last executing test programs: 24m42.473351681s ago: executing program 32 (id=30): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) pread64(r3, &(0x7f0000000400)=""/4096, 0x1000, 0xb) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x8, &(0x7f00000038c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0xf3a, 0x0) close(r6) tee(r5, r7, 0x8000000000081, 0x0) close(0xffffffffffffffff) openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x82000, 0x181, 0x7}, 0x18) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 24m33.898263332s ago: executing program 33 (id=43): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000240)={{0x10, 0x71}, 0x1, 0x81, 0x9, {0x5, 0xe}, 0x9, 0x9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = eventfd(0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r6, 0x1, &(0x7f0000001000)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000780)="fc7f4d772926e97d", 0x8, 0x1, 0x0, 0x1, r5}]) setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f0000001100)=0x8, 0x4) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xa) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x400, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x2, 0x16, 0x0, 0x0, 0x5}) 18m11.470223662s ago: executing program 34 (id=1439): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000002000000850000003100000095"], &(0x7f00000003c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 15m16.011421871s ago: executing program 1 (id=2095): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2]}, 0x45c) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x30314142, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3}}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r2, 0x5501) preadv(r1, &(0x7f0000003780)=[{&(0x7f0000001300)=""/170, 0xaa}], 0x1, 0xffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) socketpair$unix(0x1, 0x8, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x8) write$cgroup_devices(r9, &(0x7f0000003080)=ANY=[@ANYBLOB="e906000000000000"], 0x17) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 15m14.500265076s ago: executing program 1 (id=2099): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000008000000000000000025000000008800009f7ce35a61ebe93ebd30871efe1d90661020ae2f8109e643a74ffc6c63cd9733e47b6c4781972e0ea1c6d656f09ea615fae79a97a8eb6b630c5f7b561a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001cc0)='/sys/power/pm_debug_messages', 0x42702, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001d00)={0x9, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$FUSE(r1, &(0x7f0000001dc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r4, 0x6, &(0x7f0000003e00)=0x7fffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000003e40)=@base={0x30, 0x101, 0x5, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x10) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6b5, 0x41) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000140)={0x80, 0x6, 0x103, 0x0, 0x0, 0x0, 0x0}) r11 = socket(0x10, 0x3, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r12}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r13}, 0x10) write(r11, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) openat$sw_sync(0xffffff9c, &(0x7f0000000080), 0x80800, 0x0) 15m13.379677042s ago: executing program 1 (id=2101): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf0900000020000055090100000000009500000000000000180100002020732500000000003820207baaf8ff00000000bde900000000000027010000f8ffffffb702000008000000b70300000d0000002500000006000000be91000000000000b5020000000000008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 15m13.141532596s ago: executing program 1 (id=2104): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) (async) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r6, 0x0) (async) listen(r6, 0x0) unshare(0x64000600) 15m10.848854951s ago: executing program 1 (id=2115): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x54}}, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0603d06, &(0x7f0000000300)) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf25060012c4dafc2a0002000000082c0000000000001add6f1dec633644482e62021038a9d219c04a40b5e98fb86156dbe7f8874dc70f14b883a2724d74a7265f0265df35a551115c176581da3a7deb488b6e2800"/103], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xc4) 15m10.374027259s ago: executing program 1 (id=2116): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010004b04000000c4000000007a000000763da608ebc2ef5591ba72fe869b147e10415e0431b125f3d5aee83abfcbddad3fa99450613336b04434cd5ea49c50afcbaa9912199d19b1557ba4873e59b20a30dab508a5613ed15cff17aea709", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010065727370616e00000c00028008000700e00000020a000100aaaaaaaaaa000000"], 0x48}}, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0xfffd, 0x3, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) (async) sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 15m9.653085653s ago: executing program 35 (id=2116): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010004b04000000c4000000007a000000763da608ebc2ef5591ba72fe869b147e10415e0431b125f3d5aee83abfcbddad3fa99450613336b04434cd5ea49c50afcbaa9912199d19b1557ba4873e59b20a30dab508a5613ed15cff17aea709", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010065727370616e00000c00028008000700e00000020a000100aaaaaaaaaa000000"], 0x48}}, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0xfffd, 0x3, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) (async) sendmsg$key(r1, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 14m55.6073285s ago: executing program 7 (id=2166): r0 = io_uring_setup(0x2297, &(0x7f0000000300)={0x0, 0x386c, 0x40, 0x0, 0x29c}) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000841}, 0x20000010) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x10000, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000000180), 0x400000000000077, 0x761c) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @host, 0x0, 0x0, 0x7}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x7}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7aa, &(0x7f0000000180)={{@local}}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000540)={0x100000, 0x0, 0x0, &(0x7f0000000480)=[{0x0}], &(0x7f00000004c0)}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001cc0)={0xffffffffffffffff, &(0x7f0000001c80)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) 14m54.132852186s ago: executing program 7 (id=2168): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0xa1ffffffffffffff}, 0x0) 14m52.407194112s ago: executing program 7 (id=2174): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 14m51.621187404s ago: executing program 7 (id=2177): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = dup3(r1, r0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) r3 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0), 0x4, &(0x7f0000000580)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other}, {@blksize}, {@max_read={'max_read', 0x3d, 0x2}}, {@blksize={'blksize', 0x3d, 0x1200}}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}]}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r8, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r8, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x74, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x48085}, 0x20008894) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r10, &(0x7f0000002140)={0x2020}, 0x2020) 14m51.553152428s ago: executing program 7 (id=2178): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) openat$drirender128(0xffffffffffffff9c, 0x0, 0x3b5280, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01"], 0xd8}}, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0xfffffffffffffeb0, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000014c0)={'#! ', './bus'}, 0x9) ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, &(0x7f0000001380)={'vcan0\x00', 0x6, 0x7fff}) request_key(&(0x7f00000008c0)='big_key\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r5) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f00000002c0)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000080)='./file0\x00', 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x4c000, 0xc2) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) 14m49.506246763s ago: executing program 7 (id=2181): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) chmod(&(0x7f0000004480)='./file0\x00', 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x1ff, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = socket$igmp6(0xa, 0x3, 0x2) bind(r5, &(0x7f00000000c0)=@sco, 0x80) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80c080, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140)={0x0}, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000240)={'\x00', 0x80, 0x6, 0x7, 0x9, 0x2, r10}) r11 = dup3(r8, r7, 0x0) write$binfmt_misc(r11, &(0x7f00000002c0)="410bd4c99ee65bb3c061e58f230ea25de04ec97c54ed86d5036291920bf55b354a89d4c6dbaabfd7cc9d89f3b34aeb1925fc9626fcd305ed11ef4b4a59be7733703fd1a5efbdd2db2d33c33b", 0x4c) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 14m49.119546792s ago: executing program 36 (id=2181): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) chmod(&(0x7f0000004480)='./file0\x00', 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x1ff, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = socket$igmp6(0xa, 0x3, 0x2) bind(r5, &(0x7f00000000c0)=@sco, 0x80) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80c080, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140)={0x0}, 0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000240)={'\x00', 0x80, 0x6, 0x7, 0x9, 0x2, r10}) r11 = dup3(r8, r7, 0x0) write$binfmt_misc(r11, &(0x7f00000002c0)="410bd4c99ee65bb3c061e58f230ea25de04ec97c54ed86d5036291920bf55b354a89d4c6dbaabfd7cc9d89f3b34aeb1925fc9626fcd305ed11ef4b4a59be7733703fd1a5efbdd2db2d33c33b", 0x4c) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 11m53.923449758s ago: executing program 8 (id=2804): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007ffb000150400003d0301000000000095000f00000000006926000000000000bf67000000000000450700000fff07003506000002000000170600000ee50014bf250000000000005d670000000000006507000006000000070500004c0001000f75000000000000bf54000000000000070400000400f9ff2d4401000000000095000000000000000500000000000000950007000000000001722fabb733a0e757c7c45402000000a2d23da04d1ffc187f9955911aa1a2ba7ba030c7267c2de00435fd253cc0f0d9b2c3127c46b0f4f95345de3188f0d808398d09ee4dc258d726eae098804de25df627a64ab8efde50fd7f1d58d67e684c45e506598bae66ea1a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07e8a4b6e6155cecc13a5ddf4157f2bfab7201112a30274101fceee66eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a44dd9ff4ae730ae9d0ae42d8814a8c96f101df7da839bcdd7b7c33c8cfe74d599543ac604d8dd42fc66cdb79cd09ceeedce1e69f11967919f82b0276c90420d08897ee8514b43533f07132589a0a37110fd8571b1e69251bba35cd06c8bd430aafbecfd33757b7dc4803123e9107e5cceaec2a391f9b9b577295ac3864f6c1e30e6190a055953e18bedd1859acdd15af7209d15950f9195b401e74f8b5210e28d46dde2658b4695d9ac9ce7cbefc164a5454fc4da6104db281e18a8992b9f8c82b895da647e6ea4cb622314c5c48abfd620adf7757c23a31a619edcfb45a402c5fced05e5274e08a313d6c5fdd0a8d36b1a268056e6f7e9a6daa5632cda5ad2a9ebfac980c7db63137c226f71b7eb70c174d885232e522aad0f13b0e5b43d837d040f813d0115387e36f092d9aaafe7afc637d3d107451f4854613cfd43ac63ad6141ddb0311b8c96fef49af414e49be7c23b2e8eb686fbcdd2dab4cbdb02e30e4e1a6c25b2791facac56e4c5dc036c8d80e5c7c206d24603be75850927e02fd4eea168681498d1170478408c43bb90d9df3964b64fee41745f6785419ac8de8788398e3653f34970988866043136ada4771bf8d96eeb0f565d626a3e9089"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(0xffffffffffffffff) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f0000000380)) r3 = syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) 11m52.863178664s ago: executing program 8 (id=2808): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) open(&(0x7f0000000400)='./bus\x00', 0x14713e, 0x0) ftruncate(r1, 0x7fff) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x18, 0x80000, 0x41) getpid() chmod(&(0x7f0000002480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/schedstat\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}, 0x1, 0xba01}, 0x0) 11m51.23656158s ago: executing program 8 (id=2813): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac83723ddd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f884c1fa9f46b3472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a39a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe09daf76b3b0"], 0x6b}, 0x0) 11m50.255412199s ago: executing program 8 (id=2817): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='net/igmp6\x00') read$char_usb(r0, &(0x7f0000000040)=""/4122, 0x101a) preadv(r0, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x6) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) syz_usb_connect(0x3, 0x51, &(0x7f0000000300)=ANY=[@ANYBLOB="1201721799886c08240401991cac0102030109023f0002b9077005090403030103f5020109050704200002bc0e090403080333de10f5090507002000000704090502024000020004090504100800000c05"], 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000140), 0x80000, &(0x7f0000000380)={[{@xino_auto}, {@userxattr}, {@metacopy_off}, {@redirect_dir_off}, {@redirect_dir_on}, {@nfs_export_on}, {@redirect_dir_off}, {@redirect_dir_nofollow}, {@uuid_off}], [{@obj_role={'obj_role', 0x3d, '('}}, {@permit_directio}]}) sendto$inet6(r1, &(0x7f0000001080)="9ce43aa0888eeeff6dd5e96917bcb51d4318a2ac7042db4a667bc0c615768cfe628875b85815a072a20b8d7db6a8a0fd2223f5adbd8879d298ec55781fb8c9548f379e547a9fed7421c7873631f4c27d6f0ed52545422d1e7583d0da", 0x5c, 0x2000c044, &(0x7f0000001100)={0xa, 0x4e24, 0x8001, @loopback, 0x3}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) syz_open_procfs(0x0, &(0x7f00000021c0)='net/igmp6\x00') (async) read$char_usb(r0, &(0x7f0000000040)=""/4122, 0x101a) (async) preadv(r0, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x6) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) (async) syz_usb_connect(0x3, 0x51, &(0x7f0000000300)=ANY=[@ANYBLOB="1201721799886c08240401991cac0102030109023f0002b9077005090403030103f5020109050704200002bc0e090403080333de10f5090507002000000704090502024000020004090504100800000c05"], 0x0) (async) mount$overlay(0x0, &(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000140), 0x80000, &(0x7f0000000380)={[{@xino_auto}, {@userxattr}, {@metacopy_off}, {@redirect_dir_off}, {@redirect_dir_on}, {@nfs_export_on}, {@redirect_dir_off}, {@redirect_dir_nofollow}, {@uuid_off}], [{@obj_role={'obj_role', 0x3d, '('}}, {@permit_directio}]}) (async) sendto$inet6(r1, &(0x7f0000001080)="9ce43aa0888eeeff6dd5e96917bcb51d4318a2ac7042db4a667bc0c615768cfe628875b85815a072a20b8d7db6a8a0fd2223f5adbd8879d298ec55781fb8c9548f379e547a9fed7421c7873631f4c27d6f0ed52545422d1e7583d0da", 0x5c, 0x2000c044, &(0x7f0000001100)={0xa, 0x4e24, 0x8001, @loopback, 0x3}, 0x1c) (async) 11m48.419536278s ago: executing program 8 (id=2825): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000380)={'\v\x00', 0x0, 0x5, 0x2, 0x2, 0x0, "f759e10000001000000000fc6300", '\x00\x00\a\x00', ' \x00', '$\x00\t\x00', ["95d0aba81013bafb7d000900", "c2fed6bf04cb0f67c3000040", "000000ff0000000000000020", "0000000000000006000100"]}) 11m48.205407793s ago: executing program 8 (id=2828): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000400), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0d05605, &(0x7f0000000440)={0x2, 0x0, 0x0, "5d4a03c0d6b1f7891dd5efb410ad15591ada81da3c2f10483741a6bd19dd2c23"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x40000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x0, 0xfffffff8}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 11m47.731021491s ago: executing program 37 (id=2828): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000400), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0d05605, &(0x7f0000000440)={0x2, 0x0, 0x0, "5d4a03c0d6b1f7891dd5efb410ad15591ada81da3c2f10483741a6bd19dd2c23"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x40000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x0, 0xfffffff8}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10m19.904131081s ago: executing program 4 (id=3126): socket$kcm(0x10, 0x7, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000003c0), 0x4, &(0x7f00000001c0)) r0 = socket$inet6(0xa, 0x6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000000)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000002a00), r4) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRES16=r5, @ANYRES64=r0, @ANYRES32, @ANYBLOB="140014"], 0x30}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xfffe, 0x4}, 0x6) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write(r7, &(0x7f0000000000)="2e000000010001", 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000002, @void, @value}, 0x94) r10 = io_uring_setup(0x4783, &(0x7f0000000580)={0x0, 0x40202119, 0x0, 0x2, 0x283}) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1083) bind$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) listxattr(&(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) 10m18.541150879s ago: executing program 4 (id=3130): r0 = socket$key(0xf, 0x3, 0x2) fsetxattr$trusted_overlay_origin(r0, 0x0, &(0x7f0000000300), 0x2, 0x2) set_tid_address(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x100000000008) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140), 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000000000000080ff001300000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000"], 0xa0}}, 0x0) 10m17.119272119s ago: executing program 4 (id=3133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x0, 0x88070000}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 10m16.174091707s ago: executing program 4 (id=3135): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0xfffffffe, 0x7, 0x5, 0x200, &(0x7f0000000040)="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"}) 10m15.919207022s ago: executing program 4 (id=3136): syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r0, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {}], 0x38) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101}}, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) close(0x3) io_uring_setup(0x203c, &(0x7f00000000c0)={0x0, 0xd4b5, 0x2, 0x10000003, 0x293}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008f503400000000134000000020a03000000000000000000020000000900010073797a300000000008000340000000010c000640000000000000000214000000110001"], 0x98}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r9) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r8, 0x0) 10m7.212424168s ago: executing program 4 (id=3156): recvmsg$kcm(0xffffffffffffffff, 0x0, 0x18000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, 0x0) socket$kcm(0x21, 0x2, 0x2) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mlockall(0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x10000}) ioctl$KVM_RESET_DIRTY_RINGS(0xffffffffffffffff, 0xaec7) ftruncate(r3, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) gettid() lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000240)=@sr0, r4, &(0x7f0000000380)={0xaf1, 0x2, 0x1, 0x2}) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 9m51.533737146s ago: executing program 38 (id=3156): recvmsg$kcm(0xffffffffffffffff, 0x0, 0x18000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, 0x0) socket$kcm(0x21, 0x2, 0x2) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mlockall(0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x10000}) ioctl$KVM_RESET_DIRTY_RINGS(0xffffffffffffffff, 0xaec7) ftruncate(r3, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) gettid() lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000240)=@sr0, r4, &(0x7f0000000380)={0xaf1, 0x2, 0x1, 0x2}) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 4m15.42756756s ago: executing program 3 (id=4228): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x23, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000001208000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 4m15.104906599s ago: executing program 3 (id=4229): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) (async, rerun: 32) close(r1) (rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='loginuid\x00') (async) getpeername$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) (async) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1c, &(0x7f00000003c0)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffc0, 0xffffffffffffffff}, @ldst={0x2, 0x2, 0x1, 0x7, 0x6, 0x0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x6b, &(0x7f0000000180)=""/107, 0x41000, 0x19, '\x00', r3, 0x25, r1, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x3, 0xffff, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[r4, r1, r1, r1, r1], &(0x7f0000000640)=[{0x5, 0x1, 0xc, 0xb}, {0x1, 0x1, 0x5, 0xb}], 0x10, 0xff, @void, @value}, 0x94) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000000)={0xfc, 0x11, 0x9, 0xb, "4ff16929eeefd5ad06861377209e6b8b41abc722cc4380ea68155bfc59e4ead2"}) 4m14.757555642s ago: executing program 3 (id=4230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1abb01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000ffffffffffffaaaaaaaaaabb88a800008100400086dd6b9e87ae0018040120010000000000000000000000000001ff02000000000048dc37a892fab54b9ed5df234cda809cca2984"], 0x5a) 4m13.408348178s ago: executing program 3 (id=4233): io_uring_setup(0x41ed, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x1, 0xe}) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000080), 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x1400000000000) listen(r0, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x6, 0x0, 0x40}}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) 4m12.171141161s ago: executing program 3 (id=4242): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034ab2a2072059ac65e5001020301090012000100000000090400000024b2c500"], 0x0) 4m10.401894735s ago: executing program 3 (id=4248): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x86100) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000d80)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 4m9.180652385s ago: executing program 39 (id=4248): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x86100) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000d80)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 13.279159357s ago: executing program 2 (id=5122): syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r0, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {}], 0x38) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101}}, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) close(0x3) io_uring_setup(0x203c, &(0x7f00000000c0)={0x0, 0xd4b5, 0x2, 0x10000003, 0x293}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001340000001b0a03000000000000000000020000000900010073797a300000000008000340000000010c000640000000000000000214000000110001"], 0x98}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r9) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r8, &(0x7f0000000480)='comm\x00') 9.863349717s ago: executing program 5 (id=5132): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b702000000090001db120a000000000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f2ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd3d400ac1949839f92232e7684f2305d906ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c832ffa41c17b82700789b163bbc8507f171b46d2c569e75810e60a06b6f69ef41ca39a2e8c2f369545d761d74"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x1, "66cbc06e"}]}}, 0x0}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2e, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) syncfs(0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000080000000017000000400006"], 0x54}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x401}, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) recvmmsg(r4, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000340)=0xff, 0x4) r5 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f00000001c0)=0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x2, 0x20}, &(0x7f0000000400)=0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="12044800e0ff030002004788aa96a13bb1000000000086ddffff", 0x10029, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) listen(r0, 0x1a103e43) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200220d22249314bf000000212cf06f7e81d6a2c4476489aeb3a9f1dbf8b36d5a47c09fc2bd0d92e076c96966c40cc231763144e6f70f41ebb6fa2e5ce59273812a9c0b47171a9e7c2174ff5645a0910bbc20f5cae38e4e4294cd00"/108], 0x0) 9.347430731s ago: executing program 2 (id=5135): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f000068c000/0x3000)=nil) mlockall(0x2) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) r4 = shmat(r3, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmdt(r4) shmctl$SHM_UNLOCK(0x0, 0xc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="3f000000010000", 0x7) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x52) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) 8.324464535s ago: executing program 2 (id=5138): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0xf0, 0x1, [{{0x9, 0x4, 0x0, 0xc8, 0x1, 0x3, 0x1, 0x3, 0x8, {0x9, 0x21, 0x8, 0x2, 0x1, {0x22, 0xde8}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x88, 0x2, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x4, 0x5, 0x8}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0x2, 0x4, 0x7f, 0x40}, 0x5, &(0x7f0000000400)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x181a}}, {0xe3, &(0x7f0000000500)=@string={0xe3, 0x3, "a3b722c2e665056510d0154afefa37df8f9ae8a5f4b2bca6db146b6e79bf21f27de29e8e64b7bc0be8bd1e6f0c42ea3fb7d509ec0fc0d64f60966213404df6cac6ce7b13bef96ca24e029546d28d186376d1b99af80bb8dabc165e3c66cf5ca0ff84b24779747b40c2f83a67fc7eeb9038aa467a89ca26f2f616e0f84d318b6fe3779c05d0395813128832a3c3ae66869aea9ea228157559daf1c8d1d83934610e450f1c42267fef5cdce4cc2e9bdcbbee83d999abe7214902f1bed1369768488a79c1082de197fcec25e23a1682b802c3ad43d6a81f9415f1d1c464be2d880030"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x810}}]}) (async) syz_usb_control_io(r0, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x100, 0xa1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x10, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x8, 0x6, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x95, 0xb, 0x7}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x8, 0x3, 0x9, 0xff, 0x7}, 0xd3, &(0x7f0000000240)={0x5, 0xf, 0xd3, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x1, 0x4, 0x55ef}, @generic={0xc4, 0x10, 0xb, "221aeceef2fc2e3423f13f2777123ba8291d6cbde2572a1ca83657ea78354a68c5db9832e4f25e6afb542bbef7ed5e04d0ec71ba6eefdbf3a866e572c9ebef6aa6c387a641fa24edb5163a2a150a9939eb286fa97879445f33d6d919c6bf268e0d28ca27bcedf724a7c058f9492ed63791637a9e337b3bc23cfcd909b33d6adce9e587b56f81691211654b555a80317fc03e62db982db1f82f9821ced834df7546d7f52fed58e7180eb64821b35d8853646813fb64167cde9c961b21ed3a6e16ee"}]}, 0x2, [{0xa6, &(0x7f0000000140)=@string={0xa6, 0x3, "bdae82f60abbd19a5a70dccb494b6926292d26c21c349f47999da6e0fedf80d30d70f8ced1934d60a2520f94f5c2910e68f8ca2b0b3e0285722456754d8a361647e2421f8f7bcef2842ba6ff9a6dbeea71d1c023a748a024973c4be89fe36d10b13ba58503ede819dea38c86b60dddab64b6f703ffe21bbcc0ce1bf91cb17c174e54374e46b08956a435038ae66f5941c57ce471abe3c7e3247d81d47eded067897f64e8"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x81d}}]}) (async) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000200)={0xec9, 0x23}) 7.594966727s ago: executing program 5 (id=5141): fsopen(&(0x7f0000000000)='bpf\x00', 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003dc00100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6.447484117s ago: executing program 5 (id=5146): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) (rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, 0x0}, 0x78) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x8}]}) (async) unshare(0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x80082102, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x700, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000780)="cb"}) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}, {&(0x7f0000010380)=""/47, 0x2f}], 0x3) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 6.428506898s ago: executing program 6 (id=5148): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f000068c000/0x3000)=nil) mlockall(0x2) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) r4 = shmat(r3, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmdt(r4) shmctl$SHM_UNLOCK(0x0, 0xc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="3f000000010000", 0x7) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x52) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) 6.18737794s ago: executing program 5 (id=5150): syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r0, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {}], 0x38) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101}}, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) close(0x3) io_uring_setup(0x203c, &(0x7f00000000c0)={0x0, 0xd4b5, 0x2, 0x10000003, 0x293}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000020a03000000000001000000020000000900010073797a300000000008000340000000010c000640000000000000000214000000110001"], 0x98}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r9) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r8, 0x0) 5.756250483s ago: executing program 9 (id=5151): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x8, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000000000000000000d0a4700000000000002000006"], &(0x7f0000000f40)=""/4086, 0x44, 0xff6, 0x1, 0x0, 0x0, @void, @value=0x2c000000}, 0x28) 5.464730157s ago: executing program 2 (id=5152): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x82, &(0x7f0000000080), &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000006c0), &(0x7f0000000700)=0x4) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x2, @remote, 0x4000}}}, 0x108) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc22d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7e, 0x10, 0x10, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x2, 0x4a, {0x9, 0x21, 0x3, 0x8, 0x1, {0x22, 0x64a}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc, 0x0, 0x9}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x9, 0x5, 0x80, 0x40, 0x6}, 0x23, &(0x7f0000000740)={0x5, 0xf, 0x23, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x4, 0x0, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "14af54a6e300"}]}, 0x8, [{0xb6, &(0x7f00000000c0)=@string={0xb6, 0x3, "922df10f96a6eba34fe4b2d3b80c7bff6f5c415c584f27fdf00c3f0e7486eb9e495009bb2791d2c9254370ef588f3af7e1dd265242d1a5760ef08a58c6353ff015f7f270b0e27e6912a2e189121738125c74cb87f988fb9810aa7e56385d7fb2ecdf41732feaebfc9e10576cdd56961ac0e62c68c2ef511aba9ab780c39bd7673f3228aef9159b69a20d37cda9175e254d424124c56d0f4a3b235ac6a6d6b090bf26080bc7e5829399c254f49ccfd3920fc5b3ff"}}, {0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="11000000006f1a9e"]}, {0x1c, &(0x7f00000001c0)=@string={0x1c, 0x3, "0e36369161dfb48b8713166f9f6f257c3a5a936e454ad96bd295"}}, {0x89, &(0x7f0000000340)=@string={0x89, 0x3, "97f010e1252f3981da78cac748723f85c0be753df1e4b31c413ff67b6cbb310877da18d1294ee43b19f969466ab9b94c3e0bc34c04125b83fed33af84fd4ca8f1fee3249e0d5491cd939990763cac5a2e6a0ebd192e20ff049d412443af475ec5b988bbcbb46b699207b7b606978bb7e24ecdece28a319b513340ef7375ff4737a970c0b9ae0f2"}}, {0x51, &(0x7f0000000400)=ANY=[@ANYBLOB="5103eb3f78cf3d1e16850db79f7f046468c7edd0e93552c90bf6972d4824b5fd7dc8a08c9bb02ccd22fc1af6ced3b1cf2fe1c3b653defa2305cc6988871c93f72f8b3d9dcc41cf930760f12eb8f290657d"]}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x408}}, {0xcf, &(0x7f0000000540)=@string={0xcf, 0x3, "f30dc8adc5fe0e20b76d6b8510794bbe7e516c6d43af4fb11ee9ad564d3f0b1eca441b4b738b9feb4e2b690072043b31fe03776d68f96636555ba39c1903b87fb1785c2ed15f7815f7623409e150a9da77b77829b06a91ba21ed899df9063366906a8216aec764df7e71e57ec85cac0800000000000000d5f2acaafbb7077ff4ce9c950aa98d65aec7471e967be2e18037bc0b4d422e41fc38a2229743a6433151d25d9f29bac4e42fc3bbb8d39c60f97fd065b34b2ee96523a89c940c4cbbf11a5d16f1482104590e4d4705ac"}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071101b000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_open_dev$dri(&(0x7f0000000480), 0x3, 0x200000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000880)={&(0x7f00000004c0)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0xa, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000900)={&(0x7f00000008c0)=[r4], 0x1, 0x800}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000200)={0x4, {{0xa, 0x3, 0x4000, @private0, 0x4}}, {{0xa, 0x0, 0x3b6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "967cdef875f8738a", "902295394fc6d0b5aa39eb14eac2d9a2", "cabd27f3", "393bedfa875e7d07"}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xf, &(0x7f0000000ac0)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r5, @ANYRESOCT=0x0, @ANYRESOCT=r3], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r9) write$6lowpan_enable(r8, &(0x7f0000000040)='1', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000940)='spi_message_done\x00', r7}, 0x18) socket(0x10, 0x803, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 5.09135487s ago: executing program 6 (id=5153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010200000000ff9c00000000000a20000000000a01010000000000000000010000000900010073797a300000000048000000030a01010000000000000000010000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002"], 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.971277752s ago: executing program 6 (id=5154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[], 0x38}}, 0x0) (async) r1 = epoll_create1(0x0) (async) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r3 = dup3(r1, r2, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000400000008000000ff0f00000a800400", @ANYRES32=r2, @ANYBLOB="000072c9328d0000001000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="04000000020000000400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000240)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x1) close(r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x8, 0x7, 0x7, 0x2, r4, 0x80000001, '\x00', r6, r2, 0x2, 0x1, 0x1, 0xe, @void, @value, @void, @value}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r7, &(0x7f0000000000)={0x40002009}) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da24"], 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x0) syz_usb_disconnect(r9) (async, rerun: 64) syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) select(0x40, &(0x7f0000001040)={0xb, 0x1, 0x1, 0x7fffffff, 0x5, 0x101, 0x3, 0x5}, 0x0, &(0x7f00000010c0)={0x19, 0x4, 0x3, 0x8001, 0x99, 0xffffffffffffffff, 0xd, 0x6}, &(0x7f0000001100)={0x0, 0xea60}) (async) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r11, 0x0, 0x14, &(0x7f0000000140)='D', 0x1) (async) getsockopt$IP_VS_SO_GET_INFO(r8, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000180)=0xc) (async, rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES32=r8, @ANYBLOB="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", @ANYBLOB="080005"], 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) getsockopt$WPAN_SECURITY(r8, 0x0, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 4.546344491s ago: executing program 9 (id=5155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, 0x0) 3.747589082s ago: executing program 6 (id=5157): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x14, 0x1e, 0x21, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) 3.509937191s ago: executing program 0 (id=5158): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000399cf8000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018231fff", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x40f00, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.464409464s ago: executing program 9 (id=5159): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r0}, 0x0, &(0x7f00000010c0)='%pK \x00'}, 0x20) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/262, 0x106}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000e87000/0x4000)=nil) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(r1, 0xe, &(0x7f0000000140)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00'}, 0x10) truncate(0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ptrace(0x10, 0x1) 3.299435193s ago: executing program 0 (id=5160): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1f0) syz_io_uring_complete(0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000600000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) 3.299178782s ago: executing program 6 (id=5161): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) 2.853516368s ago: executing program 6 (id=5162): r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000200)="03", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x8}, 0x8) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x84000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r9 = syz_usb_connect(0x5, 0x3d, &(0x7f0000000740)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb350102030109022b0001080540040904ce01026fda0d000705f71f22810b09050c02"], 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000340), 0x23fa040, &(0x7f0000000780)=ANY=[@ANYRES8=r5, @ANYRESHEX=r8, @ANYRESOCT=r9, @ANYRES16=r7, @ANYRESDEC=r2, @ANYRES16=r4]) read$FUSE(r8, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r10, {0x7, 0x1f}}, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0xfffffffffffffff5, r10, {0x1, 0xc, 0x0, {0x2, 0x7, 0x5, 0x5, 0x3, 0x3, 0xa3c, 0xfffffff7, 0x8000, 0xc000, 0x6, 0xee00, r11, 0x9, 0x1}}}, 0x78) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x408000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10000]}) 2.350782754s ago: executing program 9 (id=5163): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000140)={0x0, 0x4a51, 0x13908, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_io_uring_setup(0x27f1, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r6 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}) syz_io_uring_submit(r1, r4, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x50, 0x0, @fd_index=0x3, 0x6, 0x0, 0x2, 0x4, 0x0, {0x0, r9}}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r11, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) r12 = fcntl$dupfd(r3, 0x0, r10) ioctl$TIOCSETD(r12, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000000)=0x30) ioctl$TCFLSH(r3, 0x540b, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000000000000008000a40000000000900010073797a30000000000900020073797a32000000000800054000000033080003400000001408000c4000000000080008"], 0x7c}}, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r12, 0x84, 0x65, &(0x7f0000000480)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e22, 0x2, @mcast1, 0x4}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e23, 0x199, @mcast1, 0x6000000}], 0xb0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r14, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x23}}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r14, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x5, 0x1, 0x5}, 0x14}}, 0x0) 2.215025841s ago: executing program 2 (id=5164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x23, 0x0, &(0x7f0000000480)) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r5, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000067c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x198, 0x0, 0x0, [{0xfffffffffffffffc, 0x34d, 0x170, 0x0, '3,H\xeffb\x1e\x16\x18\xad`\xa8\x84w\xf8V+\xf7L\xaf\xba\x17\xcaY7\x06S\b\xda\xefqN\xf5\xaa\x99\xa6\"\xbap%et8\xe1\x1abl\x9b\n\xfeS\xc4N\xeaT\xb4\x90\xc4*\x8d\x0f}C\xc9Q\x84\x1f\x00\xf3\x8d\xb1-|\x96H\xd3Ni]d\x90\x0f\x82\x85\xa5X\xb3\x8d+\x9a\xbc\x96\xd7\x86V^\xe1h\xe44k\x01\xeb\x8e6\xfaXj\xb0\x95|\xd0\x00\x01c\xcb\n\xb6h\xab9\xab\x8c\b\x9a0\x1d\xc9\xf3R\xe4\x80\xabN\x0e!@\x83}\\#\x85)\xc1\xe9\x99\xd1\'.\x82g\xf0za\xf3n^6\xee\xeb\x1a\xdf\x180x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000380)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) 2.181519255s ago: executing program 0 (id=5165): socket(0x10, 0x3, 0x100004) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r5, 0xc008561b, &(0x7f0000000200)={0x20, 0x20000002}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x1}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="90", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)='\a', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0xdc00, @private0, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000004c0)="04eda8fa4276dd78c0ed3dde36e629b8872860a31885f9fa89df5f798e439a26f4ecb05c6518cab3be11ffaf576f8fc778fdab4ecd90ebdbc2020cbf20a0ac3dc961a025029ebd8d82c9ce08ace3cfeb54b534f75e0e0f73ad5d2593d030a66acbf74ea40b2b871d762aa35d39623688e11f8e39761311d2fd6c1654a624be26edfbdceb51fe81e49404d8ef3b21cd3cedb33de0b398b9b4955d637da2d0", 0x9e}, {&(0x7f0000000280)="e5a9cc84185858c902ef6c8093060654332bbb", 0x13}, {&(0x7f00000015c0)="7c6dfffa17f01a0e60b75f6c6ba76f3fe943a1ccd86981e12e9084684c16d837f2416b069839825b3019c9ce5eeaf0aeb53ff9e69e3e998a96c2fd0e3fdf2ac9c5d39285d51fcf48f0d9a45931bbf47f43ea8f7a82e30d53d24662ec69e820000a2c5c5f", 0x64}], 0x4, &(0x7f0000001640)=[@rthdr={{0x48, 0x29, 0x39, {0x4e, 0x6, 0x0, 0xe, 0x0, [@remote, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}]}}}, @tclass={{0x14, 0x29, 0x43, 0xf5c2}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x84, 0x0, 0x1, 0x1}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}], 0xa8}}, {{&(0x7f0000000380)={0xa, 0x4e21, 0x3603, @remote, 0x9}, 0x1c, &(0x7f00000018c0)=[{&(0x7f0000001740)="806b4e73edcf9da9822c36de628f89bc7b1007bad9510568b8d71e740188c6fc2ff39559f3d78c82cab676f6ffca3e7065053be8ed3841be4e6de1cabceb983e81", 0x41}, {&(0x7f00000017c0)="7006a12d99c4689b112be200c758ec860768090c833f88ed34a9453186c04fa58e1a1bc43367c17f47c669deb5944c9e207c4c50d4d3821257f81c315b", 0x3d}, {&(0x7f0000001800)="a4ac79c239d8509a149a52cdb480748799f5d5238afee3148dd57251c7e2914f6f0df6080000000000007aa7ddcba67910761022f8d334e3bdec5ec3f1662d9473dd71aff5283e8bbd338a44a5136e14ef5df88e85fdb43a371a714fae654aeef1721ee36eddbeb983b68a4f91fc4707eeb2812cf2866c1904f201114d4d13dbda34187dd0862203fd3dde8f0a4e74fa57bcbbf15eb72394ed7102371aa1a3d7ea7fbbd060067b299f89a53c27d351cebb29606da159efec09", 0xb9}], 0x3}}], 0x4, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, 0x0) 2.108621129s ago: executing program 9 (id=5166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="680000001400010000000000fbdbdf25e0000001000000000000000000000000ffffffff0080ffffff0000000000000000000000000700000a0080000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x68}}, 0x4004040) 1.129631934s ago: executing program 0 (id=5167): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.051443976s ago: executing program 9 (id=5168): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r2, &(0x7f0000000180)='\x00', 0x1001}]) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x20, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffffff}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8890}, 0x41) ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000040ac059a0200000000000109022400010000000009040000010300000009210300000122050009058103"], 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r6 = socket$inet6(0xa, 0x2, 0x3a) r7 = dup(r6) bind$unix(r7, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002208000000aa8cc8a9"], 0x0}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000380)="5d13ddefa585f7524b2b774b8716d8de52df1520a26c677a563ac64370c82aac271c77c7d0c9f29f525db19d6878a1f12022e7203683dfa060a82c1c7090d32ee225c4151b5f63e26fa3300fd2077ea6f8efe9304394056319c171bcaa4b1fe6060d50110b57e2d9a78ab691f2faec9d75aa309d7a84682c7a0b97d9cbf7b22d521029e3e12e7c16ba4e822760b7742102f3636bd26f64e18772bba8d8f56151a8a8206fe119f4dca81362d2b0ea10", 0xaf}], 0x1}}], 0x1, 0x600c050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff"], 0xa) 406.181163ms ago: executing program 5 (id=5169): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c00000010000104000000000006000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005c0012800b00010062726964676500004c0002800500290001000000050019000700000005001900a1ffffff08001c000000700005002500010000000500170001000000050007000f0000000500160001000000050024"], 0x7c}}, 0x0) 288.562202ms ago: executing program 2 (id=5170): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000005ec0)) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000005000000020000000400000000000000", @ANYRES32, @ANYBLOB="000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000008001000000000000000000"], 0x48) 119.482927ms ago: executing program 0 (id=5171): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a00fe880000000000000000000000000001"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r2 = io_uring_setup(0x7bda, &(0x7f0000000080)={0x0, 0x6cdf, 0x800, 0x3, 0x5}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x18, 0x20000000, r3) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x6008800, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 728.878µs ago: executing program 0 (id=5172): syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001700)={'batadv0\x00', 0x0}) getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000001800ffff00000000000000000a00000000000009"], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r3, 0x0, 0x0, 0x0, 0x1000000, 0x0, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700}}) 0s ago: executing program 5 (id=5173): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x50}, 0x1, 0xba01}, 0x20) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1000001000104) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200) ioctl$NBD_SET_SOCK(r4, 0xab00, r2) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r5 = socket(0x1, 0x803, 0x0) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x1f, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[], 0x50}, 0x1, 0xd}, 0x24040010) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x8, 0x1, 0x7, 0x9, {{0x24, 0x4, 0x1, 0x8, 0x90, 0x65, 0x0, 0xd3, 0x29, 0x0, @multicast1, @remote, {[@cipso={0x86, 0x38, 0x1, [{0x7, 0x2}, {0x0, 0x4, "68fe"}, {0x6, 0x2}, {0x0, 0xb, "1ee100c05c52be0000"}, {0x456f9bc3f21487fd, 0xd, "dd68fd6fb8782f25043db8"}, {0x2, 0x4, "84a2"}, {0x5, 0x9, "57e530ea6f597f"}, {0x1, 0x5, "837fe5"}]}, @cipso={0x86, 0x27, 0x0, [{0x6, 0xf, "0350d95c6bc48be3f7d23523a9"}, {0x2, 0x12, '\x00'/16}]}, @cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x1, 0x7, "f2cb248ee4"}, {0x6, 0x3, '7'}, {0x6, 0xc, "a283aa91ec1cefe71775"}]}]}}}}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e22, 0x0, @mcast1, 0xb0}], 0x38) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="1500000065ffff0800000008003950323030302e4c2f13a531ab77b06f4e2498f64f83232c63a2f5ea43ff0851e3f0fd10f1e94feb9a0d01e61929856a143aa28f21627c39926b8f754dace2feac53cc0253b6db298067c8668c6ecb3acdb82b120df0b565989e50f55ee713e03a63ac407527298aef478b8e9f822fb36182359046eaa1ec513c"], 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) kernel console output (not intermixed with test programs): ed with error -110 [ 1353.657927][ T5904] usb 6-1: USB disconnect, device number 84 [ 1355.457647][ C0] bridge0: port 3(vlan2) entered forwarding state [ 1355.464244][ C0] bridge0: topology change detected, propagating [ 1355.470954][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1355.478256][ C0] bridge0: topology change detected, propagating [ 1355.484761][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1355.492031][ C0] bridge0: topology change detected, propagating [ 1356.349371][ T29] audit: type=1326 audit(1613.247:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22056 comm="syz.5.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd317ff19 code=0x7ffc0000 [ 1356.622402][ T29] audit: type=1326 audit(1613.257:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22056 comm="syz.5.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fddd317ff19 code=0x7ffc0000 [ 1356.664052][ T29] audit: type=1326 audit(1613.257:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22056 comm="syz.5.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd317ff19 code=0x7ffc0000 [ 1356.685506][ T5871] usb 10-1: new low-speed USB device number 35 using dummy_hcd [ 1356.739450][ T29] audit: type=1326 audit(1613.257:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22056 comm="syz.5.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fddd317ff19 code=0x7ffc0000 [ 1356.806683][ T29] audit: type=1326 audit(1613.257:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22056 comm="syz.5.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd317ff19 code=0x7ffc0000 [ 1356.858845][ T5871] usb 10-1: No LPM exit latency info found, disabling LPM. [ 1356.870965][ T5871] usb 10-1: config 4 has an invalid interface number: 202 but max is 0 [ 1356.887254][ T5871] usb 10-1: config 4 has an invalid interface number: 161 but max is 0 [ 1356.896087][ T29] audit: type=1326 audit(1613.257:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22056 comm="syz.5.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fddd317ff19 code=0x7ffc0000 [ 1356.918761][ T5871] usb 10-1: config 4 has 2 interfaces, different from the descriptor's value: 1 [ 1356.937288][ T5871] usb 10-1: config 4 has no interface number 0 [ 1356.943835][ T5871] usb 10-1: config 4 has no interface number 1 [ 1356.984443][ T29] audit: type=1326 audit(1613.767:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22056 comm="syz.5.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd317ff19 code=0x7ffc0000 [ 1357.017621][ T5871] usb 10-1: config 4 interface 202 altsetting 98 endpoint 0x8 has invalid maxpacket 1024, setting to 0 [ 1357.047247][ T5871] usb 10-1: config 4 interface 202 altsetting 98 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 1357.084061][ T29] audit: type=1326 audit(1613.767:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22056 comm="syz.5.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd317ff19 code=0x7ffc0000 [ 1357.113360][ T5871] usb 10-1: config 4 interface 202 altsetting 98 endpoint 0xD has invalid maxpacket 16, setting to 8 [ 1357.170924][ T5871] usb 10-1: config 4 interface 202 altsetting 98 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 1357.183889][ T5871] usb 10-1: config 4 interface 202 altsetting 98 endpoint 0xF has invalid maxpacket 64, setting to 8 [ 1357.321609][ T5871] usb 10-1: config 4 interface 202 altsetting 98 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 1357.441084][ T5871] usb 10-1: config 4 interface 161 altsetting 143 has a duplicate endpoint with address 0x8, skipping [ 1357.600260][ T5871] usb 10-1: config 4 interface 161 altsetting 143 has an invalid descriptor for endpoint zero, skipping [ 1357.611613][ T5871] usb 10-1: config 4 interface 161 altsetting 143 endpoint 0xA has invalid maxpacket 1024, setting to 8 [ 1357.623036][ T5871] usb 10-1: config 4 interface 161 altsetting 143 has a duplicate endpoint with address 0xC, skipping [ 1357.637863][ T5871] usb 10-1: config 4 interface 161 altsetting 143 endpoint 0x5 has invalid maxpacket 1024, setting to 8 [ 1358.298192][ T5871] usb 10-1: config 4 interface 161 altsetting 143 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 1358.337301][ T5871] usb 10-1: config 4 interface 202 has no altsetting 0 [ 1358.344228][ T5871] usb 10-1: config 4 interface 161 has no altsetting 0 [ 1358.483420][ T5871] usb 10-1: New USB device found, idVendor=12d1, idProduct=2f40, bcdDevice=48.8f [ 1358.492999][ T5871] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.503209][ T5871] usb 10-1: rejected 1 configuration due to insufficient available bus power [ 1358.512168][ T5871] usb 10-1: no configuration chosen from 1 choice [ 1358.541342][ T5871] usb 10-1: USB disconnect, device number 35 [ 1358.931119][T22094] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4364'. [ 1358.940351][T22094] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 1358.949620][T22094] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 1361.273560][T22129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4371'. [ 1361.362721][T22131] @: renamed from vlan0 (while UP) [ 1361.935687][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.517526][T12311] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1362.541521][T22141] netlink: 'syz.6.4376': attribute type 10 has an invalid length. [ 1362.555069][T22141] bridge0: port 4(dummy0) entered blocking state [ 1362.561543][T22141] bridge0: port 4(dummy0) entered listening state [ 1362.568150][T22141] bridge0: port 3(vlan3) entered blocking state [ 1362.574439][T22141] bridge0: port 3(vlan3) entered listening state [ 1362.581000][T22141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.588124][T22141] bridge0: port 2(bridge_slave_1) entered listening state [ 1362.595356][T22141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.602531][T22141] bridge0: port 1(bridge_slave_0) entered listening state [ 1362.621938][T22141] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1362.632242][T22139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4377'. [ 1362.658519][T22139] bridge_slave_1: left allmulticast mode [ 1362.672206][T22139] bridge_slave_1: left promiscuous mode [ 1362.688995][T22139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.708921][T12311] usb 3-1: Using ep0 maxpacket: 32 [ 1362.716307][T12311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1362.734338][T12311] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 160, changing to 11 [ 1362.753318][T12311] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1362.781181][T12311] usb 3-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 1362.810813][T12311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.853607][T12311] usb 3-1: Product: syz [ 1362.865220][T12311] usb 3-1: Manufacturer: syz [ 1362.884332][T12311] usb 3-1: SerialNumber: syz [ 1363.777301][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1363.784524][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1363.791749][ C0] bridge0: port 3(vlan0) entered learning state [ 1364.101799][T22135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.140430][T22135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1364.159256][T22135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1364.183007][T22161] bond_slave_0: entered promiscuous mode [ 1364.189499][T22161] bond_slave_1: entered promiscuous mode [ 1364.195301][T22161] bridge0: entered promiscuous mode [ 1364.396342][T22135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.413610][T22135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.435192][T22161] macvlan2: entered promiscuous mode [ 1364.440967][T22161] bond0: entered promiscuous mode [ 1364.757035][T22161] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1364.787067][T22161] bond0: left promiscuous mode [ 1364.798077][T22161] bond_slave_0: left promiscuous mode [ 1364.803683][T22161] bond_slave_1: left promiscuous mode [ 1364.809546][T22161] bridge0: left promiscuous mode [ 1365.010088][T12311] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input31 [ 1365.032550][ T5180] bcm5974 3-1:1.0: could not read from device [ 1365.039217][T12311] usb 3-1: USB disconnect, device number 87 [ 1365.151154][T22170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4385'. [ 1365.160816][T22170] nbd: socks must be embedded in a SOCK_ITEM attr [ 1365.977319][ T119] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1366.157323][ T119] usb 1-1: Using ep0 maxpacket: 16 [ 1366.164094][ T119] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1366.177412][ T119] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.195812][ T119] usb 1-1: config 0 descriptor?? [ 1366.210900][ T119] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1367.004670][T22172] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4386'. [ 1367.300743][ T119] gspca_sonixj: reg_w1 err -110 [ 1367.305745][ T119] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 1367.988567][T22199] erofs (device erofs): cannot find valid erofs superblock [ 1369.465740][ T119] usb 1-1: USB disconnect, device number 40 [ 1369.672372][T22205] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4396'. [ 1369.702606][T22205] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4396'. [ 1369.729238][T22205] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4396'. [ 1370.438438][T22214] FAULT_INJECTION: forcing a failure. [ 1370.438438][T22214] name failslab, interval 1, probability 0, space 0, times 0 [ 1370.597334][T22214] CPU: 0 UID: 0 PID: 22214 Comm: syz.6.4401 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1370.608157][T22214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1370.618229][T22214] Call Trace: [ 1370.621524][T22214] [ 1370.624470][T22214] dump_stack_lvl+0x241/0x360 [ 1370.629181][T22214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1370.634399][T22214] ? __pfx__printk+0x10/0x10 [ 1370.639013][T22214] ? fs_reclaim_acquire+0x93/0x130 [ 1370.644151][T22214] ? __pfx___might_resched+0x10/0x10 [ 1370.649463][T22214] should_fail_ex+0x3b0/0x4e0 [ 1370.654177][T22214] should_failslab+0xac/0x100 [ 1370.658884][T22214] __kmalloc_noprof+0xdd/0x4c0 [ 1370.663665][T22214] ? kstrtouint_from_user+0x128/0x190 [ 1370.669051][T22214] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1370.674798][T22214] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1370.680379][T22214] tomoyo_path_number_perm+0x236/0x860 [ 1370.685876][T22214] ? __lock_acquire+0x1397/0x2100 [ 1370.690930][T22214] ? tomoyo_path_number_perm+0x206/0x860 [ 1370.696590][T22214] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1370.702631][T22214] ? __fget_files+0x2a/0x410 [ 1370.707259][T22214] ? __fget_files+0x2a/0x410 [ 1370.711891][T22214] security_file_ioctl+0xc6/0x2a0 [ 1370.716941][T22214] __se_sys_ioctl+0x46/0x170 [ 1370.721560][T22214] do_syscall_64+0xf3/0x230 [ 1370.726099][T22214] ? clear_bhb_loop+0x35/0x90 [ 1370.730811][T22214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.736726][T22214] RIP: 0033:0x7fa67377ff19 [ 1370.741162][T22214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1370.760793][T22214] RSP: 002b:00007fa67457f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1370.769668][T22214] RAX: ffffffffffffffda RBX: 00007fa673945fa0 RCX: 00007fa67377ff19 [ 1370.777657][T22214] RDX: 0000000020000040 RSI: 0000000000008b2a RDI: 0000000000000003 [ 1370.785649][T22214] RBP: 00007fa67457f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1370.793639][T22214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1370.801633][T22214] R13: 0000000000000000 R14: 00007fa673945fa0 R15: 00007fffccc28d98 [ 1370.809649][T22214] [ 1370.812807][ C0] vkms_vblank_simulate: vblank timer overrun [ 1370.929362][T22214] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1373.517438][ T5872] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1373.718571][ T5872] usb 6-1: Using ep0 maxpacket: 32 [ 1373.765655][ T5872] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.177429][ T5872] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1374.207377][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.215459][ T5872] usb 6-1: Product: syz [ 1374.240153][ T5872] usb 6-1: Manufacturer: syz [ 1374.244810][ T5872] usb 6-1: SerialNumber: syz [ 1374.268834][ T5872] usb 6-1: config 0 descriptor?? [ 1374.299271][ T5872] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1375.176281][T22281] input: syz0 as /devices/virtual/input/input32 [ 1376.387238][ T5872] gspca_sunplus: reg_r err -110 [ 1376.392230][T12311] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1376.577829][T22292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.580190][T12311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1376.599502][T22292] netlink: 'syz.0.4427': attribute type 10 has an invalid length. [ 1376.605335][T12311] usb 3-1: not running at top speed; connect to a high speed hub [ 1376.608700][T22292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.622237][T22292] bridge0: port 1(bridge_slave_0) entered listening state [ 1376.644324][T12311] usb 3-1: config 4 has an invalid interface number: 86 but max is 0 [ 1376.659112][T12311] usb 3-1: config 4 has no interface number 0 [ 1376.665251][T12311] usb 3-1: config 4 interface 86 has no altsetting 0 [ 1376.669038][T22292] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1376.683377][T12311] usb 3-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=99.ad [ 1376.700890][T12311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.739881][T12311] usb 3-1: Product: syz [ 1376.744671][T12311] usb 3-1: Manufacturer: syz [ 1376.749664][T12311] usb 3-1: SerialNumber: syz [ 1376.929057][T22296] FAULT_INJECTION: forcing a failure. [ 1376.929057][T22296] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.947411][T22296] CPU: 0 UID: 0 PID: 22296 Comm: syz.0.4429 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1376.958251][T22296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1376.968337][T22296] Call Trace: [ 1376.971637][T22296] [ 1376.974582][T22296] dump_stack_lvl+0x241/0x360 [ 1376.979302][T22296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1376.984532][T22296] ? __pfx__printk+0x10/0x10 [ 1376.989148][T22296] ? fs_reclaim_acquire+0x93/0x130 [ 1376.994283][T22296] ? __pfx___might_resched+0x10/0x10 [ 1376.999600][T22296] ? dynamic_dname+0x141/0x1b0 [ 1377.004396][T22296] should_fail_ex+0x3b0/0x4e0 [ 1377.009111][T22296] should_failslab+0xac/0x100 [ 1377.013831][T22296] __kmalloc_noprof+0xdd/0x4c0 [ 1377.018612][T22296] ? tomoyo_encode+0x26f/0x540 [ 1377.023400][T22296] tomoyo_encode+0x26f/0x540 [ 1377.028015][T22296] ? __pfx_sockfs_dname+0x10/0x10 [ 1377.033068][T22296] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1377.038735][T22296] tomoyo_path_number_perm+0x236/0x860 [ 1377.044214][T22296] ? __lock_acquire+0x1397/0x2100 [ 1377.049694][T22296] ? tomoyo_path_number_perm+0x206/0x860 [ 1377.055379][T22296] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1377.061419][T22296] ? __fget_files+0x2a/0x410 [ 1377.066036][T22296] ? __fget_files+0x2a/0x410 [ 1377.070654][T22296] security_file_ioctl+0xc6/0x2a0 [ 1377.075704][T22296] __se_sys_ioctl+0x46/0x170 [ 1377.080325][T22296] do_syscall_64+0xf3/0x230 [ 1377.084853][T22296] ? clear_bhb_loop+0x35/0x90 [ 1377.089557][T22296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.095474][T22296] RIP: 0033:0x7fb9c357ff19 [ 1377.099915][T22296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1377.103266][T22281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1377.119527][T22296] RSP: 002b:00007fb9c4431058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1377.119580][T22296] RAX: ffffffffffffffda RBX: 00007fb9c3745fa0 RCX: 00007fb9c357ff19 [ 1377.119594][T22296] RDX: 0000000020000040 RSI: 0000000000008b2a RDI: 0000000000000003 [ 1377.119607][T22296] RBP: 00007fb9c44310a0 R08: 0000000000000000 R09: 0000000000000000 [ 1377.119619][T22296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1377.119632][T22296] R13: 0000000000000000 R14: 00007fb9c3745fa0 R15: 00007ffe6d764b38 [ 1377.119663][T22296] [ 1377.119722][ C0] vkms_vblank_simulate: vblank timer overrun [ 1377.194452][T22294] erofs (device erofs): cannot find valid erofs superblock [ 1377.285688][T22296] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1377.304062][T22281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1377.409662][T12311] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 1377.474132][T12311] pctv452e: pctv452e_power_ctrl: 1 [ 1377.474132][T12311] [ 1377.650838][T12311] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1377.650838][T12311] [ 1377.859074][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1377.866363][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1377.873596][ C0] bridge0: port 3(vlan3) entered learning state [ 1377.880013][ C0] bridge0: port 4(dummy0) entered learning state [ 1378.637326][T12311] dvb-usb: bulk message failed: -22 (5/0) [ 1378.688873][T12311] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1379.019074][T12311] dvb-usb: PCTV HDTV USB error while loading driver (-19) [ 1379.073487][T12311] usb 3-1: USB disconnect, device number 88 [ 1379.114334][T22316] syz.5.4435 (22316) used greatest stack depth: 16344 bytes left [ 1379.127911][ T5872] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 1379.137303][ C0] bridge0: port 3(vlan0) entered forwarding state [ 1379.143836][ C0] bridge0: topology change detected, propagating [ 1379.150475][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1379.157823][ C0] bridge0: topology change detected, propagating [ 1379.164521][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1379.171909][ C0] bridge0: topology change detected, propagating [ 1379.218684][ T5872] usb 6-1: USB disconnect, device number 85 [ 1379.275213][T22320] sctp: [Deprecated]: syz.6.4437 (pid 22320) Use of int in max_burst socket option. [ 1379.275213][T22320] Use struct sctp_assoc_value instead [ 1379.734212][T22325] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4439'. [ 1382.759307][T22357] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4448'. [ 1382.967424][T12311] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1383.117350][T12311] usb 1-1: Using ep0 maxpacket: 16 [ 1383.124368][T12311] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1383.138793][T12311] usb 1-1: New USB device found, idVendor=1b1c, idProduct=2309, bcdDevice= 0.00 [ 1383.178158][T12311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.188613][T12311] usb 1-1: config 0 descriptor?? [ 1383.808562][T12040] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1383.838443][ T29] audit: type=1326 audit(1640.577:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22382 comm="syz.5.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd317ff19 code=0x7ffc0000 [ 1383.947254][ T29] audit: type=1326 audit(1640.577:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22382 comm="syz.5.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd317ff19 code=0x7ffc0000 [ 1383.970196][ T29] audit: type=1326 audit(1640.577:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22382 comm="syz.5.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fddd317ff19 code=0x7ffc0000 [ 1383.991941][ T29] audit: type=1326 audit(1640.577:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22382 comm="syz.5.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd317ff19 code=0x7ffc0000 [ 1384.006825][T12040] usb 3-1: Using ep0 maxpacket: 8 [ 1384.013903][ T29] audit: type=1326 audit(1640.577:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22382 comm="syz.5.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd317ff19 code=0x7ffc0000 [ 1384.032219][T12040] usb 3-1: config 0 has an invalid interface number: 76 but max is 0 [ 1384.040089][ T29] audit: type=1326 audit(1640.577:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22382 comm="syz.5.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fddd317ff19 code=0x7ffc0000 [ 1384.040132][ T29] audit: type=1326 audit(1640.587:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22382 comm="syz.5.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd317ff19 code=0x7ffc0000 [ 1384.040165][ T29] audit: type=1326 audit(1640.587:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22382 comm="syz.5.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd317ff19 code=0x7ffc0000 [ 1384.040197][ T29] audit: type=1326 audit(1640.587:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22382 comm="syz.5.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fddd317ff19 code=0x7ffc0000 [ 1384.040231][ T29] audit: type=1326 audit(1640.947:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22382 comm="syz.5.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddd317ff19 code=0x7ffc0000 [ 1384.208443][T12040] usb 3-1: config 0 has no interface number 0 [ 1384.906220][T12040] usb 3-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=39.91 [ 1384.915806][T12040] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.923924][T12040] usb 3-1: Product: syz [ 1384.961512][T12040] usb 3-1: Manufacturer: syz [ 1385.229079][T12040] usb 3-1: SerialNumber: syz [ 1385.250032][T12040] usb 3-1: config 0 descriptor?? [ 1385.262233][T12040] gspca_main: touptek-2.14.0 probing 0547:6801 [ 1385.357598][T22407] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4460'. [ 1385.906662][T12040] usb 3-1: USB disconnect, device number 89 [ 1385.952681][T12311] usb 1-1: USB disconnect, device number 41 [ 1386.299079][T22420] geneve2: entered promiscuous mode [ 1386.304349][T22420] geneve2: entered allmulticast mode [ 1386.361705][T22422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4464'. [ 1386.381369][T22422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4464'. [ 1386.602033][T12311] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1387.885441][T12311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1387.897083][T12311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1387.907451][T12311] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1387.916627][T12311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.945039][T12311] usb 1-1: config 0 descriptor?? [ 1388.490647][T22415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1388.525849][T22415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1388.725703][T12311] usbhid 1-1:0.0: can't add hid device: -71 [ 1388.731931][T12311] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1388.747834][T12311] usb 1-1: USB disconnect, device number 42 [ 1389.597990][T22454] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1391.030181][T22471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4480'. [ 1391.738170][T12040] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1391.818911][T22463] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4477'. [ 1391.907287][T12040] usb 6-1: Using ep0 maxpacket: 16 [ 1391.937324][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1392.947365][T12040] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1392.957630][T12040] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1392.968625][T12040] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1392.979098][T12040] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1392.989387][T12040] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1393.010296][T12040] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1393.022196][T12040] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1393.087864][T12040] usb 6-1: Manufacturer: syz [ 1393.094725][T12040] usb 6-1: config 0 descriptor?? [ 1393.100268][T12040] usb 6-1: can't set config #0, error -71 [ 1393.114026][T12040] usb 6-1: USB disconnect, device number 86 [ 1393.217264][ C0] bridge0: port 4(dummy0) entered forwarding state [ 1393.223895][ C0] bridge0: topology change detected, propagating [ 1393.230468][ C0] bridge0: port 3(vlan3) entered forwarding state [ 1393.236908][ C0] bridge0: topology change detected, propagating [ 1393.243410][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1393.250668][ C0] bridge0: topology change detected, propagating [ 1393.257165][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1393.264382][ C0] bridge0: topology change detected, propagating [ 1393.567565][T22499] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4486'. [ 1394.153376][T22517] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1395.024269][T22531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4497'. [ 1395.907905][ T5871] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 1396.099371][ T5871] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.359338][ T5871] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1396.578394][ T5871] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1396.588593][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.607511][ T5871] usb 1-1: Product: syz [ 1397.154844][ T5871] usb 1-1: Manufacturer: syz [ 1397.159827][ T5871] usb 1-1: SerialNumber: syz [ 1397.357696][T22554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1397.663767][ T5871] usb 1-1: 0:2 : does not exist [ 1397.673098][ T5871] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1397.724479][ T5871] usb 1-1: USB disconnect, device number 43 [ 1398.486298][T12040] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1398.560183][T19337] udevd[19337]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1398.637407][T12040] usb 10-1: Using ep0 maxpacket: 8 [ 1398.645788][T12040] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1398.657622][T12040] usb 10-1: config 179 has no interface number 0 [ 1398.664164][T12040] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1398.681328][T12040] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1398.693126][T12040] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1398.779208][T12040] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1398.809647][T12040] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1398.834569][T22575] erofs (device erofs): cannot find valid erofs superblock [ 1398.877401][T12040] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1398.910590][T12040] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.968101][T22559] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1399.538493][ T5832] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1399.567964][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 1399.683070][T12040] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input33 [ 1400.104239][T12040] usb 10-1: USB disconnect, device number 36 [ 1400.110425][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1400.110476][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1400.174876][T12040] xpad 10-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1401.551359][T22608] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1405.823027][T22651] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1407.297263][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1407.304524][ C0] bridge0: topology change detected, propagating [ 1407.657414][ T25] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1407.760130][T22679] tmpfs: Bad value for 'mpol' [ 1407.832747][T22686] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4548'. [ 1407.863211][T22686] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4548'. [ 1407.903434][T22686] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4548'. [ 1407.987365][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 1407.997533][ T25] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1408.006660][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.084436][ T25] usb 1-1: config 0 descriptor?? [ 1408.206964][ T25] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1408.312883][T22663] netlink: 'syz.0.4541': attribute type 1 has an invalid length. [ 1408.425329][T22663] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4541'. [ 1408.862890][T22697] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1409.238087][ T25] gspca_vc032x: reg_w err -110 [ 1409.243269][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1409.252712][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1409.338250][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1409.412800][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1409.474810][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1409.535771][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1409.560523][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1409.580514][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1409.585963][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1409.593011][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1409.647482][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1409.653135][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1409.682805][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1409.735730][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1409.752661][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1409.959809][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1409.965735][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1409.971163][ T25] gspca_vc032x: I2c Bus Busy Wait 00 [ 1409.977568][ T25] gspca_vc032x: Unknown sensor... [ 1409.983303][ T25] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 1411.432157][T22740] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1411.662470][T22744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.670340][T22744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.719578][T22744] bond0: (slave bridge0): Releasing backup interface [ 1411.740792][T22744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1411.748015][T22744] bridge0: port 2(bridge_slave_1) entered listening state [ 1411.755365][T22744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.762549][T22744] bridge0: port 1(bridge_slave_0) entered listening state [ 1411.805623][T22744] bridge0: entered promiscuous mode [ 1411.835496][T22744] team0: Port device bridge0 added [ 1412.027903][T12040] usb 1-1: USB disconnect, device number 44 [ 1413.508626][T22763] tmpfs: Bad value for 'mpol' [ 1414.538076][T22765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4574'. [ 1414.744864][T22777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1415.086266][T22783] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4579'. [ 1416.472927][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1416.472973][ T29] audit: type=1326 audit(1672.997:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22789 comm="syz.2.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cda17ff19 code=0x7ffc0000 [ 1416.501151][ T29] audit: type=1326 audit(1672.997:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22789 comm="syz.2.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f2cda17ff19 code=0x7ffc0000 [ 1416.577788][ T29] audit: type=1326 audit(1672.997:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22789 comm="syz.2.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cda17ff19 code=0x7ffc0000 [ 1416.880117][ T29] audit: type=1326 audit(1672.997:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22789 comm="syz.2.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f2cda17ff19 code=0x7ffc0000 [ 1416.907735][ T29] audit: type=1326 audit(1672.997:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22789 comm="syz.2.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cda17ff19 code=0x7ffc0000 [ 1416.951595][ T29] audit: type=1326 audit(1672.997:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22789 comm="syz.2.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2cda17ff19 code=0x7ffc0000 [ 1417.228923][T22806] netlink: 'syz.5.4587': attribute type 1 has an invalid length. [ 1418.187506][T22806] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1418.242714][T22812] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1418.380711][T22813] batadv2: entered promiscuous mode [ 1418.404318][T22813] batadv2: entered allmulticast mode [ 1418.430571][T22813] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1418.487815][T22813] bond2: (slave batadv2): making interface the new active one [ 1418.535843][T22813] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 1419.272218][T22838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1419.778607][T12040] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1419.987684][T12040] usb 10-1: Using ep0 maxpacket: 16 [ 1420.023121][T12040] usb 10-1: config 8 has an invalid interface number: 206 but max is 0 [ 1420.038620][T12040] usb 10-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.179260][T12040] usb 10-1: config 8 has no interface number 0 [ 1420.188106][T12040] usb 10-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1420.223110][T12040] usb 10-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 1420.238701][T12040] usb 10-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 1420.257859][T12040] usb 10-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0 [ 1420.276901][T12040] usb 10-1: config 8 interface 206 has no altsetting 0 [ 1420.331313][T12040] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1420.341502][T12040] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.350962][T12040] usb 10-1: Product: syz [ 1420.357422][T12040] usb 10-1: Manufacturer: syz [ 1420.363248][T12040] usb 10-1: SerialNumber: syz [ 1420.614318][T22841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.639748][T22841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1421.133984][T12040] garmin_gps 10-1:8.206: Garmin GPS usb/tty converter detected [ 1421.153597][T12040] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 1421.187043][T12040] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 1421.413746][T12040] usb 10-1: USB disconnect, device number 37 [ 1421.421601][T12040] garmin_gps 10-1:8.206: device disconnected [ 1422.455401][T22890] bridge0: port 3(vlan0) entered disabled state [ 1422.461912][T22890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.469179][T22890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.499858][T22891] netlink: 'syz.9.4613': attribute type 10 has an invalid length. [ 1422.518761][T22482] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1422.677643][T22482] usb 3-1: Using ep0 maxpacket: 32 [ 1422.720782][T22482] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1422.745393][T22482] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 160, changing to 11 [ 1422.813044][T22482] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1422.835520][T12040] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1422.858994][T22482] usb 3-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 1422.878010][T22482] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.886566][T22482] usb 3-1: Product: syz [ 1422.902381][T22482] usb 3-1: Manufacturer: syz [ 1422.927385][T22482] usb 3-1: SerialNumber: syz [ 1423.013878][T12040] usb 1-1: Using ep0 maxpacket: 32 [ 1423.110056][T12040] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1423.198252][ T29] audit: type=1326 audit(1680.157:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22897 comm="syz.9.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c7b7ff19 code=0x7ffc0000 [ 1423.317381][ T29] audit: type=1326 audit(1680.157:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22897 comm="syz.9.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fc9c7b7ff19 code=0x7ffc0000 [ 1423.351376][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.524598][ T29] audit: type=1326 audit(1680.157:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22897 comm="syz.9.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c7b7ff19 code=0x7ffc0000 [ 1423.616300][T22882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1423.668500][T12040] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 160, changing to 11 [ 1423.679835][T12040] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1423.952446][ T29] audit: type=1326 audit(1680.167:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22897 comm="syz.9.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fc9c7b7ff19 code=0x7ffc0000 [ 1423.974795][ T29] audit: type=1326 audit(1680.167:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22897 comm="syz.9.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c7b7ff19 code=0x7ffc0000 [ 1423.996822][ T29] audit: type=1326 audit(1680.167:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22897 comm="syz.9.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc9c7b7ff19 code=0x7ffc0000 [ 1424.019151][ T29] audit: type=1326 audit(1680.167:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22897 comm="syz.9.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c7b7ff19 code=0x7ffc0000 [ 1424.043897][ T29] audit: type=1326 audit(1680.167:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22897 comm="syz.9.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fc9c7b7ff19 code=0x7ffc0000 [ 1424.063638][T22908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.074793][ T29] audit: type=1326 audit(1680.167:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22897 comm="syz.9.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c7b7ff19 code=0x7ffc0000 [ 1424.098802][ T29] audit: type=1326 audit(1680.167:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22897 comm="syz.9.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc9c7b7ff19 code=0x7ffc0000 [ 1424.108755][T22908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.737031][T22882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1424.754133][T22882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1424.868746][T22918] netlink: 'syz.9.4619': attribute type 1 has an invalid length. [ 1424.907527][T12040] usb 1-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 1424.925183][T22918] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1424.932124][T12040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.942655][T12040] usb 1-1: Product: syz [ 1424.947055][T12040] usb 1-1: Manufacturer: syz [ 1424.955549][T22482] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input34 [ 1424.967447][ T5180] bcm5974 3-1:1.0: could not read from device [ 1424.976826][T12040] usb 1-1: SerialNumber: syz [ 1425.032556][T22482] usb 3-1: USB disconnect, device number 90 [ 1425.136047][T22925] bond5: (slave veth13): Enslaving as an active interface with a down link [ 1425.158543][T22918] batadv4: entered promiscuous mode [ 1425.164016][T22918] batadv4: entered allmulticast mode [ 1425.171365][T22918] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1425.184273][T22918] bond5: (slave batadv4): making interface the new active one [ 1425.195000][T22918] bond5: (slave batadv4): Enslaving as an active interface with an up link [ 1425.707859][T22939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1425.887103][T22941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.899686][T22941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.188993][T22895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1426.201898][T22895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1426.334154][T12040] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input35 [ 1426.427270][ T5180] bcm5974 1-1:1.0: could not read from device [ 1426.433889][T12040] usb 1-1: USB disconnect, device number 45 [ 1427.138237][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1427.145755][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1428.028698][T22956] erofs (device erofs): cannot find valid erofs superblock [ 1428.829161][T22973] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4634'. [ 1429.847765][T22978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.048377][T22991] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4643'. [ 1433.718588][T23015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4646'. [ 1435.791918][T23034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4653'. [ 1438.547243][T12040] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1438.580070][T23075] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4663'. [ 1438.708619][T12040] usb 6-1: Using ep0 maxpacket: 16 [ 1438.725667][T12040] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.755406][T12040] usb 6-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 1438.773158][T12040] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.839807][T12040] usb 6-1: Product: syz [ 1438.940187][T23080] erofs (device erofs): cannot find valid erofs superblock [ 1438.948001][T12311] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1438.956814][ T5871] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1439.160554][ T5871] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1439.173997][T12311] usb 10-1: Using ep0 maxpacket: 8 [ 1439.193295][T12311] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1439.206600][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.396860][T12311] usb 10-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 1439.493051][T12040] usb 6-1: Manufacturer: syz [ 1439.497818][T12040] usb 6-1: SerialNumber: syz [ 1439.504614][T12040] usb 6-1: config 0 descriptor?? [ 1439.513725][T12040] gspca_main: etoms-2.14.0 probing 102c:6151 [ 1439.584762][ T5871] usb 1-1: Product: syz [ 1439.589078][ T5871] usb 1-1: Manufacturer: syz [ 1439.594279][ T5871] usb 1-1: SerialNumber: syz [ 1439.599421][T12311] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.611446][ T5871] usb 1-1: config 0 descriptor?? [ 1439.620715][T12311] usb 10-1: config 0 descriptor?? [ 1439.715038][T23060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.762477][T19335] udevd[19335]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 1439.779282][T23060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.883966][T12040] usb 6-1: USB disconnect, device number 87 [ 1439.936237][ T5871] usb 1-1: USB disconnect, device number 46 [ 1440.054288][T12311] hid-alps 0003:044E:121E.0022: hidraw0: USB HID v0.00 Device [HID 044e:121e] on usb-dummy_hcd.9-1/input0 [ 1440.311498][ T5871] usb 10-1: USB disconnect, device number 38 [ 1441.026902][ T5871] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1442.325234][ T5871] usb 6-1: Using ep0 maxpacket: 32 [ 1442.334420][ T5871] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1442.342829][ T5871] usb 6-1: config 0 has no interface number 0 [ 1442.367829][ T5871] usb 6-1: config 0 interface 12 has no altsetting 0 [ 1442.376632][ T5871] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1442.411595][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.490445][ T5871] usb 6-1: Product: syz [ 1442.497616][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1442.504898][ C0] bridge0: topology change detected, propagating [ 1442.511383][ T5871] usb 6-1: Manufacturer: syz [ 1442.513103][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1442.516319][ T5871] usb 6-1: SerialNumber: syz [ 1442.523537][ C0] bridge0: topology change detected, propagating [ 1442.934845][ T5871] usb 6-1: config 0 descriptor?? [ 1443.246057][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1443.246075][ T29] audit: type=1326 audit(1700.207:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23097 comm="syz.0.4674" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9c357ff19 code=0x0 [ 1443.272805][ C1] vkms_vblank_simulate: vblank timer overrun [ 1443.352156][T23124] netlink: 'syz.9.4682': attribute type 1 has an invalid length. [ 1444.017938][T23124] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1444.115700][T23128] batadv5: entered promiscuous mode [ 1444.121204][T23128] batadv5: entered allmulticast mode [ 1444.128495][T23128] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1444.138023][T23128] bond6: (slave batadv5): making interface the new active one [ 1444.146924][T23128] bond6: (slave batadv5): Enslaving as an active interface with an up link [ 1444.191246][T23127] batadv6: entered promiscuous mode [ 1444.196559][T23127] batadv6: entered allmulticast mode [ 1444.208296][T23127] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 1444.220748][T23127] bond6: (slave batadv6): Enslaving as an active interface with an up link [ 1444.527825][T23136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4683'. [ 1445.420304][ T5871] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 1445.443777][ T5871] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 1445.457096][T23145] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4686'. [ 1445.467876][T23145] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4686'. [ 1445.484116][T23145] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4686'. [ 1445.504588][ T5871] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1445.534921][ T5871] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 1445.597494][ T5871] usb 6-1: USB disconnect, device number 88 [ 1445.680631][T23154] bridge0: port 4(dummy0) entered disabled state [ 1445.687247][T23154] bridge0: port 3(vlan3) entered disabled state [ 1445.693668][T23154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.700978][T23154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.856324][T23154] bond0: (slave bridge0): Releasing backup interface [ 1445.871416][T23154] team0: Device bridge0 is already an upper device of the team interface [ 1446.422929][T23165] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4693'. [ 1446.605446][T12311] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1447.277254][T12311] usb 3-1: Using ep0 maxpacket: 32 [ 1447.353197][T12311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1447.379218][T12311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1447.398028][T12311] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1447.408000][T12311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.486393][T12311] usb 3-1: config 0 descriptor?? [ 1447.607459][T12311] hub 3-1:0.0: USB hub found [ 1448.013994][T23185] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1448.097969][T12311] hub 3-1:0.0: 1 port detected [ 1448.766364][T12311] hub 3-1:0.0: config failed, can't get hub status (err -5) [ 1448.781819][T12311] usbhid 3-1:0.0: can't add hid device: -71 [ 1448.789813][T12311] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1450.508149][T23209] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4706'. [ 1450.517605][T23209] netlink: 'syz.9.4706': attribute type 3 has an invalid length. [ 1450.942719][T12311] usb 3-1: reset high-speed USB device number 91 using dummy_hcd [ 1450.997560][T12311] usb 3-1: device reset changed ep0 maxpacket size! [ 1451.999076][T12311] usb 3-1: USB disconnect, device number 91 [ 1452.561023][T23224] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4709'. [ 1452.876188][T23232] netlink: 'syz.2.4713': attribute type 1 has an invalid length. [ 1453.164887][T23232] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1453.227718][T12311] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1453.407454][T12311] usb 6-1: Using ep0 maxpacket: 32 [ 1453.887578][T12311] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.899996][T12311] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1454.072753][T23234] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1454.222837][T23238] batadv2: entered promiscuous mode [ 1454.271664][T23238] batadv2: entered allmulticast mode [ 1454.289245][T23238] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1454.308676][T23238] bond2: (slave batadv2): making interface the new active one [ 1454.320919][T23238] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 1455.673951][T12311] usb 6-1: string descriptor 0 read error: -71 [ 1455.680830][T12311] usb 6-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1455.690230][T12311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.755606][T12311] usb 6-1: config 0 descriptor?? [ 1455.765776][T12311] usb 6-1: can't set config #0, error -71 [ 1455.774166][T12311] usb 6-1: USB disconnect, device number 89 [ 1456.291130][T23273] netlink: 4140 bytes leftover after parsing attributes in process `syz.6.4728'. [ 1456.350550][T23273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1456.357881][T23273] IPv6: NLM_F_CREATE should be set when creating new route [ 1456.365167][T23273] IPv6: NLM_F_CREATE should be set when creating new route [ 1458.738956][ T5904] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1458.897328][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 1458.927799][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1458.949639][ T5904] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1458.969095][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.422352][ T5904] usb 1-1: config 0 descriptor?? [ 1459.618877][ T5904] usbhid 1-1:0.0: can't add hid device: -71 [ 1459.639349][ T5904] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1459.709960][ T5904] usb 1-1: USB disconnect, device number 47 [ 1463.320348][T23334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4744'. [ 1463.619904][T23339] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4745'. [ 1463.647330][ T5904] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1463.797346][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 1463.818418][ T5904] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.828924][ T5904] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1463.878089][ T5904] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1463.887546][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.895616][ T5904] usb 1-1: Product: syz [ 1463.934319][ T5904] usb 1-1: Manufacturer: syz [ 1463.950159][ T5904] usb 1-1: SerialNumber: syz [ 1463.972703][ T5904] usb 1-1: config 0 descriptor?? [ 1465.567356][T12040] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1465.815056][T12040] usb 3-1: Using ep0 maxpacket: 16 [ 1465.846971][T12040] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1465.858064][T12040] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1465.867380][T12040] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.895291][T12040] usb 3-1: config 0 descriptor?? [ 1467.266160][T12040] usbhid 3-1:0.0: can't add hid device: -71 [ 1467.283589][T12040] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1467.329227][T12040] usb 3-1: USB disconnect, device number 92 [ 1467.600619][T12311] usb 1-1: USB disconnect, device number 48 [ 1467.662511][T23384] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4757'. [ 1467.742756][T23384] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4757'. [ 1468.232845][T23395] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4760'. [ 1468.887224][T22482] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1469.040106][T22482] usb 3-1: Using ep0 maxpacket: 16 [ 1469.062244][T23404] netlink: 'syz.0.4764': attribute type 1 has an invalid length. [ 1469.071261][T22482] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1469.089258][T22482] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1469.123080][T22482] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1469.142581][T23404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1469.157528][ T5904] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1469.193066][T23409] binder: 23408:23409 ioctl c0306201 0 returned -14 [ 1469.201247][T22482] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1469.211615][T23409] binder: 23408:23409 ioctl ae01 0 returned -22 [ 1469.214305][T23407] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1469.241120][T22482] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.252904][T23404] batadv1: entered promiscuous mode [ 1469.259018][T23404] batadv1: entered allmulticast mode [ 1469.267613][T23404] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1469.276474][T23404] bond1: (slave batadv1): making interface the new active one [ 1469.285620][T23404] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1469.296330][T22482] usb 3-1: config 0 descriptor?? [ 1469.317348][ T5904] usb 10-1: Using ep0 maxpacket: 32 [ 1469.329016][ T5904] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1469.353991][ T5904] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1469.363702][ T5904] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1469.394125][ T5904] usb 10-1: Product: syz [ 1469.398982][ T5904] usb 10-1: Manufacturer: syz [ 1469.403710][ T5904] usb 10-1: SerialNumber: syz [ 1469.418945][ T5904] usb 10-1: config 0 descriptor?? [ 1469.426070][T23401] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1469.684308][T15446] usb 10-1: USB disconnect, device number 39 [ 1469.848963][T22482] koneplus 0003:1E7D:2E22.0023: unknown main item tag 0x0 [ 1470.038173][T22482] koneplus 0003:1E7D:2E22.0023: unknown main item tag 0x0 [ 1470.049975][T23378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.060752][T22482] koneplus 0003:1E7D:2E22.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0 [ 1470.101753][T23378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.110673][T22482] koneplus 0003:1E7D:2E22.0023: couldn't init struct koneplus_device [ 1470.118831][T22482] koneplus 0003:1E7D:2E22.0023: couldn't install mouse [ 1470.140515][T22482] koneplus 0003:1E7D:2E22.0023: probe with driver koneplus failed with error -71 [ 1470.149988][ T119] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1470.172499][T22482] usb 3-1: USB disconnect, device number 93 [ 1470.388727][ T119] usb 10-1: Using ep0 maxpacket: 32 [ 1470.414595][ T119] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1470.722620][ T119] usb 10-1: string descriptor 0 read error: -22 [ 1470.818455][ T119] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1470.847768][ T119] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1470.871938][ T119] usb 10-1: config 0 descriptor?? [ 1470.906610][T23401] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1472.645873][T23442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4773'. [ 1472.700170][T12311] usb 10-1: USB disconnect, device number 40 [ 1473.941632][T12311] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1474.062309][T23463] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4780'. [ 1474.098940][T12311] usb 1-1: config 0 has an invalid interface number: 52 but max is 2 [ 1474.117294][T12311] usb 1-1: config 0 has an invalid descriptor of length 57, skipping remainder of the config [ 1474.145420][T12311] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1474.182525][T12311] usb 1-1: config 0 has no interface number 0 [ 1474.204746][ T25] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1474.229393][T12311] usb 1-1: too many endpoints for config 0 interface 52 altsetting 52: 48, using maximum allowed: 30 [ 1474.277413][T12311] usb 1-1: config 0 interface 52 altsetting 52 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1474.301949][T12311] usb 1-1: config 0 interface 52 has no altsetting 0 [ 1474.310182][T12311] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1474.331389][T12311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.377661][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 1474.408490][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1474.460279][ T25] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 160, changing to 11 [ 1474.652239][ T25] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1474.662599][T12311] usb 1-1: config 0 descriptor?? [ 1474.707420][ T25] usb 6-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 1474.919393][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.928062][ T25] usb 6-1: Product: syz [ 1475.844960][ T25] usb 6-1: Manufacturer: syz [ 1475.849827][ T25] usb 6-1: SerialNumber: syz [ 1475.968160][T12311] usb 1-1: string descriptor 0 read error: -71 [ 1476.047811][T12311] usb 1-1: USB disconnect, device number 49 [ 1476.208181][T23476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.255797][T23476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.275760][T23476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1476.341875][T23459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1476.376771][ T25] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input36 [ 1476.413204][ T25] usb 6-1: USB disconnect, device number 90 [ 1476.700355][T23469] Bluetooth: hci2: command 0x0406 tx timeout [ 1477.950623][T22482] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1478.307452][T22482] usb 1-1: Using ep0 maxpacket: 32 [ 1478.328401][T22482] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1478.382813][T22482] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1478.454099][T22482] usb 1-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 1479.438959][T22482] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.459143][T22482] usb 1-1: config 0 descriptor?? [ 1479.795396][T23516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4797'. [ 1479.885656][T23491] tmpfs: Bad value for 'mpol' [ 1480.170858][T22482] wacom 0003:056A:00F0.0024: unknown main item tag 0x0 [ 1480.213677][T22482] wacom 0003:056A:00F0.0024: hidraw0: USB HID v0.00 Device [HID 056a:00f0] on usb-dummy_hcd.0-1/input0 [ 1480.217563][T23526] x_tables: ip6_tables: HL target: only valid in mangle table, not /dev/snd/pcmC#D#c [ 1480.395958][T22482] usb 1-1: USB disconnect, device number 50 [ 1482.209218][T23558] erofs (device erofs): cannot find valid erofs superblock [ 1483.430401][T23563] vlan3: entered allmulticast mode [ 1483.435756][T23563] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 1483.445855][T23564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4810'. [ 1483.964698][T23563] netdevsim netdevsim9 netdevsim0: left allmulticast mode [ 1483.972504][ T25] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1484.187643][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 1484.288117][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1484.435586][ T25] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1484.556360][ T25] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1484.610468][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.356259][ T25] usb 1-1: Product: syz [ 1485.360615][ T25] usb 1-1: Manufacturer: syz [ 1485.365762][ T25] usb 1-1: SerialNumber: syz [ 1485.393016][ T25] usb 1-1: config 0 descriptor?? [ 1485.408535][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.648108][T23470] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1486.017870][T23470] usb 6-1: Using ep0 maxpacket: 16 [ 1486.031506][ T25] usb 1-1: can't set config #0, error -71 [ 1486.039396][ T25] usb 1-1: USB disconnect, device number 51 [ 1486.046909][T23470] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1486.128174][T23470] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1486.445895][T23470] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.562878][T23470] usb 6-1: config 0 descriptor?? [ 1488.375772][T23470] usbhid 6-1:0.0: can't add hid device: -71 [ 1488.383994][T23470] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1489.668511][T23470] usb 6-1: USB disconnect, device number 91 [ 1490.666350][T23628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4829'. [ 1490.987369][T17808] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1491.658284][T17808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1491.669661][T17808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1492.642850][T17808] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1492.652227][T17808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.233081][T17808] usb 3-1: config 0 descriptor?? [ 1493.327780][T17808] usbhid 3-1:0.0: can't add hid device: -71 [ 1493.335586][T17808] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1493.415467][T17808] usb 3-1: USB disconnect, device number 94 [ 1493.430527][T15446] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1494.328621][T15446] usb 6-1: Using ep0 maxpacket: 32 [ 1494.341375][T15446] usb 6-1: config 0 has an invalid interface number: 223 but max is 0 [ 1494.378988][T15446] usb 6-1: config 0 has no interface number 0 [ 1494.406279][T15446] usb 6-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=10.fe [ 1494.415967][T15446] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.437634][T15446] usb 6-1: Product: syz [ 1494.441998][T15446] usb 6-1: Manufacturer: syz [ 1494.512557][T15446] usb 6-1: SerialNumber: syz [ 1494.622036][T15446] usb 6-1: config 0 descriptor?? [ 1494.753034][T23668] netlink: 'syz.9.4842': attribute type 12 has an invalid length. [ 1494.796619][T23667] netlink: 'syz.9.4842': attribute type 12 has an invalid length. [ 1494.886367][T15446] usb 6-1: USB disconnect, device number 92 [ 1495.364726][T23688] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4847'. [ 1496.343002][T23694] FAULT_INJECTION: forcing a failure. [ 1496.343002][T23694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1496.550691][T23694] CPU: 0 UID: 0 PID: 23694 Comm: syz.9.4849 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1496.561508][T23694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1496.571589][T23694] Call Trace: [ 1496.574884][T23694] [ 1496.577839][T23694] dump_stack_lvl+0x241/0x360 [ 1496.582552][T23694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1496.587777][T23694] ? __pfx__printk+0x10/0x10 [ 1496.592373][T23694] ? __pfx_lock_release+0x10/0x10 [ 1496.597403][T23694] ? rcu_is_watching+0x15/0xb0 [ 1496.602181][T23694] should_fail_ex+0x3b0/0x4e0 [ 1496.606865][T23694] _copy_from_iter+0x1e9/0x1c20 [ 1496.611732][T23694] ? alloc_pages_mpol_noprof+0x417/0x680 [ 1496.617371][T23694] ? __pfx__copy_from_iter+0x10/0x10 [ 1496.622656][T23694] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1496.628639][T23694] ? alloc_pages_noprof+0xef/0x170 [ 1496.633752][T23694] ? page_copy_sane+0x46/0x260 [ 1496.638520][T23694] copy_page_from_iter+0x7a/0x100 [ 1496.643548][T23694] tun_get_user+0x203c/0x4890 [ 1496.648235][T23694] ? tun_get_user+0x86e/0x4890 [ 1496.652999][T23694] ? __lock_acquire+0x1397/0x2100 [ 1496.658023][T23694] ? __pfx_tun_get_user+0x10/0x10 [ 1496.663057][T23694] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1496.668513][T23694] ? tun_get+0x1e/0x2f0 [ 1496.672667][T23694] ? __pfx_lock_release+0x10/0x10 [ 1496.677707][T23694] ? tun_get+0x1e/0x2f0 [ 1496.681862][T23694] ? tun_get+0x27d/0x2f0 [ 1496.686128][T23694] tun_chr_write_iter+0x10d/0x1f0 [ 1496.691178][T23694] vfs_write+0xaeb/0xd30 [ 1496.695433][T23694] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1496.700990][T23694] ? __pfx_vfs_write+0x10/0x10 [ 1496.705763][T23694] ? __fget_files+0x2a/0x410 [ 1496.710391][T23694] ? __fget_files+0x2a/0x410 [ 1496.714995][T23694] ksys_write+0x18f/0x2b0 [ 1496.719349][T23694] ? __pfx_ksys_write+0x10/0x10 [ 1496.724207][T23694] ? do_syscall_64+0x100/0x230 [ 1496.728981][T23694] ? do_syscall_64+0xb6/0x230 [ 1496.733682][T23694] do_syscall_64+0xf3/0x230 [ 1496.738203][T23694] ? clear_bhb_loop+0x35/0x90 [ 1496.742929][T23694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.748842][T23694] RIP: 0033:0x7fc9c7b7e9cf [ 1496.753263][T23694] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1496.772882][T23694] RSP: 002b:00007fc9c8931020 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1496.781306][T23694] RAX: ffffffffffffffda RBX: 00007fc9c7d45fa0 RCX: 00007fc9c7b7e9cf [ 1496.789275][T23694] RDX: 000000000000004a RSI: 00000000200001c0 RDI: 00000000000000c8 [ 1496.797249][T23694] RBP: 00007fc9c89310a0 R08: 0000000000000000 R09: 0000000000000000 [ 1496.805224][T23694] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 1496.813192][T23694] R13: 0000000000000000 R14: 00007fc9c7d45fa0 R15: 00007ffc551b68d8 [ 1496.821190][T23694] [ 1496.824287][ C0] vkms_vblank_simulate: vblank timer overrun [ 1497.134628][T23709] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4855'. [ 1497.144909][T23709] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4855'. [ 1497.158572][T23709] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4855'. [ 1497.252661][T23712] ptrace attach of "./syz-executor exec"[21727] was attempted by "./syz-executor exec"[23712] [ 1497.409251][T15446] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1497.668460][T15446] usb 3-1: Using ep0 maxpacket: 16 [ 1497.677812][T15446] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 1497.694710][T15446] usb 3-1: config 0 has no interface number 0 [ 1497.714551][T15446] usb 3-1: New USB device found, idVendor=2040, idProduct=b210, bcdDevice=8c.81 [ 1497.736560][T15446] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.751408][T15446] usb 3-1: Product: syz [ 1497.762278][T15446] usb 3-1: Manufacturer: syz [ 1497.773687][T23719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1497.777252][T15446] usb 3-1: SerialNumber: syz [ 1497.794322][T23719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1497.798190][T15446] usb 3-1: config 0 descriptor?? [ 1497.947311][T17808] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1498.247397][T17808] usb 6-1: device descriptor read/64, error -71 [ 1498.323427][T23730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4857'. [ 1498.587626][T17808] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1498.858945][T17808] usb 6-1: device descriptor read/64, error -71 [ 1498.967658][T17808] usb usb6-port1: attempt power cycle [ 1499.213936][T15446] dvb-usb: found a 'Hauppauge ATSC MiniCard (B210)' in cold state, will try to load a firmware [ 1499.457404][T17808] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1499.505721][T17808] usb 6-1: device descriptor read/8, error -71 [ 1499.758405][T17808] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1499.890654][T17808] usb 6-1: device descriptor read/8, error -71 [ 1500.020464][T17808] usb usb6-port1: unable to enumerate USB device [ 1500.020572][T15446] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1500.057295][T15446] dib0700: firmware download failed at 7 with -22 [ 1500.086800][T15446] usb 3-1: USB disconnect, device number 95 [ 1500.113168][ T5904] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1500.277413][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 1500.316277][ T5904] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1500.339118][ T5904] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 160, changing to 11 [ 1500.517332][ T5904] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1500.576832][ T5904] usb 1-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 1500.586427][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.600346][ T5904] usb 1-1: Product: syz [ 1500.607658][ T5904] usb 1-1: Manufacturer: syz [ 1500.612488][ T5904] usb 1-1: SerialNumber: syz [ 1501.103910][T23766] (unnamed net_device) (uninitialized): option mode: invalid value (68) [ 1501.299584][T23742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1501.324455][ T5904] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input40 [ 1501.371247][ T5904] usb 1-1: USB disconnect, device number 52 [ 1501.459801][T17808] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 1501.472688][T17808] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1501.681156][ T62] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1501.798257][ T7306] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1501.946733][ T7306] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1504.227057][T23820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1505.151953][T23830] erofs (device erofs): cannot find valid erofs superblock [ 1505.688792][T23832] IPv4: Oversized IP packet from 172.20.20.24 [ 1505.699582][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1505.706453][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1507.378670][ T25] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1507.537611][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 1507.557916][ T25] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1507.680545][ T25] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1507.861008][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1507.869195][ T5904] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 1507.915720][T23862] netlink: 'syz.0.4898': attribute type 10 has an invalid length. [ 1507.919750][ T5904] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1507.953476][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1508.045340][T23863] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4896'. [ 1508.101426][ T25] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1508.237858][ T25] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1508.247082][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.350056][ T5904] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1508.507313][ T5904] usb 10-1: device descriptor read/64, error -71 [ 1508.849527][ T5904] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1509.249536][ T25] usb 3-1: usb_control_msg returned -32 [ 1509.255204][ T25] usbtmc 3-1:16.0: can't read capabilities [ 1509.297408][ T5904] usb 10-1: device descriptor read/64, error -71 [ 1509.424351][ T5904] usb usb10-port1: attempt power cycle [ 1509.440302][T17808] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1509.449453][T17808] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1509.473331][T17808] hid-generic 0000:0000:0000.0026: hidraw1: HID v0.00 Device [syz0] on syz1 [ 1510.249777][T23888] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 1510.272194][T23840] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1510.448838][T17808] usb 3-1: USB disconnect, device number 96 [ 1510.467305][ T5904] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1510.647389][T22482] usb 6-1: new full-speed USB device number 97 using dummy_hcd [ 1510.687440][ T5904] usb 10-1: device not accepting address 43, error -71 [ 1510.777505][T22482] usb 6-1: device descriptor read/64, error -71 [ 1511.377329][T23906] erofs (device erofs): cannot find valid erofs superblock [ 1511.647269][T22482] usb 6-1: new full-speed USB device number 98 using dummy_hcd [ 1511.757538][T23910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4910'. [ 1511.767791][T23910] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4910'. [ 1511.779404][T23910] xt_hashlimit: Unknown mode mask EB0D38F6, kernel too old? [ 1511.827542][T22482] usb 6-1: device descriptor read/64, error -71 [ 1511.940089][T22482] usb usb6-port1: attempt power cycle [ 1512.277591][T22482] usb 6-1: new full-speed USB device number 99 using dummy_hcd [ 1512.318052][T22482] usb 6-1: device descriptor read/8, error -71 [ 1512.357389][ T5904] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1512.523838][ T5904] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1512.541499][ T5904] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1512.566369][T22482] usb 6-1: new full-speed USB device number 100 using dummy_hcd [ 1512.590792][ T5904] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1512.635669][ T5904] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1512.645307][ T5904] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.671079][T22482] usb 6-1: device descriptor read/8, error -71 [ 1512.705738][ T5904] usb 10-1: config 0 descriptor?? [ 1512.803486][T22482] usb usb6-port1: unable to enumerate USB device [ 1513.273350][ T5904] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 1513.284733][ T5904] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1514.961890][T12311] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 1515.019119][T12311] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 1515.119130][T23941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4919'. [ 1515.211321][T12311] hid-generic 0000:0000:0000.0028: hidraw1: HID v0.00 Device [syz0] on syz1 [ 1515.384038][T23945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4921'. [ 1515.506266][T23945] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 1516.185214][ T119] usb 10-1: USB disconnect, device number 45 [ 1517.031636][T23976] ptrace attach of "./syz-executor exec"[17588] was attempted by "./syz-executor exec"[23976] [ 1517.578543][T23980] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4933'. [ 1517.717489][T23980] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4933'. [ 1517.785533][T23992] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4933'. [ 1518.010104][ T5904] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 1518.027302][ T5904] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 1518.122325][ T5904] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1518.812580][T23997] erofs (device erofs): cannot find valid erofs superblock [ 1520.012610][T24021] erofs (device erofs): cannot find valid erofs superblock [ 1520.734827][T24027] ptrace attach of "./syz-executor exec"[21727] was attempted by "./syz-executor exec"[24027] [ 1520.896346][ T119] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1521.158139][ T119] usb 3-1: Using ep0 maxpacket: 8 [ 1521.265012][ T119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1521.594264][ T119] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1521.635146][ T119] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 1521.644395][ T119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.788608][ T119] usb 3-1: config 0 descriptor?? [ 1522.243257][T24024] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.4944'. [ 1522.558278][T24024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1522.866358][ T119] waltop 0003:172F:0037.002A: unknown main item tag 0xd [ 1522.874238][ T119] waltop 0003:172F:0037.002A: unknown main item tag 0x1 [ 1522.887509][ T119] waltop 0003:172F:0037.002A: item fetching failed at offset 25/69 [ 1522.906160][ T119] waltop 0003:172F:0037.002A: probe with driver waltop failed with error -22 [ 1522.915262][T24048] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4953'. [ 1523.092929][ T119] usb 3-1: USB disconnect, device number 97 [ 1523.158660][T24062] netlink: 'syz.0.4958': attribute type 10 has an invalid length. [ 1524.302481][T24078] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4965'. [ 1524.311750][T24078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4965'. [ 1524.322117][T24078] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4965'. [ 1525.029773][ T119] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1525.177977][T24098] block nbd2: NBD_DISCONNECT [ 1525.183234][T24098] block nbd2: Disconnected due to user request. [ 1525.192264][T24098] block nbd2: shutting down sockets [ 1525.297601][ T119] usb 6-1: Using ep0 maxpacket: 32 [ 1525.305286][ T119] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1525.314673][ T119] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 160, changing to 11 [ 1525.328571][ T119] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1525.341140][ T119] usb 6-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 1525.358368][T24085] bridge0: port 2(vlan0) entered blocking state [ 1525.364721][T24085] bridge0: port 2(vlan0) entered disabled state [ 1525.397585][ T119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.406511][T24085] vlan0: entered allmulticast mode [ 1525.481983][ T119] usb 6-1: Product: syz [ 1525.484222][T24085] dummy0: entered allmulticast mode [ 1525.486179][ T119] usb 6-1: Manufacturer: syz [ 1525.486206][ T119] usb 6-1: SerialNumber: syz [ 1525.955461][T24085] vlan0: entered promiscuous mode [ 1526.156051][T24103] erofs (device erofs): cannot find valid erofs superblock [ 1526.160616][T24085] dummy0: entered promiscuous mode [ 1526.462639][ T119] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input42 [ 1526.527095][ T5180] bcm5974 6-1:1.0: could not read from device [ 1526.547340][ T5904] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1526.580071][ T119] usb 6-1: USB disconnect, device number 101 [ 1526.706134][T24117] erofs (device erofs): cannot find valid erofs superblock [ 1526.783437][ T5180] bcm5974 6-1:1.0: could not read from device [ 1527.162578][ T5180] bcm5974 6-1:1.0: could not read from device [ 1527.327996][ T5904] usb 3-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 1527.337094][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.378632][ T5904] usb 3-1: config 0 descriptor?? [ 1527.398698][ T5904] gspca_main: spca505-2.14.0 probing 0733:0430 [ 1527.902770][T24131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4978'. [ 1528.554880][ T5904] gspca_spca505: reg write: error -71 [ 1528.560478][ T5904] spca505 3-1:0.0: probe with driver spca505 failed with error -5 [ 1528.580494][ T5904] usb 3-1: USB disconnect, device number 98 [ 1530.101162][T15446] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1530.329086][T15446] usb 1-1: Using ep0 maxpacket: 32 [ 1530.514981][T15446] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1530.739672][T15446] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 160, changing to 11 [ 1530.770812][T24173] pim6reg: entered allmulticast mode [ 1530.791042][T15446] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1530.837400][T24174] pim6reg: left allmulticast mode [ 1530.950982][T15446] usb 1-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 1530.960415][T15446] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.969127][T15446] usb 1-1: Product: syz [ 1530.973519][T15446] usb 1-1: Manufacturer: syz [ 1530.978356][T15446] usb 1-1: SerialNumber: syz [ 1532.128939][T15446] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input43 [ 1532.150113][T23469] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1532.164168][T23469] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1532.182562][T23469] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1532.209741][T23469] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1532.226139][T23469] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1532.233677][T23469] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1532.274214][ T5180] bcm5974 1-1:1.0: could not read from device [ 1532.358656][T15446] usb 1-1: USB disconnect, device number 53 [ 1532.413424][T24192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5002'. [ 1532.518473][T24197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5003'. [ 1532.601281][T24196] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5001'. [ 1532.637942][T24199] FAULT_INJECTION: forcing a failure. [ 1532.637942][T24199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1532.669087][T24200] netlink: 80 bytes leftover after parsing attributes in process `syz.6.5001'. [ 1532.669712][T24196] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5001'. [ 1532.695806][T24199] CPU: 1 UID: 0 PID: 24199 Comm: syz.2.5004 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1532.706618][T24199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1532.716703][T24199] Call Trace: [ 1532.720006][T24199] [ 1532.722953][T24199] dump_stack_lvl+0x241/0x360 [ 1532.727660][T24199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1532.732869][T24199] ? __pfx__printk+0x10/0x10 [ 1532.737457][T24199] ? __pfx_lock_release+0x10/0x10 [ 1532.742487][T24199] should_fail_ex+0x3b0/0x4e0 [ 1532.747174][T24199] _copy_from_user+0x2f/0xc0 [ 1532.751773][T24199] do_sock_getsockopt+0x1d1/0x7e0 [ 1532.756806][T24199] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1532.762353][T24199] ? __fget_files+0x2a/0x410 [ 1532.766945][T24199] ? __fget_files+0x395/0x410 [ 1532.771615][T24199] ? __fget_files+0x2a/0x410 [ 1532.776203][T24199] __x64_sys_getsockopt+0x2a1/0x370 [ 1532.781448][T24199] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 1532.787180][T24199] ? do_syscall_64+0x100/0x230 [ 1532.791960][T24199] ? do_syscall_64+0xb6/0x230 [ 1532.796732][T24199] do_syscall_64+0xf3/0x230 [ 1532.801241][T24199] ? clear_bhb_loop+0x35/0x90 [ 1532.805921][T24199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.812076][T24199] RIP: 0033:0x7f2cda17ff19 [ 1532.816491][T24199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1532.836106][T24199] RSP: 002b:00007f2cdafee058 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1532.844530][T24199] RAX: ffffffffffffffda RBX: 00007f2cda345fa0 RCX: 00007f2cda17ff19 [ 1532.852498][T24199] RDX: 0000000000000085 RSI: 0000000000000084 RDI: 0000000000000004 [ 1532.860469][T24199] RBP: 00007f2cdafee0a0 R08: 00000000200000c0 R09: 0000000000000000 [ 1532.868439][T24199] R10: 0000000020002380 R11: 0000000000000246 R12: 0000000000000001 [ 1532.876407][T24199] R13: 0000000000000000 R14: 00007f2cda345fa0 R15: 00007fff9f37afd8 [ 1532.884395][T24199] [ 1533.324287][T24185] chnl_net:caif_netlink_parms(): no params data found [ 1533.328734][ T5871] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 1533.350034][ T5871] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 1533.420060][ T5871] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1534.516164][T15837] Bluetooth: hci4: command tx timeout [ 1535.190831][T24185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1535.207657][T24185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.225511][T24185] bridge_slave_0: entered allmulticast mode [ 1535.247432][T24185] bridge_slave_0: entered promiscuous mode [ 1535.289510][T24185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1535.325251][T24185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.346132][T24185] bridge_slave_1: entered allmulticast mode [ 1535.367749][T24185] bridge_slave_1: entered promiscuous mode [ 1535.515926][T24185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1535.568990][T24185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1535.578495][T23470] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1535.757472][T23470] usb 3-1: Using ep0 maxpacket: 32 [ 1535.774005][T23470] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1535.832119][T23470] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 160, changing to 11 [ 1535.932184][T23470] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1535.980116][T23470] usb 3-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 1536.038432][T23470] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.096632][ T25] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 1536.105389][T23470] usb 3-1: Product: syz [ 1536.110436][ T25] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 1536.118808][T23470] usb 3-1: Manufacturer: syz [ 1536.123744][T23470] usb 3-1: SerialNumber: syz [ 1536.229263][ T25] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1536.309261][T24185] team0: Port device team_slave_0 added [ 1536.361266][T24185] team0: Port device team_slave_1 added [ 1536.432888][T24185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1536.435610][T23470] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input44 [ 1536.469018][ T5180] bcm5974 3-1:1.0: could not read from device [ 1536.474613][T24256] futex_wake_op: syz.6.5021 tries to shift op by 144; fix this program [ 1536.485068][T24185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1536.581511][T24185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1536.633100][T15837] Bluetooth: hci4: command 0x041b tx timeout [ 1536.649687][T24185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1536.656757][T24185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1536.725529][T23470] usb 3-1: USB disconnect, device number 99 [ 1536.753399][T24185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1537.687679][T24185] hsr_slave_0: entered promiscuous mode [ 1537.694962][T24185] hsr_slave_1: entered promiscuous mode [ 1537.705947][T24185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1537.716816][T24185] Cannot create hsr debugfs directory [ 1538.725894][T23469] Bluetooth: hci4: command 0x041b tx timeout [ 1538.727740][T24288] FAULT_INJECTION: forcing a failure. [ 1538.727740][T24288] name failslab, interval 1, probability 0, space 0, times 0 [ 1538.751599][T23470] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1538.819142][T24288] CPU: 0 UID: 0 PID: 24288 Comm: syz.6.5034 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1538.829972][T24288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1538.840067][T24288] Call Trace: [ 1538.843362][T24288] [ 1538.846304][T24288] dump_stack_lvl+0x241/0x360 [ 1538.851025][T24288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1538.856264][T24288] ? __pfx__printk+0x10/0x10 [ 1538.860896][T24288] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 1538.866911][T24288] ? __pfx___might_resched+0x10/0x10 [ 1538.872246][T24288] should_fail_ex+0x3b0/0x4e0 [ 1538.876975][T24288] should_failslab+0xac/0x100 [ 1538.881707][T24288] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1538.887551][T24288] ? __alloc_skb+0x1c3/0x440 [ 1538.892179][T24288] __alloc_skb+0x1c3/0x440 [ 1538.896649][T24288] ? __pfx___alloc_skb+0x10/0x10 [ 1538.901641][T24288] ppp_write+0xb1/0x3e0 [ 1538.905842][T24288] ? vfs_write+0x28b/0xd30 [ 1538.910296][T24288] ? __pfx_ppp_write+0x10/0x10 [ 1538.910360][T24185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1538.915071][T24288] vfs_write+0x2a3/0xd30 [ 1538.925924][T24288] ? __pfx_vfs_write+0x10/0x10 [ 1538.930729][T24288] ? __fget_files+0x2a/0x410 [ 1538.934212][T24185] 8021q: adding VLAN 0 to HW filter on device team0 [ 1538.935333][T24288] ? __fget_files+0x395/0x410 [ 1538.946614][T24288] ? __fget_files+0x2a/0x410 [ 1538.951256][T24288] ksys_write+0x18f/0x2b0 [ 1538.955640][T24288] ? __pfx_ksys_write+0x10/0x10 [ 1538.960530][T24288] ? do_syscall_64+0x100/0x230 [ 1538.965337][T24288] ? do_syscall_64+0xb6/0x230 [ 1538.969944][T24185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1538.970039][T24288] do_syscall_64+0xf3/0x230 [ 1538.980650][T24185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1538.984837][T24288] ? clear_bhb_loop+0x35/0x90 [ 1538.999891][T24288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1539.005821][T24288] RIP: 0033:0x7fa67377ff19 [ 1539.010242][T24288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1539.029856][T24288] RSP: 002b:00007fa67457f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1539.038277][T24288] RAX: ffffffffffffffda RBX: 00007fa673945fa0 RCX: 00007fa67377ff19 [ 1539.046245][T24288] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000003 [ 1539.054212][T24288] RBP: 00007fa67457f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1539.062180][T24288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1539.070149][T24288] R13: 0000000000000000 R14: 00007fa673945fa0 R15: 00007fffccc28d98 [ 1539.078128][T24288] [ 1539.123982][ T7306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.131164][ T7306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1539.150616][ T7306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.157824][ T7306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1539.537626][T23470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1539.547718][T23470] usb 1-1: New USB device found, idVendor=04d5, idProduct=0001, bcdDevice= 0.00 [ 1539.557405][T23470] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.574838][T23470] usb 1-1: config 0 descriptor?? [ 1539.593858][T23470] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1539.662547][T24304] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5037'. [ 1539.838644][ T25] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1540.157765][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 1540.235108][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1540.284096][ T25] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 160, changing to 11 [ 1540.376602][ T25] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1540.396800][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 1540.429002][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.461595][T24185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1540.484148][ T25] usb 3-1: Product: syz [ 1540.510650][ T25] usb 3-1: Manufacturer: syz [ 1540.515305][ T25] usb 3-1: SerialNumber: syz [ 1541.577385][T23469] Bluetooth: hci4: command 0x041b tx timeout [ 1542.054677][T24320] netlink: 'syz.5.5040': attribute type 1 has an invalid length. [ 1542.098670][T24320] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1542.111643][ T25] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input45 [ 1542.150058][ T5180] bcm5974 3-1:1.0: could not read from device [ 1542.163643][ T5180] bcm5974 3-1:1.0: could not read from device [ 1542.183178][T15446] usb 1-1: USB disconnect, device number 54 [ 1542.197657][ T25] usb 3-1: USB disconnect, device number 100 [ 1542.210523][T24325] FAULT_INJECTION: forcing a failure. [ 1542.210523][T24325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1542.249706][ T5180] bcm5974 3-1:1.0: could not read from device [ 1542.260125][T24325] CPU: 0 UID: 0 PID: 24325 Comm: syz.6.5041 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1542.270933][T24325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1542.281014][T24325] Call Trace: [ 1542.284310][T24325] [ 1542.284403][T24322] bond3: (slave veth7): Enslaving as an active interface with a down link [ 1542.287237][T24325] dump_stack_lvl+0x241/0x360 [ 1542.287271][T24325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1542.287295][T24325] ? __pfx__printk+0x10/0x10 [ 1542.310191][T24325] ? __pfx_lock_release+0x10/0x10 [ 1542.310230][T24325] should_fail_ex+0x3b0/0x4e0 [ 1542.319934][T24325] _copy_from_user+0x2f/0xc0 [ 1542.324561][T24325] sctp_getsockopt_probe_interval+0xdd/0x6a0 [ 1542.330569][T24325] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1542.336585][T24325] ? __pfx_sctp_getsockopt_probe_interval+0x10/0x10 [ 1542.343213][T24325] ? sctp_getsockopt+0x13a/0xbb0 [ 1542.348170][T24325] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1542.353926][T24325] sctp_getsockopt+0x7b3/0xbb0 [ 1542.358722][T24325] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1542.364647][T24325] do_sock_getsockopt+0x3c4/0x7e0 [ 1542.369704][T24325] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1542.375269][T24325] ? __fget_files+0x2a/0x410 [ 1542.379887][T24325] ? __fget_files+0x395/0x410 [ 1542.384592][T24325] ? __fget_files+0x2a/0x410 [ 1542.389229][T24325] __x64_sys_getsockopt+0x2a1/0x370 [ 1542.394471][T24325] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 1542.400218][T24325] ? do_syscall_64+0x100/0x230 [ 1542.405016][T24325] ? do_syscall_64+0xb6/0x230 [ 1542.409727][T24325] do_syscall_64+0xf3/0x230 [ 1542.414256][T24325] ? clear_bhb_loop+0x35/0x90 [ 1542.418964][T24325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.424881][T24325] RIP: 0033:0x7fa67377ff19 [ 1542.429314][T24325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1542.446308][T24320] batadv3: entered promiscuous mode [ 1542.448921][T24325] RSP: 002b:00007fa67457f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1542.448958][T24325] RAX: ffffffffffffffda RBX: 00007fa673945fa0 RCX: 00007fa67377ff19 [ 1542.448972][T24325] RDX: 0000000000000085 RSI: 0000000000000084 RDI: 0000000000000004 [ 1542.448984][T24325] RBP: 00007fa67457f0a0 R08: 00000000200000c0 R09: 0000000000000000 [ 1542.448998][T24325] R10: 0000000020002380 R11: 0000000000000246 R12: 0000000000000001 [ 1542.449011][T24325] R13: 0000000000000000 R14: 00007fa673945fa0 R15: 00007fffccc28d98 [ 1542.455305][T24320] batadv3: entered allmulticast mode [ 1542.462604][T24325] [ 1542.462697][ C0] vkms_vblank_simulate: vblank timer overrun [ 1542.594340][T24329] netlink: 332 bytes leftover after parsing attributes in process `syz.0.5042'. [ 1542.605566][T24320] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1542.622426][T24320] bond3: (slave batadv3): making interface the new active one [ 1542.649646][T24320] bond3: (slave batadv3): Enslaving as an active interface with an up link [ 1542.657413][T24332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5042'. [ 1542.868097][T24185] veth0_vlan: entered promiscuous mode [ 1542.919374][T24185] veth1_vlan: entered promiscuous mode [ 1543.001600][T24185] veth0_macvtap: entered promiscuous mode [ 1543.035552][T24185] veth1_macvtap: entered promiscuous mode [ 1544.081724][T24185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1544.096606][T24185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.305022][T24357] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5048'. [ 1544.368210][T24185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1544.470398][T23469] Bluetooth: hci4: command 0x041b tx timeout [ 1544.476554][T24185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.538757][T24185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1544.594087][T24185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.670422][T24185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1544.919684][T24364] FAULT_INJECTION: forcing a failure. [ 1544.919684][T24364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1544.990839][T24185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.113253][T24185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.123913][T24364] CPU: 0 UID: 0 PID: 24364 Comm: syz.6.5050 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1545.123944][T24364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1545.123956][T24364] Call Trace: [ 1545.123964][T24364] [ 1545.123972][T24364] dump_stack_lvl+0x241/0x360 [ 1545.124005][T24364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1545.124028][T24364] ? __pfx__printk+0x10/0x10 [ 1545.124054][T24364] ? __pfx_lock_release+0x10/0x10 [ 1545.124083][T24364] should_fail_ex+0x3b0/0x4e0 [ 1545.124115][T24364] _copy_from_iter+0x1e9/0x1c20 [ 1545.124138][T24364] ? __virt_addr_valid+0x183/0x530 [ 1545.124170][T24364] ? __alloc_skb+0x28f/0x440 [ 1545.124189][T24364] ? __pfx__copy_from_iter+0x10/0x10 [ 1545.124214][T24364] ? __virt_addr_valid+0x183/0x530 [ 1545.124235][T24364] ? __virt_addr_valid+0x183/0x530 [ 1545.124254][T24364] ? __virt_addr_valid+0x45f/0x530 [ 1545.124276][T24364] ? __phys_addr_symbol+0x2f/0x70 [ 1545.124296][T24364] ? __check_object_size+0x47a/0x730 [ 1545.124326][T24364] netlink_sendmsg+0x73d/0xcb0 [ 1545.124357][T24364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1545.124387][T24364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1545.236135][T24364] __sock_sendmsg+0x221/0x270 [ 1545.240825][T24364] ____sys_sendmsg+0x52a/0x7e0 [ 1545.245591][T24364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1545.250879][T24364] ? __fget_files+0x2a/0x410 [ 1545.255466][T24364] ? __fget_files+0x2a/0x410 [ 1545.260052][T24364] __sys_sendmsg+0x269/0x350 [ 1545.264644][T24364] ? __pfx___sys_sendmsg+0x10/0x10 [ 1545.269780][T24364] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1545.276107][T24364] ? do_syscall_64+0x100/0x230 [ 1545.280903][T24364] ? do_syscall_64+0xb6/0x230 [ 1545.285582][T24364] do_syscall_64+0xf3/0x230 [ 1545.290091][T24364] ? clear_bhb_loop+0x35/0x90 [ 1545.294768][T24364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.300660][T24364] RIP: 0033:0x7fa67377ff19 [ 1545.305069][T24364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1545.324669][T24364] RSP: 002b:00007fa67457f058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1545.333084][T24364] RAX: ffffffffffffffda RBX: 00007fa673945fa0 RCX: 00007fa67377ff19 [ 1545.341050][T24364] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000003 [ 1545.349018][T24364] RBP: 00007fa67457f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1545.356983][T24364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1545.364945][T24364] R13: 0000000000000000 R14: 00007fa673945fa0 R15: 00007fffccc28d98 [ 1545.372922][T24364] [ 1545.401739][T24185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.447255][T24185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.487257][T24185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.500565][T24185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.511403][T24185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.514494][T24371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5052'. [ 1545.521557][T24185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.521578][T24185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.521608][T24185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1545.550321][T24370] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5053'. [ 1545.552417][T24185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.584526][T24185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1545.595295][T24185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.605873][T24185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.615827][T24185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.626867][T24185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.638017][T24185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.648830][T24185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.659593][T24185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.670802][T24185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.681073][T24185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.691819][T24185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.702019][T24185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.712842][T24185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.723197][T24185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.733749][T24185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.743666][T24185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.754160][T24185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.764721][T24185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.775884][T24185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.794031][T24185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1546.146024][ T9534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1546.173991][ T9534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1546.186597][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.300884][ T3002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1546.328271][ T3002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1548.861539][T17808] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1549.108019][T17808] usb 1-1: Using ep0 maxpacket: 16 [ 1549.118145][T17808] usb 1-1: config 0 interface 0 altsetting 94 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1549.129435][T17808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1549.146568][T17808] usb 1-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 1549.181308][T17808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.205403][T17808] usb 1-1: config 0 descriptor?? [ 1549.288227][T15446] IPVS: starting estimator thread 0... [ 1549.377578][T24416] IPVS: using max 21 ests per chain, 50400 per kthread [ 1549.754377][T17808] elecom 0003:056E:00FC.002D: unknown main item tag 0x0 [ 1549.762203][T17808] elecom 0003:056E:00FC.002D: unknown main item tag 0x6 [ 1549.769639][T17808] elecom 0003:056E:00FC.002D: unknown main item tag 0x5 [ 1549.777334][T17808] elecom 0003:056E:00FC.002D: unknown main item tag 0x4 [ 1549.784336][T17808] elecom 0003:056E:00FC.002D: unknown main item tag 0x0 [ 1549.791488][T17808] elecom 0003:056E:00FC.002D: unknown main item tag 0x0 [ 1549.798577][T17808] elecom 0003:056E:00FC.002D: unknown main item tag 0x0 [ 1549.805660][T17808] elecom 0003:056E:00FC.002D: unknown main item tag 0x0 [ 1549.812911][T17808] elecom 0003:056E:00FC.002D: unknown main item tag 0x0 [ 1549.820140][T17808] elecom 0003:056E:00FC.002D: unknown main item tag 0x0 [ 1549.827296][T17808] elecom 0003:056E:00FC.002D: unknown global tag 0xd [ 1549.834075][T17808] elecom 0003:056E:00FC.002D: item 0 4 1 13 parsing failed [ 1549.842566][T17808] elecom 0003:056E:00FC.002D: probe with driver elecom failed with error -22 [ 1549.903993][T15446] usb 1-1: USB disconnect, device number 55 [ 1551.011616][T24435] FAULT_INJECTION: forcing a failure. [ 1551.011616][T24435] name failslab, interval 1, probability 0, space 0, times 0 [ 1551.097170][T24435] CPU: 1 UID: 0 PID: 24435 Comm: syz.0.5076 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1551.108010][T24435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1551.118065][T24435] Call Trace: [ 1551.121333][T24435] [ 1551.124274][T24435] dump_stack_lvl+0x241/0x360 [ 1551.128956][T24435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1551.134147][T24435] ? __pfx__printk+0x10/0x10 [ 1551.138738][T24435] should_fail_ex+0x3b0/0x4e0 [ 1551.143412][T24435] should_failslab+0xac/0x100 [ 1551.148090][T24435] ? skb_clone+0x20c/0x390 [ 1551.152503][T24435] kmem_cache_alloc_noprof+0x70/0x380 [ 1551.157870][T24435] skb_clone+0x20c/0x390 [ 1551.162103][T24435] __netlink_deliver_tap+0x3cc/0x7f0 [ 1551.167396][T24435] ? netlink_deliver_tap+0x2e/0x1b0 [ 1551.172597][T24435] netlink_deliver_tap+0x19d/0x1b0 [ 1551.177727][T24435] netlink_unicast+0x7c4/0x990 [ 1551.182489][T24435] ? __pfx_netlink_unicast+0x10/0x10 [ 1551.187769][T24435] ? __virt_addr_valid+0x45f/0x530 [ 1551.192871][T24435] ? __phys_addr_symbol+0x2f/0x70 [ 1551.197886][T24435] ? __check_object_size+0x47a/0x730 [ 1551.203513][T24435] netlink_sendmsg+0x8e4/0xcb0 [ 1551.208277][T24435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1551.213588][T24435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1551.218867][T24435] __sock_sendmsg+0x221/0x270 [ 1551.223540][T24435] ____sys_sendmsg+0x52a/0x7e0 [ 1551.228301][T24435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1551.233572][T24435] ? __fget_files+0x2a/0x410 [ 1551.238151][T24435] ? __fget_files+0x2a/0x410 [ 1551.242733][T24435] __sys_sendmsg+0x269/0x350 [ 1551.247313][T24435] ? __pfx_lock_release+0x10/0x10 [ 1551.252333][T24435] ? __pfx___sys_sendmsg+0x10/0x10 [ 1551.257438][T24435] ? __pfx_vfs_write+0x10/0x10 [ 1551.262207][T24435] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1551.268522][T24435] ? do_syscall_64+0x100/0x230 [ 1551.273277][T24435] ? do_syscall_64+0xb6/0x230 [ 1551.277950][T24435] do_syscall_64+0xf3/0x230 [ 1551.282445][T24435] ? clear_bhb_loop+0x35/0x90 [ 1551.287122][T24435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.293029][T24435] RIP: 0033:0x7fb9c357ff19 [ 1551.297443][T24435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1551.317066][T24435] RSP: 002b:00007fb9c4431058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1551.325506][T24435] RAX: ffffffffffffffda RBX: 00007fb9c3745fa0 RCX: 00007fb9c357ff19 [ 1551.333467][T24435] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000003 [ 1551.341425][T24435] RBP: 00007fb9c44310a0 R08: 0000000000000000 R09: 0000000000000000 [ 1551.349386][T24435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1551.357355][T24435] R13: 0000000000000000 R14: 00007fb9c3745fa0 R15: 00007ffe6d764b38 [ 1551.365327][T24435] [ 1551.877491][T24455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5082'. [ 1552.277504][ T5904] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1552.447283][T17808] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1552.926187][ T5904] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1552.940504][ T5904] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1553.394392][ T5904] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1553.434138][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1553.448434][ T5904] usb 6-1: SerialNumber: syz [ 1553.669252][ T5904] usb 6-1: USB disconnect, device number 102 [ 1553.687290][T17808] usb 1-1: Using ep0 maxpacket: 32 [ 1553.694690][T17808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.705212][T17808] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1553.749986][T17808] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1553.760906][T17808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.954174][T17808] usb 1-1: Product: syz [ 1554.514720][T17808] usb 1-1: Manufacturer: syz [ 1554.519687][T17808] usb 1-1: SerialNumber: syz [ 1554.527022][T17808] usb 1-1: config 0 descriptor?? [ 1555.417558][T17808] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1555.575278][ T5904] usb 1-1: USB disconnect, device number 56 [ 1555.658160][T17808] usb 3-1: Using ep0 maxpacket: 32 [ 1555.678381][T17808] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=10.fe [ 1555.689105][T17808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.714370][T17808] usb 3-1: Product: syz [ 1555.720739][T17808] usb 3-1: Manufacturer: syz [ 1555.725374][T17808] usb 3-1: SerialNumber: syz [ 1556.459736][T17808] usb 3-1: config 0 descriptor?? [ 1556.476884][T17808] ati_remote2 3-1:0.0: ati_remote2_probe(): interface 0 must have an endpoint [ 1556.827717][T24485] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5094'. [ 1557.124516][T22482] usb 3-1: USB disconnect, device number 101 [ 1557.797360][T23470] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1558.497531][T23470] usb 6-1: Using ep0 maxpacket: 16 [ 1558.649457][T23470] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1558.660295][T23470] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1558.669779][T23470] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.689525][T23470] usb 6-1: config 0 descriptor?? [ 1560.404262][T23470] usbhid 6-1:0.0: can't add hid device: -71 [ 1560.411694][T23470] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1560.447010][T23470] usb 6-1: USB disconnect, device number 103 [ 1560.457255][ T25] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1560.540797][T24544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5111'. [ 1560.667632][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 1560.687603][ T25] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 1560.720389][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.751496][ T25] usb 3-1: Product: syz [ 1560.757315][T17808] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1560.761359][ T25] usb 3-1: Manufacturer: syz [ 1560.807398][ T25] usb 3-1: SerialNumber: syz [ 1560.838378][ T25] usb 3-1: config 0 descriptor?? [ 1560.878334][ T25] as10x_usb: device has been detected [ 1560.884279][ T25] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1560.901073][T24546] FAULT_INJECTION: forcing a failure. [ 1560.901073][T24546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1560.916288][T17808] usb 1-1: Using ep0 maxpacket: 16 [ 1560.921883][T24546] CPU: 0 UID: 0 PID: 24546 Comm: syz.9.5112 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1560.932680][T24546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1560.942771][T24546] Call Trace: [ 1560.946077][T24546] [ 1560.949042][T24546] dump_stack_lvl+0x241/0x360 [ 1560.953746][T24546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1560.958968][T24546] ? __pfx__printk+0x10/0x10 [ 1560.963586][T24546] ? snprintf+0xda/0x120 [ 1560.967846][T24546] should_fail_ex+0x3b0/0x4e0 [ 1560.972553][T24546] _copy_to_user+0x31/0xb0 [ 1560.976992][T24546] simple_read_from_buffer+0xca/0x150 [ 1560.982397][T24546] proc_fail_nth_read+0x1e9/0x250 [ 1560.987458][T24546] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1560.993037][T24546] ? rw_verify_area+0x55e/0x6f0 [ 1560.997925][T24546] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1561.003497][T24546] vfs_read+0x1fc/0xb70 [ 1561.007680][T24546] ? __pfx___mutex_lock+0x10/0x10 [ 1561.012738][T24546] ? __pfx_vfs_read+0x10/0x10 [ 1561.017456][T24546] ? __fget_files+0x2a/0x410 [ 1561.022071][T24546] ? __fget_files+0x395/0x410 [ 1561.026762][T24546] ? __fget_files+0x2a/0x410 [ 1561.031384][T24546] ksys_read+0x18f/0x2b0 [ 1561.035654][T24546] ? __pfx_ksys_read+0x10/0x10 [ 1561.040447][T24546] ? do_syscall_64+0x100/0x230 [ 1561.045242][T24546] ? do_syscall_64+0xb6/0x230 [ 1561.049950][T24546] do_syscall_64+0xf3/0x230 [ 1561.054489][T24546] ? clear_bhb_loop+0x35/0x90 [ 1561.059202][T24546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.065131][T24546] RIP: 0033:0x7fc018f7e92c [ 1561.069571][T24546] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1561.082589][ T25] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1561.089175][T24546] RSP: 002b:00007fc019d8b050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1561.089206][T24546] RAX: ffffffffffffffda RBX: 00007fc019145fa0 RCX: 00007fc018f7e92c [ 1561.089220][T24546] RDX: 000000000000000f RSI: 00007fc019d8b0b0 RDI: 0000000000000004 [ 1561.089233][T24546] RBP: 00007fc019d8b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1561.089246][T24546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1561.089256][T24546] R13: 0000000000000000 R14: 00007fc019145fa0 R15: 00007ffe418cbe28 [ 1561.089286][T24546] [ 1561.180232][T17808] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1561.182011][ T25] as10x_usb: error during firmware upload part1 [ 1561.193454][T17808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.205362][T17808] usb 1-1: Product: syz [ 1561.209756][T17808] usb 1-1: Manufacturer: syz [ 1561.215011][T17808] usb 1-1: SerialNumber: syz [ 1561.219805][ T25] Registered device Abilis Systems DVB-Titan [ 1561.240333][T17808] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1561.253287][T17808] r8152-cfgselector 1-1: config 0 descriptor?? [ 1561.436466][T24553] netlink: 256 bytes leftover after parsing attributes in process `syz.9.5115'. [ 1561.447504][T24553] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5115'. [ 1561.461877][T24553] netlink: 80 bytes leftover after parsing attributes in process `syz.9.5115'. [ 1561.466963][T17808] r8152-cfgselector 1-1: Unknown version 0x1890 [ 1561.499848][T17808] r8152-cfgselector 1-1: bad CDC descriptors [ 1561.507295][T12311] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1561.667375][T12311] usb 6-1: Using ep0 maxpacket: 32 [ 1561.674538][T12311] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 30 [ 1561.689228][T12311] usb 6-1: can't read configurations, error -22 [ 1561.745704][ T25] r8152-cfgselector 1-1: USB disconnect, device number 57 [ 1561.843391][T12311] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1562.717242][T12311] usb 6-1: Using ep0 maxpacket: 32 [ 1562.724214][T12311] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 30 [ 1562.739477][T12311] usb 6-1: can't read configurations, error -22 [ 1562.746276][T12311] usb usb6-port1: attempt power cycle [ 1563.137836][T24565] erofs (device erofs): cannot find valid erofs superblock [ 1563.516262][T15446] usb 3-1: USB disconnect, device number 102 [ 1563.657935][T12311] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1563.694620][T15446] Unregistered device Abilis Systems DVB-Titan [ 1563.708854][T15446] as10x_usb: device has been disconnected [ 1563.729181][T12311] usb 6-1: Using ep0 maxpacket: 32 [ 1563.754874][T12311] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 30 [ 1563.788208][T12311] usb 6-1: can't read configurations, error -22 [ 1563.967859][T12311] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1563.998971][T12311] usb 6-1: Using ep0 maxpacket: 32 [ 1564.006519][T12311] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 30 [ 1564.017147][T12311] usb 6-1: can't read configurations, error -22 [ 1564.044094][T12311] usb usb6-port1: unable to enumerate USB device [ 1564.225955][T24579] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5120'. [ 1565.112145][T24582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5122'. [ 1567.542714][T24613] netlink: 'syz.0.5130': attribute type 30 has an invalid length. [ 1567.897802][T12311] usb 6-1: new full-speed USB device number 108 using dummy_hcd [ 1568.043877][T24626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5134'. [ 1568.060493][T12311] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1568.077415][T12311] usb 6-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 1568.096246][T12311] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.122586][T12311] usb 6-1: config 0 descriptor?? [ 1568.412314][T24633] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5135'. [ 1568.636006][T12311] apple 0003:05AC:027D.002E: unknown main item tag 0x1 [ 1568.837454][T12311] apple 0003:05AC:027D.002E: hidraw0: USB HID vff.ff Device [HID 05ac:027d] on usb-dummy_hcd.5-1/input0 [ 1569.106719][T17808] usb 6-1: USB disconnect, device number 108 [ 1569.477628][T15446] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1569.659038][T15446] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1569.679423][T15446] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1569.715603][T15446] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1569.725297][T15446] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.744568][T15446] usb 3-1: config 0 descriptor?? [ 1570.074638][T24652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1570.096497][T24652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1570.138648][T24650] overlayfs: failed to resolve './file0': -2 [ 1570.156656][T15446] keytouch 0003:0926:3333.002F: fixing up Keytouch IEC report descriptor [ 1570.168585][T24650] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.5143'. [ 1570.168928][T15446] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.002F/input/input46 [ 1570.784442][T15446] keytouch 0003:0926:3333.002F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1571.125500][T15446] usb 3-1: USB disconnect, device number 103 [ 1571.724240][T24679] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5148'. [ 1572.114177][ T29] audit: type=1326 audit(1829.057:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24682 comm="syz.2.5152" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2cda17ff19 code=0x0 [ 1572.698918][T24678] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5150'. [ 1574.137911][T24719] ptrace attach of "./syz-executor exec"[24185] was attempted by "./syz-executor exec"[24719] [ 1576.213138][T24739] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5166'. [ 1576.799813][T12311] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1576.968893][T12311] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1576.980933][T12311] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1577.012251][T12311] usb 10-1: New USB device found, idVendor=05ac, idProduct=029a, bcdDevice= 0.00 [ 1577.037604][T12311] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.059313][T12311] usb 10-1: config 0 descriptor?? [ 1577.548699][T12311] apple 0003:05AC:029A.0030: nested delimiters [ 1577.560886][T12311] apple 0003:05AC:029A.0030: item 0 1 2 10 parsing failed [ 1577.575291][T12311] apple 0003:05AC:029A.0030: parse failed [ 1577.586921][T12311] apple 0003:05AC:029A.0030: probe with driver apple failed with error -22 [ 1577.906894][T24759] [ 1577.909279][T24759] ====================================================== [ 1577.916304][T24759] WARNING: possible circular locking dependency detected [ 1577.923329][T24759] 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 Not tainted [ 1577.930446][T24759] ------------------------------------------------------ [ 1577.937465][T24759] syz.5.5173/24759 is trying to acquire lock: [ 1577.943548][T24759] ffff888141fd2cf8 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 1577.953761][T24759] [ 1577.953761][T24759] but task is already holding lock: [ 1577.961132][T24759] ffff888141fd27c8 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: nbd_start_device+0x16c/0xaa0 [ 1577.971433][T24759] [ 1577.971433][T24759] which lock already depends on the new lock. [ 1577.971433][T24759] [ 1577.981850][T24759] [ 1577.981850][T24759] the existing dependency chain (in reverse order) is: [ 1577.990869][T24759] [ 1577.990869][T24759] -> #4 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 1577.999509][T24759] lock_acquire+0x1ed/0x550 [ 1578.004556][T24759] blk_mq_submit_bio+0x1536/0x2390 [ 1578.010204][T24759] __submit_bio+0x2c6/0x560 [ 1578.015253][T24759] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 1578.021426][T24759] block_read_full_folio+0x9b3/0xae0 [ 1578.027245][T24759] filemap_read_folio+0x148/0x3b0 [ 1578.032830][T24759] filemap_get_pages+0x18ca/0x2080 [ 1578.038486][T24759] filemap_read+0x452/0xf50 [ 1578.043533][T24759] blkdev_read_iter+0x2d8/0x430 [ 1578.048928][T24759] vfs_read+0x991/0xb70 [ 1578.053627][T24759] ksys_read+0x18f/0x2b0 [ 1578.058404][T24759] do_syscall_64+0xf3/0x230 [ 1578.063444][T24759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.069864][T24759] [ 1578.069864][T24759] -> #3 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 1578.078383][T24759] lock_acquire+0x1ed/0x550 [ 1578.083405][T24759] down_read+0xb1/0xa40 [ 1578.088083][T24759] filemap_fault+0xb3e/0x1490 [ 1578.093287][T24759] __do_fault+0x135/0x390 [ 1578.098135][T24759] handle_pte_fault+0x39eb/0x5ed0 [ 1578.103678][T24759] handle_mm_fault+0x1053/0x1ad0 [ 1578.109132][T24759] __get_user_pages+0x1c82/0x49e0 [ 1578.114679][T24759] populate_vma_page_range+0x264/0x330 [ 1578.120676][T24759] __mm_populate+0x27a/0x460 [ 1578.125789][T24759] do_mlock+0x61f/0x7e0 [ 1578.130455][T24759] __x64_sys_mlock+0x60/0x70 [ 1578.135562][T24759] do_syscall_64+0xf3/0x230 [ 1578.140582][T24759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.146996][T24759] [ 1578.146996][T24759] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 1578.154553][T24759] lock_acquire+0x1ed/0x550 [ 1578.159569][T24759] __might_fault+0xc6/0x120 [ 1578.164586][T24759] _copy_from_user+0x2a/0xc0 [ 1578.169691][T24759] blk_trace_ioctl+0x1ad/0x9a0 [ 1578.174965][T24759] blkdev_ioctl+0x40c/0x6a0 [ 1578.179981][T24759] __se_sys_ioctl+0xf5/0x170 [ 1578.185085][T24759] do_syscall_64+0xf3/0x230 [ 1578.190104][T24759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.196516][T24759] [ 1578.196516][T24759] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 1578.204333][T24759] lock_acquire+0x1ed/0x550 [ 1578.209353][T24759] __mutex_lock+0x1ac/0xee0 [ 1578.214370][T24759] blk_register_queue+0x15a/0x400 [ 1578.219923][T24759] add_disk_fwnode+0x648/0xf80 [ 1578.225293][T24759] brd_alloc+0x547/0x790 [ 1578.230061][T24759] brd_init+0x126/0x1b0 [ 1578.234732][T24759] do_one_initcall+0x248/0x870 [ 1578.240020][T24759] do_initcall_level+0x157/0x210 [ 1578.245471][T24759] do_initcalls+0x3f/0x80 [ 1578.250314][T24759] kernel_init_freeable+0x435/0x5d0 [ 1578.256034][T24759] kernel_init+0x1d/0x2b0 [ 1578.260878][T24759] ret_from_fork+0x4b/0x80 [ 1578.265806][T24759] ret_from_fork_asm+0x1a/0x30 [ 1578.271088][T24759] [ 1578.271088][T24759] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 1578.278661][T24759] validate_chain+0x18ef/0x5920 [ 1578.284025][T24759] __lock_acquire+0x1397/0x2100 [ 1578.289391][T24759] lock_acquire+0x1ed/0x550 [ 1578.294413][T24759] __mutex_lock+0x1ac/0xee0 [ 1578.299433][T24759] blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 1578.305782][T24759] nbd_start_device+0x16c/0xaa0 [ 1578.311150][T24759] nbd_ioctl+0x5dc/0xf40 [ 1578.315910][T24759] blkdev_ioctl+0x57d/0x6a0 [ 1578.320925][T24759] __se_sys_ioctl+0xf5/0x170 [ 1578.326033][T24759] do_syscall_64+0xf3/0x230 [ 1578.331147][T24759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.337567][T24759] [ 1578.337567][T24759] other info that might help us debug this: [ 1578.337567][T24759] [ 1578.347797][T24759] Chain exists of: [ 1578.347797][T24759] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#54 [ 1578.347797][T24759] [ 1578.362598][T24759] Possible unsafe locking scenario: [ 1578.362598][T24759] [ 1578.370044][T24759] CPU0 CPU1 [ 1578.375401][T24759] ---- ---- [ 1578.380759][T24759] lock(&q->q_usage_counter(io)#54); [ 1578.386135][T24759] lock(mapping.invalidate_lock#2); [ 1578.394282][T24759] lock(&q->q_usage_counter(io)#54); [ 1578.402171][T24759] lock(&q->sysfs_lock); [ 1578.406495][T24759] [ 1578.406495][T24759] *** DEADLOCK *** [ 1578.406495][T24759] [ 1578.414628][T24759] 4 locks held by syz.5.5173/24759: [ 1578.419816][T24759] #0: ffff888025921198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x13c/0xf40 [ 1578.429137][T24759] #1: ffff8880259210d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc2/0x1ae0 [ 1578.440133][T24759] #2: ffff888141fd27c8 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: nbd_start_device+0x16c/0xaa0 [ 1578.450846][T24759] #3: ffff888141fd2800 (&q->q_usage_counter(queue)#38){+.+.}-{0:0}, at: nbd_start_device+0x16c/0xaa0 [ 1578.461819][T24759] [ 1578.461819][T24759] stack backtrace: [ 1578.467702][T24759] CPU: 1 UID: 0 PID: 24759 Comm: syz.5.5173 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 1578.478463][T24759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1578.488515][T24759] Call Trace: [ 1578.491787][T24759] [ 1578.494718][T24759] dump_stack_lvl+0x241/0x360 [ 1578.499409][T24759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1578.504604][T24759] ? __pfx__printk+0x10/0x10 [ 1578.509198][T24759] print_circular_bug+0x13a/0x1b0 [ 1578.514224][T24759] check_noncircular+0x36a/0x4a0 [ 1578.519159][T24759] ? __pfx_check_noncircular+0x10/0x10 [ 1578.524622][T24759] validate_chain+0x18ef/0x5920 [ 1578.529481][T24759] ? __pfx_validate_chain+0x10/0x10 [ 1578.534681][T24759] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1578.540657][T24759] ? preempt_schedule+0xe1/0xf0 [ 1578.545507][T24759] ? preempt_schedule_common+0x84/0xd0 [ 1578.550969][T24759] ? mark_lock+0x9a/0x360 [ 1578.555317][T24759] __lock_acquire+0x1397/0x2100 [ 1578.560188][T24759] lock_acquire+0x1ed/0x550 [ 1578.564696][T24759] ? blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 1578.570686][T24759] ? __pfx_lock_acquire+0x10/0x10 [ 1578.575720][T24759] ? blk_mq_update_nr_hw_queues+0x3db/0x1ae0 [ 1578.581701][T24759] ? nbd_start_device+0x16c/0xaa0 [ 1578.586726][T24759] ? __pfx___might_resched+0x10/0x10 [ 1578.592010][T24759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.598081][T24759] __mutex_lock+0x1ac/0xee0 [ 1578.602599][T24759] ? blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 1578.608581][T24759] ? blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 1578.614557][T24759] ? __pfx___mutex_lock+0x10/0x10 [ 1578.619581][T24759] ? __kasan_kmalloc+0x98/0xb0 [ 1578.624343][T24759] ? __kmalloc_cache_noprof+0x243/0x390 [ 1578.629885][T24759] ? blk_mq_update_nr_hw_queues+0x3db/0x1ae0 [ 1578.635867][T24759] blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 1578.641671][T24759] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1578.647564][T24759] ? lockdep_hardirqs_on+0x99/0x150 [ 1578.652768][T24759] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1578.658746][T24759] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1578.665004][T24759] ? rcu_is_watching+0x15/0xb0 [ 1578.669781][T24759] ? __mutex_lock+0xaf9/0xee0 [ 1578.674460][T24759] ? __mutex_lock+0x5ef/0xee0 [ 1578.679145][T24759] ? nbd_ioctl+0x13c/0xf40 [ 1578.683567][T24759] ? __pfx___mutex_lock+0x10/0x10 [ 1578.688598][T24759] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1578.695190][T24759] nbd_start_device+0x16c/0xaa0 [ 1578.700042][T24759] nbd_ioctl+0x5dc/0xf40 [ 1578.704281][T24759] ? __pfx_nbd_ioctl+0x10/0x10 [ 1578.709037][T24759] ? __asan_memset+0x23/0x50 [ 1578.713628][T24759] ? smack_file_ioctl+0x29e/0x3a0 [ 1578.718652][T24759] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1578.724028][T24759] ? file_to_blk_mode+0xcc/0x140 [ 1578.728963][T24759] ? __pfx_nbd_ioctl+0x10/0x10 [ 1578.733725][T24759] blkdev_ioctl+0x57d/0x6a0 [ 1578.738226][T24759] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1578.743250][T24759] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1578.748270][T24759] __se_sys_ioctl+0xf5/0x170 [ 1578.752858][T24759] do_syscall_64+0xf3/0x230 [ 1578.757374][T24759] ? clear_bhb_loop+0x35/0x90 [ 1578.762052][T24759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.767952][T24759] RIP: 0033:0x7fddd317ff19 [ 1578.772362][T24759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1578.791976][T24759] RSP: 002b:00007fddd4006058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1578.800398][T24759] RAX: ffffffffffffffda RBX: 00007fddd3346080 RCX: 00007fddd317ff19 [ 1578.808369][T24759] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000007 [ 1578.816334][T24759] RBP: 00007fddd31f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 1578.824302][T24759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1578.832269][T24759] R13: 0000000000000001 R14: 00007fddd3346080 R15: 00007fff7b47c2f8 [ 1578.840247][T24759] [ 1578.883943][T24764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5174'. [ 1578.896538][T24764] vlan2: entered promiscuous mode [ 1578.901760][T24764] team0: entered promiscuous mode [ 1578.906897][T24764] team_slave_0: entered promiscuous mode [ 1578.912725][T24764] team_slave_1: entered promiscuous mode [ 1578.950941][T15837] block nbd5: Receive control failed (result -32) [ 1578.954242][T23469] block nbd5: Receive control failed (result -32) [ 1578.980798][T15446] usb 10-1: USB disconnect, device number 46 [ 1578.987973][T24759] block nbd5: shutting down sockets