.616537][ T9414] usb 9-1: device descriptor read/64, error -71 [ 1981.656311][T17333] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1981.697603][T15566] hso 2-1:0.0: Can't find BULK IN endpoint [ 1981.707305][T15566] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1981.721837][ T9414] usb usb9-port1: attempt power cycle [ 1981.867696][T17333] usb 7-1: config 0 has no interfaces? [ 1981.874682][T17333] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1981.896922][T23766] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4892'. [ 1981.906168][T17333] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1981.952987][T17333] usb 7-1: config 0 descriptor?? [ 1981.959704][T15566] usb 2-1: USB disconnect, device number 83 [ 1982.192356][ T9414] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1982.217833][ T9414] usb 9-1: device descriptor read/8, error -71 [ 1982.968029][T23770] [U] ^C [ 1983.227452][T19178] usb 7-1: USB disconnect, device number 8 [ 1985.042182][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.063363][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.237733][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.245381][T23802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4904'. [ 1985.254559][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.262257][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.275512][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.294954][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.313537][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.370548][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.378413][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.386124][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.394290][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.401810][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.409277][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.417495][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.425163][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.432733][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.440267][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.528406][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.578568][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.626155][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.723929][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.827763][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.836283][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.846357][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.853861][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.861462][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.869181][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.877088][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.886031][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.893448][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.903908][ T973] hid-generic 0000:0000:0003.0060: unknown main item tag 0x0 [ 1985.935254][ T973] hid-generic 0000:0000:0003.0060: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1986.057297][ T8] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1986.214005][T23806] kvm: kvm [23805]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 1986.289683][T23806] kvm: kvm [23805]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 1986.305532][T23806] kvm: kvm [23805]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 1987.064356][T23814] [U] ^C [ 1987.247617][ T8] usb 2-1: config 0 has no interfaces? [ 1987.719612][ T8] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1987.780478][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1987.828916][ T8] usb 2-1: config 0 descriptor?? [ 1987.857628][T23825] FAULT_INJECTION: forcing a failure. [ 1987.857628][T23825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1987.877849][ T8] usb 2-1: can't set config #0, error -71 [ 1987.897949][ T8] usb 2-1: USB disconnect, device number 84 [ 1987.904946][T23825] CPU: 0 UID: 0 PID: 23825 Comm: syz.3.4909 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 1987.915769][T23825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1987.925871][T23825] Call Trace: [ 1987.929188][T23825] [ 1987.932161][T23825] dump_stack_lvl+0x241/0x360 [ 1987.936887][T23825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1987.942134][T23825] ? __pfx__printk+0x10/0x10 [ 1987.946778][T23825] ? __pfx_lock_release+0x10/0x10 [ 1987.951853][T23825] should_fail_ex+0x3b0/0x4e0 [ 1987.956573][T23825] _copy_from_iter+0x1e9/0x1c20 [ 1987.961485][T23825] ? skb_set_owner_w+0x246/0x380 [ 1987.966475][T23825] ? __pfx__copy_from_iter+0x10/0x10 [ 1987.971807][T23825] ? __pfx__copy_from_iter+0x10/0x10 [ 1987.977144][T23825] ? page_copy_sane+0x154/0x260 [ 1987.982054][T23825] copy_page_from_iter+0x7a/0x100 [ 1987.987129][T23825] skb_copy_datagram_from_iter+0x2d9/0x6a0 [ 1987.992996][T23825] packet_sendmsg+0x4465/0x6a40 [ 1987.997917][T23825] ? __lock_acquire+0x1397/0x2100 [ 1988.002996][T23825] ? smack_socket_sendmsg+0x178/0x540 [ 1988.008412][T23825] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1988.014193][T23825] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 1988.020655][T23825] ? __pfx_packet_sendmsg+0x10/0x10 [ 1988.025896][T23825] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 1988.032714][T23825] ? __might_fault+0xaa/0x120 [ 1988.037446][T23825] ? __pfx_lock_release+0x10/0x10 [ 1988.042510][T23825] ? __import_iovec+0x590/0x870 [ 1988.047420][T23825] ? __pfx_packet_sendmsg+0x10/0x10 [ 1988.052663][T23825] __sock_sendmsg+0x221/0x270 [ 1988.057392][T23825] ____sys_sendmsg+0x52a/0x7e0 [ 1988.062219][T23825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1988.067531][T23825] ? __fget_files+0x2a/0x410 [ 1988.072146][T23825] ? __fget_files+0x2a/0x410 [ 1988.076774][T23825] __sys_sendmsg+0x269/0x350 [ 1988.081376][T23825] ? __pfx_lock_release+0x10/0x10 [ 1988.086414][T23825] ? __pfx___sys_sendmsg+0x10/0x10 [ 1988.091556][T23825] ? __pfx_vfs_write+0x10/0x10 [ 1988.096373][T23825] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1988.102758][T23825] ? do_syscall_64+0x100/0x230 [ 1988.107550][T23825] ? do_syscall_64+0xb6/0x230 [ 1988.112277][T23825] do_syscall_64+0xf3/0x230 [ 1988.116868][T23825] ? clear_bhb_loop+0x35/0x90 [ 1988.121589][T23825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1988.127531][T23825] RIP: 0033:0x7ffbc3985d29 [ 1988.131986][T23825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1988.132339][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1988.151610][T23825] RSP: 002b:00007ffbc4899038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1988.151648][T23825] RAX: ffffffffffffffda RBX: 00007ffbc3b75fa0 RCX: 00007ffbc3985d29 [ 1988.151669][T23825] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 1988.151685][T23825] RBP: 00007ffbc4899090 R08: 0000000000000000 R09: 0000000000000000 [ 1988.151702][T23825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1988.151718][T23825] R13: 0000000000000000 R14: 00007ffbc3b75fa0 R15: 00007fffcf369298 [ 1988.151759][T23825] [ 1988.205242][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1988.329017][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1988.440073][ T9414] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1988.834243][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1988.885270][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1988.894240][ T9414] usb 9-1: config 0 has no interfaces? [ 1988.925680][ T9414] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1988.940166][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1988.969713][ T9414] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1988.998020][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.066745][ T9414] usb 9-1: config 0 descriptor?? [ 1989.072222][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.130727][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.216316][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.258975][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.267049][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.302673][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.337992][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.372071][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.407184][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.438355][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.447495][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.455522][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.463531][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.471606][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.480153][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.488977][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.497091][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.577043][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.588617][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.596962][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.604816][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.612781][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.620866][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.632349][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1989.640580][T15566] hid-generic 0000:0000:0003.0061: unknown main item tag 0x0 [ 1990.330761][T15566] hid-generic 0000:0000:0003.0061: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1991.622389][T23852] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4916'. [ 1991.842338][ T973] usb 9-1: USB disconnect, device number 34 [ 1992.809033][T23854] [U] ^C [ 1993.890709][T20895] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1993.902050][T23869] Mount JFS Failure: -22 [ 1993.906330][T23869] jfs_mount failed w/return code = -22 [ 1994.205066][T20895] usb 4-1: Using ep0 maxpacket: 32 [ 1994.593402][T20895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1994.672129][T20895] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1994.730745][T20895] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1994.757865][T20895] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1994.776805][T20895] usb 4-1: Product: syz [ 1994.780990][T20895] usb 4-1: Manufacturer: syz [ 1994.802775][T20895] usb 4-1: SerialNumber: syz [ 1994.812823][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1994.823044][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1994.824089][T20895] usb 4-1: config 0 descriptor?? [ 1994.865451][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1994.944737][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1994.994631][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.036231][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.062729][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.079682][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.087194][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.094911][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.102377][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.109813][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.117380][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.125194][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.132894][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.140367][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.148222][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.155654][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.163543][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.171011][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.178497][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.185916][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.193387][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.200900][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.208596][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.216131][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.223558][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.231037][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.239132][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.246989][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.254499][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.261924][T17333] hid-generic 0000:0000:0003.0062: unknown main item tag 0x0 [ 1995.726126][T23266] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1995.735060][T17333] hid-generic 0000:0000:0003.0062: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1996.725252][ T973] usb 4-1: USB disconnect, device number 74 [ 1996.836446][T23266] usb 8-1: config 0 has no interfaces? [ 1996.842571][T23266] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1996.852885][T23266] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1996.874678][T23266] usb 8-1: config 0 descriptor?? [ 1997.089674][ T8] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1998.462766][T23266] usb 8-1: can't set config #0, error -71 [ 1998.510608][T23266] usb 8-1: USB disconnect, device number 30 [ 1998.588531][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 1998.872866][T23907] program syz.6.4933 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1999.291938][T20895] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1999.540942][T23901] [U] ^C [ 1999.641009][ T8] usb 7-1: device descriptor read/all, error -71 [ 1999.704991][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.712495][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.729815][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.737381][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.746223][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.753898][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.761664][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.769101][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.776805][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.784760][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.792223][ T5872] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1999.800311][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.808111][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.815539][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.823865][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.831655][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.839308][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.846837][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.854257][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.861811][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.869282][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.877148][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.884674][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.892093][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.899778][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.907283][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.914749][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.922875][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.930292][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.938122][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.945592][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.953113][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.960563][T19178] hid-generic 0000:0000:0003.0063: unknown main item tag 0x0 [ 1999.988405][T19178] hid-generic 0000:0000:0003.0063: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2000.062465][T20895] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2000.073054][T20895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.082293][T20895] usb 2-1: Product: syz [ 2000.086885][T20895] usb 2-1: Manufacturer: syz [ 2000.091517][T20895] usb 2-1: SerialNumber: syz [ 2000.098284][T20895] usb 2-1: config 0 descriptor?? [ 2000.353315][T23920] Mount JFS Failure: -22 [ 2000.357699][T23920] jfs_mount failed w/return code = -22 [ 2000.368583][ T5872] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2000.377970][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.386113][ T5872] usb 4-1: Product: syz [ 2000.390445][ T5872] usb 4-1: Manufacturer: syz [ 2000.395496][ T5872] usb 4-1: SerialNumber: syz [ 2000.433819][ T5872] usb 4-1: config 0 descriptor?? [ 2000.506711][T20895] hso 2-1:0.0: Can't find BULK IN endpoint [ 2000.523298][T20895] usb-storage 2-1:0.0: USB Mass Storage device detected [ 2000.568247][T17333] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 2000.709687][ T5872] hso 4-1:0.0: Can't find BULK IN endpoint [ 2000.717983][ T5872] usb-storage 4-1:0.0: USB Mass Storage device detected [ 2000.737901][T17333] usb 8-1: config 0 has no interfaces? [ 2000.739334][T20895] usb 2-1: USB disconnect, device number 85 [ 2000.759175][T17333] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2000.778484][T17333] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.818811][T17333] usb 8-1: config 0 descriptor?? [ 2000.937217][T17333] usb 4-1: USB disconnect, device number 75 [ 2002.773102][T17333] usb 8-1: USB disconnect, device number 31 [ 2004.096168][ T8] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2004.407737][ T8] usb 7-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice=cc.10 [ 2004.567981][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2004.585363][T19178] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2004.586203][ T8] usb 7-1: Product: syz [ 2004.597679][ T8] usb 7-1: Manufacturer: syz [ 2004.602460][ T8] usb 7-1: SerialNumber: syz [ 2004.612307][ T8] usb 7-1: config 0 descriptor?? [ 2004.621810][ T8] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input211 [ 2004.872411][T23950] 9pnet_fd: Insufficient options for proto=fd [ 2004.884921][ T5178] bcm5974 7-1:0.0: could not read from device [ 2004.885268][ T8] usb 7-1: USB disconnect, device number 11 [ 2004.925366][T19178] usb 2-1: Using ep0 maxpacket: 8 [ 2005.570108][T23955] [U] ^C [ 2005.715015][T19178] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2005.735217][T19178] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 2005.753607][T19178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.762427][T19178] usb 2-1: Product: syz [ 2005.964442][T19178] usb 2-1: Manufacturer: syz [ 2005.969794][T19178] usb 2-1: SerialNumber: syz [ 2006.279355][T23964] Mount JFS Failure: -22 [ 2006.283721][T23964] jfs_mount failed w/return code = -22 [ 2006.911836][T19178] usb 2-1: config 0 descriptor?? [ 2006.917195][T19178] usb 2-1: can't set config #0, error -71 [ 2006.924354][T19178] usb 2-1: USB disconnect, device number 86 [ 2008.084790][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2008.098447][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2008.129780][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2008.165224][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2008.201034][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2008.373127][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2008.382566][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2008.390084][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2008.397840][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2008.405347][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2008.413088][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2009.370187][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2009.377677][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2009.385105][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2009.392939][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2009.400370][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2009.407771][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2009.415298][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2009.422671][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2010.131518][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2010.139043][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2010.146454][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2010.154004][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2010.161704][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2010.169561][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2010.177359][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2010.184772][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2010.192314][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2010.199792][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2010.207242][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2010.214850][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2010.222283][ T8] hid-generic 0000:0000:0003.0064: unknown main item tag 0x0 [ 2010.251782][ T8] hid-generic 0000:0000:0003.0064: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2010.690967][T17333] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 2010.903794][T17333] usb 8-1: device descriptor read/all, error -71 [ 2012.263490][T24001] [U] ^C [ 2012.423190][T24016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4960'. [ 2012.882858][ T8] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 2013.349559][T24029] Mount JFS Failure: -22 [ 2013.353871][T24029] jfs_mount failed w/return code = -22 [ 2013.786305][ T8] usb 9-1: Using ep0 maxpacket: 16 [ 2013.804802][ T8] usb 9-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 2013.836729][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.882693][T17333] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 2014.093957][ T8] usb 9-1: Product: syz [ 2014.112700][ T8] usb 9-1: Manufacturer: syz [ 2014.138979][ T8] usb 9-1: SerialNumber: syz [ 2014.159052][ T8] usb 9-1: config 0 descriptor?? [ 2014.184699][T17333] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2014.219883][T17333] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2014.240712][T17333] usb 8-1: Product: syz [ 2014.245470][T17333] usb 8-1: Manufacturer: syz [ 2014.250123][T17333] usb 8-1: SerialNumber: syz [ 2014.268583][T24036] netlink: 1788 bytes leftover after parsing attributes in process `syz.6.4967'. [ 2014.304246][ T8] usb 9-1: can't set config #0, error -71 [ 2014.312126][T17333] usb 8-1: config 0 descriptor?? [ 2014.318726][ T8] usb 9-1: USB disconnect, device number 35 [ 2014.339245][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2014.347950][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2014.355441][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2014.374791][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2014.921951][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2014.929645][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2014.958739][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2014.987035][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2014.994940][T17333] hso 8-1:0.0: Can't find BULK IN endpoint [ 2015.002531][T17333] usb-storage 8-1:0.0: USB Mass Storage device detected [ 2015.035803][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.052102][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.060184][ T5872] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2015.115643][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.130784][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.272568][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.291415][T17333] usb 8-1: USB disconnect, device number 34 [ 2015.359696][ T5872] usb 4-1: config 0 has no interfaces? [ 2015.387915][ T5872] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2015.503199][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.511898][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2015.529328][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.747165][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.760193][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.767660][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.775167][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.782647][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.790488][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.797924][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.805389][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.812879][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.820343][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.828152][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.835583][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.843924][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.852377][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.860122][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.867804][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.875291][ T5865] hid-generic 0000:0000:0003.0065: unknown main item tag 0x0 [ 2015.888987][ T5872] usb 4-1: config 0 descriptor?? [ 2015.919000][ T5865] hid-generic 0000:0000:0003.0065: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2016.191787][T20895] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2016.341218][T20895] usb 2-1: Using ep0 maxpacket: 32 [ 2016.349088][T20895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2016.359391][T20895] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 2016.376820][T20895] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2016.399845][T20895] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2016.423222][T20895] usb 2-1: Product: syz [ 2016.431808][T20895] usb 2-1: Manufacturer: syz [ 2016.441028][T20895] usb 2-1: SerialNumber: syz [ 2016.453822][T20895] usb 2-1: config 0 descriptor?? [ 2016.560460][T17333] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 2016.916912][T17333] usb 8-1: Using ep0 maxpacket: 8 [ 2016.983958][T17333] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2016.996333][T17333] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 2017.969118][T17333] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 2017.978901][T17333] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2017.987289][T17333] usb 8-1: Product: syz [ 2017.992034][T17333] usb 8-1: Manufacturer: syz [ 2017.996684][T17333] usb 8-1: SerialNumber: syz [ 2018.023562][T17333] usb 8-1: config 0 descriptor?? [ 2018.361818][T24058] [U] ^C [ 2018.980003][ T5872] usb 2-1: USB disconnect, device number 87 [ 2018.988516][ T5865] usb 4-1: USB disconnect, device number 76 [ 2019.710670][T24072] QAT: Device 5 not found [ 2019.735860][T17333] usb 8-1: can't set config #0, error -71 [ 2019.755270][T17333] usb 8-1: USB disconnect, device number 35 [ 2023.640571][ T5865] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 2023.840340][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2023.848071][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2023.855962][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2023.868434][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2023.888798][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2023.896249][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2023.936281][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2023.945908][ T8] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 2023.955634][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2023.963495][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2023.971377][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2023.978903][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2024.011129][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2024.039344][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2024.153296][T24111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4989'. [ 2024.269541][T20895] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2024.269652][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2024.284892][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2024.292423][ T8] usb 8-1: Using ep0 maxpacket: 32 [ 2024.297703][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2024.305352][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2024.313486][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2024.321730][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2024.438329][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2024.451195][ T8] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 2024.467060][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2024.474652][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2024.482583][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2024.490520][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2024.498030][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2024.948479][T24106] [U] ^C [ 2025.031840][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2025.267698][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2025.275328][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2025.282828][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2025.290329][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2025.298519][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2025.305949][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2025.313419][T17333] hid-generic 0000:0000:0003.0066: unknown main item tag 0x0 [ 2025.317908][T20895] usb 2-1: config 0 has no interfaces? [ 2025.801811][T20895] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2025.811015][T20895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2025.917400][T17333] hid-generic 0000:0000:0003.0066: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2026.070330][T20895] usb 2-1: config 0 descriptor?? [ 2027.088742][ T8] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2027.098024][ T8] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2027.106455][ T8] usb 8-1: Product: syz [ 2027.435743][ T8] usb 8-1: config 0 descriptor?? [ 2027.549118][ T8] usb 8-1: can't set config #0, error -71 [ 2028.136028][ T8] usb 8-1: USB disconnect, device number 36 [ 2028.158226][T17333] usb 2-1: USB disconnect, device number 88 [ 2028.649832][T24143] netlink: 'syz.1.4996': attribute type 4 has an invalid length. [ 2030.601649][T20895] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 2031.010136][T20895] usb 9-1: Using ep0 maxpacket: 16 [ 2031.018691][T20895] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2031.038813][T20895] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2031.057627][T20895] usb 9-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 2031.067009][T20895] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.270574][T24176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5000'. [ 2031.869785][T20895] usb 9-1: config 0 descriptor?? [ 2032.569382][T19178] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2032.614527][T24183] Bluetooth: MGMT ver 1.23 [ 2033.113415][T19178] usb 4-1: Using ep0 maxpacket: 16 [ 2033.387626][T20895] usbhid 9-1:0.0: can't add hid device: -71 [ 2033.395708][T20895] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2033.424678][T20895] usb 9-1: USB disconnect, device number 37 [ 2033.970475][T24177] [U] ^C [ 2034.992249][T19178] usb 4-1: device descriptor read/all, error -71 [ 2035.630155][T19178] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2035.745410][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.753124][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.760573][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.768254][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.775804][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.785082][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.793269][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.800982][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.808848][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.826617][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.835532][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.844167][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.852521][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.860721][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.868996][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.877030][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.885562][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.897209][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.904963][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.913084][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.921591][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.930768][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.941308][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.949523][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.957550][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.967850][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.978309][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.988622][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2035.998995][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2036.009593][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2036.019448][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2036.029286][T20895] hid-generic 0000:0000:0003.0067: unknown main item tag 0x0 [ 2036.650880][T20895] hid-generic 0000:0000:0003.0067: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2036.733997][T19178] usb 4-1: Using ep0 maxpacket: 8 [ 2036.741031][T19178] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2036.925066][T19178] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 2036.934681][T19178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.942775][T19178] usb 4-1: Product: syz [ 2036.962663][ T5894] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 2037.161891][ T5894] usb 8-1: config 0 has no interfaces? [ 2037.173393][ T5894] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2037.655085][T19178] usb 4-1: Manufacturer: syz [ 2037.678296][T24218] netlink: 'syz.6.5014': attribute type 10 has an invalid length. [ 2037.746476][T24218] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2037.775292][T19178] usb 4-1: SerialNumber: syz [ 2037.781418][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2037.790804][T19178] usb 4-1: config 0 descriptor?? [ 2037.792686][ T5865] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 2037.798219][ T5894] usb 8-1: config 0 descriptor?? [ 2037.837066][T19178] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 2037.843426][T19178] usb 4-1: selecting invalid altsetting 1 [ 2037.869407][T24220] FAULT_INJECTION: forcing a failure. [ 2037.869407][T24220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2037.883171][T24220] CPU: 1 UID: 0 PID: 24220 Comm: syz.1.5015 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 2037.893973][T24220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2037.904051][T24220] Call Trace: [ 2037.907341][T24220] [ 2037.910282][T24220] dump_stack_lvl+0x241/0x360 [ 2037.914979][T24220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2037.920200][T24220] ? __pfx__printk+0x10/0x10 [ 2037.924826][T24220] ? snprintf+0xda/0x120 [ 2037.929100][T24220] should_fail_ex+0x3b0/0x4e0 [ 2037.933791][T24220] _copy_to_user+0x31/0xb0 [ 2037.938230][T24220] simple_read_from_buffer+0xca/0x150 [ 2037.943644][T24220] proc_fail_nth_read+0x1e9/0x250 [ 2037.948717][T24220] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2037.954288][T24220] ? rw_verify_area+0x55e/0x6f0 [ 2037.959152][T24220] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2037.964734][T24220] vfs_read+0x1fc/0xb70 [ 2037.968905][T24220] ? __pfx___mutex_lock+0x10/0x10 [ 2037.973950][T24220] ? __pfx_vfs_read+0x10/0x10 [ 2037.978652][T24220] ? __fget_files+0x2a/0x410 [ 2037.983267][T24220] ? __fget_files+0x395/0x410 [ 2037.987992][T24220] ? __fget_files+0x2a/0x410 [ 2037.992607][T24220] ksys_read+0x18f/0x2b0 [ 2037.996867][T24220] ? __pfx_ksys_read+0x10/0x10 [ 2038.001655][T24220] do_syscall_64+0xf3/0x230 [ 2038.006188][T24220] ? clear_bhb_loop+0x35/0x90 [ 2038.010887][T24220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2038.016804][T24220] RIP: 0033:0x7f0b72b8473c [ 2038.021237][T24220] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2038.040866][T24220] RSP: 002b:00007f0b73912030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2038.049300][T24220] RAX: ffffffffffffffda RBX: 00007f0b72d75fa0 RCX: 00007f0b72b8473c [ 2038.057286][T24220] RDX: 000000000000000f RSI: 00007f0b739120a0 RDI: 0000000000000003 [ 2038.065267][T24220] RBP: 00007f0b73912090 R08: 0000000000000000 R09: 0000000000000000 [ 2038.073250][T24220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2038.081277][T24220] R13: 0000000000000000 R14: 00007f0b72d75fa0 R15: 00007fff852925c8 [ 2038.089274][T24220] [ 2038.184334][ T5865] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2038.204060][ T5865] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2038.268330][ T5865] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 2038.361900][T19178] gspca_stk014: reg_r err -71 [ 2038.367072][T19178] stk014 4-1:0.0: probe with driver stk014 failed with error -71 [ 2038.377237][T19178] usb 4-1: USB disconnect, device number 78 [ 2038.517378][ T5865] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2038.527332][ T5865] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2038.587478][ T5865] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2038.600092][ T5865] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2038.624262][ T5865] usb 9-1: Product: syz [ 2038.644440][ T5865] usb 9-1: Manufacturer: syz [ 2038.677924][ T5865] usb 9-1: SerialNumber: syz [ 2038.699636][ T5865] usb 9-1: config 0 descriptor?? [ 2038.820048][T24230] ptrace attach of "./syz-executor exec"[16665] was attempted by ""[24230] [ 2038.867336][T24230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2038.908136][T24230] batadv_slave_1: entered promiscuous mode [ 2039.014473][ T5131] Bluetooth: hci6: command 0x0405 tx timeout [ 2039.031108][ T5872] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2039.206865][ T5865] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 2039.670112][ T5865] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 2039.758587][T24211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2039.775075][T24211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2039.821372][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 2039.951097][ T8] usb 8-1: USB disconnect, device number 37 [ 2039.964873][ T5872] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 2039.974349][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.982440][ T5872] usb 2-1: Product: syz [ 2039.986723][ T5872] usb 2-1: Manufacturer: syz [ 2039.991388][ T5872] usb 2-1: SerialNumber: syz [ 2039.998807][ T5872] usb 2-1: config 0 descriptor?? [ 2040.006302][ T5872] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 2040.509508][T24210] delete_channel: no stack [ 2040.698789][ T5865] usb 9-1: USB disconnect, device number 38 [ 2040.717540][T19178] usb 2-1: USB disconnect, device number 89 [ 2040.771117][T24239] veth0_to_team: entered promiscuous mode [ 2040.777192][T24239] veth0_to_team: entered allmulticast mode [ 2040.963400][T24221] [U] ^C [ 2042.207086][T24258] macsec1: entered allmulticast mode [ 2042.810416][T24262] x_tables: duplicate underflow at hook 1 [ 2043.121507][T24269] block device autoloading is deprecated and will be removed. [ 2043.130808][T24269] syz.6.5029: attempt to access beyond end of device [ 2043.130808][T24269] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2043.213688][T17333] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2043.242266][ T8] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 2043.378201][T17333] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2043.394704][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 2043.402051][T17333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.422710][ T8] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2043.435337][T17333] usb 2-1: Product: syz [ 2043.441959][T17333] usb 2-1: Manufacturer: syz [ 2043.447473][T17333] usb 2-1: SerialNumber: syz [ 2043.454341][ T8] usb 8-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 2043.475546][T17333] usb 2-1: config 0 descriptor?? [ 2043.480834][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.490408][ T8] usb 8-1: Product: syz [ 2043.512416][ T8] usb 8-1: Manufacturer: syz [ 2043.771080][T24276] Mount JFS Failure: -22 [ 2043.775543][T24276] jfs_mount failed w/return code = -22 [ 2043.882927][ T8] usb 8-1: SerialNumber: syz [ 2044.053010][ T8] usb 8-1: config 0 descriptor?? [ 2044.068737][ T8] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 2044.076377][ T8] usb 8-1: selecting invalid altsetting 1 [ 2044.100166][T19178] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2044.132097][T17333] hso 2-1:0.0: Can't find BULK IN endpoint [ 2044.139185][T17333] usb-storage 2-1:0.0: USB Mass Storage device detected [ 2044.246383][T19178] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2044.254779][T19178] usb 4-1: config 0 has no interface number 0 [ 2044.271946][T19178] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2044.286881][T19178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.294996][T19178] usb 4-1: Product: syz [ 2044.299164][T19178] usb 4-1: Manufacturer: syz [ 2044.303900][T19178] usb 4-1: SerialNumber: syz [ 2044.311670][T19178] usb 4-1: config 0 descriptor?? [ 2044.334605][ T5894] usb 2-1: USB disconnect, device number 90 [ 2044.613362][T19178] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2044.628984][T19178] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2044.639471][T19178] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2044.648378][T19178] usb 4-1: media controller created [ 2044.666372][T19178] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2046.001593][T24296] kvm: kvm [24289]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 2046.071447][T24296] kvm: kvm [24289]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 2046.088555][T24296] kvm: kvm [24289]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 2046.727861][T24296] kvm: kvm [24289]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 2046.778474][T24296] kvm: kvm [24289]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 2046.992144][ T5901] usb 4-1: USB disconnect, device number 79 [ 2047.424217][T24287] [U] ^C [ 2048.168950][ T5901] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2048.276245][T17333] usb 8-1: USB disconnect, device number 38 [ 2048.359346][T24320] mkiss: ax0: crc mode is auto. [ 2048.602077][ T5901] usb 7-1: Using ep0 maxpacket: 16 [ 2048.614143][ T5901] usb 7-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 2048.634844][ T5865] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2048.641364][ T5901] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2048.691059][ T5901] usb 7-1: Product: syz [ 2048.695651][ T5901] usb 7-1: Manufacturer: syz [ 2048.700461][ T5901] usb 7-1: SerialNumber: syz [ 2049.618307][T24326] overlayfs: failed to resolve './file1': -2 [ 2050.676934][ T5901] usb 7-1: config 0 descriptor?? [ 2050.695090][ T5865] usb 2-1: device descriptor read/64, error -71 [ 2051.018594][T19178] usb 9-1: new full-speed USB device number 39 using dummy_hcd [ 2051.099025][ T5901] usb 7-1: can't set config #0, error -71 [ 2051.107276][ T5901] usb 7-1: USB disconnect, device number 12 [ 2051.220409][T19178] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2051.903259][T24341] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input214 [ 2052.023636][T24342] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5047'. [ 2052.026292][T19178] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2052.042461][T19178] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2052.051611][T19178] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.063097][T19178] usb 9-1: config 0 descriptor?? [ 2052.076155][T19178] usb 9-1: can't set config #0, error -71 [ 2052.083396][T19178] usb 9-1: USB disconnect, device number 39 [ 2052.105341][T24338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5047'. [ 2053.877650][ T5901] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2053.896083][ T5865] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 2054.050795][ T5865] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 2054.094500][ T5865] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2054.125025][ T5865] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2054.555973][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 2054.555993][ T29] audit: type=1326 audit(2000000000.356:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24362 comm="syz.3.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc3985d29 code=0x7ffc0000 [ 2054.591518][ T5865] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 41915, setting to 1024 [ 2054.603135][ T29] audit: type=1326 audit(2000000000.356:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24362 comm="syz.3.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc3985d29 code=0x7ffc0000 [ 2054.648357][ T29] audit: type=1326 audit(2000000000.440:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24362 comm="syz.3.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc3985d29 code=0x7ffc0000 [ 2054.679722][ T5865] usb 8-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 2054.692454][ T5865] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.701911][ T5865] usb 8-1: Product: syz [ 2054.709650][ T29] audit: type=1326 audit(2000000000.440:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24362 comm="syz.3.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbc3985d29 code=0x7ffc0000 [ 2054.731547][ T5865] usb 8-1: Manufacturer: syz [ 2054.736248][ T5865] usb 8-1: SerialNumber: syz [ 2054.748032][ T5865] usb 8-1: config 0 descriptor?? [ 2054.758076][ T5865] iguanair 8-1:0.0: probe with driver iguanair failed with error -12 [ 2154.753757][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2154.760766][ C0] rcu: 1-...0: (3 ticks this GP) idle=c9ec/1/0x4000000000000000 softirq=106028/106030 fqs=5249 [ 2154.773386][ C0] rcu: hardirqs softirqs csw/system [ 2154.779820][ C0] rcu: number: 0 0 0 [ 2154.786269][ C0] rcu: cputime: 0 0 0 ==> 52500(ms) [ 2154.794095][ C0] rcu: (detected by 0, t=10502 jiffies, g=129445, q=1370 ncpus=2) [ 2154.802117][ C0] Sending NMI from CPU 0 to CPUs 1: [ 2154.802157][ C1] NMI backtrace for cpu 1 [ 2154.802172][ C1] CPU: 1 UID: 0 PID: 24362 Comm: syz.3.5054 Not tainted 6.13.0-rc7-syzkaller-00039-gc3812b15000c #0 [ 2154.802194][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2154.802207][ C1] RIP: 0010:do_raw_spin_lock+0x14f/0x370 [ 2154.802248][ C1] Code: 89 d3 0f 85 a2 01 00 00 c7 44 24 60 00 00 00 00 4c 89 e7 be 04 00 00 00 e8 5e 39 87 00 4c 89 f7 be 04 00 00 00 e8 51 39 87 00 <41> 0f b6 44 1d 00 84 c0 48 89 da 0f 85 8d 01 00 00 8b 44 24 60 b9 [ 2154.802264][ C1] RSP: 0018:ffffc90000a18a60 EFLAGS: 00000097 [ 2154.802282][ C1] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffffffff817c19df [ 2154.802296][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000a18ac0 [ 2154.802308][ C1] RBP: ffffc90000a18b30 R08: 0000000000000003 R09: fffff52000143158 [ 2154.802322][ C1] R10: dffffc0000000000 R11: fffff52000143158 R12: ffffffff9a54c8c8 [ 2154.802336][ C1] R13: 1ffff92000143158 R14: ffffc90000a18ac0 R15: 1ffffffff34a991a [ 2154.802351][ C1] FS: 000055558f3a9500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 2154.802368][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2154.802381][ C1] CR2: 0000000000000000 CR3: 0000000058f2a000 CR4: 00000000003526f0 [ 2154.802397][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2154.802408][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2154.802420][ C1] Call Trace: [ 2154.802430][ C1] [ 2154.802440][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 2154.802466][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2154.802488][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2154.802510][ C1] ? nmi_handle+0x2a/0x5a0 [ 2154.802540][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2154.802567][ C1] ? nmi_handle+0x14f/0x5a0 [ 2154.802587][ C1] ? nmi_handle+0x2a/0x5a0 [ 2154.802608][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 2154.802635][ C1] ? default_do_nmi+0x63/0x160 [ 2154.802657][ C1] ? exc_nmi+0x123/0x1f0 [ 2154.802677][ C1] ? end_repeat_nmi+0xf/0x53 [ 2154.802700][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 2154.802727][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 2154.802754][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 2154.802782][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 2154.802808][ C1] [ 2154.802815][ C1] [ 2154.802826][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2154.802858][ C1] _raw_spin_lock_irqsave+0xe1/0x120 [ 2154.802883][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 2154.802913][ C1] debug_object_activate+0x17f/0x580 [ 2154.802944][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2154.802971][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 2154.802998][ C1] ? advance_sched+0xa02/0xca0 [ 2154.803024][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 2154.803048][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 2154.803074][ C1] enqueue_hrtimer+0x30/0x3c0 [ 2154.803102][ C1] __hrtimer_run_queues+0x6cb/0xd30 [ 2154.803136][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2154.803159][ C1] ? sched_clock+0x4a/0x70 [ 2154.803185][ C1] ? read_tsc+0x9/0x20 [ 2154.803209][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 2154.803240][ C1] hrtimer_interrupt+0x403/0xa40 [ 2154.803277][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 2154.803301][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 2154.803327][ C1] [ 2154.803334][ C1] [ 2154.803341][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2154.803360][ C1] RIP: 0010:lock_is_held_type+0x13b/0x190 [ 2154.803387][ C1] Code: 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 42 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 2154.803402][ C1] RSP: 0018:ffffc900053a7878 EFLAGS: 00000206 [ 2154.803419][ C1] RAX: 904e878f28323300 RBX: 0000000000000001 RCX: ffff88807d0cbc00 [ 2154.803432][ C1] RDX: 0000000000000000 RSI: ffffffff8c0aaae0 RDI: ffffffff8c5edea0 [ 2154.803446][ C1] RBP: 0000000000000000 R08: ffffffff8bb96f0b R09: ffffffff8bb97037 [ 2154.803459][ C1] R10: 0000000000000003 R11: ffff88807d0cbc00 R12: 0000000000000246 [ 2154.803472][ C1] R13: ffff88807d0cbc00 R14: 00000000ffffffff R15: ffff888078e8a7e0 [ 2154.803490][ C1] ? mt_validate+0x43e7/0x4ac0 [ 2154.803506][ C1] ? mt_validate+0x42bb/0x4ac0 [ 2154.803531][ C1] mt_validate+0x42f3/0x4ac0 [ 2154.803558][ C1] ? __pfx_mt_validate+0x10/0x10 [ 2154.803591][ C1] validate_mm+0xf1/0x590 [ 2154.803619][ C1] ? arch_get_unmapped_area_topdown+0xab5/0xc50 [ 2154.803642][ C1] ? __pfx_validate_mm+0x10/0x10 [ 2154.803675][ C1] ? cap_mmap_addr+0x163/0x2c0 [ 2154.803698][ C1] mmap_region+0x1ea/0x2c0 [ 2154.803717][ C1] ? security_mmap_addr+0x6f/0x250 [ 2154.803743][ C1] do_mmap+0x97a/0x10d0 [ 2154.803768][ C1] ? __pfx_do_mmap+0x10/0x10 [ 2154.803788][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 2154.803812][ C1] vm_mmap_pgoff+0x1dd/0x3d0 [ 2154.803841][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2154.803864][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2154.803885][ C1] ? do_syscall_64+0x100/0x230 [ 2154.803913][ C1] ? ksys_mmap_pgoff+0xdf/0x720 [ 2154.803933][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 2154.803954][ C1] do_syscall_64+0xf3/0x230 [ 2154.803982][ C1] ? clear_bhb_loop+0x35/0x90 [ 2154.804002][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2154.804030][ C1] RIP: 0033:0x7ffbc3985d63 [ 2154.804048][ C1] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 2154.804063][ C1] RSP: 002b:00007fffcf369238 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2154.804082][ C1] RAX: ffffffffffffffda RBX: 00007ffbc1ff76c0 RCX: 00007ffbc3985d63 [ 2154.804096][ C1] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 2154.804107][ C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 2154.804119][ C1] R10: 0000000000020022 R11: 0000000000000246 R12: 00007fffcf369390 [ 2154.804132][ C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 2154.804158][ C1]