last executing test programs: 2m54.830215214s ago: executing program 2 (id=318): socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d01020301"], 0x0) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x20000000000001f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24fa, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x1c5}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2m51.186317509s ago: executing program 2 (id=327): userfaultfd(0x801) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) unshare(0x80) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x0, 0x0, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x80, &(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}}) io_uring_enter(r5, 0x3516, 0x483, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x201, 0x4000003e, r8, 0x0) fanotify_mark(r9, 0x441, 0x103f, r8, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40008062, 0x0) 2m50.125893186s ago: executing program 2 (id=329): userfaultfd(0x801) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) unshare(0x80) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x0, 0x0, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x80, &(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}}) io_uring_enter(r5, 0x3516, 0x483, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x201, 0x4000003e, 0xffffffffffffffff, 0x0) fanotify_mark(r8, 0x441, 0x103f, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40008062, 0x0) 2m48.989994482s ago: executing program 2 (id=332): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) read(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) openat$vsock(0xffffff9c, 0x0, 0xc500, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x800000000000000) 2m48.222521076s ago: executing program 2 (id=333): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x80, 0x0, 0xc}, {@in6=@mcast1, 0x20000, 0x32}, @in=@broadcast, {0x800, 0x6, 0x800000000, 0xc, 0x8, 0x0, 0x0, 0x40000f}, {0xffffffffffffffff, 0x3, 0xa}, {0x0, 0x1f}, 0x70bd28, 0x0, 0x2, 0x7}, 0x0, 0xfffffffe}, [@tfcpad={0x8, 0x16, 0x5583}]}, 0x100}}, 0x0) syz_io_uring_setup(0x1f8b, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x2}, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x4, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x3, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r2 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) ppoll(&(0x7f00000001c0)=[{}, {}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_audit(0x10, 0x3, 0x9) read$msr(0xffffffffffffffff, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r6, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x0, 0xfffff001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@flowinfo={{0x10, 0x29, 0xb, 0x3}}, @flowinfo={{0x10}}], 0x20}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r5, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x33, 0xf00) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000004a00)=""/4096, 0x9b, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000400)={'wlan0\x00', &(0x7f0000000680)=@ethtool_stats}) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd4000980060001"], 0x140}}, 0x0) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002980)=""/4096, 0x1000}], 0x1}, 0x9}], 0x3, 0x2000, 0x0) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000001640)}, 0x5}], 0x1, 0x40012120, 0x0) gettid() ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000880)={"4144f5d7", 0x7, 0x3, 0x5, 0xfffffff8, 0x9, "98737d86496f30b7c443a2c59335eb", "074a9320", "c29a6e56", "24774df4", ["e9b4b51f8cc199f20151febb", "8648ccd090788ed0c75e89a7", "b4e2974e000e3f47e0b4f17c", "03e23e622b3a3e6b4c51c515"]}) 2m46.915781122s ago: executing program 2 (id=341): socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='nilfs2\x00', 0x8080, 0x0) 2m31.681373309s ago: executing program 32 (id=341): socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='nilfs2\x00', 0x8080, 0x0) 14.98602319s ago: executing program 4 (id=823): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002400)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be10a42f01fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x10da) 13.193396708s ago: executing program 4 (id=827): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_MM_AUXV(0x4a, 0xc, &(0x7f0000001980), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x1e, 0x10, 0x200, &(0x7f0000000880)="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"}) r5 = io_uring_setup(0x79bc, &(0x7f0000000140)={0x0, 0x4, 0x40, 0x4, 0x376}) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close_range(r5, 0xffffffffffffffff, 0x200000000000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12.411297199s ago: executing program 3 (id=829): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$sock(r1, &(0x7f000000b480)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)='N', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="01a75fbc26ac8814326100f10000000000000033423c60798133deebdb831d789cf632d9481273d790271d4f83f1bbcf1e126f609614fbffffffffffffff0abc833bc8b91b3751ac0b3b971f7eb767af3b14c5dd21468a9e180b220e9e197d0c0f40", 0x62}, {0x0}], 0x2}}, {{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x4, 0x0, {0xa, 0x4e21, 0x80000001, @loopback, 0x400}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000000180)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xf}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x48}}, {{&(0x7f00000002c0)=@l2={0x1f, 0xb, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000980)="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", 0x1000}], 0x1, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xa}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="38d1f1ec09dd95ec8b6c54e461ad7aa90ca1b7ab6b41e791002fc027663fb8c239d0e0de55191d5b632f511e9ae728b6e7d54183577ad598c01bb84812f9f70be9324228dba2e97a4cd3a8700e442755e2946e4ad2cd786e47bd3c26fb3c1c7d70b129ca14681631885f9ef1fc04e2526cc10137bd4ef75623ff7abbc8748e8e3005d6446b3ad6f70fb3a7ed80b3fffc71cfd374681b024c66968585d02182fb7b26e7c13d7e03d2ca060986cac03b6f6b9cff250fe3fc34cfb49a6922b6c0363a3860f70924b230a9057c1d5ced99c9e32e20d6498fbd9cb6548ea8f5bbdb7c", 0xe0}, {&(0x7f0000000600)="d1a269f161147316d661955cb1f1d2417d40cbfee330e8bd8e7a41b50a0eef52a9f5a4f71297733e758777efcebedaa8d2bdc631fcfa1fce05d54a0fd951f673595fed2d3c024d27b0c0a31bd7fb2361c5088c624ea1506bce550333395609a9dc30e8345520eee5ab24c25648433eefec714ed8c6b612f0054f5bd2eaffdd8e07859091b1ecbcd51de1a4ff76efb19271fe8da4ca8423c92bc4459baccf01d9e7c8a624e36b52fecf1379179a22e6a7fae743ee004652004863276cafe0c3afa52298980ea4880e33f3626e62975d01cc", 0xd1}, {&(0x7f0000000700)="62aa99d7b4a6a5dbaf9a88ad3e8a0d491b64c779d7d373c6c5fd2ea6ba9faded9cf18bf79927769039cc7bda71fadcd882aa60b071c7605bdf333843594a63305ac9d778265650e0c1805c7609d1f33b2758b54fcdd8a8f6d289c6fef2ca7ae7feb6fd1fffd1980982dbe5e88e92923e2cfef199ef3a66d12dcd2a28a187deee5e80e986", 0x84}], 0x3, &(0x7f0000000580)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x18}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002980)="bf501620bf684d4afadd892bee8694486108c9e79dffa7cb8cca86835f6f725a3fb1cbd4d81cc5094ebe4025f1c35391253f582dc986756582d8dc2e055df235ed8029858b41a6fbff8c47c215842678e57d9b4915a3f432aba78cc7f701f632e5c72ade2545561dd2b2695024f7c2cbc5acddff19ca13bdb4396f5b6a23b031feff19b0a115272f4e19adef00b13ceadc9c50cce117b1380aa4826c11f4138d89686baac00630499eeb9a36d7827c4202a7b49fff0a4a6f1b1b3a5339b664695aca8e761c", 0xc5}, {&(0x7f0000002a80)="eea0f9b289560561375d9da7379c2be74e1a587d5750f4397f95314c6409c3515035f18138c869519c09eccdeef19519a99647200984dd27773ee4709c47253a2089d06c57bfec620fd2f579ca9333ed0668da56fb7ce60bf30769b40a00a82fdda56d1dcc", 0x65}], 0x2}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002c00)="cac77255e73ccf23c243b175f9a06dd9535da138851562b51bfe8f758204f7f7d158883ed4c274d85e9389b8bc343329facaa5d2cedc233ee6e2f260d950d8b9d2b867a9373bc5498f3d9add5a8c36c2", 0x50}, {&(0x7f0000002c80)="bf24d5aac0e7c45e698ab48652e83a2d4367b33b55922dc8db8a12a4b50c95688e1866218cace696fea11b8cafda91dfd675b0bdb173cb7e62ba76102bd093c0281ee833a4f909c35a4a1f616259389a968f4f92b49955d1", 0x58}], 0x2}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002e40)="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", 0xfb}, {&(0x7f0000002f40)="748410b85bfc303c43985634133ced079e38048d4d3e7cbce5ad62223601dcde8855e9ed04ab2c228c6fc4788e9cf9d22640e3778b5dd7", 0x37}], 0x2}}, {{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000003040)="b156c41a2929162a1a52257909b985800c176a938be48882c3e8bd2cba560a3f016b98697a", 0x25}, {&(0x7f0000005080)="8f2fe4fd4f4e8ca1bec8caed5694928dc279442ed9bae19b1286ec5bfb6d50fa2b4432dd", 0x24}, {&(0x7f00000050c0)="6941e12fed4321fa8fdd31b6df69004924ff02757229e7694cdc4cd33bcf9d06eded710436939bb4aa97f84b99fe5db0fb91188d39a6ecd6afb83ba88c46ae0577d6f8f20a30121cf0dc441cd298ba274a29bcdd420ad4cec5c2bd31812257754a167964fe4bb875e2f83b1b6515ae44c37d6355f173b9cf16cc4ea65d9c5d7b856cb235fb2a01394499230672d341944fceed", 0x93}, {&(0x7f0000005180)="a4d9c6df8680d0", 0x7}], 0x4}}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000005340)="54f73c59240ebda5dd9abc49df13191d3202e13274507ddd2e9fb0f6b902837bb5410ffc7c118907527b151d37593387d517cab0fff487d33e1e96b83a", 0x3d}, {&(0x7f0000005380)="d13c86923dbcee4662019ea86aed0313f1e21987accbe0a7cc896c997d901a9ac4624ef3c97c6820c322c77c5d95f0e6bb5891a2c8b92983ff1e00e9ae0df8da06e35603db1f303ba86689aebcc269680825295306f8e2aad707ddd59f6029f54cecd35e5354bd4f31335a55afb14e148c5ff7611e38ad157d10a249d8", 0x7d}], 0x2}}, {{0x0, 0x0, &(0x7f0000005680)=[{&(0x7f0000005580)="3f5c4dcca5db028e09b1d636d43fc68eea029e436817364966fc3f593cf66bc8fa51d19b9e396c14082f1f8aa7c16890b2eb173c15053ee495cbeadd905933729362de1f773cd798fcb10f5ed72e390185ac3cfbc5a41cd8f93b3c59e5881af6e0818cf6ac4e9cdda9186f1bdd41b6c5e19cf4fe5c6159c29453f0ef27c849055193b850e71b1167d2d3bbc4dfda310d939fe345b5e5a7a4e4c28cd22e2cdf878809ea4c08e830900b5141cadc4e324bce10d67455a2c4bfa7c1ae2c7d31a393e3e3d6f8436115a57973b440bddd5c1c8ddb239e995cf977128bc6ce34a0c858a73472e78873d71b469fb9", 0xeb}], 0x1}}, {{0x0, 0x0, &(0x7f0000005840)=[{&(0x7f0000005740)="995ac5f2efbdfec0eec28bb6dfed840640b41f7d5733547c160dc4053bd34d7598a71675671dbd70ccf4be26069a3a3c49f71e08f57fe8bea58b5286223d62957543f5e63eb774c11f78453710adffd4fd1b824654273287958c96a11f83fd12f821770fca2d91da0f6c76d6291a2964551292fbbeb80e27971773f20a94492864ba14024cf7f0f40c67c5d624c73c7af711fd984b6dc0644edc430d81ffb3e8bab9d1c0d7cfb6c1f3b9b95e7f8a113e52402275dd2796907ad35104710a102bb0adeea041288534", 0xc8}], 0x1}}, {{0x0, 0x0, &(0x7f0000007c80)=[{&(0x7f0000005940)="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", 0x70d}, {0x0}], 0x2}}], 0xd, 0x8004) 11.270385524s ago: executing program 4 (id=831): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000240)) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x5, 0xd}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000600)=0x1b, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f000000e280)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000005c0)=""/91, &(0x7f0000000640)=""/74}) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f00000002c0)={0x1, r7}) 11.220910856s ago: executing program 3 (id=832): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, r2, {0x7, 0x2b, 0xffffff4a, 0x20000000, 0x5, 0x7, 0x3, 0x3, 0x0, 0x0, 0x1, 0x89}}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', r5, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000040)={"846bb400", 0xffff, 0x6, 0x2, 0x5, 0x0, "f1842cc3e94627219cca0000fe3100", "000416e2", "0400", '\x00 \x00 ', ["90000000060000000800", "aafed6a34c8acf2f5a867243", "000000ff0000000000000020", "000200"]}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(r9, 0x1276, 0x20000000) 11.083989299s ago: executing program 5 (id=834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x80, 0x0, 0xc}, {@in6=@mcast1, 0x20000, 0x32}, @in=@broadcast, {0x800, 0x6, 0x800000000, 0xc, 0x8, 0x0, 0x0, 0x40000f}, {0xffffffffffffffff, 0x3, 0xa}, {0x0, 0x1f}, 0x70bd28, 0x0, 0x2, 0x7}, 0x0, 0xfffffffe}, [@tfcpad={0x8, 0x16, 0x5583}]}, 0x100}}, 0x0) syz_io_uring_setup(0x1f8b, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x2}, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x4, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x3, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r2 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) ppoll(&(0x7f00000001c0)=[{}, {}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_audit(0x10, 0x3, 0x9) read$msr(0xffffffffffffffff, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r6, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x0, 0xfffff001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@flowinfo={{0x10, 0x29, 0xb, 0x3}}, @flowinfo={{0x10}}], 0x20}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r5, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x33, 0xf00) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000004a00)=""/4096, 0x9b, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000400)={'wlan0\x00', &(0x7f0000000680)=@ethtool_stats}) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd4000980060001"], 0x140}}, 0x0) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002980)=""/4096, 0x1000}], 0x1}, 0x9}], 0x3, 0x2000, 0x0) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{0x0}, {&(0x7f00000000c0)=""/78, 0x4e}, {&(0x7f00000002c0)=""/105, 0x69}, {&(0x7f0000001740)=""/240, 0xf0}, {&(0x7f0000000340)=""/209, 0xd1}], 0x5}, 0x5}], 0x1, 0x40012120, 0x0) gettid() ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000880)={"4144f5d7", 0x7, 0x3, 0x5, 0xfffffff8, 0x9, "98737d86496f30b7c443a2c59335eb", "074a9320", "c29a6e56", "24774df4", ["e9b4b51f8cc199f20151febb", "8648ccd090788ed0c75e89a7", "b4e2974e000e3f47e0b4f17c", "03e23e622b3a3e6b4c51c515"]}) 8.641621403s ago: executing program 4 (id=836): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x4}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) openat$tun(0xffffffffffffff9c, 0x0, 0x20080, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x4b, 0xec, 0x2, 0x20, 0x6a2, 0x3, 0xb48c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x0, 0xc9, 0xc8, 0xb7}}]}}]}}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x0, 0x31, 0xe, "8edac439efe6558d428cca7a37b3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) readv(r2, &(0x7f0000000180)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1) 8.517465429s ago: executing program 5 (id=838): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x400000}, 0xc) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x18040) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newsa={0xec, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x0, 0x3500, 0xa, 0x4}}, 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0) bind$alg(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x2) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'veth0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r8, 0x80047437, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xd8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) 8.009421093s ago: executing program 5 (id=841): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18, 0x48084}, 0x0) ioperm(0x9, 0x499, 0x101) memfd_secret(0x80000) timer_gettime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x1f000000}, 0x600) r3 = socket$unix(0x1, 0x2, 0x0) close(r3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c) shutdown(0xffffffffffffffff, 0x1) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xd4e5}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 7.368287786s ago: executing program 0 (id=842): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$sock(r1, &(0x7f000000b480)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)='N', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="01a75fbc26ac8814326100f10000000000000033423c60798133deebdb831d789cf632d9481273d790271d4f83f1bbcf1e126f609614fbffffffffffffff0abc833bc8b91b3751ac0b3b971f7eb767af3b14c5dd21468a9e180b220e9e197d0c0f40", 0x62}, {0x0}], 0x2}}, {{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x4, 0x0, {0xa, 0x4e21, 0x80000001, @loopback, 0x400}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000000180)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xf}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x48}}, {{&(0x7f00000002c0)=@l2={0x1f, 0xb, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000980)="17f92a6b9970edc16baa25ee17fe502567b004d86f49d667e590649477590081f1d03ef79efa406a6b9f88bf7079d1bd6e64b3d29c3707754bf2e5d16fe685d966f54b02a27a23430640c3d299545cb595c2671b1d2369eb5ddf73ad78050cc7dfd5e90d3d0662f8c6993cca3794233bb10f090e0b97730e3ccd420858a68bd1f835d109fcdb9c15361a27a948e9e9a01194676e9a35328084441d99f5f86ed550c47ecbd9cd01259919a72130d2e2322542dfb64ac5e9d7bd6bf7bea90f0b0625906143481e0fd11b9e9207319ab99caa134347f326bd2aaef68040307d149cd3547432ec7a1452a9451d8522c8d585e37fea2bdf715534d73118abc6ab152160f3141229c59fd24e08ff3e37d6a05b91788a75ca67f3ad175cc640bb2f5edfb67ec8cbb1a842e8a9418d02a07c7bcdfee1ae3c36f6fc5795e3710d4b0f210e2eca220ade4497c49cf87bf903d1e793c16393ae60058e568543a13d53cc32479018dfdfb714563d336f524a3da0225b4bd090b92b4f76c28fdb4f671d47c7c5c07c19c59246602c2a731fee13843eab4fb09c814410bd7a367da5c6c1530cf83e2b11747ddb38ce3be509848c494490e2498b125ac7edabc73743f297cd2c305156ec6fd70b3f01f78c997744819450b521e007353263b422e20b08b4918f899d5afe715e11b3753c38b0329833f817759ae3643b307117f5a4bb29b69e2dffba2a6fb975d301cb9f55c06f568ce69e275cf3c7900fea0c8a8580fbcb326b37f0a44d9bd0fc30f788d610795baf98ce91b02d599a10f11f14d0122f5db2c8567bca44dda040e70ef98900dae35c99a032ec94b6b2b5da4b3760c713175352fe8cebcf2d1e4ec7fa01ab31b83ba4f29af795f14e298e7c3bce9704caa43d21142b89c72fb36cbae162189ac0e0ee04352a744fb6fd99bcab1f0f458fd5995ea4a19bb23efb6753c3bafa4f3e1a1d08a1baa6462f97e6c695adae92818a98112366cc56c819bdc0b44503027b86ba09dd405a64f7074a1a7bce3a94f11dd0528d85872bdde2d2479acf4a8c53f29d32a01e04c998a7909237ba59d1a52b060949dcf466bd323d560a309cc5ebfc98d053429ae1b97e5fabbe3797136a7f62930c2e889f3be5a0e106aa1c8cb29684ce164a34ec41c18e26dfed081740f76f4b6b2306e319d3af629a65325535f73337abd665f6234ef674be401134c685f87dfa9346febd7b52882853369ffeeab7afe37716619a9412fcde57c7ebece89983a819c061a2f66b76257d5b9aa4471f0a20f6dac5fd25b0c350c5d325e6cf01fd32ff4c7f2dfb955d58a39b094960bd2c1f08344913448abed9075b37a30b4c6499ba9986fe44ed24fa0400f9d021acf45cf3f78582188f7f4f90946b1fc24d80c959591ff63d677744eeee29a8765c7ca13d22086fee9f4c7e1875104da7fe9670cc30784674df5fcd1cc3de5eef6f97ec926706c1841fe81d42748f5cb828c921a92e0ab8c5be60a34ad00e58eb13b2492e0f8fd56d495503e8b6254143250e6b7148a64a52740363189e3baf74ef87c106066a1f4a45c6583e205c0cd42533f2d5461f6cf750c2141301818b536c96a556860d8fcd665e12aed4326b3055eea087c4b13296c50985b56741469c806814594619fcb2e88b8bf5908bf7570f7686ea3ab8663d0cbfbddac5ad084268a12f1e930331e3d5e095b96aae209cb3bbb90ad86167620c84bf8438147247fde75c2fabe8af8dc028f29109cb9d0d43c020e6ba2639eed371e2672a554b0ec683aa3ea8101d90fa129753347dff41d4001d3cf06103d74163077968b42b6ab0a050171360102d3a740c7baf4568f60192fdb8e92f207e45d42d2144ef1617c105097c0e251103df392fdddec22c283da138d059ec72a8b5e4254e740917df76c62c703ae14ddbe5acbdbcea4366b67d3963b56dc39c5ca150f7f4040c58a4a579758cb6ff9ecba20ef9ac266c00ede779c52ef6c2f330ae6c092f3a86c8f0ff6c39d4740572c0bca5f78dcca838b6e7ec8b1a3d60edac1583f0be4bc6822b8ebb4dece15e075db2cb00ce0f8c3301c06335761d517f846bfd34cc596998d74b9632cf6b72f67a5eeadb876f25fc0ccaa6001d914ddf1a04e6a54e2cae13bd1863b6fbacb84be9b12336b58d10244d0bf982f7bdd60bb2ee53b6325c7ddebc6ef309518604a68d951b6a63b00bc078cf495bea9d12a4fd5234790d757f6615eb5d85f53e6b48affe9564c28c64b164978b5e639b0563787a23281d06863888a4dfdf5bd9c8da12f434fc9a5fc2b11675e6925de981552d3ab3c9809b4833d64e6acccabc2e48bc45bf926b8460c4816dc722a3976fc45c2b4558cabb7f57139f30a8d4becc2f3d86b255bf547bcaedfe6add817abf58e7c31fbe95c97b1c283da8f292855daa32736dc1111a579aa85e8190930b4d55571fc6de024f9adfa09765b9bb83ad1fe5e27eab08fec59aeec5eb1ef7809d08bb84e3a042c8b6c27c74df0046368d00c7a68fdc36d9230522339f4ef1b313f558a96efefb6396538dee3a1816faeebae092830c21e07c1a917727fee1b3ee66b312559fa3772352bd5f2c7906d24c9f652645c683d8128daad60b44401b77591b21e0fd8e17d87278e741c90773b9955d8b11765c9a05c80d89c11ccfbddca01c76fcad644e8a2d61b7c5fea6bdf9af90a2472f79c6043f34684b22b5fadcac8e9072e0d75b9a778686774331c9a872a4955a23378ce7a795b5d70101c13074e521ab01cac96c5a40b42bdb1763c89a3d9481dca8d930329a61a15e5f5522ba4c826a62c61d73fc3f21d30d4793a918f8651973056e4f87c71a5d93b07d77ddcd52ebade68fc7b59a5afec092fcf35dc5607c716cea006ca96800fa3ea62339154a964d27fc5c4e94dd818b2f4fbb70a723aa3d0d87979713f024b035687a7225dec64f668a79546527aaf76a53a968c59eeedc0fc974301d645f490a54b267a34bcc93f231ebcfa60d8c07f0f867610b3f57968b9f3c257d71693986dd7e6b84b04144d3da79c137009213a2d3636a3537e05f5d6f0e03fdab12af9bb962f601c51c55a4f82c192b92ee416120438caa23f5356d3c0cfe0f12e5dadf362c21edc7be7829bec4704c749433daca9c4269191e46608c7a83d0274788c499b8f5d5f15e0278f10d0680042d6b1a8e9edeff0b15d6e626e2f469064377a5b65806443dbee32e84c56327f8c232527cadb56480a8ab026259b5b40538803a5155db21e41e123be80728aa525b927f9b5155ac830ca8687f9604ad156e15967ca5128f6e02ac8da767382f79aadf34e3876055a48ace4e2b2567195145a178085b64eda83e31a4c58bf1a4fd65a67f9855790d3328026d16360e03455b7eba03eebf0b7a3d53f921f3ca14b789803475985ffe07bd622450f40a395fff73c7903a167c8bd784d781c2cc6229241982e859c71c468b9f2eb686d7ef37d72e5cd97a5ead8b21844c46ae84e551dcec4d98cc8aacff3e1a132f87d2fa0e9064f0b76ab9b865c68295ebb9db3a9525ed46bd4849971d20d7c87c31426ecc27e366f73b2c6f72eced31809e697ae04a75404e29fc9b9f60f66f162c5a19fefac3f382f192d70f8172746ebd9a69e0e050e303ec9370a2c1c7eb6b1aa2894bb0bbe8a2559dd817e5d2c5db7bd6258023b5a840959d78a8e2081add2f2f528c0d5b5dacc155b24151705e15e1bfc21812d79e6c6620c5691aaa1ca531355aa5f7a34da3d26bc4a48150fec965caec84d18bce757396e3b5b74adb91b806bb3868bfe8aee8be3dc45724ed9da45a31e4566ac770f9ffb46a67e64e4bb1e031c2722e6e3450fd13e8da7ed01a862de47c3ec727c33b859e0521ac23896c2cf64f8a62cacc03513bed4312f48cf1bfd38c2233385321a0f099c524f2a3efb6874d44c1a7a8b3490eb373c4d0f5955cd45d0d8904a983e65064a75a293e7fad7b5fba29ac6d6f17c459178ab5348779cfae31d48e90c55aabf556e2feeff18dc1b069a4e99cf8c284cea539b9f9719aa6b7b7cb49868154a9edeecbf9a8cfe5dd69f7c86c0146d9db378c108de041562714be5fd70a6125d65aec53d2b7ca96c4fa994d29f4478805e47b559223cddc88b537773e9ff97feed14ce9cf94cd12df5b9a670773880305e66245f243c9e87f66189ca26f0e3d62c793a5501205bdab7785cf7222d5e6a8f39b0cabd93c56dd9669f2c7c3ae5e303ceb47950628897340faf8cb158346ffdb581bcd165380e47fcfbed8622b0158f8506862e8962b1ed200e9c4726a9e2bc81e9da5b57051e0ab66c7aa0070d0909a52a17a57cc8493ab8c69627e08317171e9f4a0d8c364fe574c08c179f71b1603742bb93d0681876012228bf8497ec07278ebceb8cb2c22e79eb06131e590dfa4a66db6ea3be067ce9a1ec284b2f1c795da204c981149c627de381696fee2783c2efb27ba3b5a5521d8b2e1c89d383557cd61c290513477a44b7d501587b72ac7ac67c1adc557273970201a943dd197d3a412c44b6bf393021143a89c1000ace7ef7d2221721b758cc1764863c5c17eb438f1bb32d2c7d6bd4f243bd8439b4fc29db7b2dd0f96fbd53ab796992e7303b18ce910fbd1150e44cbc86e3fac67fcb72633ac861d0fb94c3fb76cc02069c6af1d3d060642c80f753cc759bd711f0893ae6ce85795a21453dad4fbfbfd84b96a1822bb0084b100d273b32d9d04a736921d0d7d0c04b9b489ba17d4c5ca32095a1569b7abfcd90ea9934a75ad983a1886966a8fbd6f527967a94558157bf343536876624b47103d74579ec8466a03566eef045ecb468ca981508ba585adc23c90c6e330ae330a0887f66642a723482d8b3acc50b41d13e5e149341948d70c86d001656032486c0ede04baa69be9e6bf859f9dbb9331485c8bcb7e44ef76ec3838f87d5d63779a3033eb9881a9899b1b6b080aa986c896c2700b781883604980ca1830db7fb9974c334c79568f191d44509b5c7ede0eb071a8abd33cf642b14d5efc1877756f9c75d2e8e2277bfe833059556d500bc4ee409544afea2fa31912a49f5a4625ae73397e46a197a9592dc0a4b1ae29e48af7f2fbca3ec9b0e404838eadeb24d18de8398447927a00c7222b59c377524ed61aac0f9257bde04bc40236233c1fff0f4ffddf2e5345c9e60b8d96f4e3cd2ed0dbbcc9deba1dd177db743f628fdc213044e4f68a12049da1c4c5b1bb80203730bb6a1ba9825f8b25e4bba57609841be03ffa8391ab66fed8b7b02c3db7509b13af3ba9fdc73f598cb07b9aa5eb36ccddf7703bc3e11442d2ef286634203799beccbc09e6cd611ee2bef2e9ccca9afaba403b0eed5b8ea03a8b102c31d9dea1d7e1d0bd54660d9361b0f1e8625fa8e9d1a1b382ec54704cf7ef983ddb1f39e991e42936483046ec3c7d37684b119f22d39aac90b980882dcaf2dcb05c513755bca9487335dc3bc61c5cdf4d8ec2a9fafa983bbec4397e7518e1bba9c25a7141e04734783cb4539a698dd24996c97d9417e590e9d6ec142eff5457b1a30c94b5a224a3d8b42a4e424da075a6b9b0e452e0d1ad2f7d0c572178ad6e914ce09ce1dbe4ce9e0e5fd7ced0aa1fda1a732b1c113f64fe661e2ff7c53d6a511005c6f46d5aa7a3c9e9c1e1f21c0a19a3a00398ac51249248c50ea95ce21f6b9f04b77c598779c0c66967c2050f80ee4a65ce6aa4c753b26f28748567104a2db51d7fb80ea021854206a365acc15c1192920c260ee6c0d577fa02f779213590861df3d9322e2d7f0030", 0x1000}], 0x1, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xa}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="38d1f1ec09dd95ec8b6c54e461ad7aa90ca1b7ab6b41e791002fc027663fb8c239d0e0de55191d5b632f511e9ae728b6e7d54183577ad598c01bb84812f9f70be9324228dba2e97a4cd3a8700e442755e2946e4ad2cd786e47bd3c26fb3c1c7d70b129ca14681631885f9ef1fc04e2526cc10137bd4ef75623ff7abbc8748e8e3005d6446b3ad6f70fb3a7ed80b3fffc71cfd374681b024c66968585d02182fb7b26e7c13d7e03d2ca060986cac03b6f6b9cff250fe3fc34cfb49a6922b6c0363a3860f70924b230a9057c1d5ced99c9e32e20d6498fbd9cb6548ea8f5bbdb7c", 0xe0}, {&(0x7f0000000600)="d1a269f161147316d661955cb1f1d2417d40cbfee330e8bd8e7a41b50a0eef52a9f5a4f71297733e758777efcebedaa8d2bdc631fcfa1fce05d54a0fd951f673595fed2d3c024d27b0c0a31bd7fb2361c5088c624ea1506bce550333395609a9dc30e8345520eee5ab24c25648433eefec714ed8c6b612f0054f5bd2eaffdd8e07859091b1ecbcd51de1a4ff76efb19271fe8da4ca8423c92bc4459baccf01d9e7c8a624e36b52fecf1379179a22e6a7fae743ee004652004863276cafe0c3afa52298980ea4880e33f3626e62975d01cc", 0xd1}, {&(0x7f0000000700)="62aa99d7b4a6a5dbaf9a88ad3e8a0d491b64c779d7d373c6c5fd2ea6ba9faded9cf18bf79927769039cc7bda71fadcd882aa60b071c7605bdf333843594a63305ac9d778265650e0c1805c7609d1f33b2758b54fcdd8a8f6d289c6fef2ca7ae7feb6fd1fffd1980982dbe5e88e92923e2cfef199ef3a66d12dcd2a28a187deee5e80e986", 0x84}], 0x3, &(0x7f0000000580)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x18}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002980)="bf501620bf684d4afadd892bee8694486108c9e79dffa7cb8cca86835f6f725a3fb1cbd4d81cc5094ebe4025f1c35391253f582dc986756582d8dc2e055df235ed8029858b41a6fbff8c47c215842678e57d9b4915a3f432aba78cc7f701f632e5c72ade2545561dd2b2695024f7c2cbc5acddff19ca13bdb4396f5b6a23b031feff19b0a115272f4e19adef00b13ceadc9c50cce117b1380aa4826c11f4138d89686baac00630499eeb9a36d7827c4202a7b49fff0a4a6f1b1b3a5339b664695aca8e761c", 0xc5}, {&(0x7f0000002a80)="eea0f9b289560561375d9da7379c2be74e1a587d5750f4397f95314c6409c3515035f18138c869519c09eccdeef19519a99647200984dd27773ee4709c47253a2089d06c57bfec620fd2f579ca9333ed0668da56fb7ce60bf30769b40a00a82fdda56d1dcc", 0x65}], 0x2}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002c00)="cac77255e73ccf23c243b175f9a06dd9535da138851562b51bfe8f758204f7f7d158883ed4c274d85e9389b8bc343329facaa5d2cedc233ee6e2f260d950d8b9d2b867a9373bc5498f3d9add5a8c36c2", 0x50}, {&(0x7f0000002c80)="bf24d5aac0e7c45e698ab48652e83a2d4367b33b55922dc8db8a12a4b50c95688e1866218cace696fea11b8cafda91dfd675b0bdb173cb7e62ba76102bd093c0281ee833a4f909c35a4a1f616259389a968f4f92b49955d1", 0x58}], 0x2}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002e40)="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", 0xfb}, {&(0x7f0000002f40)="748410b85bfc303c43985634133ced079e38048d4d3e7cbce5ad62223601dcde8855e9ed04ab2c228c6fc4788e9cf9d22640e3778b5dd7", 0x37}], 0x2}}, {{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000003040)="b156c41a2929162a1a52257909b985800c176a938be48882c3e8bd2cba560a3f016b98697a", 0x25}, {&(0x7f0000005080)="8f2fe4fd4f4e8ca1bec8caed5694928dc279442ed9bae19b1286ec5bfb6d50fa2b4432dd", 0x24}, {&(0x7f00000050c0)="6941e12fed4321fa8fdd31b6df69004924ff02757229e7694cdc4cd33bcf9d06eded710436939bb4aa97f84b99fe5db0fb91188d39a6ecd6afb83ba88c46ae0577d6f8f20a30121cf0dc441cd298ba274a29bcdd420ad4cec5c2bd31812257754a167964fe4bb875e2f83b1b6515ae44c37d6355f173b9cf16cc4ea65d9c5d7b856cb235fb2a01394499230672d341944fceed", 0x93}, {&(0x7f0000005180)="a4d9c6df8680d0", 0x7}], 0x4}}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000005340)="54f73c59240ebda5dd9abc49df13191d3202e13274507ddd2e9fb0f6b902837bb5410ffc7c118907527b151d37593387d517cab0fff487d33e1e96b83a", 0x3d}, {&(0x7f0000005380)="d13c86923dbcee4662019ea86aed0313f1e21987accbe0a7cc896c997d901a9ac4624ef3c97c6820c322c77c5d95f0e6bb5891a2c8b92983ff1e00e9ae0df8da06e35603db1f303ba86689aebcc269680825295306f8e2aad707ddd59f6029f54cecd35e5354bd4f31335a55afb14e148c5ff7611e38ad157d10a249d8", 0x7d}], 0x2}}, {{0x0, 0x0, &(0x7f0000005680)=[{&(0x7f0000005580)="3f5c4dcca5db028e09b1d636d43fc68eea029e436817364966fc3f593cf66bc8fa51d19b9e396c14082f1f8aa7c16890b2eb173c15053ee495cbeadd905933729362de1f773cd798fcb10f5ed72e390185ac3cfbc5a41cd8f93b3c59e5881af6e0818cf6ac4e9cdda9186f1bdd41b6c5e19cf4fe5c6159c29453f0ef27c849055193b850e71b1167d2d3bbc4dfda310d939fe345b5e5a7a4e4c28cd22e2cdf878809ea4c08e830900b5141cadc4e324bce10d67455a2c4bfa7c1ae2c7d31a393e3e3d6f8436115a57973b440bddd5c1c8ddb239e995cf977128bc6ce34a0c858a73472e78873d71b469fb9", 0xeb}], 0x1}}, {{0x0, 0x0, &(0x7f0000005840)=[{&(0x7f0000005740)="995ac5f2efbdfec0eec28bb6dfed840640b41f7d5733547c160dc4053bd34d7598a71675671dbd70ccf4be26069a3a3c49f71e08f57fe8bea58b5286223d62957543f5e63eb774c11f78453710adffd4fd1b824654273287958c96a11f83fd12f821770fca2d91da0f6c76d6291a2964551292fbbeb80e27971773f20a94492864ba14024cf7f0f40c67c5d624c73c7af711fd984b6dc0644edc430d81ffb3e8bab9d1c0d7cfb6c1f3b9b95e7f8a113e52402275dd2796907ad35104710a102bb0adeea041288534", 0xc8}], 0x1}}, {{0x0, 0x0, &(0x7f0000007c80)=[{&(0x7f0000005940)="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", 0x70d}, {0x0}], 0x2}}], 0xd, 0x8004) 7.348892435s ago: executing program 3 (id=843): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_MM_AUXV(0x4a, 0xc, &(0x7f0000001980), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/xfrm_stat\x00') memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x1e, 0x10, 0x200, &(0x7f0000000880)="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"}) r5 = io_uring_setup(0x79bc, &(0x7f0000000140)={0x0, 0x4, 0x40, 0x4, 0x376}) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close_range(r5, 0xffffffffffffffff, 0x200000000000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.132572563s ago: executing program 5 (id=844): socket$kcm(0x29, 0x5, 0x0) memfd_secret(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newtaction={0x304, 0x30, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{0x2f0, 0x1, [@m_skbedit={0x1e8, 0x18, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0xa}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x1, 0xffffffffeffffffb, 0x6, 0x101}}]}, {0x191, 0x6, "de616dd9ce3b892bb6fafca061bed3e644dcf9151f4527045657b89def02bb9cad6c62f8293cff1e7df3eb0803889f2fd92b151ed17ab9007c47463bf4e7afe47ab1d24292b0103cbbc15977a51c0ae02a16535a666c86a6321ae76cba859e771aa7d0ff9fa033e50e56e0f68419fd47894ab8f8d473fc2af5fc18fb9399fdbb44bce22ac4c64feea69875f61ef4f46591d0547ce0f025b0a5f6dc470fd9635a05e318fa41b23e07582b3128621edbf17703923cea8b079f042f9924f50ce06116fc38e34430e0a4b60e7144cccb31d0a0457e528dd782264fec2417bd1b18aa82a223185cee31b2989e534df535b22243ec2971118b283cebb23130d1622a675cabf8788d71473f98949841ab1c34d28257f4b10e6eec198365490620753627951432cf82875ec0fccc70181d74035e141d4bbdd59571d5c3fa68b6a9365539b7e734e38e7083fe43b3104f03a618c99dc38b7b166c71dcda72645a7ddd09b867d20ef1d0f2154c6c2af7bfc13509c92a055f4ba6134cf5124359fccca93ea9ef30597c542c2e259bbd96051f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0xd4, 0x1c, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}]}, {0x9b, 0x6, "ebb7905fe91e9be4677d59a9642fd119d19ac5e190bf4b0f9f2859657921b9c6fce506e2b627b610552adbd25f19af61b6f9b1603735a6e3d97188050bf1e9e04f7b370bf4a6645e82f7d27fe7ecb451e477ceac7c3e03294761182420c71011ec9e6197a94d09c8348554283a8308b47f98b0290d314bd466fd232ac06f2714af49e9c6aab9f06632e3c3c186c30993075db909549bd0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x30, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x304}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/70, 0x46}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="10000180040004800800010072"], 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000200)={0x1, &(0x7f00000003c0)=[{0x80, 0x5}]}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) fanotify_init(0x20, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 7.112648099s ago: executing program 0 (id=845): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) futex(&(0x7f0000000000)=0x2, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x2) 6.601965866s ago: executing program 1 (id=846): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf37, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r0, r4, 0x8f5, 0x100000000000000) write(r2, 0x0, 0x0) 6.595882619s ago: executing program 3 (id=847): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) userfaultfd(0x801) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000500)=0x9, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) sendmmsg(r3, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x5a) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x1, 0x70bd2b, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20008}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 5.503295732s ago: executing program 0 (id=848): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x80, 0x0, 0xc}, {@in6=@mcast1, 0x20000, 0x32}, @in=@broadcast, {0x800, 0x6, 0x800000000, 0xc, 0x8, 0x0, 0x0, 0x40000f}, {0xffffffffffffffff, 0x3, 0xa}, {0x0, 0x1f}, 0x70bd28, 0x0, 0x2, 0x7}, 0x0, 0xfffffffe}, [@tfcpad={0x8, 0x16, 0x5583}]}, 0x100}}, 0x0) syz_io_uring_setup(0x1f8b, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x2}, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x4, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x3, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r2 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) ppoll(&(0x7f00000001c0)=[{}, {}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_audit(0x10, 0x3, 0x9) read$msr(0xffffffffffffffff, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r6, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x0, 0xfffff001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@flowinfo={{0x10, 0x29, 0xb, 0x3}}, @flowinfo={{0x10}}], 0x20}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r5, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x33, 0xf00) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000004a00)=""/4096, 0x9b, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000400)={'wlan0\x00', &(0x7f0000000680)=@ethtool_stats}) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd4000980060001"], 0x140}}, 0x0) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000002980)=""/4096, 0x1000}], 0x1}, 0x9}], 0x3, 0x2000, 0x0) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{0x0}, {&(0x7f00000000c0)=""/78, 0x4e}, {&(0x7f00000002c0)=""/105, 0x69}, {&(0x7f0000001740)=""/240, 0xf0}, {&(0x7f0000000340)=""/209, 0xd1}], 0x5}, 0x5}], 0x1, 0x40012120, 0x0) gettid() ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000880)={"4144f5d7", 0x7, 0x3, 0x5, 0xfffffff8, 0x9, "98737d86496f30b7c443a2c59335eb", "074a9320", "c29a6e56", "24774df4", ["e9b4b51f8cc199f20151febb", "8648ccd090788ed0c75e89a7", "b4e2974e000e3f47e0b4f17c", "03e23e622b3a3e6b4c51c515"]}) 5.429755443s ago: executing program 5 (id=849): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000002040)=""/4079, 0xfef}, {&(0x7f00000006c0)=""/84, 0x54}, {0x0}, {0x0}, {&(0x7f0000000140)=""/61, 0x3d}], 0x6}, 0x40012002) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_NMI(r6, 0xae9a) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0xf0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xf, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000004dc710000004000000"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x9, &(0x7f0000000580)=""/9, 0x41000, 0xc, '\x00', 0x0, @cgroup_device, r2, 0x8, &(0x7f00000005c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0xd, 0x1e4b, 0x3}, 0x10, 0x0, r3, 0x5, &(0x7f0000000bc0)=[r2, r2, r2, r2, r2], &(0x7f0000000c00)=[{0x0, 0x1, 0x9, 0x1}, {0x1, 0x1, 0x4}, {0x2, 0x5, 0x0, 0x1}, {0x3, 0x2, 0x3, 0x5}, {0x1, 0x3, 0xb, 0xb}], 0x10, 0x5, @void, @value}, 0x94) stat(&(0x7f0000000080)='./file0\x00', 0x0) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0x41c400, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000040), 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18020000fcffffef0092000000950000000000000000000000000000000000009bc7efffda54b0b5ebd65a5f4e1ca4d74163bf9823dd818dcb137e237d4493c5db677b34e3ef68836f4f459c725d558a02a188dba7e89012cd158887da71ae155152e1a97b07acabaf133da9fb4f2f71ecf16c6c4a792b43820886f8d6cd79db598ad273f13625b900782178c1e5fb83ca0622edb71a2cea712ad5c53f4ea7fc52f604"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) sendto$inet6(r0, &(0x7f0000000740)="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", 0x170, 0x4, &(0x7f00000000c0)={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x5}, 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 5.364897417s ago: executing program 1 (id=850): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002400)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be10a42f01fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x10da) 5.171116736s ago: executing program 1 (id=851): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x400000}, 0xc) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x18040) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newsa={0xec, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x0, 0x3500, 0xa, 0x4}}, 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0) bind$alg(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x2) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'veth0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r8, 0x80047437, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xd8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) 5.031200376s ago: executing program 1 (id=852): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x8918, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0xc2280, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r2, r2, 0x2) recvmsg(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002940)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x38}], 0x9}, 0x40000021) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="280000001400190800000000000000002c"], 0x28}}, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000000c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x258a, 0x33, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfffc, 0x16, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000040)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB='\x00!\r'], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x3ff}, 0x8) 4.902085812s ago: executing program 3 (id=853): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0x0, r2, {0x7, 0x2b, 0xffffff4a, 0x20000000, 0x5, 0x7, 0x3, 0x3, 0x0, 0x0, 0x1, 0x89}}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', r5, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000040)={"846bb400", 0xffff, 0x6, 0x2, 0x5, 0x0, "f1842cc3e94627219cca0000fe3100", "000416e2", "0400", '\x00 \x00 ', ["90000000060000000800", "aafed6a34c8acf2f5a867243", "000000ff0000000000000020", "000200"]}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(r9, 0x1276, 0x20000000) 3.968372587s ago: executing program 4 (id=854): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d0000008500000023000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r1, r3, 0x1, 0x0, @void}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4, 0x1}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) 1.872284793s ago: executing program 0 (id=855): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$sock(r1, &(0x7f000000b480)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)='N', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="01a75fbc26ac8814326100f10000000000000033423c60798133deebdb831d789cf632d9481273d790271d4f83f1bbcf1e126f609614fbffffffffffffff0abc833bc8b91b3751ac0b3b971f7eb767af3b14c5dd21468a9e180b220e9e197d0c0f40", 0x62}, {0x0}], 0x2}}, {{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x4, 0x0, {0xa, 0x4e21, 0x80000001, @loopback, 0x400}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000000180)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xf}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x48}}, {{&(0x7f00000002c0)=@l2={0x1f, 0xb, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000980)="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", 0x1000}], 0x1, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xa}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="38d1f1ec09dd95ec8b6c54e461ad7aa90ca1b7ab6b41e791002fc027663fb8c239d0e0de55191d5b632f511e9ae728b6e7d54183577ad598c01bb84812f9f70be9324228dba2e97a4cd3a8700e442755e2946e4ad2cd786e47bd3c26fb3c1c7d70b129ca14681631885f9ef1fc04e2526cc10137bd4ef75623ff7abbc8748e8e3005d6446b3ad6f70fb3a7ed80b3fffc71cfd374681b024c66968585d02182fb7b26e7c13d7e03d2ca060986cac03b6f6b9cff250fe3fc34cfb49a6922b6c0363a3860f70924b230a9057c1d5ced99c9e32e20d6498fbd9cb6548ea8f5bbdb7c", 0xe0}, {&(0x7f0000000600)="d1a269f161147316d661955cb1f1d2417d40cbfee330e8bd8e7a41b50a0eef52a9f5a4f71297733e758777efcebedaa8d2bdc631fcfa1fce05d54a0fd951f673595fed2d3c024d27b0c0a31bd7fb2361c5088c624ea1506bce550333395609a9dc30e8345520eee5ab24c25648433eefec714ed8c6b612f0054f5bd2eaffdd8e07859091b1ecbcd51de1a4ff76efb19271fe8da4ca8423c92bc4459baccf01d9e7c8a624e36b52fecf1379179a22e6a7fae743ee004652004863276cafe0c3afa52298980ea4880e33f3626e62975d01cc", 0xd1}, {&(0x7f0000000700)="62aa99d7b4a6a5dbaf9a88ad3e8a0d491b64c779d7d373c6c5fd2ea6ba9faded9cf18bf79927769039cc7bda71fadcd882aa60b071c7605bdf333843594a63305ac9d778265650e0c1805c7609d1f33b2758b54fcdd8a8f6d289c6fef2ca7ae7feb6fd1fffd1980982dbe5e88e92923e2cfef199ef3a66d12dcd2a28a187deee5e80e986", 0x84}], 0x3, &(0x7f0000000580)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x18}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002980)="bf501620bf684d4afadd892bee8694486108c9e79dffa7cb8cca86835f6f725a3fb1cbd4d81cc5094ebe4025f1c35391253f582dc986756582d8dc2e055df235ed8029858b41a6fbff8c47c215842678e57d9b4915a3f432aba78cc7f701f632e5c72ade2545561dd2b2695024f7c2cbc5acddff19ca13bdb4396f5b6a23b031feff19b0a115272f4e19adef00b13ceadc9c50cce117b1380aa4826c11f4138d89686baac00630499eeb9a36d7827c4202a7b49fff0a4a6f1b1b3a5339b664695aca8e761c", 0xc5}, {&(0x7f0000002a80)="eea0f9b289560561375d9da7379c2be74e1a587d5750f4397f95314c6409c3515035f18138c869519c09eccdeef19519a99647200984dd27773ee4709c47253a2089d06c57bfec620fd2f579ca9333ed0668da56fb7ce60bf30769b40a00a82fdda56d1dcc", 0x65}], 0x2}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002c00)="cac77255e73ccf23c243b175f9a06dd9535da138851562b51bfe8f758204f7f7d158883ed4c274d85e9389b8bc343329facaa5d2cedc233ee6e2f260d950d8b9d2b867a9373bc5498f3d9add5a8c36c2", 0x50}, {&(0x7f0000002c80)="bf24d5aac0e7c45e698ab48652e83a2d4367b33b55922dc8db8a12a4b50c95688e1866218cace696fea11b8cafda91dfd675b0bdb173cb7e62ba76102bd093c0281ee833a4f909c35a4a1f616259389a968f4f92b49955d1", 0x58}], 0x2}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002e40)="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", 0xfb}, {&(0x7f0000002f40)="748410b85bfc303c43985634133ced079e38048d4d3e7cbce5ad62223601dcde8855e9ed04ab2c228c6fc4788e9cf9d22640e3778b5dd7", 0x37}], 0x2}}, {{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000003040)="b156c41a2929162a1a52257909b985800c176a938be48882c3e8bd2cba560a3f016b98697a", 0x25}, {&(0x7f0000005080)="8f2fe4fd4f4e8ca1bec8caed5694928dc279442ed9bae19b1286ec5bfb6d50fa2b4432dd", 0x24}, {&(0x7f00000050c0)="6941e12fed4321fa8fdd31b6df69004924ff02757229e7694cdc4cd33bcf9d06eded710436939bb4aa97f84b99fe5db0fb91188d39a6ecd6afb83ba88c46ae0577d6f8f20a30121cf0dc441cd298ba274a29bcdd420ad4cec5c2bd31812257754a167964fe4bb875e2f83b1b6515ae44c37d6355f173b9cf16cc4ea65d9c5d7b856cb235fb2a01394499230672d341944fceed", 0x93}, {&(0x7f0000005180)="a4d9c6df8680d0", 0x7}], 0x4}}, {{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000005340)="54f73c59240ebda5dd9abc49df13191d3202e13274507ddd2e9fb0f6b902837bb5410ffc7c118907527b151d37593387d517cab0fff487d33e1e96b83a", 0x3d}, {&(0x7f0000005380)="d13c86923dbcee4662019ea86aed0313f1e21987accbe0a7cc896c997d901a9ac4624ef3c97c6820c322c77c5d95f0e6bb5891a2c8b92983ff1e00e9ae0df8da06e35603db1f303ba86689aebcc269680825295306f8e2aad707ddd59f6029f54cecd35e5354bd4f31335a55afb14e148c5ff7611e38ad157d10a249d8", 0x7d}], 0x2}}, {{0x0, 0x0, &(0x7f0000005680)=[{&(0x7f0000005580)="3f5c4dcca5db028e09b1d636d43fc68eea029e436817364966fc3f593cf66bc8fa51d19b9e396c14082f1f8aa7c16890b2eb173c15053ee495cbeadd905933729362de1f773cd798fcb10f5ed72e390185ac3cfbc5a41cd8f93b3c59e5881af6e0818cf6ac4e9cdda9186f1bdd41b6c5e19cf4fe5c6159c29453f0ef27c849055193b850e71b1167d2d3bbc4dfda310d939fe345b5e5a7a4e4c28cd22e2cdf878809ea4c08e830900b5141cadc4e324bce10d67455a2c4bfa7c1ae2c7d31a393e3e3d6f8436115a57973b440bddd5c1c8ddb239e995cf977128bc6ce34a0c858a73472e78873d71b469fb9", 0xeb}], 0x1}}, {{0x0, 0x0, &(0x7f0000005840)=[{&(0x7f0000005740)="995ac5f2efbdfec0eec28bb6dfed840640b41f7d5733547c160dc4053bd34d7598a71675671dbd70ccf4be26069a3a3c49f71e08f57fe8bea58b5286223d62957543f5e63eb774c11f78453710adffd4fd1b824654273287958c96a11f83fd12f821770fca2d91da0f6c76d6291a2964551292fbbeb80e27971773f20a94492864ba14024cf7f0f40c67c5d624c73c7af711fd984b6dc0644edc430d81ffb3e8bab9d1c0d7cfb6c1f3b9b95e7f8a113e52402275dd2796907ad35104710a102bb0adeea041288534", 0xc8}], 0x1}}, {{0x0, 0x0, &(0x7f0000007c80)=[{&(0x7f0000005940)="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", 0x70d}, {0x0}], 0x2}}], 0xd, 0x8004) 1.778359082s ago: executing program 0 (id=856): r0 = syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000a40)={0x0, 0x5}) iopl(0x3) accept$ax25(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d9ecffb1f7310379688f5902fc33aa318d821c4d10207a25891b272660f838dd5886e631fb274706fb651d7913163acbebcbcaddbb4e327", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',k']) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x14}]}, 0x3c}}, 0x48004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r9, r8}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 1.777926211s ago: executing program 5 (id=857): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) userfaultfd(0x801) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000500)=0x9, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x50, 0x0, 0x0, 0x9, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x5a) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_bond\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x2300, 0x0, 0x0, 0x0, 0x1, 0x2}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x1, 0x70bd2b, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20008}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x0) sigaltstack(&(0x7f0000001040)={&(0x7f0000001080)=""/4125, 0x80000000, 0x101d}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 746.149842ms ago: executing program 1 (id=858): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) r4 = io_uring_setup(0x1694, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000feffffff9500000000000000451b13b39f9773908b5945d9328f6e617e120c9e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f0000000340)={0x0, 0x6, 0x0, 0x2, '\x00', '\x00', '\x00', 0x0, 0x0, 0x100, 0x0, "abd206a1ebd7cedfd17ebd65400ed41b"}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f0000000580), 0x1) 745.699342ms ago: executing program 0 (id=859): socket$kcm(0x29, 0x5, 0x0) memfd_secret(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newtaction={0x304, 0x30, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{0x2f0, 0x1, [@m_skbedit={0x1e8, 0x18, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0xa}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x1, 0xffffffffeffffffb, 0x6, 0x101}}]}, {0x191, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0xd4, 0x1c, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}]}, {0x9b, 0x6, "ebb7905fe91e9be4677d59a9642fd119d19ac5e190bf4b0f9f2859657921b9c6fce506e2b627b610552adbd25f19af61b6f9b1603735a6e3d97188050bf1e9e04f7b370bf4a6645e82f7d27fe7ecb451e477ceac7c3e03294761182420c71011ec9e6197a94d09c8348554283a8308b47f98b0290d314bd466fd232ac06f2714af49e9c6aab9f06632e3c3c186c30993075db909549bd0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x30, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x304}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/70, 0x46}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="10000180040004800800010072"], 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000200)={0x1, &(0x7f00000003c0)=[{0x80, 0x5}]}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) fanotify_init(0x20, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 739.828645ms ago: executing program 4 (id=860): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="010000001184f9bb1c0012800b0001006d616373656300000c0002800500", @ANYRES32=r1], 0x44}}, 0x0) 576.187169ms ago: executing program 3 (id=861): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002400)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be10a42f01fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x10da) 0s ago: executing program 1 (id=862): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) userfaultfd(0x801) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000500)=0x9, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) sendmmsg(r3, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x50, 0x0, 0x0, 0x9, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x5a) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_bond\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x2300, 0x0, 0x0, 0x0, 0x1, 0x2}}) sigaltstack(&(0x7f0000001040)={&(0x7f0000001080)=""/4125, 0x80000000, 0x101d}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) kernel console output (not intermixed with test programs): 01 [ 167.653945][ T6772] R13: 0000000000000000 R14: 00007fe83f1b6160 R15: 00007fffa36833c8 [ 167.653977][ T6772] [ 168.340710][ T5822] usb 3-1: USB disconnect, device number 9 [ 170.114424][ T5878] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 170.294527][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 170.312257][ T6788] program syz.4.251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.604254][ T5914] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 170.636207][ T5878] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 170.677866][ T5878] usb 1-1: config 0 has no interface number 0 [ 170.723541][ T5878] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 170.754219][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.781384][ T5878] usb 1-1: Product: syz [ 170.784373][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 170.788130][ T5878] usb 1-1: Manufacturer: syz [ 170.799975][ T5878] usb 1-1: SerialNumber: syz [ 170.802835][ T5914] usb 2-1: no configurations [ 170.811029][ T5914] usb 2-1: can't read configurations, error -22 [ 170.817875][ T5878] usb 1-1: config 0 descriptor?? [ 170.846042][ T5878] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 170.974401][ T5914] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 171.024471][ T5822] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 171.134815][ T6800] netlink: 212 bytes leftover after parsing attributes in process `syz.4.255'. [ 171.219489][ T6800] @: renamed from vlan0 (while UP) [ 171.308962][ T5822] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.325195][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 171.633036][ T6782] 9pnet_fd: Insufficient options for proto=fd [ 171.637732][ T5822] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.654805][ T5914] usb 2-1: no configurations [ 171.668926][ T5914] usb 2-1: can't read configurations, error -22 [ 171.679263][ T5822] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 171.704589][ T5914] usb usb2-port1: attempt power cycle [ 171.718356][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.747268][ T5822] usb 3-1: Product: syz [ 171.754744][ T5822] usb 3-1: Manufacturer: syz [ 171.775304][ T5822] usb 3-1: SerialNumber: syz [ 172.052704][ T5822] usb 3-1: 0:2 : does not exist [ 172.104581][ T5914] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 172.121742][ T5822] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 172.138891][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 172.157555][ T5914] usb 2-1: no configurations [ 172.162282][ T5914] usb 2-1: can't read configurations, error -22 [ 172.385268][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.257'. [ 172.934834][ T5878] gspca_topro: reg_w err -110 [ 173.048055][ T5878] gspca_topro: Sensor soi763a [ 173.117042][ T5878] usb 1-1: USB disconnect, device number 9 [ 173.138052][ T5822] usb 3-1: USB disconnect, device number 10 [ 173.177763][ T6809] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.258'. [ 173.338423][ T59] libceph: connect (1)[c::]:6789 error -101 [ 173.352330][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 173.389456][ T6812] ceph: No mds server is up or the cluster is laggy [ 173.405254][ T6241] udevd[6241]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.796874][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 173.803373][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 173.882898][ T6827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.262'. [ 174.074869][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 174.104408][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 174.341670][ T6835] program syz.0.265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.765017][ T5878] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 174.853793][ T6825] ceph: No mds server is up or the cluster is laggy [ 174.927264][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.268'. [ 174.996309][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 175.004939][ T5878] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.021043][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 175.039503][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 175.042407][ T6842] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.059454][ T6842] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.070189][ T6842] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.080299][ T6842] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.107142][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 175.114343][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.269'. [ 175.156795][ T5878] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.195149][ T5878] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.218242][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.281477][ T6842] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.282468][ T5878] usb 4-1: config 0 descriptor?? [ 175.290530][ T6842] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.304600][ T6842] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.313501][ T6842] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.624354][ T5875] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 175.740665][ T5878] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 175.754295][ T5878] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 175.761843][ T5878] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 175.777026][ T5878] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 175.789305][ T5878] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 175.797045][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 175.808410][ T5875] usb 3-1: no configurations [ 175.813059][ T5875] usb 3-1: can't read configurations, error -22 [ 175.847200][ T5878] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 175.857930][ T6852] ptm ptm7: ldisc open failed (-12), clearing slot 7 [ 175.934032][ T5878] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 175.988443][ T6858] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.272'. [ 176.032690][ T5875] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 176.228278][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 176.261567][ T5875] usb 3-1: no configurations [ 176.278020][ T5875] usb 3-1: can't read configurations, error -22 [ 176.311413][ T5875] usb usb3-port1: attempt power cycle [ 176.345992][ T6863] NILFS (nbd0): device size too small [ 176.464715][ T5822] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 176.654200][ T5822] usb 2-1: Using ep0 maxpacket: 32 [ 176.668582][ T5822] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.684485][ T5875] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 176.697822][ T5822] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.723567][ T5822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 176.737192][ T5822] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 176.785482][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 176.794369][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.802487][ T5875] usb 3-1: no configurations [ 176.802507][ T5875] usb 3-1: can't read configurations, error -22 [ 176.908640][ T5822] usb 2-1: config 0 descriptor?? [ 176.924649][ T5875] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 176.966028][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 176.972243][ T5875] usb 3-1: no configurations [ 177.022344][ T5875] usb 3-1: can't read configurations, error -22 [ 177.073888][ T5875] usb usb3-port1: unable to enumerate USB device [ 177.095568][ T9] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 177.558793][ T6877] program syz.0.279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.686979][ T5822] chicony 0003:04F2:1236.0003: unknown main item tag 0x1 [ 177.708490][ T5822] chicony 0003:04F2:1236.0003: unknown main item tag 0x0 [ 177.752634][ T5822] chicony 0003:04F2:1236.0003: hidraw1: USB HID v0.05 Device [HID 04f2:1236] on usb-dummy_hcd.1-1/input0 [ 177.802193][ T5822] usb 2-1: USB disconnect, device number 9 [ 178.000392][ T6880] fido_id[6880]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 178.428569][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.281'. [ 178.507616][ T5914] usb 4-1: USB disconnect, device number 6 [ 179.834003][ T6898] 9pnet_fd: Insufficient options for proto=fd [ 180.581555][ T6897] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 180.638705][ T6906] NILFS (nbd2): device size too small [ 181.755404][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 181.832826][ T6920] netlink: 200 bytes leftover after parsing attributes in process `syz.0.293'. [ 182.668693][ T6928] program syz.3.294 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.533395][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 184.159095][ T5914] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 184.360969][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 184.394702][ T5914] usb 4-1: no configurations [ 184.399377][ T5914] usb 4-1: can't read configurations, error -22 [ 184.644245][ T5914] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 184.646255][ T6949] NILFS (nbd0): device size too small [ 185.364581][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 185.385982][ T5914] usb 4-1: no configurations [ 185.390869][ T5914] usb 4-1: can't read configurations, error -22 [ 185.398086][ T5914] usb usb4-port1: attempt power cycle [ 185.794293][ T5914] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 186.760511][ T5875] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 187.198793][ T5875] usb 3-1: config 253 has an invalid interface number: 57 but max is 0 [ 187.449421][ T5875] usb 3-1: config 253 has no interface number 0 [ 187.553602][ T5875] usb 3-1: config 253 interface 57 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 187.853441][ T5914] usb 4-1: device not accepting address 9, error -71 [ 187.928155][ T5875] usb 3-1: New USB device found, idVendor=1546, idProduct=1313, bcdDevice=1c.86 [ 188.060252][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.203308][ T5875] usb 3-1: Product: syz [ 188.270068][ T5875] usb 3-1: Manufacturer: syz [ 188.307535][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.305'. [ 188.321871][ T5875] usb 3-1: SerialNumber: syz [ 188.349234][ T6962] netlink: 200 bytes leftover after parsing attributes in process `syz.4.305'. [ 188.498973][ T6971] netlink: 'syz.3.308': attribute type 1 has an invalid length. [ 188.508185][ T6971] netlink: 'syz.3.308': attribute type 2 has an invalid length. [ 188.519193][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.308'. [ 188.605317][ T5919] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 188.934219][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 188.982879][ T5919] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 189.053375][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 189.087086][ T5919] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 189.111937][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.142030][ T5919] usb 1-1: Product: syz [ 189.424256][ T5919] usb 1-1: Manufacturer: syz [ 189.428935][ T5919] usb 1-1: SerialNumber: syz [ 189.498915][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.310'. [ 190.174551][ T5919] usb 1-1: config 0 descriptor?? [ 190.183430][ T5919] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 190.185174][ T5875] cdc_ether 3-1:253.57: invalid descriptor buffer length [ 190.199335][ T5919] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 190.269593][ T5875] usb 3-1: bad CDC descriptors [ 190.352140][ T5875] usb 3-1: USB disconnect, device number 15 [ 190.674261][ T5914] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 190.674424][ T24] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 190.793752][ T6991] ======================================================= [ 190.793752][ T6991] WARNING: The mand mount option has been deprecated and [ 190.793752][ T6991] and is ignored by this kernel. Remove the mand [ 190.793752][ T6991] option from the mount to silence this warning. [ 190.793752][ T6991] ======================================================= [ 190.828731][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.851077][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 190.872829][ T5914] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 190.900574][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.923801][ T5914] usb 4-1: Product: syz [ 190.940909][ T5914] usb 4-1: Manufacturer: syz [ 190.951059][ T5914] usb 4-1: SerialNumber: syz [ 190.973339][ T5914] usb 4-1: config 0 descriptor?? [ 190.980753][ T24] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 191.008174][ T5914] gm12u320 4-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8 [ 191.015069][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.053291][ T5914] gm12u320 4-1:0.0: probe with driver gm12u320 failed with error -5 [ 191.075265][ T24] usb 5-1: config 0 descriptor?? [ 191.106863][ T24] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 191.107166][ T5914] usb-storage 4-1:0.0: USB Mass Storage device detected [ 191.671071][ T5914] usb-storage 4-1:0.0: device ignored [ 191.677986][ T24] usb 5-1: Detected FT232A [ 191.692422][ T24] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 192.005376][ T5919] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 192.025444][ T5919] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 192.035524][ T5919] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 192.064314][ T5919] em28xx 1-1:0.0: No AC97 audio processor [ 192.197320][ T24] usb 4-1: USB disconnect, device number 11 [ 192.348770][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 192.360973][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 192.409397][ T7009] ceph: No mds server is up or the cluster is laggy [ 192.849033][ T24] usb 1-1: USB disconnect, device number 10 [ 192.883611][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 192.925841][ T24] em28xx 1-1:0.0: Freeing device [ 193.318858][ T5914] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 193.515001][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 193.527822][ T7022] netlink: 200 bytes leftover after parsing attributes in process `syz.0.320'. [ 193.604799][ T5876] usb 5-1: USB disconnect, device number 9 [ 193.633378][ T5876] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 193.643007][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 193.677082][ T5876] ftdi_sio 5-1:0.0: device disconnected [ 193.692088][ T5914] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 193.704223][ T5914] usb 3-1: can't read configurations, error -61 [ 193.856202][ T5914] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 194.252923][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.260068][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.260075][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 194.287579][ T5914] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 194.420698][ T5914] usb 3-1: can't read configurations, error -61 [ 194.480393][ T5914] usb usb3-port1: attempt power cycle [ 194.522473][ T7031] nbd3: detected capacity change from 0 to 4294967296 [ 194.564616][ T7035] netlink: 76 bytes leftover after parsing attributes in process `syz.0.323'. [ 195.024648][ T5914] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 195.704488][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 195.705803][ T5829] block nbd3: Receive control failed (result -104) [ 195.715396][ T7031] block nbd3: shutting down sockets [ 196.226303][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.235645][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 196.278078][ T7036] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.293629][ T7036] Buffer I/O error on dev nbd3, logical block 0, async page read [ 196.334800][ T7036] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.351818][ T5914] usb 3-1: device descriptor read/all, error -71 [ 196.385640][ T7036] Buffer I/O error on dev nbd3, logical block 0, async page read [ 196.416182][ T7036] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.444600][ T7036] Buffer I/O error on dev nbd3, logical block 0, async page read [ 196.462345][ T7036] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.551503][ T7036] Buffer I/O error on dev nbd3, logical block 0, async page read [ 196.654519][ T7036] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.663784][ T7036] Buffer I/O error on dev nbd3, logical block 0, async page read [ 196.672725][ T7036] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.681879][ T7036] Buffer I/O error on dev nbd3, logical block 0, async page read [ 196.689977][ T7036] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.699122][ T7036] Buffer I/O error on dev nbd3, logical block 0, async page read [ 196.707126][ T7036] ldm_validate_partition_table(): Disk read failed. [ 196.714087][ T7036] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.304576][ T7036] Buffer I/O error on dev nbd3, logical block 0, async page read [ 197.312562][ T7036] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 197.346672][ T7036] Buffer I/O error on dev nbd3, logical block 0, async page read [ 197.370513][ T7036] Dev nbd3: unable to read RDB block 0 [ 197.479209][ T7036] nbd3: unable to read partition table [ 197.496194][ T7036] NILFS (nbd3): unable to read superblock [ 197.502681][ T5935] ldm_validate_partition_table(): Disk read failed. [ 197.512157][ T5935] Dev nbd3: unable to read RDB block 0 [ 197.536611][ T5935] nbd3: unable to read partition table [ 197.593819][ T5935] ldm_validate_partition_table(): Disk read failed. [ 197.620245][ T5935] Dev nbd3: unable to read RDB block 0 [ 197.630601][ T7036] syz.3.322 (7036) used greatest stack depth: 19880 bytes left [ 197.653144][ T5935] nbd3: unable to read partition table [ 198.555552][ T7064] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 198.643973][ T7062] loop8: detected capacity change from 0 to 8 [ 198.908735][ T6241] Dev loop8: unable to read RDB block 8 [ 198.986327][ T6241] loop8: unable to read partition table [ 199.059223][ T6241] loop8: partition table beyond EOD, truncated [ 199.201765][ T7062] Dev loop8: unable to read RDB block 8 [ 199.264419][ T7062] loop8: unable to read partition table [ 199.293399][ T7062] loop8: partition table beyond EOD, truncated [ 199.319536][ T7062] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 199.553680][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'. [ 199.563114][ T7073] netlink: 200 bytes leftover after parsing attributes in process `syz.2.333'. [ 199.911204][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 200.776942][ T7092] Unknown options in mask 5 [ 203.333591][ T5876] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 203.777564][ T7106] NILFS (nbd2): device size too small [ 203.794849][ T7099] nbd2: detected capacity change from 0 to 4294967296 [ 203.805604][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 203.813571][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 203.822762][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 203.842682][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 204.016278][ T5832] block nbd2: Receive control failed (result -104) [ 204.660536][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 204.675239][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 204.784064][ T7100] ceph: No mds server is up or the cluster is laggy [ 204.871077][ T5876] usb 1-1: device descriptor read/all, error -71 [ 204.929102][ T7115] xt_TPROXY: Can be used only with -p tcp or -p udp [ 205.126873][ T7120] FAULT_INJECTION: forcing a failure. [ 205.126873][ T7120] name failslab, interval 1, probability 0, space 0, times 0 [ 205.141725][ T7120] CPU: 1 UID: 0 PID: 7120 Comm: syz.0.347 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 205.141751][ T7120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.141763][ T7120] Call Trace: [ 205.141771][ T7120] [ 205.141780][ T7120] dump_stack_lvl+0x189/0x250 [ 205.141815][ T7120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.141842][ T7120] ? __pfx__printk+0x10/0x10 [ 205.141875][ T7120] ? fs_reclaim_acquire+0x7d/0x100 [ 205.141908][ T7120] should_fail_ex+0x414/0x560 [ 205.141934][ T7120] should_failslab+0xa8/0x100 [ 205.141954][ T7120] __kmalloc_noprof+0xcb/0x4f0 [ 205.141982][ T7120] ? kfree+0x4d/0x440 [ 205.142005][ T7120] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 205.142037][ T7120] tomoyo_realpath_from_path+0xe3/0x5d0 [ 205.142066][ T7120] ? tomoyo_domain+0xda/0x130 [ 205.142099][ T7120] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 205.142121][ T7120] tomoyo_path_number_perm+0x1e8/0x5a0 [ 205.142146][ T7120] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 205.142187][ T7120] ? __lock_acquire+0xaac/0xd20 [ 205.142233][ T7120] ? __fget_files+0x2a/0x420 [ 205.142256][ T7120] ? __fget_files+0x3a0/0x420 [ 205.142273][ T7120] ? __fget_files+0x2a/0x420 [ 205.142295][ T7120] security_file_ioctl+0xcb/0x2d0 [ 205.142322][ T7120] __se_sys_ioctl+0x47/0x170 [ 205.142350][ T7120] do_syscall_64+0xf6/0x210 [ 205.142375][ T7120] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 205.142394][ T7120] ? clear_bhb_loop+0x60/0xb0 [ 205.142418][ T7120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.142437][ T7120] RIP: 0033:0x7ff3d7d8e969 [ 205.142454][ T7120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.142470][ T7120] RSP: 002b:00007ff3d8c02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.142490][ T7120] RAX: ffffffffffffffda RBX: 00007ff3d7fb5fa0 RCX: 00007ff3d7d8e969 [ 205.142504][ T7120] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 205.142517][ T7120] RBP: 00007ff3d8c02090 R08: 0000000000000000 R09: 0000000000000000 [ 205.142528][ T7120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.142539][ T7120] R13: 0000000000000000 R14: 00007ff3d7fb5fa0 R15: 00007ffed3f8e4d8 [ 205.142569][ T7120] [ 205.142627][ T7120] ERROR: Out of memory at tomoyo_realpath_from_path. [ 205.797272][ T7125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.348'. [ 207.694252][ T5914] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 209.050910][ T5914] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 209.713445][ T5914] usb 2-1: New USB device strings: Mfr=223, Product=2, SerialNumber=3 [ 209.727584][ T5914] usb 2-1: Product: syz [ 209.738145][ T5914] usb 2-1: Manufacturer: syz [ 209.743073][ T5914] usb 2-1: SerialNumber: syz [ 210.205958][ T5914] usb 2-1: config 0 descriptor?? [ 210.218703][ T5914] ch341 2-1:0.0: ch341-uart converter detected [ 210.234573][ T59] IPVS: starting estimator thread 0... [ 210.324356][ T7150] IPVS: using max 39 ests per chain, 93600 per kthread [ 210.427085][ T5914] usb 2-1: failed to receive control message: -121 [ 210.438344][ T5914] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 210.506007][ T7154] FAULT_INJECTION: forcing a failure. [ 210.506007][ T7154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.522204][ T7156] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 210.538508][ T7154] CPU: 0 UID: 0 PID: 7154 Comm: syz.4.359 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 210.538538][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.538550][ T7154] Call Trace: [ 210.538558][ T7154] [ 210.538566][ T7154] dump_stack_lvl+0x189/0x250 [ 210.538596][ T7154] ? __lock_acquire+0xaac/0xd20 [ 210.538627][ T7154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.538654][ T7154] ? __pfx__printk+0x10/0x10 [ 210.538685][ T7154] ? __might_fault+0xb0/0x130 [ 210.538728][ T7154] should_fail_ex+0x414/0x560 [ 210.538755][ T7154] _copy_from_user+0x2d/0xb0 [ 210.538795][ T7154] ___sys_sendmsg+0x158/0x2a0 [ 210.538825][ T7154] ? __pfx____sys_sendmsg+0x10/0x10 [ 210.538889][ T7154] ? __fget_files+0x2a/0x420 [ 210.538906][ T7154] ? __fget_files+0x3a0/0x420 [ 210.538935][ T7154] __x64_sys_sendmsg+0x19b/0x260 [ 210.538964][ T7154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 210.539009][ T7154] ? do_syscall_64+0xba/0x210 [ 210.539038][ T7154] do_syscall_64+0xf6/0x210 [ 210.539063][ T7154] ? clear_bhb_loop+0x60/0xb0 [ 210.539088][ T7154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.539107][ T7154] RIP: 0033:0x7fa49e18e969 [ 210.539125][ T7154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.539141][ T7154] RSP: 002b:00007fa49ef23038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.539161][ T7154] RAX: ffffffffffffffda RBX: 00007fa49e3b5fa0 RCX: 00007fa49e18e969 [ 210.539175][ T7154] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000000000000004 [ 210.539187][ T7154] RBP: 00007fa49ef23090 R08: 0000000000000000 R09: 0000000000000000 [ 210.539199][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.539210][ T7154] R13: 0000000000000000 R14: 00007fa49e3b5fa0 R15: 00007ffff52aa7d8 [ 210.539240][ T7154] [ 210.776410][ T59] usb 2-1: USB disconnect, device number 10 [ 210.783979][ T59] ch341 2-1:0.0: device disconnected [ 211.730558][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 211.741884][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 211.750691][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 211.755754][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 211.757123][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 211.834705][ T24] libceph: connect (1)[c::]:6789 error -101 [ 211.858491][ T7165] ceph: No mds server is up or the cluster is laggy [ 211.874246][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 212.074063][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 212.114391][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 212.123442][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 212.690094][ T7181] Unknown options in mask 5 [ 212.981492][ T7187] syzkaller1: entered promiscuous mode [ 212.987942][ T7187] syzkaller1: entered allmulticast mode [ 217.273836][ T7212] netlink: 60 bytes leftover after parsing attributes in process `syz.1.378'. [ 217.357101][ T7214] syzkaller1: entered promiscuous mode [ 217.384197][ T7214] syzkaller1: entered allmulticast mode [ 217.408730][ T7218] FAULT_INJECTION: forcing a failure. [ 217.408730][ T7218] name failslab, interval 1, probability 0, space 0, times 0 [ 217.421980][ T7218] CPU: 0 UID: 0 PID: 7218 Comm: syz.3.377 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 217.422008][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.422021][ T7218] Call Trace: [ 217.422029][ T7218] [ 217.422038][ T7218] dump_stack_lvl+0x189/0x250 [ 217.422081][ T7218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.422109][ T7218] ? __pfx__printk+0x10/0x10 [ 217.422144][ T7218] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 217.422183][ T7218] should_fail_ex+0x414/0x560 [ 217.422211][ T7218] should_failslab+0xa8/0x100 [ 217.422229][ T7218] ? __pfx_ip6_dst_gc+0x10/0x10 [ 217.422259][ T7218] kmem_cache_alloc_noprof+0x73/0x3c0 [ 217.422289][ T7218] ? dst_alloc+0x105/0x170 [ 217.422318][ T7218] ? __pfx_ip6_dst_gc+0x10/0x10 [ 217.422350][ T7218] dst_alloc+0x105/0x170 [ 217.422382][ T7218] ip6_pol_route+0xa21/0x1180 [ 217.422400][ T7218] ? ip6_pol_route+0x162/0x1180 [ 217.422424][ T7218] ? __pfx_ip6_pol_route+0x10/0x10 [ 217.422453][ T7218] ? ip6t_do_table+0x1db/0x1530 [ 217.422485][ T7218] fib6_rule_lookup+0x55e/0x6f0 [ 217.422507][ T7218] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 217.422528][ T7218] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 217.422546][ T7218] ? nf_nat_ipv6_fn+0xe7/0x2d0 [ 217.422589][ T7218] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 217.422621][ T7218] ? ip6table_mangle_hook+0x2a2/0x6c0 [ 217.422646][ T7218] ? nf_nat_ipv6_in+0xe5/0x2b0 [ 217.422690][ T7218] ip6_route_input+0x6ce/0xa50 [ 217.422719][ T7218] ? __pfx_ip6_route_input+0x10/0x10 [ 217.422738][ T7218] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 217.422780][ T7218] ? nf_hook_slow_list+0x2af/0x390 [ 217.422819][ T7218] ? ip6_rcv_finish_core+0x222/0x420 [ 217.422850][ T7218] ip6_sublist_rcv+0x704/0xdd0 [ 217.422892][ T7218] ? __pfx_ip6_sublist_rcv+0x10/0x10 [ 217.422916][ T7218] ? skb_orphan+0xaf/0xd0 [ 217.422948][ T7218] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 217.422973][ T7218] ? ip6_rcv_core+0x9e/0x1590 [ 217.423010][ T7218] ipv6_list_rcv+0x3e5/0x430 [ 217.423048][ T7218] ? __pfx_ipv6_list_rcv+0x10/0x10 [ 217.423087][ T7218] ? __pfx_ipv6_list_rcv+0x10/0x10 [ 217.423116][ T7218] __netif_receive_skb_list_core+0x5f4/0x800 [ 217.423155][ T7218] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 217.423182][ T7218] ? __pfx_udp6_gro_receive+0x10/0x10 [ 217.423215][ T7218] ? netif_receive_skb_list_internal+0x4fd/0xcc0 [ 217.423235][ T7218] netif_receive_skb_list_internal+0x975/0xcc0 [ 217.423260][ T7218] ? netif_receive_skb_list_internal+0x4fd/0xcc0 [ 217.423285][ T7218] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 217.423304][ T7218] ? dev_gro_receive+0x10f4/0x23b0 [ 217.423327][ T7218] ? dev_gro_receive+0x10c0/0x23b0 [ 217.423350][ T7218] ? eth_type_trans+0x3a8/0x760 [ 217.423389][ T7218] napi_complete_done+0x2f2/0x7c0 [ 217.423417][ T7218] ? __pfx_napi_complete_done+0x10/0x10 [ 217.423436][ T7218] ? rcu_is_watching+0x15/0xb0 [ 217.423466][ T7218] ? napi_gro_frags+0x928/0xff0 [ 217.423501][ T7218] ? tun_get_user+0x2444/0x3c20 [ 217.423529][ T7218] tun_get_user+0x26ac/0x3c20 [ 217.423575][ T7218] ? tun_get_user+0x2444/0x3c20 [ 217.423611][ T7218] ? __pfx_tun_get_user+0x10/0x10 [ 217.423652][ T7218] ? __lock_acquire+0xaac/0xd20 [ 217.423685][ T7218] ? ref_tracker_alloc+0x318/0x460 [ 217.423711][ T7218] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 217.423740][ T7218] ? tun_get+0x1c/0x2f0 [ 217.423776][ T7218] ? tun_get+0x1c/0x2f0 [ 217.423803][ T7218] ? tun_get+0x1c/0x2f0 [ 217.423838][ T7218] tun_chr_write_iter+0x113/0x200 [ 217.423871][ T7218] vfs_write+0x54b/0xa90 [ 217.423905][ T7218] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 217.423935][ T7218] ? __pfx_vfs_write+0x10/0x10 [ 217.423976][ T7218] ? __fget_files+0x2a/0x420 [ 217.424007][ T7218] ksys_write+0x145/0x250 [ 217.424038][ T7218] ? __pfx_ksys_write+0x10/0x10 [ 217.424077][ T7218] ? do_syscall_64+0xba/0x210 [ 217.424111][ T7218] do_syscall_64+0xf6/0x210 [ 217.424137][ T7218] ? clear_bhb_loop+0x60/0xb0 [ 217.424161][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.424180][ T7218] RIP: 0033:0x7fe83ef8e969 [ 217.424198][ T7218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.424215][ T7218] RSP: 002b:00007fe83fd83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 217.424235][ T7218] RAX: ffffffffffffffda RBX: 00007fe83f1b6080 RCX: 00007fe83ef8e969 [ 217.424249][ T7218] RDX: 000000000000009e RSI: 0000200000000200 RDI: 0000000000000004 [ 217.424261][ T7218] RBP: 00007fe83fd83090 R08: 0000000000000000 R09: 0000000000000000 [ 217.424273][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.424284][ T7218] R13: 0000000000000001 R14: 00007fe83f1b6080 R15: 00007fffa36833c8 [ 217.424316][ T7218] [ 217.987487][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.002223][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.087298][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.109449][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.124501][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.734407][ T5875] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 218.904239][ T5875] usb 1-1: device descriptor read/64, error -71 [ 219.144399][ T5875] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 219.192652][ T59] IPVS: starting estimator thread 0... [ 219.532531][ T7237] IPVS: using max 35 ests per chain, 84000 per kthread [ 219.724380][ T5875] usb 1-1: device descriptor read/64, error -71 [ 219.873406][ T5875] usb usb1-port1: attempt power cycle [ 220.324351][ T5832] Bluetooth: hci5: command tx timeout [ 220.360642][ T5875] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 220.721676][ T7219] chnl_net:caif_netlink_parms(): no params data found [ 221.110522][ T5875] usb 1-1: device not accepting address 15, error -71 [ 221.383344][ T7263] netlink: 60 bytes leftover after parsing attributes in process `syz.1.389'. [ 221.392986][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 221.493971][ T7257] netlink: 200 bytes leftover after parsing attributes in process `syz.0.386'. [ 222.302356][ T7270] FAULT_INJECTION: forcing a failure. [ 222.302356][ T7270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.342461][ T7270] CPU: 0 UID: 0 PID: 7270 Comm: syz.3.390 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 222.342492][ T7270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 222.342504][ T7270] Call Trace: [ 222.342512][ T7270] [ 222.342522][ T7270] dump_stack_lvl+0x189/0x250 [ 222.342558][ T7270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.342586][ T7270] ? __pfx__printk+0x10/0x10 [ 222.342631][ T7270] should_fail_ex+0x414/0x560 [ 222.342658][ T7270] _copy_to_user+0x31/0xb0 [ 222.342689][ T7270] simple_read_from_buffer+0xe1/0x170 [ 222.342733][ T7270] proc_fail_nth_read+0x1df/0x250 [ 222.342758][ T7270] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.342782][ T7270] ? rw_verify_area+0x258/0x650 [ 222.342808][ T7270] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.342831][ T7270] vfs_read+0x200/0x980 [ 222.342864][ T7270] ? do_sock_setsockopt+0x267/0x3e0 [ 222.342891][ T7270] ? __pfx_vfs_read+0x10/0x10 [ 222.342915][ T7270] ? do_sock_setsockopt+0x267/0x3e0 [ 222.342939][ T7270] ? kfree+0x4d/0x440 [ 222.342964][ T7270] ? sock_common_setsockopt+0x36/0xc0 [ 222.342984][ T7270] ? tcp_setsockopt+0x3d/0xe0 [ 222.343005][ T7270] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 222.343030][ T7270] ? do_sock_setsockopt+0x267/0x3e0 [ 222.343058][ T7270] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 222.343090][ T7270] ksys_read+0x145/0x250 [ 222.343119][ T7270] ? __pfx_ksys_read+0x10/0x10 [ 222.343150][ T7270] ? do_syscall_64+0xba/0x210 [ 222.343180][ T7270] do_syscall_64+0xf6/0x210 [ 222.343206][ T7270] ? clear_bhb_loop+0x60/0xb0 [ 222.343231][ T7270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.343251][ T7270] RIP: 0033:0x7fe83ef8d37c [ 222.343269][ T7270] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 222.343285][ T7270] RSP: 002b:00007fe83fda4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 222.343306][ T7270] RAX: ffffffffffffffda RBX: 00007fe83f1b5fa0 RCX: 00007fe83ef8d37c [ 222.343321][ T7270] RDX: 000000000000000f RSI: 00007fe83fda40a0 RDI: 0000000000000004 [ 222.343333][ T7270] RBP: 00007fe83fda4090 R08: 0000000000000000 R09: 0000000000000000 [ 222.343345][ T7270] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 222.343357][ T7270] R13: 0000000000000000 R14: 00007fe83f1b5fa0 R15: 00007fffa36833c8 [ 222.343389][ T7270] [ 222.594292][ T5832] Bluetooth: hci5: command tx timeout [ 223.145590][ T7272] Unknown options in mask 5 [ 223.185584][ T7219] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.229499][ T7219] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.237080][ T7219] bridge_slave_0: entered allmulticast mode [ 223.259687][ T7219] bridge_slave_0: entered promiscuous mode [ 223.272804][ T7219] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.282613][ T7219] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.298353][ T7219] bridge_slave_1: entered allmulticast mode [ 223.355406][ T7219] bridge_slave_1: entered promiscuous mode [ 223.414517][ T5875] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 223.574266][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 223.632762][ T5875] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 223.674527][ T5875] usb 4-1: config 0 has no interface number 0 [ 223.889499][ T5875] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 223.924327][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.969934][ T5875] usb 4-1: Product: syz [ 223.980138][ T7283] bond1: entered promiscuous mode [ 223.980425][ T5875] usb 4-1: Manufacturer: syz [ 223.989958][ T7219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.015518][ T7219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.022193][ T5875] usb 4-1: SerialNumber: syz [ 224.065753][ T5875] usb 4-1: config 0 descriptor?? [ 224.088374][ T5875] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 224.130925][ T7219] team0: Port device team_slave_0 added [ 224.156561][ T7219] team0: Port device team_slave_1 added [ 224.379434][ T5960] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 224.547731][ T5960] usb 1-1: device descriptor read/64, error -71 [ 224.695810][ T5832] Bluetooth: hci5: command tx timeout [ 224.706566][ T7277] 9pnet_fd: Insufficient options for proto=fd [ 224.757920][ T7219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.779944][ T7219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.806949][ T7219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.841970][ T7219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.857844][ T7219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.888250][ T7299] netlink: 60 bytes leftover after parsing attributes in process `syz.1.400'. [ 224.900218][ T7219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.904363][ T5960] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 225.313687][ T5875] gspca_topro: reg_w err -71 [ 225.319473][ T5960] usb 1-1: device descriptor read/64, error -71 [ 225.957711][ T5875] gspca_topro: Sensor soi763a [ 225.963614][ T5960] usb usb1-port1: attempt power cycle [ 226.040927][ T5875] usb 4-1: USB disconnect, device number 12 [ 226.333706][ T7219] hsr_slave_0: entered promiscuous mode [ 226.351127][ T7219] hsr_slave_1: entered promiscuous mode [ 226.368712][ T7219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.384321][ T7219] Cannot create hsr debugfs directory [ 226.503922][ T5960] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 226.592045][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'. [ 226.724225][ T5832] Bluetooth: hci5: command tx timeout [ 227.189035][ T5960] usb 1-1: device descriptor read/8, error -71 [ 227.290080][ T7316] Sensor B: ================= START STATUS ================= [ 227.347607][ T7316] Sensor B: Test Pattern: 75% Colorbar [ 227.357905][ T7316] Sensor B: Show Information: All [ 227.403840][ T7316] Sensor B: Vertical Flip: false [ 227.454364][ T5960] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 227.463112][ T7316] Sensor B: Horizontal Flip: false [ 227.490577][ T7323] Unknown options in mask 5 [ 227.540099][ T7316] Sensor B: Brightness: 128 [ 227.545095][ T7316] Sensor B: Contrast: 128 [ 227.549598][ T7316] Sensor B: Hue: 0 [ 227.553472][ T7316] Sensor B: Saturation: 128 [ 227.558158][ T7316] Sensor B: ================== END STATUS ================== [ 227.664728][ T5960] usb 1-1: device not accepting address 20, error -71 [ 227.672121][ T5960] usb usb1-port1: unable to enumerate USB device [ 227.818733][ T7325] vlan2: entered promiscuous mode [ 227.823959][ T7325] vlan0: entered promiscuous mode [ 227.829750][ T7325] erspan0: entered promiscuous mode [ 227.886887][ T7329] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:16389 [ 230.264368][ T7335] netlink: 60 bytes leftover after parsing attributes in process `syz.1.410'. [ 230.512214][ T7219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.570255][ T7219] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.586591][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.593765][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.700629][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.707800][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.836278][ T7219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.963719][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 231.970097][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 232.078546][ T7348] ceph: No mds server is up or the cluster is laggy [ 233.041814][ T7219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.074415][ T5876] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 233.604670][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 233.616401][ T5876] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 233.641626][ T5876] usb 1-1: config 0 has no interface number 0 [ 233.651300][ T5876] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 233.673215][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.686452][ T5876] usb 1-1: Product: syz [ 233.691180][ T5876] usb 1-1: Manufacturer: syz [ 233.704677][ T5876] usb 1-1: SerialNumber: syz [ 233.725784][ T5876] usb 1-1: config 0 descriptor?? [ 233.753558][ T5876] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 233.768552][ T5875] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 233.925951][ T5875] usb 4-1: device descriptor read/64, error -71 [ 233.940291][ T25] block nbd2: Possible stuck request ffff888024ab7000: control (read@0,1024B). Runtime 30 seconds [ 233.952975][ T25] block nbd2: Possible stuck request ffff888024ab71c0: control (read@1024,1024B). Runtime 30 seconds [ 233.967785][ T25] block nbd2: Possible stuck request ffff888024ab7380: control (read@2048,1024B). Runtime 30 seconds [ 233.979998][ T25] block nbd2: Possible stuck request ffff888024ab7540: control (read@3072,1024B). Runtime 30 seconds [ 234.067314][ T7219] veth0_vlan: entered promiscuous mode [ 234.137938][ T7219] veth1_vlan: entered promiscuous mode [ 234.174252][ T5875] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 234.375027][ T5875] usb 4-1: device descriptor read/64, error -71 [ 234.384543][ T7358] 9pnet_fd: Insufficient options for proto=fd [ 234.398785][ T7383] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 234.464675][ T7219] veth0_macvtap: entered promiscuous mode [ 234.494592][ T5875] usb usb4-port1: attempt power cycle [ 234.517548][ T7219] veth1_macvtap: entered promiscuous mode [ 234.609211][ T7219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.639551][ T7219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.868465][ T5876] gspca_topro: reg_w err -71 [ 234.914812][ T5876] gspca_topro: Sensor soi763a [ 234.940961][ T6113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.990794][ T5876] usb 1-1: USB disconnect, device number 21 [ 234.999448][ T6113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.004859][ T5875] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 235.626454][ T5875] usb 4-1: device descriptor read/8, error -71 [ 235.748594][ T6117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.823610][ T6117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.943262][ T7401] syzkaller1: entered promiscuous mode [ 235.952620][ T7401] syzkaller1: entered allmulticast mode [ 237.302997][ T7408] Unknown options in mask 5 [ 238.714581][ T5875] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 239.246570][ T5875] usb 4-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 239.259393][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.108395][ T5875] usb 4-1: config 0 descriptor?? [ 240.147624][ T5875] usb 4-1: unsupported MDLM descriptors [ 240.339204][ T5875] usb 4-1: USB disconnect, device number 17 [ 240.376594][ T5832] block nbd1: Receive control failed (result -107) [ 240.401840][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 240.408522][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 240.417874][ T7431] syz.1.432: attempt to access beyond end of device [ 240.417874][ T7431] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 240.437619][ T7431] syz.1.432: attempt to access beyond end of device [ 240.437619][ T7431] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 240.456223][ T7431] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 240.471914][ T7431] syz.1.432: attempt to access beyond end of device [ 240.471914][ T7431] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 240.485256][ T7431] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 240.499831][ T7431] syz.1.432: attempt to access beyond end of device [ 240.499831][ T7431] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 240.512713][ T7430] ceph: No mds server is up or the cluster is laggy [ 240.520293][ T7431] syz.1.432: attempt to access beyond end of device [ 240.520293][ T7431] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 240.567324][ T7431] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 240.567661][ T7436] nbd1: detected capacity change from 0 to 29912 [ 240.578739][ T7431] block nbd1: Dead connection, failed to find a fallback [ 240.592799][ T7431] block nbd1: shutting down sockets [ 240.600851][ T5876] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 240.612707][ T7431] blk_print_req_error: 120 callbacks suppressed [ 240.612723][ T7431] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.636617][ T7431] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 240.646827][ T7431] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.656780][ T7431] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 240.680869][ T6241] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.705046][ T7431] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.741076][ T6241] buffer_io_error: 117 callbacks suppressed [ 240.741094][ T6241] Buffer I/O error on dev nbd1, logical block 0, async page read [ 240.748608][ T7431] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 240.772636][ T6241] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.782667][ T6241] Buffer I/O error on dev nbd1, logical block 1, async page read [ 240.793489][ T6241] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.799418][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 240.812919][ T6241] Buffer I/O error on dev nbd1, logical block 0, async page read [ 240.816086][ T7431] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.825322][ T6241] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.841420][ T6241] Buffer I/O error on dev nbd1, logical block 0, async page read [ 240.844542][ T5876] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 240.851227][ T6241] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.863334][ T5876] usb 1-1: config 0 has no interface number 0 [ 240.872987][ T7431] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.915360][ T5876] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 240.924477][ T6241] Buffer I/O error on dev nbd1, logical block 0, async page read [ 240.937151][ T7431] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 240.939903][ T6241] Buffer I/O error on dev nbd1, logical block 0, async page read [ 240.948915][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.963430][ T5876] usb 1-1: Product: syz [ 240.968344][ T7431] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=3738, location=3738 [ 240.978454][ T5876] usb 1-1: Manufacturer: syz [ 240.995084][ T5876] usb 1-1: SerialNumber: syz [ 241.003375][ T6241] Buffer I/O error on dev nbd1, logical block 0, async page read [ 241.012550][ T6241] Buffer I/O error on dev nbd1, logical block 0, async page read [ 241.022282][ T6241] Buffer I/O error on dev nbd1, logical block 0, async page read [ 241.023196][ T7431] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=3482, location=3482 [ 241.048607][ T5876] usb 1-1: config 0 descriptor?? [ 241.089723][ T5876] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 241.095038][ T6241] ldm_validate_partition_table(): Disk read failed. [ 241.096870][ T7431] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=3737, location=3737 [ 241.134942][ T5914] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 241.143776][ T6241] Buffer I/O error on dev nbd1, logical block 0, async page read [ 241.160364][ T7431] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=3481, location=3481 [ 241.161919][ T6241] Dev nbd1: unable to read RDB block 0 [ 241.198406][ T6241] nbd1: unable to read partition table [ 241.238950][ T7431] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=3736, location=3736 [ 241.250306][ T7431] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=3480, location=3480 [ 241.264726][ T7431] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=3588, location=3588 [ 241.274875][ T7431] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=3332, location=3332 [ 241.277251][ T6241] ldm_validate_partition_table(): Disk read failed. [ 241.285152][ T7431] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=3586, location=3586 [ 241.303235][ T7431] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=3330, location=3330 [ 241.313655][ T7431] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 241.325110][ T5914] usb 6-1: device descriptor read/64, error -71 [ 241.338384][ T7431] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 241.353326][ T6241] Dev nbd1: unable to read RDB block 0 [ 241.364743][ T6241] nbd1: unable to read partition table [ 241.584438][ T5914] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 242.004728][ T5876] gspca_topro: reg_w err -110 [ 242.073332][ T7433] 9pnet_fd: Insufficient options for proto=fd [ 242.104195][ T5876] gspca_topro: Sensor soi763a [ 242.144768][ T5914] usb 6-1: device descriptor read/64, error -71 [ 242.265040][ T5914] usb usb6-port1: attempt power cycle [ 242.462071][ T7459] syz_tun: entered allmulticast mode [ 242.474563][ T7456] Sensor B: ================= START STATUS ================= [ 242.482366][ T7456] Sensor B: Test Pattern: 75% Colorbar [ 242.488299][ T7456] Sensor B: Show Information: All [ 242.494400][ T7456] Sensor B: Vertical Flip: false [ 242.499501][ T7456] Sensor B: Horizontal Flip: false [ 242.512995][ T7456] Sensor B: Brightness: 128 [ 242.519339][ T7456] Sensor B: Contrast: 128 [ 242.524591][ T7459] xfrm0: entered allmulticast mode [ 242.578301][ T7456] Sensor B: Hue: 0 [ 242.582195][ T7456] Sensor B: Saturation: 128 [ 242.598696][ T7458] syz_tun: left allmulticast mode [ 242.617376][ T7456] Sensor B: ================== END STATUS ================== [ 242.636522][ T5914] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 242.822908][ T5914] usb 6-1: device descriptor read/8, error -71 [ 243.764492][ T5914] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 244.020211][ T5914] usb 6-1: device not accepting address 5, error -71 [ 244.041055][ T5914] usb usb6-port1: unable to enumerate USB device [ 244.047709][ T5919] usb 1-1: USB disconnect, device number 22 [ 244.098123][ T7473] 9pnet_fd: Insufficient options for proto=fd [ 244.155610][ T7473] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.213518][ T7484] netlink: 'syz.0.444': attribute type 1 has an invalid length. [ 247.245031][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.444'. [ 248.623155][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'. [ 248.936776][ T7509] batman_adv: batadv0: Adding interface: ip6gretap1 [ 248.943761][ T7509] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.971787][ T7509] batman_adv: batadv0: Interface activated: ip6gretap1 [ 249.424519][ T5878] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 249.466135][ T5919] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 249.604536][ T5919] usb 5-1: device descriptor read/64, error -71 [ 249.694891][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 249.699058][ T7520] bond2: entered promiscuous mode [ 249.726310][ T5878] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 249.746466][ T5878] usb 2-1: config 0 has no interface number 0 [ 249.755608][ T7524] 9pnet_fd: p9_fd_create_tcp (7524): problem connecting socket to 127.0.0.1 [ 249.762754][ T5878] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 249.773555][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.789287][ T5878] usb 2-1: Product: syz [ 249.793639][ T5878] usb 2-1: Manufacturer: syz [ 249.807037][ T5878] usb 2-1: SerialNumber: syz [ 249.835305][ T5878] usb 2-1: config 0 descriptor?? [ 249.865520][ T5919] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 249.877137][ T5878] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 249.946701][ T7526] netlink: 277 bytes leftover after parsing attributes in process `syz.5.457'. [ 249.968163][ T7526] FAULT_INJECTION: forcing a failure. [ 249.968163][ T7526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.982850][ T7526] CPU: 1 UID: 0 PID: 7526 Comm: syz.5.457 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 249.982879][ T7526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 249.982904][ T7526] Call Trace: [ 249.982912][ T7526] [ 249.982921][ T7526] dump_stack_lvl+0x189/0x250 [ 249.982961][ T7526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.982987][ T7526] ? __pfx__printk+0x10/0x10 [ 249.983031][ T7526] should_fail_ex+0x414/0x560 [ 249.983057][ T7526] _copy_to_user+0x31/0xb0 [ 249.983088][ T7526] simple_read_from_buffer+0xe1/0x170 [ 249.983124][ T7526] proc_fail_nth_read+0x1df/0x250 [ 249.983150][ T7526] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.983174][ T7526] ? rw_verify_area+0x258/0x650 [ 249.983201][ T7526] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.983223][ T7526] vfs_read+0x200/0x980 [ 249.983256][ T7526] ? __pfx___mutex_lock+0x10/0x10 [ 249.983283][ T7526] ? __pfx_vfs_read+0x10/0x10 [ 249.983326][ T7526] ? __fget_files+0x2a/0x420 [ 249.983350][ T7526] ? __fget_files+0x3a0/0x420 [ 249.983367][ T7526] ? __fget_files+0x2a/0x420 [ 249.983396][ T7526] ksys_read+0x145/0x250 [ 249.983422][ T7526] ? rcu_is_watching+0x15/0xb0 [ 249.983453][ T7526] ? __pfx_ksys_read+0x10/0x10 [ 249.983485][ T7526] ? do_syscall_64+0xba/0x210 [ 249.983515][ T7526] do_syscall_64+0xf6/0x210 [ 249.983541][ T7526] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 249.983562][ T7526] ? clear_bhb_loop+0x60/0xb0 [ 249.983586][ T7526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.983606][ T7526] RIP: 0033:0x7f70fcf8d37c [ 249.983624][ T7526] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 249.983641][ T7526] RSP: 002b:00007f70fadf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.983661][ T7526] RAX: ffffffffffffffda RBX: 00007f70fd1b5fa0 RCX: 00007f70fcf8d37c [ 249.983677][ T7526] RDX: 000000000000000f RSI: 00007f70fadf60a0 RDI: 0000000000000005 [ 249.983689][ T7526] RBP: 00007f70fadf6090 R08: 0000000000000000 R09: 0000000000000000 [ 249.983701][ T7526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.983713][ T7526] R13: 0000000000000000 R14: 00007f70fd1b5fa0 R15: 00007ffcd71193c8 [ 249.983745][ T7526] [ 250.024616][ T5919] usb 5-1: device descriptor read/64, error -71 [ 250.160097][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.754328][ T5914] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 250.755054][ T5878] gspca_topro: reg_w err -110 [ 250.764946][ T5919] usb usb5-port1: attempt power cycle [ 250.830397][ T7534] 9pnet_fd: Insufficient options for proto=fd [ 250.844236][ T5878] gspca_topro: Sensor soi763a [ 250.980384][ T5914] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 250.991928][ T5914] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 251.006633][ T5914] usb 1-1: config 0 interface 0 has no altsetting 0 [ 251.013553][ T5914] usb 1-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 251.024709][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.044938][ T5914] usb 1-1: config 0 descriptor?? [ 251.057407][ T7530] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 251.185328][ T5919] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 251.263000][ T5919] usb 5-1: device descriptor read/8, error -71 [ 251.736975][ T5914] holtek_mouse 0003:04D9:A067.0004: unknown main item tag 0x0 [ 251.747747][ T5914] holtek_mouse 0003:04D9:A067.0004: unknown main item tag 0x0 [ 251.756664][ T5919] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 251.767955][ T5914] holtek_mouse 0003:04D9:A067.0004: unknown main item tag 0x0 [ 251.776872][ T5914] holtek_mouse 0003:04D9:A067.0004: unknown main item tag 0x0 [ 251.784870][ T5914] holtek_mouse 0003:04D9:A067.0004: unknown main item tag 0x0 [ 251.798047][ T5919] usb 5-1: device descriptor read/8, error -71 [ 251.814048][ T5914] holtek_mouse 0003:04D9:A067.0004: unknown main item tag 0x0 [ 251.852946][ T5914] holtek_mouse 0003:04D9:A067.0004: unknown main item tag 0x0 [ 251.914793][ T5919] usb usb5-port1: unable to enumerate USB device [ 251.924026][ T5914] holtek_mouse 0003:04D9:A067.0004: unknown main item tag 0x0 [ 252.492857][ T5914] holtek_mouse 0003:04D9:A067.0004: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.0-1/input0 [ 252.532930][ T5914] usb 1-1: USB disconnect, device number 23 [ 252.953166][ T5189] udevd[5189]: worker [6241] terminated by signal 33 (Unknown signal 33) [ 252.987171][ T5833] usb 2-1: USB disconnect, device number 11 [ 253.002039][ T5189] udevd[5189]: worker [6241] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:04D9:A067.0004/hidraw/hidraw0' [ 253.152416][ T7563] bond4: entered promiscuous mode [ 253.168200][ T7561] macsec2: entered allmulticast mode [ 253.314763][ T5914] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 253.866777][ T5914] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 253.877285][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.886218][ T5914] usb 1-1: Product: syz [ 253.890503][ T5914] usb 1-1: Manufacturer: syz [ 253.896410][ T5914] usb 1-1: SerialNumber: syz [ 253.918610][ T5914] usb 1-1: config 0 descriptor?? [ 253.977865][ T5914] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 254.139489][ T7559] netlink: 20 bytes leftover after parsing attributes in process `syz.0.465'. [ 254.156559][ T7559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.168008][ T7559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.904546][ T5914] gspca_sonixj: reg_w1 err -110 [ 255.088447][ T5914] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 255.698329][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.705766][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.832066][ T5833] usb 1-1: USB disconnect, device number 24 [ 257.904714][ T5833] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 257.938495][ T7612] 9pnet_fd: Insufficient options for proto=fd [ 258.390988][ T5833] usb 5-1: Using ep0 maxpacket: 32 [ 258.956156][ T5833] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 258.964435][ T5833] usb 5-1: config 0 has no interface number 0 [ 258.976436][ T5833] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 258.985649][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.993677][ T5833] usb 5-1: Product: syz [ 258.999223][ T5833] usb 5-1: Manufacturer: syz [ 259.004732][ T5833] usb 5-1: SerialNumber: syz [ 259.031106][ T5833] usb 5-1: config 0 descriptor?? [ 259.062669][ T5833] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 259.071827][ T7610] bond2: entered promiscuous mode [ 259.715732][ T7635] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 260.192946][ T7637] 9pnet_fd: Insufficient options for proto=fd [ 260.767862][ T5833] gspca_topro: reg_w err -71 [ 260.805880][ T5833] gspca_topro: Sensor soi763a [ 261.107846][ T5833] usb 5-1: USB disconnect, device number 14 [ 261.254605][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'. [ 264.772467][ T25] block nbd2: Possible stuck request ffff888024ab7000: control (read@0,1024B). Runtime 60 seconds [ 264.783702][ T25] block nbd2: Possible stuck request ffff888024ab71c0: control (read@1024,1024B). Runtime 60 seconds [ 264.797888][ T25] block nbd2: Possible stuck request ffff888024ab7380: control (read@2048,1024B). Runtime 60 seconds [ 264.809375][ T25] block nbd2: Possible stuck request ffff888024ab7540: control (read@3072,1024B). Runtime 60 seconds [ 265.814755][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.495'. [ 266.404818][ T7673] netlink: 28 bytes leftover after parsing attributes in process `syz.3.498'. [ 266.500238][ T7673] netlink: 32 bytes leftover after parsing attributes in process `syz.3.498'. [ 266.844304][ T5833] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 266.925123][ T5919] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 267.005467][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 267.018840][ T5833] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.093435][ T5833] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 267.093470][ T5833] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 267.093492][ T5833] usb 5-1: Manufacturer: syz [ 267.106776][ T5833] usb 5-1: config 0 descriptor?? [ 268.337352][ T5919] usb 6-1: Using ep0 maxpacket: 32 [ 268.343014][ T5919] usb 6-1: config 0 has an invalid interface number: 9 but max is 0 [ 268.343055][ T5919] usb 6-1: config 0 has no interface number 0 [ 268.351910][ T5919] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 268.351940][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.351961][ T5919] usb 6-1: Product: syz [ 268.351976][ T5919] usb 6-1: Manufacturer: syz [ 268.351992][ T5919] usb 6-1: SerialNumber: syz [ 268.355595][ T5919] usb 6-1: config 0 descriptor?? [ 268.359175][ T5919] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 268.373556][ T7690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.500'. [ 268.405296][ T9] usb 1-1: device descriptor read/64, error -71 [ 268.556861][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.500'. [ 268.907992][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 269.527213][ T5919] gspca_topro: reg_w err -110 [ 269.558394][ T7682] 9pnet_fd: Insufficient options for proto=fd [ 269.564179][ T5919] gspca_topro: Sensor soi763a [ 269.622172][ T9] usb 1-1: device descriptor read/64, error -71 [ 269.804514][ T9] usb usb1-port1: attempt power cycle [ 269.863552][ T59] usb 5-1: USB disconnect, device number 15 [ 269.972308][ T7704] netlink: 16 bytes leftover after parsing attributes in process `syz.1.506'. [ 270.119980][ T7704] FAULT_INJECTION: forcing a failure. [ 270.119980][ T7704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.543966][ T7704] CPU: 0 UID: 0 PID: 7704 Comm: syz.1.506 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 270.543998][ T7704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.544011][ T7704] Call Trace: [ 270.544020][ T7704] [ 270.544029][ T7704] dump_stack_lvl+0x189/0x250 [ 270.544062][ T7704] ? __lock_acquire+0xaac/0xd20 [ 270.544095][ T7704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.544122][ T7704] ? __pfx__printk+0x10/0x10 [ 270.544151][ T7704] ? __might_fault+0xb0/0x130 [ 270.544195][ T7704] should_fail_ex+0x414/0x560 [ 270.544232][ T7704] _copy_from_user+0x2d/0xb0 [ 270.544262][ T7704] ___sys_recvmsg+0x12e/0x510 [ 270.544290][ T7704] ? trace_irq_disable+0x37/0x110 [ 270.544320][ T7704] ? __pfx____sys_recvmsg+0x10/0x10 [ 270.544382][ T7704] ? __might_fault+0xb0/0x130 [ 270.544419][ T7704] do_recvmmsg+0x307/0x760 [ 270.544457][ T7704] ? __pfx_do_recvmmsg+0x10/0x10 [ 270.544500][ T7704] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 270.544536][ T7704] ? __f_unlock_pos+0xd/0x20 [ 270.544564][ T7704] __x64_sys_recvmmsg+0x190/0x240 [ 270.544593][ T7704] ? rcu_is_watching+0x15/0xb0 [ 270.544624][ T7704] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 270.544658][ T7704] ? do_syscall_64+0xba/0x210 [ 270.544689][ T7704] do_syscall_64+0xf6/0x210 [ 270.544716][ T7704] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 270.544736][ T7704] ? clear_bhb_loop+0x60/0xb0 [ 270.544760][ T7704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.544780][ T7704] RIP: 0033:0x7fbe3918e969 [ 270.544799][ T7704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.544816][ T7704] RSP: 002b:00007fbe3a0db038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 270.544838][ T7704] RAX: ffffffffffffffda RBX: 00007fbe393b5fa0 RCX: 00007fbe3918e969 [ 270.544853][ T7704] RDX: 040000000000024a RSI: 0000200000000800 RDI: 0000000000000003 [ 270.544867][ T7704] RBP: 00007fbe3a0db090 R08: 0000000000000000 R09: 0000000000000000 [ 270.544879][ T7704] R10: 0000000040002002 R11: 0000000000000246 R12: 0000000000000002 [ 270.544892][ T7704] R13: 0000000000000000 R14: 00007fbe393b5fa0 R15: 00007ffc326fd058 [ 270.544924][ T7704] [ 270.762571][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.147284][ T7718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.509'. [ 271.439580][ T7723] Invalid option length (1048244) for dns_resolver key [ 272.071009][ T5919] usb 6-1: USB disconnect, device number 6 [ 272.284828][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'. [ 272.815352][ T5914] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 273.304706][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 273.331238][ T5914] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.362699][ T5914] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 273.400913][ T5914] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 273.426489][ T5914] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.599175][ T5914] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 274.037692][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.537926][ T5914] usb 5-1: GET_CAPABILITIES returned 0 [ 274.543523][ T5914] usbtmc 5-1:16.0: can't read capabilities [ 274.565389][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 274.704224][ T9] usb 1-1: device descriptor read/64, error -71 [ 274.730861][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 274.758190][ T7729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.774020][ T7729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.787273][ T1207] usb 5-1: USB disconnect, device number 16 [ 274.964545][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 275.124988][ T5960] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 275.495641][ T9] usb 1-1: device descriptor read/64, error -71 [ 275.546020][ T5960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 275.557325][ T5960] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 275.569470][ T5960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 275.583796][ T5960] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 275.595704][ T5960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.603750][ T5960] usb 6-1: Product: syz [ 275.608700][ T5960] usb 6-1: Manufacturer: syz [ 275.613342][ T5960] usb 6-1: SerialNumber: syz [ 275.622471][ T9] usb usb1-port1: attempt power cycle [ 275.624034][ T5960] usb 6-1: config 0 descriptor?? [ 275.638726][ T7772] Driver unsupported XDP return value 0 on prog (id 127) dev N/A, expect packet loss! [ 275.640065][ T7765] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 275.662414][ T7765] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 275.673095][ T5960] usb 6-1: ucan: probing device on interface #0 [ 275.784235][ T5919] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 275.965310][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 275.975048][ T5919] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 275.983351][ T5919] usb 2-1: config 0 has no interface number 0 [ 275.986867][ T7765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.011376][ T5919] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 276.024215][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 276.041653][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.051179][ T5919] usb 2-1: Product: syz [ 276.060694][ T5919] usb 2-1: Manufacturer: syz [ 276.065952][ T9] usb 1-1: device descriptor read/8, error -71 [ 276.073020][ T5919] usb 2-1: SerialNumber: syz [ 276.106549][ T5919] usb 2-1: config 0 descriptor?? [ 276.118780][ T5919] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 276.732111][ T5960] usb 6-1: ucan: could not read protocol version, ret=-110 [ 276.845409][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 276.874357][ T5960] usb 6-1: ucan: probe failed; try to update the device firmware [ 276.954697][ T9] usb 1-1: device descriptor read/8, error -71 [ 277.060082][ T7768] 9pnet_fd: Insufficient options for proto=fd [ 277.095508][ T9] usb usb1-port1: unable to enumerate USB device [ 277.190969][ T7791] vlan3: entered promiscuous mode [ 277.201708][ T7791] vlan2: entered promiscuous mode [ 277.212291][ T7791] erspan0: entered promiscuous mode [ 277.240267][ T7793] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:16389 [ 277.527217][ T5919] gspca_topro: reg_w err -71 [ 277.554454][ T5919] gspca_topro: Sensor soi763a [ 277.578821][ T5919] usb 2-1: USB disconnect, device number 12 [ 277.961733][ T5919] usb 6-1: USB disconnect, device number 7 [ 278.022927][ T7815] FAULT_INJECTION: forcing a failure. [ 278.022927][ T7815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.046058][ T7815] CPU: 0 UID: 0 PID: 7815 Comm: syz.5.542 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 278.046088][ T7815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.046103][ T7815] Call Trace: [ 278.046111][ T7815] [ 278.046120][ T7815] dump_stack_lvl+0x189/0x250 [ 278.046156][ T7815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.046184][ T7815] ? __pfx__printk+0x10/0x10 [ 278.046229][ T7815] should_fail_ex+0x414/0x560 [ 278.046256][ T7815] _copy_to_user+0x31/0xb0 [ 278.046287][ T7815] simple_read_from_buffer+0xe1/0x170 [ 278.046323][ T7815] proc_fail_nth_read+0x1df/0x250 [ 278.046349][ T7815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 278.046373][ T7815] ? rw_verify_area+0x258/0x650 [ 278.046400][ T7815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 278.046423][ T7815] vfs_read+0x200/0x980 [ 278.046457][ T7815] ? __pfx___mutex_lock+0x10/0x10 [ 278.046484][ T7815] ? __pfx_vfs_read+0x10/0x10 [ 278.046513][ T7815] ? __fget_files+0x2a/0x420 [ 278.046536][ T7815] ? __fget_files+0x3a0/0x420 [ 278.046554][ T7815] ? __fget_files+0x2a/0x420 [ 278.046590][ T7815] ksys_read+0x145/0x250 [ 278.046620][ T7815] ? __pfx_ksys_read+0x10/0x10 [ 278.046652][ T7815] ? do_syscall_64+0xba/0x210 [ 278.046682][ T7815] do_syscall_64+0xf6/0x210 [ 278.046709][ T7815] ? clear_bhb_loop+0x60/0xb0 [ 278.046735][ T7815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.046754][ T7815] RIP: 0033:0x7f70fcf8d37c [ 278.046772][ T7815] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 278.046789][ T7815] RSP: 002b:00007f70fadf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 278.046811][ T7815] RAX: ffffffffffffffda RBX: 00007f70fd1b5fa0 RCX: 00007f70fcf8d37c [ 278.046826][ T7815] RDX: 000000000000000f RSI: 00007f70fadf60a0 RDI: 0000000000000003 [ 278.046840][ T7815] RBP: 00007f70fadf6090 R08: 0000000000000000 R09: 0000000000000000 [ 278.046852][ T7815] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 278.046864][ T7815] R13: 0000000000000000 R14: 00007f70fd1b5fa0 R15: 00007ffcd71193c8 [ 278.046897][ T7815] [ 280.203464][ T7837] trusted_key: syz.0.547 sent an empty control message without MSG_MORE. [ 282.614197][ T5919] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 282.749798][ T7862] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:16389 [ 283.570963][ T7860] vlan3: entered promiscuous mode [ 283.634281][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 283.684417][ T7860] vlan2: entered promiscuous mode [ 283.689528][ T7860] erspan0: entered promiscuous mode [ 283.706397][ T5919] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 283.735637][ T5919] usb 1-1: config 0 has no interface number 0 [ 283.760697][ T5919] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 283.788110][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.796703][ T5919] usb 1-1: Product: syz [ 283.801605][ T5919] usb 1-1: Manufacturer: syz [ 283.820745][ T5919] usb 1-1: SerialNumber: syz [ 283.831226][ T5919] usb 1-1: config 0 descriptor?? [ 283.855688][ T5919] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 284.254502][ T1207] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 284.641552][ T7888] 9pnet_fd: Insufficient options for proto=fd [ 284.736864][ T1207] usb 2-1: Invalid ep0 maxpacket: 32 [ 284.740590][ T7890] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.563'. [ 284.829399][ T7894] binder: 7893:7894 ioctl c0306201 0 returned -14 [ 284.864231][ T1207] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 285.014207][ T1207] usb 2-1: Invalid ep0 maxpacket: 32 [ 285.024821][ T1207] usb usb2-port1: attempt power cycle [ 285.054356][ T5878] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 285.074600][ T5919] gspca_topro: reg_w err -71 [ 285.104256][ T5919] gspca_topro: Sensor soi763a [ 285.120407][ T5919] usb 1-1: USB disconnect, device number 32 [ 285.242588][ T5878] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 285.263895][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.272613][ T5878] usb 4-1: Product: syz [ 285.277128][ T5878] usb 4-1: Manufacturer: syz [ 285.281762][ T5878] usb 4-1: SerialNumber: syz [ 285.292574][ T5878] usb 4-1: config 0 descriptor?? [ 285.303327][ T5878] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 285.374656][ T1207] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 285.415057][ T1207] usb 2-1: Invalid ep0 maxpacket: 32 [ 285.502784][ T7892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.564'. [ 285.524786][ T7892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.535657][ T7892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.555814][ T1207] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 285.564348][ T5919] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 285.601394][ T1207] usb 2-1: Invalid ep0 maxpacket: 32 [ 285.608182][ T1207] usb usb2-port1: unable to enumerate USB device [ 285.805633][ T5919] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.830490][ T5878] gspca_sonixj: reg_w1 err -110 [ 285.857970][ T5878] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 285.873504][ T5919] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.094788][ T5919] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 286.254201][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.542864][ T5914] usb 4-1: USB disconnect, device number 18 [ 287.627533][ T7911] netlink: 16 bytes leftover after parsing attributes in process `syz.3.569'. [ 287.692068][ T7915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.738949][ T7915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.790409][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'. [ 287.799805][ T7922] netlink: 200 bytes leftover after parsing attributes in process `syz.4.570'. [ 287.815755][ T7925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.859339][ T7925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.893493][ T5919] usbhid 6-1:16.0: can't add hid device: -71 [ 287.920445][ T5919] usbhid 6-1:16.0: probe with driver usbhid failed with error -71 [ 287.941671][ T5919] usb 6-1: USB disconnect, device number 8 [ 288.339352][ T7935] input: syz0 as /devices/virtual/input/input8 [ 288.670556][ T7939] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.575'. [ 291.444491][ T5960] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 291.477570][ T7952] binder: 7951:7952 ioctl c0306201 200000000240 returned -14 [ 291.561902][ T7954] netlink: 'syz.3.581': attribute type 9 has an invalid length. [ 291.604410][ T5960] usb 6-1: Using ep0 maxpacket: 32 [ 291.611717][ T5960] usb 6-1: config 0 has an invalid interface number: 9 but max is 0 [ 291.624234][ T5919] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 291.634294][ T5960] usb 6-1: config 0 has no interface number 0 [ 291.656766][ T5960] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 291.690857][ T5960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.711178][ T5960] usb 6-1: Product: syz [ 291.716677][ T5960] usb 6-1: Manufacturer: syz [ 291.721480][ T5960] usb 6-1: SerialNumber: syz [ 291.732548][ T5960] usb 6-1: config 0 descriptor?? [ 291.765195][ T5960] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 291.950033][ T5919] usb 2-1: unable to get BOS descriptor or descriptor too short [ 292.030771][ T5919] usb 2-1: not running at top speed; connect to a high speed hub [ 292.101138][ T5919] usb 2-1: config 7 has an invalid interface number: 67 but max is 0 [ 292.332237][ T5919] usb 2-1: config 7 has no interface number 0 [ 292.425342][ T7947] 9pnet_fd: Insufficient options for proto=fd [ 292.444321][ T5919] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 292.453952][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.483598][ T5919] usb 2-1: Product: syz [ 292.505507][ T5919] usb 2-1: Manufacturer: ⟈䐕巚爛磚╵楾﹮樴躏ﬣ᱅ꝟ⥏㯈Ꚛ귝䥊髊燖䜎뭊ፙ讌鷡⍜驘檎▋ᴚ‏ꇅ痆⧯ꌿ싟䓇핲㷟揸䠦쮰﨤껳ⰷ굈᭨饂蕻㯪齏틃明灸텯頷໪藻᪲ꆪŊ黼䴙ႜؐ喒䴝㡌ӹ㿱̊ [ 292.530426][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.548418][ T5919] usb 2-1: SerialNumber: syz [ 292.662573][ T7971] Sensor B: ================= START STATUS ================= [ 292.670576][ T7971] Sensor B: Test Pattern: 75% Colorbar [ 292.677125][ T7971] Sensor B: Show Information: All [ 292.682516][ T7971] Sensor B: Vertical Flip: false [ 292.688636][ T7971] Sensor B: Horizontal Flip: false [ 292.698400][ T7971] Sensor B: Brightness: 128 [ 292.704233][ T7971] Sensor B: Contrast: 128 [ 292.708710][ T7971] Sensor B: Hue: 0 [ 292.745049][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'. [ 292.753919][ T7970] netlink: 200 bytes leftover after parsing attributes in process `syz.0.585'. [ 292.766672][ T7971] Sensor B: Saturation: 128 [ 292.778626][ T7971] Sensor B: ================== END STATUS ================== [ 293.085956][ T5960] gspca_topro: reg_w err -71 [ 293.135025][ T5960] gspca_topro: Sensor soi763a [ 293.257587][ T5960] usb 6-1: USB disconnect, device number 9 [ 293.992047][ T5919] usb 2-1: USB disconnect, device number 17 [ 294.128125][ T7982] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.588'. [ 294.742802][ T5919] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 294.835927][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 294.842126][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 294.868083][ T7990] ceph: No mds server is up or the cluster is laggy [ 295.231985][ T5919] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 295.795772][ T8001] warning: `syz.0.592' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 295.851280][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.860392][ T25] block nbd2: Possible stuck request ffff888024ab7000: control (read@0,1024B). Runtime 90 seconds [ 295.869141][ T5919] usb 2-1: Product: syz [ 295.871721][ T25] block nbd2: Possible stuck request ffff888024ab71c0: control (read@1024,1024B). Runtime 90 seconds [ 295.890918][ T25] block nbd2: Possible stuck request ffff888024ab7380: control (read@2048,1024B). Runtime 90 seconds [ 295.902257][ T25] block nbd2: Possible stuck request ffff888024ab7540: control (read@3072,1024B). Runtime 90 seconds [ 295.913832][ T5919] usb 2-1: Manufacturer: syz [ 295.929559][ T5919] usb 2-1: SerialNumber: syz [ 296.072936][ T5919] usb 2-1: config 0 descriptor?? [ 296.093390][ T5919] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 296.693726][ T5919] gspca_sonixj: reg_w1 err -110 [ 296.704533][ T5919] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 296.798917][ T7984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.589'. [ 296.875856][ T7984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.876571][ T7984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.311274][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.598'. [ 297.311303][ T8023] netlink: 200 bytes leftover after parsing attributes in process `syz.4.598'. [ 297.311857][ T8016] netlink: 20 bytes leftover after parsing attributes in process `syz.5.596'. [ 297.643878][ T8029] Sensor B: ================= START STATUS ================= [ 297.643901][ T8029] Sensor B: Test Pattern: 75% Colorbar [ 297.643945][ T8029] Sensor B: Show Information: All [ 297.643969][ T8029] Sensor B: Vertical Flip: false [ 297.643992][ T8029] Sensor B: Horizontal Flip: false [ 297.644258][ T8029] Sensor B: Brightness: 128 [ 297.644798][ T8029] Sensor B: Contrast: 128 [ 297.645024][ T8029] Sensor B: Hue: 0 [ 297.645379][ T8029] Sensor B: Saturation: 128 [ 297.645642][ T8029] Sensor B: ================== END STATUS ================== [ 297.646640][ T5919] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 298.088421][ T5919] usb 1-1: unable to get BOS descriptor or descriptor too short [ 298.089056][ T5919] usb 1-1: not running at top speed; connect to a high speed hub [ 298.090158][ T5919] usb 1-1: config 7 has an invalid interface number: 67 but max is 0 [ 298.090184][ T5919] usb 1-1: config 7 has no interface number 0 [ 298.097510][ T5919] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 298.136879][ T5833] usb 2-1: USB disconnect, device number 18 [ 298.179917][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.233611][ T5919] usb 1-1: Product: syz [ 298.233636][ T5919] usb 1-1: Manufacturer: ⟈䐕巚爛磚╵楾﹮樴躏ﬣ᱅ꝟ⥏㯈Ꚛ귝䥊髊燖䜎뭊ፙ讌鷡⍜驘檎▋ᴚ‏ꇅ痆⧯ꌿ싟䓇핲㷟揸䠦쮰﨤껳ⰷ굈᭨饂蕻㯪齏틃明灸텯頷໪藻᪲ꆪŊ黼䴙ႜؐ喒䴝㡌ӹ㿱̊ [ 298.233668][ T5919] usb 1-1: SerialNumber: syz [ 298.310205][ T8033] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.602'. [ 298.392972][ T8035] netlink: 48 bytes leftover after parsing attributes in process `syz.1.603'. [ 298.524256][ T1207] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 298.674310][ T1207] usb 5-1: Using ep0 maxpacket: 32 [ 298.680531][ T1207] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 298.680562][ T1207] usb 5-1: config 0 has no interface number 0 [ 298.682890][ T1207] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 298.682920][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.682943][ T1207] usb 5-1: Product: syz [ 298.682958][ T1207] usb 5-1: Manufacturer: syz [ 298.682973][ T1207] usb 5-1: SerialNumber: syz [ 298.687474][ T1207] usb 5-1: config 0 descriptor?? [ 298.698342][ T1207] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 298.724805][ T8039] netdevsim netdevsim1: Direct firmware load for . [ 298.724805][ T8039] failed with error -2 [ 298.724896][ T8039] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 298.724896][ T8039] [ 298.909701][ T8042] binder: 8041:8042 ioctl c0306201 2000000003c0 returned -14 [ 299.028890][ T8044] openvswitch: netlink: Flow actions attr not present in new flow. [ 299.399877][ T5919] usb 1-1: USB disconnect, device number 33 [ 299.500935][ T8031] 9pnet_fd: Insufficient options for proto=fd [ 300.265124][ T1207] gspca_topro: reg_w err -110 [ 300.324822][ T1207] gspca_topro: Sensor soi763a [ 300.399438][ T1207] usb 5-1: USB disconnect, device number 17 [ 300.437732][ T8053] netlink: 36 bytes leftover after parsing attributes in process `syz.5.610'. [ 300.671463][ T8062] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.613'. [ 303.155195][ T8076] netlink: 'syz.0.615': attribute type 25 has an invalid length. [ 303.731660][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 303.954670][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 304.192085][ T5919] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 304.331476][ T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.342529][ T9] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 304.374713][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 304.381554][ T9] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 304.417940][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.446096][ T9] usb 5-1: config 0 descriptor?? [ 304.487041][ T5919] usb 6-1: unable to get BOS descriptor or descriptor too short [ 304.497369][ T5919] usb 6-1: not running at top speed; connect to a high speed hub [ 304.531469][ T5919] usb 6-1: config 7 has an invalid interface number: 67 but max is 0 [ 304.545551][ T5919] usb 6-1: config 7 has no interface number 0 [ 304.562471][ T5919] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 304.580765][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.597518][ T5919] usb 6-1: Product: syz [ 304.604789][ T5919] usb 6-1: Manufacturer: ⟈䐕巚爛磚╵楾﹮樴躏ﬣ᱅ꝟ⥏㯈Ꚛ귝䥊髊燖䜎뭊ፙ讌鷡⍜驘檎▋ᴚ‏ꇅ痆⧯ꌿ싟䓇핲㷟揸䠦쮰﨤껳ⰷ굈᭨饂蕻㯪齏틃明灸텯頷໪藻᪲ꆪŊ黼䴙ႜؐ喒䴝㡌ӹ㿱̊ [ 304.629685][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.636718][ T5919] usb 6-1: SerialNumber: syz [ 304.863542][ T5832] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 304.880056][ T8093] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.029365][ T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0 [ 305.043997][ T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0 [ 305.208984][ T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0 [ 305.231243][ T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0 [ 305.243912][ T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0 [ 306.518264][ T9] glorious 0003:258A:0033.0005: hidraw0: USB HID vff.fc Device [Glorious Model D] on usb-dummy_hcd.4-1/input0 [ 308.187366][ T9] usb 5-1: USB disconnect, device number 18 [ 308.206486][ T5919] usb 6-1: USB disconnect, device number 10 [ 308.311825][ T8108] fido_id[8108]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 308.724272][ T5919] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 310.591923][ T5832] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 310.605501][ T5832] Bluetooth: hci1: Injecting HCI hardware error event [ 310.605577][ T5919] usb 6-1: Using ep0 maxpacket: 32 [ 310.615372][ T5825] Bluetooth: hci1: hardware error 0x00 [ 310.920144][ T5919] usb 6-1: config 0 has an invalid interface number: 9 but max is 0 [ 310.958708][ T5919] usb 6-1: config 0 has no interface number 0 [ 311.589102][ T5919] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 311.598534][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.616074][ T5919] usb 6-1: Product: syz [ 311.620536][ T5919] usb 6-1: Manufacturer: syz [ 311.628516][ T5919] usb 6-1: config 0 descriptor?? [ 311.638802][ T5919] usb 6-1: can't set config #0, error -71 [ 311.652771][ T5919] usb 6-1: USB disconnect, device number 11 [ 312.714734][ T8144] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:16389 [ 313.024350][ T5825] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 314.294193][ T5914] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 314.354999][ T8162] netlink: 'syz.0.641': attribute type 1 has an invalid length. [ 314.362817][ T8162] netlink: 216 bytes leftover after parsing attributes in process `syz.0.641'. [ 314.372071][ T8162] NCSI netlink: No device for ifindex 767 [ 314.374186][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 314.462303][ T8164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.319437][ T5914] usb 4-1: unable to get BOS descriptor or descriptor too short [ 316.344155][ T5914] usb 4-1: not running at top speed; connect to a high speed hub [ 316.354229][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 316.373572][ T9] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.387277][ T5914] usb 4-1: config 7 has an invalid interface number: 67 but max is 0 [ 316.404307][ T9] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 316.404345][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 316.404385][ T9] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 316.404410][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.420604][ T5914] usb 4-1: config 7 has no interface number 0 [ 316.427065][ T5914] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 316.487689][ T9] usb 5-1: config 0 descriptor?? [ 316.529209][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.537883][ T5914] usb 4-1: Product: syz [ 316.542160][ T5914] usb 4-1: Manufacturer: ⟈䐕巚爛磚╵楾﹮樴躏ﬣ᱅ꝟ⥏㯈Ꚛ귝䥊髊燖䜎뭊ፙ讌鷡⍜驘檎▋ᴚ‏ꇅ痆⧯ꌿ싟䓇핲㷟揸䠦쮰﨤껳ⰷ굈᭨饂蕻㯪齏틃明灸텯頷໪藻᪲ꆪŊ黼䴙ႜؐ喒䴝㡌ӹ㿱̊ [ 316.571187][ T5914] usb 4-1: SerialNumber: syz [ 317.154209][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 317.160350][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 317.303115][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.316011][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.553035][ T9] usb 5-1: USB disconnect, device number 19 [ 317.899175][ T5914] usb 4-1: USB disconnect, device number 20 [ 318.088789][ T8187] netlink: 'syz.1.647': attribute type 1 has an invalid length. [ 318.262357][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 318.302047][ T8194] netlink: 28 bytes leftover after parsing attributes in process `syz.3.646'. [ 318.825976][ T8193] 9pnet_fd: Insufficient options for proto=fd [ 318.840767][ T8182] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 318.974225][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 319.003758][ T9] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 319.240187][ T9] usb 5-1: config 0 has no interface number 0 [ 319.293902][ T6010] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 319.308124][ T8182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 319.340826][ T9] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 319.365870][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.398665][ T9] usb 5-1: Product: syz [ 319.402938][ T9] usb 5-1: Manufacturer: syz [ 319.429138][ T9] usb 5-1: SerialNumber: syz [ 319.467145][ T9] usb 5-1: config 0 descriptor?? [ 319.493853][ T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 319.520036][ T8206] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:16389 [ 319.641179][ T8187] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 319.657856][ T8187] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 319.679599][ T8187] bond2 (unregistering): Released all slaves [ 320.103478][ T8178] 9pnet_fd: Insufficient options for proto=fd [ 320.514810][ T9] gspca_topro: reg_w err -71 [ 320.554200][ T9] gspca_topro: Sensor soi763a [ 320.560457][ T8241] bridge_slave_0: left allmulticast mode [ 320.581913][ T8241] bridge_slave_0: left promiscuous mode [ 320.582883][ T9] usb 5-1: USB disconnect, device number 20 [ 320.599124][ T8241] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.628619][ T8241] bridge_slave_1: left allmulticast mode [ 320.636166][ T8241] bridge_slave_1: left promiscuous mode [ 320.642194][ T8241] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.668381][ T8241] bond0: (slave bond_slave_0): Releasing backup interface [ 320.692766][ T8241] bond0: (slave bond_slave_1): Releasing backup interface [ 320.727610][ T5822] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 320.773128][ T8241] team0: Port device team_slave_0 removed [ 320.793017][ T8241] team0: Port device team_slave_1 removed [ 320.800641][ T8241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.812487][ T8241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.822921][ T8241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.833032][ T8241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.884280][ T5822] usb 1-1: Using ep0 maxpacket: 32 [ 320.894743][ T5822] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 320.915961][ T5822] usb 1-1: config 0 has no interface number 0 [ 320.932364][ T5822] usb 1-1: config 0 interface 12 has no altsetting 0 [ 320.947867][ T5822] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 320.965706][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.986875][ T5822] usb 1-1: Product: syz [ 321.000086][ T5822] usb 1-1: Manufacturer: syz [ 321.010333][ T5822] usb 1-1: SerialNumber: syz [ 321.025795][ T5822] usb 1-1: config 0 descriptor?? [ 321.515320][ T5914] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 321.661478][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.678216][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 321.690950][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 321.706211][ T5914] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 321.716420][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.729910][ T5914] usb 2-1: config 0 descriptor?? [ 322.157448][ T5914] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 322.207376][ T5914] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0006/input/input9 [ 322.208321][ T5878] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 322.294986][ T5822] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 322.347911][ T5822] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 322.383749][ T5822] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 322.416819][ T5878] usb 6-1: Using ep0 maxpacket: 32 [ 322.423645][ T5822] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 322.442705][ T5914] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 322.446248][ T5878] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 322.472030][ T5822] usb 1-1: USB disconnect, device number 34 [ 322.484989][ T5878] usb 6-1: config 0 has no interface number 0 [ 322.491510][ T5878] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 322.522893][ T5878] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 322.567410][ T5914] usb 2-1: USB disconnect, device number 19 [ 322.568013][ T5878] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 322.604220][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.643936][ T5878] usb 6-1: Product: syz [ 322.651632][ T5878] usb 6-1: Manufacturer: syz [ 322.667322][ T5878] usb 6-1: SerialNumber: syz [ 322.683844][ T5878] usb 6-1: config 0 descriptor?? [ 322.708605][ T8287] fido_id[8287]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 323.113145][ T5878] radio-si470x 6-1:0.35: si470x_get_report: usb_control_msg returned -32 [ 323.122174][ T5878] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 323.165456][ T5878] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 323.189597][ T5878] usb 6-1: USB disconnect, device number 12 [ 323.258373][ T5960] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 323.281588][ T8308] netlink: 'syz.0.697': attribute type 1 has an invalid length. [ 323.351271][ T8308] bond3: entered promiscuous mode [ 323.358924][ T8308] bond3: entered allmulticast mode [ 323.369204][ T8308] 8021q: adding VLAN 0 to HW filter on device bond3 [ 323.403446][ T8308] ip6gretap1: entered promiscuous mode [ 323.409484][ T8308] ip6gretap1: entered allmulticast mode [ 323.417028][ T8308] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 323.438293][ T5960] usb 2-1: Using ep0 maxpacket: 8 [ 323.455733][ T2985] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 323.483824][ T5960] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 323.516301][ T5960] usb 2-1: config 0 has no interface number 1 [ 323.522503][ T5960] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 323.566325][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.586003][ T5825] Bluetooth: hci3: adv larger than maximum supported [ 323.605631][ T5960] usb 2-1: config 0 descriptor?? [ 323.626389][ T8123] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 323.856310][ T5960] qcserial 2-1:0.2: Qualcomm USB modem converter detected [ 323.874623][ T5878] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 324.034211][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 324.041546][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 324.052812][ T5878] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 324.062210][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.075097][ T5960] usb 2-1: USB disconnect, device number 20 [ 324.082792][ T5960] qcserial 2-1:0.2: device disconnected [ 324.089138][ T1207] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 324.100800][ T5878] usb 4-1: config 0 descriptor?? [ 324.251762][ T1207] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 324.261566][ T1207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.272929][ T1207] usb 1-1: config 0 descriptor?? [ 324.282258][ T1207] cp210x 1-1:0.0: cp210x converter detected [ 324.487741][ T1207] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 324.502267][ T1207] cp210x 1-1:0.0: querying part number failed [ 324.520182][ T1207] usb 1-1: cp210x converter now attached to ttyUSB0 [ 324.556130][ T5878] samsung 0003:0419:0600.0007: hidraw0: USB HID v0.04 Device [HID 0419:0600] on usb-dummy_hcd.3-1/input0 [ 324.691848][ T5822] usb 1-1: USB disconnect, device number 35 [ 324.729359][ T5919] usb 4-1: USB disconnect, device number 21 [ 324.742372][ T5822] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 324.762663][ T8328] fido_id[8328]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 324.762768][ T8332] netlink: 'syz.5.707': attribute type 4 has an invalid length. [ 324.793861][ T5822] cp210x 1-1:0.0: device disconnected [ 325.071282][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.711'. [ 325.385817][ T8350] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 325.422779][ T8350] overlayfs: failed to set xattr on upper [ 325.455083][ T5878] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 325.483257][ T8350] overlayfs: ...falling back to redirect_dir=nofollow. [ 325.503685][ T8350] overlayfs: ...falling back to index=off. [ 325.523735][ T8350] overlayfs: ...falling back to uuid=null. [ 325.626367][ T5878] usb 6-1: Using ep0 maxpacket: 32 [ 325.638937][ T5878] usb 6-1: config 0 interface 0 has no altsetting 0 [ 325.646183][ T5878] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 325.663455][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.733771][ T5878] usb 6-1: config 0 descriptor?? [ 325.939943][ T8376] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 326.085954][ T5822] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 326.104629][ T25] block nbd2: Possible stuck request ffff888024ab7000: control (read@0,1024B). Runtime 120 seconds [ 326.116193][ T25] block nbd2: Possible stuck request ffff888024ab71c0: control (read@1024,1024B). Runtime 120 seconds [ 326.127707][ T25] block nbd2: Possible stuck request ffff888024ab7380: control (read@2048,1024B). Runtime 120 seconds [ 326.141082][ T25] block nbd2: Possible stuck request ffff888024ab7540: control (read@3072,1024B). Runtime 120 seconds [ 326.172095][ T5878] waterforce 0003:1044:7A4D.0008: unknown main item tag 0x0 [ 326.180441][ T5878] waterforce 0003:1044:7A4D.0008: unknown main item tag 0x0 [ 326.188480][ T5878] waterforce 0003:1044:7A4D.0008: unknown main item tag 0x0 [ 326.196472][ T5878] waterforce 0003:1044:7A4D.0008: unknown main item tag 0x0 [ 326.203927][ T5878] waterforce 0003:1044:7A4D.0008: unknown main item tag 0x0 [ 326.217289][ T5878] waterforce 0003:1044:7A4D.0008: hidraw0: USB HID v0.05 Device [HID 1044:7a4d] on usb-dummy_hcd.5-1/input0 [ 326.286680][ T5878] waterforce 0003:1044:7A4D.0008: fw version request failed with -38 [ 326.299577][ T5822] usb 1-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 326.337513][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.368846][ T5822] usb 1-1: config 0 descriptor?? [ 326.399596][ T9] usb 6-1: USB disconnect, device number 13 [ 326.435761][ T5822] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 326.503862][ T8388] fido_id[8388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 326.589156][ T5914] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 326.673450][ T5878] usb 1-1: USB disconnect, device number 36 [ 326.703011][ T8392] bridge_slave_0: left allmulticast mode [ 326.712517][ T8392] bridge_slave_0: left promiscuous mode [ 326.729531][ T5936] udevd[5936]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 326.734523][ T8392] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.758227][ T5936] udevd[5936]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 326.773375][ T8392] bridge_slave_1: left allmulticast mode [ 326.791761][ T8392] bridge_slave_1: left promiscuous mode [ 326.799793][ T5914] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 326.816506][ T8392] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.826628][ T5914] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.842919][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'. [ 326.852788][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 326.866975][ T5914] usb 4-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 326.879226][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.889699][ T8392] bond0: (slave bond_slave_0): Releasing backup interface [ 326.901179][ T5914] usb 4-1: config 0 descriptor?? [ 326.926007][ T8392] bond0: (slave bond_slave_1): Releasing backup interface [ 326.973575][ T8392] team0: Port device team_slave_0 removed [ 327.026219][ T8392] team0: Port device team_slave_1 removed [ 327.052900][ T8392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.060761][ T8392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.070991][ T8392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.107765][ T8392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.361783][ T5914] aquacomputer_d5next 0003:0C70:F012.0009: hidraw0: USB HID v0.05 Device [HID 0c70:f012] on usb-dummy_hcd.3-1/input0 [ 327.538388][ T5822] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 327.558690][ T5914] usb 4-1: USB disconnect, device number 22 [ 327.717154][ T5822] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 327.725805][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 327.734205][ T1207] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 327.737074][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.759337][ T5822] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 327.769573][ T5822] usb 5-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 327.778683][ T5822] usb 5-1: Manufacturer: syz [ 327.793611][ T5822] usb 5-1: config 0 descriptor?? [ 327.894152][ T1207] usb 1-1: Using ep0 maxpacket: 8 [ 327.901306][ T1207] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 327.909170][ T1207] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 327.921084][ T1207] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.933489][ T1207] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 327.947719][ T1207] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 327.960709][ T1207] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 327.968508][ T1207] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 327.981095][ T1207] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 327.993029][ T1207] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 328.005184][ T1207] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 328.018594][ T1207] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 328.026818][ T1207] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 328.038698][ T1207] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 328.051133][ T1207] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 328.062797][ T1207] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 328.077704][ T1207] usb 1-1: string descriptor 0 read error: -22 [ 328.084671][ T1207] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 328.094344][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.119098][ T1207] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 328.214491][ T5822] isku 0003:1E7D:319C.000A: global environment stack underflow [ 328.232814][ T5822] isku 0003:1E7D:319C.000A: item 0 4 1 11 parsing failed [ 328.240908][ T5822] isku 0003:1E7D:319C.000A: parse failed [ 328.258056][ T5822] isku 0003:1E7D:319C.000A: probe with driver isku failed with error -22 [ 328.340935][ T5875] usb 1-1: USB disconnect, device number 37 [ 328.414396][ T1207] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 328.431490][ T5822] usb 5-1: USB disconnect, device number 21 [ 328.574209][ T1207] usb 4-1: Using ep0 maxpacket: 16 [ 328.595328][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.613244][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.632271][ T1207] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 328.646596][ T1207] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 328.656086][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.677219][ T1207] usb 4-1: config 0 descriptor?? [ 328.862837][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 328.862856][ T30] audit: type=1326 audit(1747997449.733:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8432 comm="syz.1.748" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe3918e969 code=0x0 [ 328.893127][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.749'. [ 328.928232][ T8439] netlink: 200 bytes leftover after parsing attributes in process `syz.5.749'. [ 329.117302][ T1207] HID 045e:07da: Invalid code 65791 type 1 [ 329.136558][ T1207] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000B/input/input11 [ 329.155399][ T1207] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 329.195032][ T5878] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 329.324190][ T1207] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 329.338374][ T5875] usb 4-1: USB disconnect, device number 23 [ 329.366453][ T5878] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.382175][ T5878] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 329.399683][ T5878] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 329.413506][ T5878] usb 1-1: Manufacturer: syz [ 329.422189][ T5878] usb 1-1: config 0 descriptor?? [ 329.497417][ T1207] usb 5-1: unable to get BOS descriptor or descriptor too short [ 329.506362][ T1207] usb 5-1: not running at top speed; connect to a high speed hub [ 329.526628][ T1207] usb 5-1: config 7 has an invalid interface number: 67 but max is 0 [ 329.535158][ T1207] usb 5-1: config 7 has no interface number 0 [ 329.548879][ T1207] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 329.558679][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.567921][ T1207] usb 5-1: Product: syz [ 329.572220][ T1207] usb 5-1: Manufacturer: ⟈䐕巚爛磚╵楾﹮樴躏ﬣ᱅ꝟ⥏㯈Ꚛ귝䥊髊燖䜎뭊ፙ讌鷡⍜驘檎▋ᴚ‏ꇅ痆⧯ꌿ싟䓇핲㷟揸䠦쮰﨤껳ⰷ굈᭨饂蕻㯪齏틃明灸텯頷໪藻᪲ꆪŊ黼䴙ႜؐ喒䴝㡌ӹ㿱̊ [ 329.614278][ T1207] usb 5-1: SerialNumber: syz [ 330.614203][ T5914] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 331.029629][ T5914] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 331.038962][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.061306][ T5914] usb 6-1: Product: syz [ 331.065791][ T5914] usb 6-1: Manufacturer: syz [ 331.070434][ T5914] usb 6-1: SerialNumber: syz [ 331.079738][ T5914] usb 6-1: config 0 descriptor?? [ 331.091112][ T5914] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 331.332080][ T8448] netlink: 20 bytes leftover after parsing attributes in process `syz.5.753'. [ 331.354348][ T8448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.366295][ T8448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.084962][ T5914] gspca_sonixj: reg_w1 err -110 [ 332.089972][ T5914] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 332.255974][ T5878] usb 1-1: USB disconnect, device number 38 [ 332.328553][ T1207] usb 5-1: USB disconnect, device number 22 [ 334.344164][ T8468] syz_tun: entered promiscuous mode [ 334.623962][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.758'. [ 335.035512][ T8479] program syz.3.759 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 335.097434][ T5822] usb 6-1: USB disconnect, device number 14 [ 336.671469][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.763'. [ 336.718011][ T8497] netlink: 200 bytes leftover after parsing attributes in process `syz.5.763'. [ 336.796350][ T8498] vlan2: entered promiscuous mode [ 336.850087][ T8502] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:16389 [ 336.887303][ T8498] vlan0: entered promiscuous mode [ 336.906861][ T8498] gretap0: entered promiscuous mode [ 337.579026][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.772'. [ 337.749501][ T5914] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 337.929129][ T8533] netlink: 36 bytes leftover after parsing attributes in process `syz.0.778'. [ 338.127625][ T5914] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 338.139127][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.149882][ T5914] usb 4-1: Product: syz [ 338.178944][ T5914] usb 4-1: Manufacturer: syz [ 338.183602][ T5914] usb 4-1: SerialNumber: syz [ 338.650086][ T5914] usb 4-1: config 0 descriptor?? [ 338.717314][ T5914] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 338.877060][ T8519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.774'. [ 338.898051][ T8519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.914809][ T8519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.621370][ T8545] netlink: 28 bytes leftover after parsing attributes in process `syz.5.782'. [ 339.734291][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.782'. [ 340.163323][ T5914] gspca_sonixj: reg_w1 err -110 [ 340.174782][ T5914] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 340.428355][ T8552] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:16389 [ 340.725289][ T8559] netlink: 'syz.0.786': attribute type 1 has an invalid length. [ 340.896855][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.787'. [ 340.920711][ T8564] netlink: 200 bytes leftover after parsing attributes in process `syz.5.787'. [ 341.082728][ T1207] libceph: connect (1)[c::]:6789 error -101 [ 341.092431][ T1207] libceph: mon0 (1)[c::]:6789 connect error [ 341.110175][ T5914] usb 4-1: USB disconnect, device number 24 [ 341.123703][ T8569] ceph: No mds server is up or the cluster is laggy [ 341.470183][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.790'. [ 344.805171][ T5832] Bluetooth: hci5: command 0x0405 tx timeout [ 345.239423][ T8610] netlink: 'syz.0.798': attribute type 1 has an invalid length. [ 346.816869][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.805'. [ 346.961808][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 346.986040][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 347.019075][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.804'. [ 347.049067][ T8629] ceph: No mds server is up or the cluster is laggy [ 347.104740][ T8636] netlink: 200 bytes leftover after parsing attributes in process `syz.4.804'. [ 347.328521][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 347.339341][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 347.866526][ T8648] netlink: 'syz.0.809': attribute type 1 has an invalid length. [ 349.040258][ T8663] blktrace: Concurrent blktraces are not allowed on sg0 [ 351.017669][ T8667] netlink: 768 bytes leftover after parsing attributes in process `syz.1.813'. [ 351.534511][ T5878] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 352.014322][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 352.319965][ T5878] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 352.328699][ T5878] usb 1-1: config 0 has no interface number 0 [ 352.341622][ T5878] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 352.351130][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.372919][ T5878] usb 1-1: Product: syz [ 352.381787][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.820'. [ 352.400974][ T8689] netlink: 200 bytes leftover after parsing attributes in process `syz.3.820'. [ 352.420442][ T5878] usb 1-1: Manufacturer: syz [ 352.438405][ T5878] usb 1-1: SerialNumber: syz [ 352.455681][ T5878] usb 1-1: config 0 descriptor?? [ 352.470864][ T5878] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 352.477514][ T5914] libceph: connect (1)[c::]:6789 error -101 [ 352.477686][ T5914] libceph: mon0 (1)[c::]:6789 connect error [ 352.498286][ T8691] ceph: No mds server is up or the cluster is laggy [ 353.315936][ T8676] 9pnet_fd: Insufficient options for proto=fd [ 353.855011][ T5878] gspca_topro: reg_w err -110 [ 353.914255][ T5878] gspca_topro: Sensor soi763a [ 356.184416][ T25] block nbd2: Possible stuck request ffff888024ab7000: control (read@0,1024B). Runtime 150 seconds [ 356.195635][ T25] block nbd2: Possible stuck request ffff888024ab71c0: control (read@1024,1024B). Runtime 150 seconds [ 356.197975][ T5914] usb 1-1: USB disconnect, device number 39 [ 356.206826][ T25] block nbd2: Possible stuck request ffff888024ab7380: control (read@2048,1024B). Runtime 150 seconds [ 356.234344][ T25] block nbd2: Possible stuck request ffff888024ab7540: control (read@3072,1024B). Runtime 150 seconds [ 358.852250][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.834'. [ 358.861365][ T8745] netlink: 200 bytes leftover after parsing attributes in process `syz.5.834'. [ 359.584181][ T5822] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 360.205933][ T5822] usb 5-1: Using ep0 maxpacket: 32 [ 360.254628][ T5822] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 360.262695][ T5822] usb 5-1: config 0 has no interface number 0 [ 360.277248][ T5822] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 360.294444][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.327382][ T5822] usb 5-1: Product: syz [ 360.331626][ T5822] usb 5-1: Manufacturer: syz [ 360.444152][ T5822] usb 5-1: SerialNumber: syz [ 360.462454][ T5822] usb 5-1: config 0 descriptor?? [ 360.872723][ T5822] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 361.567131][ T8751] 9pnet_fd: Insufficient options for proto=fd [ 362.240424][ T5822] gspca_topro: reg_w err -71 [ 362.265335][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'. [ 362.274302][ T5822] gspca_topro: Sensor soi763a [ 362.281103][ T8787] netlink: 200 bytes leftover after parsing attributes in process `syz.0.848'. [ 362.296112][ T5822] usb 5-1: USB disconnect, device number 23 [ 362.313686][ T5874] udevd[5874]: setting owner of /dev/bus/usb/005/023 to uid=0, gid=0 failed: No such file or directory [ 362.814260][ T5822] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 363.035883][ T5822] usb 2-1: Using ep0 maxpacket: 32 [ 363.140761][ T5822] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.258017][ T5822] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 363.419337][ T5822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 363.519889][ T5822] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 363.663958][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.953330][ T5822] usb 2-1: config 0 descriptor?? [ 364.964226][ T5822] glorious 0003:258A:0033.000C: unknown main item tag 0x0 [ 365.085234][ T5822] glorious 0003:258A:0033.000C: unknown main item tag 0x0 [ 365.212048][ T5822] glorious 0003:258A:0033.000C: unknown main item tag 0x0 [ 365.361353][ T5822] glorious 0003:258A:0033.000C: unknown main item tag 0x0 [ 365.503995][ T5822] glorious 0003:258A:0033.000C: unknown main item tag 0x0 [ 365.772429][ T5822] glorious 0003:258A:0033.000C: hidraw0: USB HID vff.fc Device [Glorious Model D] on usb-dummy_hcd.1-1/input0 [ 365.832921][ T8810] 9pnet_fd: Insufficient options for proto=fd [ 366.785597][ T5822] usb 2-1: USB disconnect, device number 21 [ 366.903406][ T8812] fido_id[8812]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 367.313434][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.860'. [ 367.440445][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 367.688030][ T31] INFO: task syz.2.341:7099 blocked for more than 143 seconds. [ 367.794243][ T31] Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 [ 367.836417][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 367.874818][ T31] task:syz.2.341 state:D stack:27816 pid:7099 tgid:7095 ppid:5820 task_flags:0x400140 flags:0x00004004 [ 367.923949][ T31] Call Trace: [ 367.929907][ T31] [ 367.933150][ T31] __schedule+0x168f/0x4c70 [ 367.950493][ T31] ? schedule+0x165/0x360 [ 367.955627][ T31] ? __pfx___schedule+0x10/0x10 [ 367.961707][ T31] ? schedule+0x91/0x360 [ 367.969424][ T31] schedule+0x165/0x360 [ 367.976688][ T31] schedule_preempt_disabled+0x13/0x30 [ 367.982717][ T31] __mutex_lock+0x724/0xe80 [ 367.990721][ T31] ? __mutex_lock+0x51b/0xe80 [ 367.996270][ T31] ? bdev_release+0x1a9/0x650 [ 368.001556][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 368.007560][ T31] ? __asan_memset+0x22/0x50 [ 368.012946][ T31] ? __pfx___fsnotify_parent+0x10/0x10 [ 368.019243][ T31] ? do_raw_spin_lock+0x121/0x290 [ 368.025506][ T31] bdev_release+0x1a9/0x650 [ 368.030527][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 368.036853][ T31] blkdev_release+0x15/0x20 [ 368.041746][ T31] __fput+0x449/0xa70 [ 368.049928][ T31] task_work_run+0x1d4/0x260 [ 368.055291][ T31] ? __pfx_task_work_run+0x10/0x10 [ 368.061382][ T31] ? __fget_files+0x3a0/0x420 [ 368.067115][ T31] resume_user_mode_work+0x5e/0x80 [ 368.072976][ T31] syscall_exit_to_user_mode+0x9a/0x120 [ 368.079509][ T31] do_syscall_64+0x103/0x210 [ 368.085013][ T31] ? clear_bhb_loop+0x60/0xb0 [ 368.090157][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.105364][ T31] RIP: 0033:0x7f38e398e969 [ 368.109891][ T31] RSP: 002b:00007f38e4813038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.121351][ T31] RAX: 0000000000000000 RBX: 00007f38e3bb5fa0 RCX: 00007f38e398e969 [ 368.130169][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004 [ 368.139630][ T31] RBP: 00007f38e3a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 368.150365][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.161787][ T31] R13: 0000000000000000 R14: 00007f38e3bb5fa0 R15: 00007ffd0cef5908 [ 368.170493][ T31] [ 368.174264][ T31] [ 368.174264][ T31] Showing all locks held in the system: [ 368.183229][ T31] 1 lock held by khungtaskd/31: [ 368.190098][ T31] #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 368.200520][ T31] 2 locks held by getty/5575: [ 368.205391][ T31] #0: ffff88803015e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 368.215405][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 368.225817][ T31] 1 lock held by udevd/5935: [ 368.230524][ T31] #0: ffff8881443b1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 368.307649][ T31] 1 lock held by syz.2.341/7099: [ 368.312807][ T31] #0: ffff8881443b1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 368.340187][ T31] 2 locks held by syz.3.861/8823: [ 368.345620][ T31] #0: ffff88805a26c408 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 368.356203][ T31] #1: ffffffff8df439b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 368.368117][ T31] [ 368.370489][ T31] ============================================= [ 368.370489][ T31] [ 368.380054][ T31] NMI backtrace for cpu 0 [ 368.380075][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 368.380112][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 368.380124][ T31] Call Trace: [ 368.380132][ T31] [ 368.380140][ T31] dump_stack_lvl+0x189/0x250 [ 368.380169][ T31] ? __wake_up_klogd+0xd9/0x110 [ 368.380194][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.380220][ T31] ? __pfx__printk+0x10/0x10 [ 368.380264][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 368.380288][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 368.380304][ T31] ? _printk+0xcf/0x120 [ 368.380339][ T31] ? __pfx__printk+0x10/0x10 [ 368.380371][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 368.380393][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 368.380417][ T31] watchdog+0xfee/0x1030 [ 368.380443][ T31] ? watchdog+0x1de/0x1030 [ 368.380477][ T31] kthread+0x711/0x8a0 [ 368.380504][ T31] ? __pfx_watchdog+0x10/0x10 [ 368.380526][ T31] ? __pfx_kthread+0x10/0x10 [ 368.380549][ T31] ? __pfx_kthread+0x10/0x10 [ 368.380570][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.380592][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.380616][ T31] ? __pfx_kthread+0x10/0x10 [ 368.380636][ T31] ret_from_fork+0x4b/0x80 [ 368.380654][ T31] ? __pfx_kthread+0x10/0x10 [ 368.380676][ T31] ret_from_fork_asm+0x1a/0x30 [ 368.380721][ T31] [ 368.380729][ T31] Sending NMI from CPU 0 to CPUs 1: [ 368.531771][ C1] NMI backtrace for cpu 1 [ 368.531788][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 368.531809][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 368.531820][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 368.531846][ C1] Code: 43 d4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 9f 18 00 f3 0f 1e fa fb f4 18 d4 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 368.531862][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 368.531877][ C1] RAX: 8cf98178ea8cde00 RBX: ffffffff81977028 RCX: 8cf98178ea8cde00 [ 368.531891][ C1] RDX: 0000000000000001 RSI: ffffffff8d73aa4e RDI: ffffffff8bc120c0 [ 368.531902][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932b5b R09: 1ffff1101712656b [ 368.531915][ C1] R10: dffffc0000000000 R11: ffffed101712656c R12: ffffffff8f7e0970 [ 368.531928][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038dcb40 [ 368.531940][ C1] FS: 0000000000000000(0000) GS:ffff8881261f6000(0000) knlGS:0000000000000000 [ 368.531953][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.531965][ C1] CR2: 00007fbe39171da0 CR3: 000000004efea000 CR4: 00000000003526f0 [ 368.531980][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 368.531990][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 368.532001][ C1] Call Trace: [ 368.532014][ C1] [ 368.532021][ C1] default_idle+0x13/0x20 [ 368.532045][ C1] default_idle_call+0x74/0xb0 [ 368.532070][ C1] do_idle+0x1e8/0x510 [ 368.532101][ C1] ? __pfx_do_idle+0x10/0x10 [ 368.532137][ C1] cpu_startup_entry+0x44/0x60 [ 368.532162][ C1] start_secondary+0x101/0x110 [ 368.532188][ C1] common_startup_64+0x13e/0x147 [ 368.532220][ C1] [ 369.164371][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 369.171293][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00099-g94305e83eccb #0 PREEMPT(full) [ 369.183138][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 369.193219][ T31] Call Trace: [ 369.196506][ T31] [ 369.199436][ T31] dump_stack_lvl+0x99/0x250 [ 369.204034][ T31] ? __asan_memcpy+0x40/0x70 [ 369.208651][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.213857][ T31] ? __pfx__printk+0x10/0x10 [ 369.218475][ T31] panic+0x2db/0x790 [ 369.222380][ T31] ? __pfx_panic+0x10/0x10 [ 369.226800][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 369.232186][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 369.237560][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 369.243720][ T31] watchdog+0x102d/0x1030 [ 369.248054][ T31] ? watchdog+0x1de/0x1030 [ 369.252477][ T31] kthread+0x711/0x8a0 [ 369.256550][ T31] ? __pfx_watchdog+0x10/0x10 [ 369.261239][ T31] ? __pfx_kthread+0x10/0x10 [ 369.265831][ T31] ? __pfx_kthread+0x10/0x10 [ 369.270421][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 369.275632][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.280830][ T31] ? __pfx_kthread+0x10/0x10 [ 369.285422][ T31] ret_from_fork+0x4b/0x80 [ 369.289840][ T31] ? __pfx_kthread+0x10/0x10 [ 369.294434][ T31] ret_from_fork_asm+0x1a/0x30 [ 369.299216][ T31] [ 369.302619][ T31] Kernel Offset: disabled [ 369.306960][ T31] Rebooting in 86400 seconds..