last executing test programs: 8m9.491384775s ago: executing program 0 (id=190): socket(0x10, 0x803, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000240)={0x18, r1, 0x1, 0x0, &(0x7f0000000080)=[{0xc, 0x80}]}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$unix(0x1, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="130000001000000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='mlxsw_sp_acl_atcam_entry_add_ctcam_spill\x00', r5, 0x0, 0x7}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) (async) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) (async) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) (async) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, 0x0, 0x0) 8m8.832355775s ago: executing program 0 (id=195): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000040)="01000000", 0x4}, {&(0x7f00000003c0)='\v\x00\x00\x00', 0x4}], 0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 8m3.861124796s ago: executing program 0 (id=213): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x8000000000080001, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x398}}, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, 0x0, 0x0) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x40000331}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r0, 0x0, &(0x7f00000000c0)="26677e08864c083769237ec829d45d8caae0c6242ab4159c509cf8bb4e54d326b911f2c224c5141806f971c0cd23b2ff2bef3a540def3e9833411f37c0935b2b", 0x40, 0x40000, 0x1}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000140)={0x2, 0xb, &(0x7f0000000500)="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"}) r8 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x1c1882) ioctl$SCSI_IOCTL_STOP_UNIT(r8, 0x6) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r9, &(0x7f0000000000)={0x9, 0x2d, 0xfffffffffffffff9, 0x3a, 0x0, 0x2c}, 0x48) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000580), 0x103000, 0x0) poll(&(0x7f0000000600)=[{r10, 0x2200}], 0x1, 0x7) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00'}) 8m2.672099067s ago: executing program 0 (id=216): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}]}, 0x40}}, 0x0) 7m59.621582158s ago: executing program 0 (id=230): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x7, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000180)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000100)=0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000005c0)={0x0, 0x13b000, 0x0, 0x9}, 0x20) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x2, @loopback={0x0, 0xac14140c}, 0x8}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="8b", 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x60) 7m59.548433742s ago: executing program 0 (id=232): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800fc0018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500060001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) 7m44.440831313s ago: executing program 32 (id=232): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800fc0018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500060001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) 4m26.274691062s ago: executing program 2 (id=908): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x0) readv(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400c40000000000dd0a000000000000730191d9c48a000063d0"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002ebd7000fcdbdf2508000000380004803400078008000100070000000800030090e60000080004000b7ee617c498fbdcea9294"], 0x4c}, 0x1, 0x0, 0x0, 0x48c0}, 0x8000) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000880), 0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000b0000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fe41000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r7, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd3, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), 0x0, 0x0, 0xbb, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x400, '\x00', r8, 0xffffffffffffffff, 0x5, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) 4m24.781603896s ago: executing program 2 (id=917): bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffc6e) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$pfkey(0xffffff9c, 0x0, 0x101000, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r6) mkdir(&(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') r7 = openat$cgroup_int(r6, &(0x7f0000000180)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000740), 0x12) 4m23.24461824s ago: executing program 2 (id=921): ioprio_set$pid(0x1, 0x0, 0x2004) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r0 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xa512f000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x8000000, 0x3}) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffffffd) 4m21.120714704s ago: executing program 2 (id=926): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049d4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000004000000"]) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) socket$inet(0xa, 0x801, 0x84) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9cb5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x2, {0x1, @raw_data="4bbf622b20d2538e6e1f445b7795aa93c004bbb74ebdde873aa40cfdb8d06aefde8880cf4a22212c23b7c448cd514212f3419dcccde3ae9debb21b3ee10fdf63d3e7583e6702b0e9a49174a54c8fc2394f74d8c60dd96a7d41cebaaa10e0fe4fb36d1d8c9ff5984eea66eb54ff774e7af403c61eb7963e0bd5b1370d56b3a9efdaabcb8c2d20c39e64de366fce7e9c408b86db8a782f306a3e186d49e5f92e8a46d4ef2b353b7082844034eb36e4df5d2bf8b6635dd0f7a4d05bc0e9c33dffa2e74c75962dc70ea1"}}) socket$inet6_mptcp(0xa, 0x1, 0x106) 4m19.975532463s ago: executing program 2 (id=931): bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffc6e) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$pfkey(0xffffff9c, 0x0, 0x101000, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r6) mkdir(&(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') r7 = openat$cgroup_int(r6, &(0x7f0000000180)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000740), 0x12) 4m18.717749726s ago: executing program 2 (id=934): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f0000006000)=[{{&(0x7f00000015c0)={0xa, 0x4e23, 0x6, @loopback, 0x2}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x9}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x32}}}], 0x30}}], 0x2, 0x20040000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x403}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2c, r6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102400, 0x19000) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(0xffffffffffffffff, 0x800000000010d, 0x14, 0x0, 0x0) setresuid(0xee01, 0x0, 0xffffffffffffffff) syslog(0x3, &(0x7f0000001280)=""/39, 0x27) getuid() 4m3.64247409s ago: executing program 33 (id=934): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f0000006000)=[{{&(0x7f00000015c0)={0xa, 0x4e23, 0x6, @loopback, 0x2}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x9}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x32}}}], 0x30}}], 0x2, 0x20040000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x403}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2c, r6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102400, 0x19000) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(0xffffffffffffffff, 0x800000000010d, 0x14, 0x0, 0x0) setresuid(0xee01, 0x0, 0xffffffffffffffff) syslog(0x3, &(0x7f0000001280)=""/39, 0x27) getuid() 16.272057898s ago: executing program 3 (id=1559): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000140)={0x0, 0x0, 0x7, 0xfffbffff, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) ioperm(0x7, 0x5, 0xa) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2d, 'cpuset'}]}, 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x8000, 0x7, 0x2, 0x14, {{0x7, 0x4, 0x2, 0x29, 0x1c, 0x1066, 0x0, 0x9, 0x2b, 0x0, @multicast1, @remote, {[@ssrr={0x89, 0x3, 0x4c}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', r4, 0x4, 0x9, 0x9, 0x0, 0x41, @local, @rand_addr=' \x01\x00', 0x10, 0x1, 0x401}}) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x95ff, 0x3900000000000000, 0x0, 0x0) 14.934879957s ago: executing program 6 (id=1561): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x0, 0x0}) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) timer_create(0x0, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002180)=@newtaction={0x300, 0x30, 0x3, 0x70bd2d, 0x25dfdbff, {}, [{0x2ec, 0x1, [@m_skbmod={0x170, 0x1f, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3800000, 0x6, 0x80000001, 0x400}, 0x400000000000000}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="c896f55f00"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x81}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}]}, {0xde, 0x6, "f35b172d7baa6650224966c3f64eabdd30518026962cf5e57280dcc6e0b661da29afad601525508fce3d07af5dbb2381b08ccd78556c2f647620132671db1d7c309ebf6ed9bc2f6b34c06c478c617dcc6317258463a26239ee99dff9479ece66ca5a638081721d7abf577a62661f2fd72b9861bd4c0ec269d5a8d476a77a8d3e900d3ab9594606b9a1193813c8fa3b6eae4487242a39bb08c3fb5efe0513a176efe7d453756955a40048b74b617760e6e0ab30ee00000000131dbd8abb4dc20c8a58b1ebd68afbb719dbdcc144b12d5e71f885dad6ce7ecace9a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mpls={0x148, 0x19, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x8adf0}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88fb}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}]}, {0xea, 0x6, "ec3cfc8274bce04746f693d03d295d6ac3f2cd4e155a0336ba23bce469cd5ff565fc0774936f8606f2275e9e5de6240f7000de350be786e722a006805a6dca1e2f88d669b109dc6bcd49556eb89d15db19e9fcc50cd0f1b2bbfc023c4fd0008ca1dec5f01d51c0ad7a6abd8146afb1415f3fba9844bb35877c142b95fd04af88f9f03bda74d9d2843e67b9823499233f8069db0b539c3344aeae20bd54633d941a7e16c25b71df1467869df5c8807c36ac52b511ef6f4822069740aa2d835eef4f3ec450e617ff9d5eefd4a2ebde3482dc70301661bd1efa4ab733320a3b87e0c0e0bdd89a75"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x30, 0xf, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x800}, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) accept4$unix(r2, &(0x7f00000020c0)=@abs, &(0x7f0000002140)=0x19, 0x80000) connect$llc(r4, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x6, 0x0, 0x0, @broadcast}, 0x10) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) clock_gettime(0xfffffffffffffffd, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr|inodes=2']) chdir(&(0x7f0000000140)='./file0\x00') ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f0000002480)) 14.113156066s ago: executing program 3 (id=1562): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100001ffffbd700000000000000000859b500c75fb680d31ea00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x48084) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @global=@item_4={0x3, 0x1, 0x5, "42974060"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0xc038480a, &(0x7f00000000c0)=0x3) 12.442921921s ago: executing program 6 (id=1567): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2003308030300ecff3f0200000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100a", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000080)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x6a}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0x280}], 0x1) 12.128999105s ago: executing program 6 (id=1569): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') preadv(r1, &(0x7f0000000100)=[{0x0}], 0x1, 0xffffffff, 0x0) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x310, 0x67, 0xc1, 0x9c, 0x40, 0xaf0, 0x6711, 0x222, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf7, 0xb, 0x80, 0x6, [{{0x9, 0x4, 0x8d, 0x4, 0x0, 0x55, 0x46, 0xbe, 0xce}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r4, &(0x7f0000000640)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x40001, 0x1, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e56cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca3aad6b39905a9727d2001457df7be7e1aefebaf80e2697c143f28def4b73905ca14d90d1f600"}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xe, {"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", 0xffffffffffffff37}}, 0x1006) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1}, 0xb) 9.350802248s ago: executing program 6 (id=1573): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0x19}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a30000000000900010073797a300000000008000540000000160800034000000014500000000c0a010300000000000000000100000008000440000000000900010073797a30000000002800038024000080200001801a0001"], 0xdc}}, 0x0) 9.350235491s ago: executing program 3 (id=1574): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x4}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = io_uring_setup(0x4967, &(0x7f00000002c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000003140)=ANY=[@ANYBLOB="18000000000004001001000001000000dc00000000000000100000000000e1ffffff020003000000"], 0x28}, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r3, 0x101, 0x6, &(0x7f0000000140)=0x4, 0x4) accept4$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @multicast1}, &(0x7f0000000380)=0x10, 0x80800) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000400)={0x7fff, 0x0, &(0x7f00000003c0)}, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x1000001, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo\x00') sendto$packet(r5, &(0x7f0000000180)="bece90bb9e18e6faaa330cf4fcfea907502cb641d89729321c016662bc8b7a406bea79525d1d3823e2ac", 0x2a, 0x8004, &(0x7f00000001c0)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 9.267565828s ago: executing program 4 (id=1576): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x1, @mcast2, 0x1}}, {{0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x4, {{0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x4}}, {{0xa, 0x0, 0x4000, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x108) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xd}, 0x20) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) socket$inet_sctp(0x2, 0x5, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)="f4000900062b2c25fe80000000000010dc8b850f238466f8ffffff000000ad6e911b51818a3262d41ff7b418e4604ba2f3", 0x31}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r5, 0x10e, 0x1, 0x0, &(0x7f0000000080)) 9.193279391s ago: executing program 1 (id=1577): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100), 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000500ec727dfa73e442586d8cb41a0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80060, &(0x7f0000000000)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) 7.802898356s ago: executing program 5 (id=1579): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x6}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x44b3}) 7.799601496s ago: executing program 1 (id=1580): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x80) fcntl$setlease(r2, 0x400, 0x0) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000100)=0x7ff) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000001005300000000000000008500000041000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x8, 0xffffffffffffff8a, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f280db17ab50b5432b18faa02276ec9cdef5c9e647ff1a5b72438a5c0ba2c885e64e225db0393da557da605ce470e05e7e4835154e448a5572802349463fc0bdadf6cf6", 0x0, 0xffc5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100008ddfb240490b4f06fdd401"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_PROTOSUBVER(r10, 0x80049367, &(0x7f00000004c0)) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8100084}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, r6, 0x708, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x7f}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x90000000, 0x22}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7fff, 0x4d}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3c}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10000, 0x1d}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) 7.69996524s ago: executing program 5 (id=1581): openat(0xffffffffffffffff, &(0x7f0000000280)='./control\x00', 0x470082, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049c8) syz_usb_connect(0x6, 0x56, &(0x7f0000000240)=ANY=[], 0x0) msgget(0x1, 0x2b0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0xfff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc0445624, &(0x7f00000001c0)={0x980001, 0xfffffffe, @name="4869420cc72b2745c9d43d1b9442242a6e3aedafe5db4229bf90222640645495"}) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa) sync() 7.692008499s ago: executing program 4 (id=1582): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @p_u32=0x0}}) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0', [], 0xa, "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"}, 0x2a9) pwritev(r2, &(0x7f0000002740)=[{&(0x7f0000002180)="ce7316", 0x3}], 0x1, 0x2, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x102e}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) close(0xffffffffffffffff) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000003227d85a600"/20], 0x14}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x28}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 5.731982414s ago: executing program 4 (id=1583): syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x110, 0x0, 0x8f, 0x7c, 0x40, 0x2639, 0x13, 0x3a2d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0xbd, 0x0, 0x0, 0x63, 0x7e, 0xcf, 0xd}}]}}]}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x3}}}}}}, 0x0) 5.388135679s ago: executing program 3 (id=1584): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') preadv(r1, &(0x7f0000000100)=[{0x0}], 0x1, 0xffffffff, 0x0) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x310, 0x67, 0xc1, 0x9c, 0x40, 0xaf0, 0x6711, 0x222, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf7, 0xb, 0x80, 0x6, [{{0x9, 0x4, 0x8d, 0x4, 0x0, 0x55, 0x46, 0xbe, 0xce}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r4, &(0x7f0000000640)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x40001, 0x1, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e56cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca3aad6b39905a9727d2001457df7be7e1aefebaf80e2697c143f28def4b73905ca14d90d1f600"}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xe, {"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", 0xffffffffffffff37}}, 0x1006) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1}, 0xb) 5.236886448s ago: executing program 6 (id=1585): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100001ffffbd700000000000000000859b500c75fb680d31ea00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x48084) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @global=@item_4={0x3, 0x1, 0x5, "42974060"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0xc038480a, &(0x7f00000000c0)=0x3) 4.673359752s ago: executing program 1 (id=1586): r0 = socket(0xa, 0x3, 0x3a) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x103a42, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) r7 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@msize={'msize', 0x3d, 0xc541}}, {@debug={'debug', 0x3d, 0x4}}, {@cachetag={'cachetag', 0x3d, '9P2000.u'}}, {@cache_none}, {@dfltgid={'dfltgid', 0x3d, r8}}, {@access_user}], [], 0x6b}}) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010007080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) 3.837735087s ago: executing program 5 (id=1587): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0x6, 0x0, &(0x7f0000000040)="76389e147583", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x4800c, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0, 0x20, &(0x7f0000000000)=ANY=[@ANYBLOB='sYze']) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r1, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x40401, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x50009404, &(0x7f00000004c0)={0xffffffff, 0xfffffffe, 0x2f}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x13, 0x4) socket$igmp(0x2, 0x3, 0x2) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='xprtrdma_err_unrecognized\x00', r4, 0x0, 0xfb}, 0x18) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000013ff0095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map, r5, 0x5, 0x0, 0x0, @void, @value}, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x1) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x13) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r7, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) 3.83662344s ago: executing program 3 (id=1588): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x31, &(0x7f00000007c0)=ANY=[@ANYBLOB="1834000006000000000000000000000008d1040010000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b70800000600", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a6000000850000000600000085000000a70000000ca1e0ff01000000"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x7}, 0x10, 0x1903a, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000d00)=[{0x2, 0x3, 0x4, 0x4}, {0x4, 0x2, 0xe}, {0x1, 0x2, 0x8, 0x5}, {0x4, 0x3, 0x3, 0x6}, {0x5, 0x3, 0x3, 0x4}, {0x3, 0x5, 0x1, 0x4}, {0x5, 0x3, 0x9, 0x6}, {0x4, 0x5, 0x4, 0x4}], 0x10, 0x10001, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$link(0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r4) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x8000, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f00000012c0)=0x2) r6 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB='\x00@']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x20010080) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 3.692368478s ago: executing program 4 (id=1589): socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_GET_THP_DISABLE(0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b057e255f9fc7fcd3678acf258357e1e5a90d17a85ed2bb685014e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xe}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x2, 0x2}, {0x60}, {}, {0x6}]}) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)="96a67b36bd06304a08a67f14f6c3881ca6167592ce060670a396f8ab05ace2caca", 0x21}], 0x1}}], 0x1, 0x0) 3.492929344s ago: executing program 5 (id=1590): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x9, 0xb8, "fe17f4904da83f17e99f6092cd13a8c7084e02e6d275f60036de895bed4dade2ee4a11accf6d2e6baa830d9f161ca62eba611101d13dfb6307553ca79e1bc3", 0x8}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x4001000) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 3.259895067s ago: executing program 5 (id=1591): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x6}, 0x18) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x44b3}) 3.191972559s ago: executing program 1 (id=1592): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x1, @mcast2, 0x1}}, {{0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x4, {{0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x4}}, {{0xa, 0x0, 0x4000, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x108) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xd}, 0x20) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) socket$inet_sctp(0x2, 0x5, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)="f4000900062b2c25fe80000000000010dc8b850f238466f8ffffff000000ad6e911b51818a3262d41ff7b418e4604ba2f3", 0x31}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r5, 0x10e, 0x1, 0x0, &(0x7f0000000080)) 3.064360632s ago: executing program 5 (id=1593): openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet(0x2, 0xa, 0x8001) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendfile(r0, r2, &(0x7f0000000140)=0x23, 0x1c) syz_open_dev$hiddev(&(0x7f0000000100), 0x400005, 0x701040) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x7, 0x0, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448c9, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x95ff, 0x3900000000000000, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x0, 0x0) write(r7, &(0x7f0000000340)="07000000010000", 0x7) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r9, 0x4b2f, 0x1000000000011) 2.353449695s ago: executing program 4 (id=1594): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x4}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = io_uring_setup(0x4967, &(0x7f00000002c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000003140)=ANY=[@ANYBLOB="18000000000004001001000001000000dc00000000000000100000000000e1ffffff020003000000"], 0x28}, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r3, 0x101, 0x6, &(0x7f0000000140)=0x4, 0x4) accept4$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @multicast1}, &(0x7f0000000380)=0x10, 0x80800) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000400)={0x7fff, 0x0, &(0x7f00000003c0)}, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x1000001, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo\x00') sendto$packet(r5, &(0x7f0000000180)="bece90bb9e18e6faaa330cf4fcfea907502cb641d89729321c016662bc8b7a406bea79525d1d3823e2ac", 0x2a, 0x8004, &(0x7f00000001c0)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 2.297764285s ago: executing program 1 (id=1595): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0x19}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a30000000000900010073797a300000000008000540000000160800034000000014500000000c0a010300000000000000000100000008000440000000000900010073797a30000000002800038024000080200001801a0001"], 0xdc}}, 0x0) 2.138663322s ago: executing program 3 (id=1596): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x80) fcntl$setlease(r2, 0x400, 0x0) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000100)=0x7ff) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000001005300000000000000008500000041000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x8, 0xffffffffffffff8a, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f280db17ab50b5432b18faa02276ec9cdef5c9e647ff1a5b72438a5c0ba2c885e64e225db0393da557da605ce470e05e7e4835154e448a5572802349463fc0bdadf6cf6", 0x0, 0xffc5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100008ddfb240490b4f06fdd401"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_PROTOSUBVER(r10, 0x80049367, &(0x7f00000004c0)) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8100084}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, r6, 0x708, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x7f}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x90000000, 0x22}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7fff, 0x4d}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3c}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10000, 0x1d}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) 2.082004701s ago: executing program 6 (id=1597): openat(0xffffffffffffffff, &(0x7f0000000280)='./control\x00', 0x470082, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049c8) syz_usb_connect(0x6, 0x56, &(0x7f0000000240)=ANY=[], 0x0) msgget(0x1, 0x2b0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0xfff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc0445624, &(0x7f00000001c0)={0x980001, 0xfffffffe, @name="4869420cc72b2745c9d43d1b9442242a6e3aedafe5db4229bf90222640645495"}) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa) sync() 268.919914ms ago: executing program 1 (id=1598): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') preadv(r1, &(0x7f0000000100)=[{0x0}], 0x1, 0xffffffff, 0x0) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x310, 0x67, 0xc1, 0x9c, 0x40, 0xaf0, 0x6711, 0x222, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf7, 0xb, 0x80, 0x6, [{{0x9, 0x4, 0x8d, 0x4, 0x0, 0x55, 0x46, 0xbe, 0xce}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r4, &(0x7f0000000640)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x40001, 0x1, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e56cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca3aad6b39905a9727d2001457df7be7e1aefebaf80e2697c143f28def4b73905ca14d90d1f600"}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xe, {"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", 0xffffffffffffff37}}, 0x1006) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1}, 0xb) 0s ago: executing program 4 (id=1599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000240)={@broadcast, @random="9f6f61ba0500", @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x1000]}}}}}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = dup3(r1, r7, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000b, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00012bbd7000ffdbdf2506000000050014000600000008001900ffffffff06001b004e23000005000d00000000000500040004000000050005000100000005001400ff00000014001f000000000000000000000000000000000005000400010000000600020001000000"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x48000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="1709000000000000000001000000080009000200000014001f00000000000000000000000000000000011400200000000000000000000000ffffac0000bb0500070000000000060002000100000008000a"], 0x5c}}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r8) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r10, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1000}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): 71.065475][ T9543] FAULT_INJECTION: forcing a failure. [ 371.065475][ T9543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.071660][ T838] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 371.093817][ T838] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 371.102185][ T9543] CPU: 0 UID: 0 PID: 9543 Comm: syz.3.959 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 371.112782][ T9543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 371.122824][ T9543] Call Trace: [ 371.126091][ T9543] [ 371.129020][ T9543] dump_stack_lvl+0x241/0x360 [ 371.133690][ T9543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.138879][ T9543] ? __pfx__printk+0x10/0x10 [ 371.143455][ T9543] ? __pfx_lock_release+0x10/0x10 [ 371.148505][ T9543] ? __lock_acquire+0x1397/0x2100 [ 371.153529][ T9543] should_fail_ex+0x3b0/0x4e0 [ 371.158207][ T9543] _copy_from_user+0x2f/0xc0 [ 371.162793][ T9543] kstrtouint_from_user+0xc6/0x190 [ 371.167965][ T9543] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 371.173695][ T9543] ? __pfx_lock_acquire+0x10/0x10 [ 371.178726][ T9543] proc_fail_nth_write+0xaa/0x2d0 [ 371.183750][ T9543] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 371.189635][ T9543] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 371.195262][ T9543] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 371.200885][ T9543] vfs_write+0x2a3/0xd30 [ 371.205127][ T9543] ? __pfx_vfs_write+0x10/0x10 [ 371.209909][ T9543] ? __fget_files+0x2a/0x410 [ 371.214487][ T9543] ? __fget_files+0x395/0x410 [ 371.219147][ T9543] ? __fget_files+0x2a/0x410 [ 371.223731][ T9543] ksys_write+0x18f/0x2b0 [ 371.228053][ T9543] ? __pfx_ksys_write+0x10/0x10 [ 371.232904][ T9543] ? do_syscall_64+0x100/0x230 [ 371.237674][ T9543] ? do_syscall_64+0xb6/0x230 [ 371.242345][ T9543] do_syscall_64+0xf3/0x230 [ 371.246843][ T9543] ? clear_bhb_loop+0x35/0x90 [ 371.251507][ T9543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.257488][ T9543] RIP: 0033:0x7fd79f9847df [ 371.261896][ T9543] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 371.281529][ T9543] RSP: 002b:00007fd7a06e7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 371.289951][ T9543] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd79f9847df [ 371.297908][ T9543] RDX: 0000000000000001 RSI: 00007fd7a06e70a0 RDI: 0000000000000003 [ 371.305863][ T9543] RBP: 00007fd7a06e7090 R08: 0000000000000000 R09: 0000000000000000 [ 371.313825][ T9543] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 371.321787][ T9543] R13: 0000000000000000 R14: 00007fd79fb75fa0 R15: 00007ffe93576f48 [ 371.329758][ T9543] [ 371.359248][ T838] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 371.366990][ T838] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 371.419468][ T838] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 371.429910][ T838] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 371.460752][ T838] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 371.473850][ T838] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 371.481653][ T838] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 371.509374][ T838] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 371.525749][ T838] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 371.548787][ T838] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 371.570531][ T838] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 372.364884][ T838] usb 5-1: USB disconnect, device number 17 [ 372.382585][ T9548] syz.3.960: attempt to access beyond end of device [ 372.382585][ T9548] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 372.389492][ T47] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 372.395577][ T9548] SQUASHFS error: Failed to read block 0x0: -5 [ 372.411379][ T9548] unable to read squashfs_super_block [ 372.593736][ T838] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 372.608740][ T47] usb 2-1: unable to get BOS descriptor or descriptor too short [ 372.913571][ T838] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 372.935731][ T47] usb 2-1: not running at top speed; connect to a high speed hub [ 372.942163][ T838] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 372.957208][ T838] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 372.967468][ T838] keyspan 5-1:0.0: device disconnected [ 373.043740][ T47] usb 2-1: config 17 has an invalid interface number: 8 but max is 1 [ 373.052218][ T47] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 373.073979][ T47] usb 2-1: config 17 has no interface number 0 [ 373.106428][ T47] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 373.154986][ T47] usb 2-1: config 17 interface 8 has no altsetting 0 [ 373.825405][ T47] usb 2-1: string descriptor 0 read error: -71 [ 373.831808][ T47] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 373.841261][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.854458][ T47] usb 2-1: can't set config #17, error -71 [ 374.607262][ T47] usb 2-1: USB disconnect, device number 23 [ 375.869595][ T5872] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 375.954250][ T9593] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 376.703853][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.977'. [ 376.858729][ T5833] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 376.927055][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 376.938885][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 376.949312][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 376.957393][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 376.966190][ T5836] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 376.974373][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 377.019889][ T5833] usb 5-1: Using ep0 maxpacket: 16 [ 377.043858][ T5833] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 377.059305][ T29] audit: type=1326 audit(1735034364.628:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.5.978" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d84b85d29 code=0x0 [ 377.086662][ T5833] usb 5-1: config 0 has no interface number 0 [ 377.113603][ T5833] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 377.146391][ T5833] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 377.197407][ T5833] usb 5-1: config 0 interface 41 has no altsetting 0 [ 377.208240][ T5833] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 377.223886][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.232154][ T5833] usb 5-1: Product: syz [ 377.236341][ T5833] usb 5-1: Manufacturer: syz [ 377.241290][ T5833] usb 5-1: SerialNumber: syz [ 377.259320][ T5833] usb 5-1: config 0 descriptor?? [ 377.265881][ T9599] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 377.314975][ T9599] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 377.723568][ T9599] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 377.893067][ T9606] chnl_net:caif_netlink_parms(): no params data found [ 377.897938][ T9599] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 378.513494][ T5833] Error reading MAC address [ 378.517517][ T9599] input: syz1 as /devices/virtual/input/input20 [ 378.782600][ T9621] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 378.793621][ T9621] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 378.826156][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.059417][ T8077] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 379.088907][ T5836] Bluetooth: hci5: command tx timeout [ 379.238765][ T8077] usb 6-1: Using ep0 maxpacket: 16 [ 379.371274][ T9635] FAULT_INJECTION: forcing a failure. [ 379.371274][ T9635] name failslab, interval 1, probability 0, space 0, times 0 [ 379.395428][ T9635] CPU: 0 UID: 0 PID: 9635 Comm: syz.1.984 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 379.406042][ T9635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 379.416091][ T9635] Call Trace: [ 379.419358][ T9635] [ 379.422276][ T9635] dump_stack_lvl+0x241/0x360 [ 379.426944][ T9635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.432128][ T9635] ? __pfx__printk+0x10/0x10 [ 379.436708][ T9635] ? __kmalloc_noprof+0xb5/0x4c0 [ 379.441631][ T9635] ? __pfx___might_resched+0x10/0x10 [ 379.446908][ T9635] should_fail_ex+0x3b0/0x4e0 [ 379.451578][ T9635] should_failslab+0xac/0x100 [ 379.456246][ T9635] __kmalloc_noprof+0xdd/0x4c0 [ 379.461010][ T9635] ? memcg_list_lru_alloc+0x2c5/0x9e0 [ 379.466367][ T9635] memcg_list_lru_alloc+0x2c5/0x9e0 [ 379.471555][ T9635] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 379.477264][ T9635] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 379.482989][ T9635] ? get_mem_cgroup_from_objcg+0x1af/0x1d0 [ 379.488807][ T9635] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 379.494565][ T9635] __memcg_slab_post_alloc_hook+0x140/0x7e0 [ 379.500458][ T9635] ? __d_alloc+0x31/0x700 [ 379.504779][ T9635] ? __d_alloc+0x31/0x700 [ 379.509102][ T9635] kmem_cache_alloc_lru_noprof+0x28e/0x390 [ 379.514921][ T9635] __d_alloc+0x31/0x700 [ 379.519067][ T9635] ? _raw_spin_unlock+0x28/0x50 [ 379.523914][ T9635] d_make_root+0x4a/0xe0 [ 379.528144][ T9635] pseudo_fs_fill_super+0x277/0x3b0 [ 379.533344][ T9635] ? __pfx_pseudo_fs_fill_super+0x10/0x10 [ 379.539057][ T9635] get_tree_nodev+0xb7/0x140 [ 379.543640][ T9635] vfs_get_tree+0x90/0x2b0 [ 379.548063][ T9635] vfs_cmd_create+0xa0/0x1f0 [ 379.552651][ T9635] ? __se_sys_fsconfig+0xa29/0xf60 [ 379.557750][ T9635] __se_sys_fsconfig+0xa33/0xf60 [ 379.562681][ T9635] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 379.568134][ T9635] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 379.574145][ T9635] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 379.580463][ T9635] ? do_syscall_64+0x100/0x230 [ 379.585242][ T9635] ? __x64_sys_fsconfig+0x20/0xc0 [ 379.590257][ T9635] do_syscall_64+0xf3/0x230 [ 379.594771][ T9635] ? clear_bhb_loop+0x35/0x90 [ 379.599433][ T9635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.605313][ T9635] RIP: 0033:0x7f728bd85d29 [ 379.609716][ T9635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.629307][ T9635] RSP: 002b:00007f728cbd4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 379.637705][ T9635] RAX: ffffffffffffffda RBX: 00007f728bf75fa0 RCX: 00007f728bd85d29 [ 379.645664][ T9635] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 379.653622][ T9635] RBP: 00007f728cbd4090 R08: 0000000000000000 R09: 0000000000000000 [ 379.661579][ T9635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 379.669534][ T9635] R13: 0000000000000000 R14: 00007f728bf75fa0 R15: 00007ffffcda54c8 [ 379.677499][ T9635] [ 379.777691][ T9606] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.778846][ T8077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.795846][ T8077] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.805662][ T8077] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 379.818699][ T8077] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 379.828714][ T8077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.846563][ T9606] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.854983][ T9606] bridge_slave_0: entered allmulticast mode [ 379.871277][ T9606] bridge_slave_0: entered promiscuous mode [ 379.907655][ T9606] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.924053][ T8077] usb 6-1: config 0 descriptor?? [ 379.941331][ T9606] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.980243][ T9606] bridge_slave_1: entered allmulticast mode [ 380.004790][ T9606] bridge_slave_1: entered promiscuous mode [ 380.618515][ T47] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 380.691772][ T9606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.713070][ T9606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.790797][ T8077] microsoft 0003:045E:07DA.0008: collection stack underflow [ 380.798844][ T8077] microsoft 0003:045E:07DA.0008: item 0 2 0 12 parsing failed [ 380.807232][ T8077] microsoft 0003:045E:07DA.0008: parse failed [ 380.813980][ T8077] microsoft 0003:045E:07DA.0008: probe with driver microsoft failed with error -22 [ 380.824806][ T47] usb 2-1: Invalid ep0 maxpacket: 64 [ 380.824904][ T9606] team0: Port device team_slave_0 added [ 380.903784][ T1095] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.925012][ T9606] team0: Port device team_slave_1 added [ 380.958771][ T47] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 380.990883][ T9626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.992145][ T5833] sr9700 5-1:0.41 eth5: register 'sr9700' at usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet, ea:51:ee:f8:e4:00 [ 381.009187][ T9626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.045563][ T5833] usb 5-1: USB disconnect, device number 18 [ 381.063741][ T5833] sr9700 5-1:0.41 eth5: unregister 'sr9700' usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet [ 381.117704][ T9] usb 6-1: USB disconnect, device number 15 [ 381.134613][ T5836] Bluetooth: hci5: command tx timeout [ 381.256847][ T1095] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.278982][ T47] usb 2-1: Invalid ep0 maxpacket: 64 [ 381.284574][ T47] usb usb2-port1: attempt power cycle [ 381.759412][ T9606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.775451][ T9606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.005681][ T9606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.408370][ T47] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 382.439913][ T47] usb 2-1: Invalid ep0 maxpacket: 64 [ 382.469094][ T25] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 382.495719][ T1095] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.530309][ T9606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.542604][ T9606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.580538][ T9606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.593608][ T47] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 382.620331][ T47] usb 2-1: Invalid ep0 maxpacket: 64 [ 382.633772][ T47] usb usb2-port1: unable to enumerate USB device [ 382.641196][ T1095] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.024681][ T9606] hsr_slave_0: entered promiscuous mode [ 383.037844][ T9606] hsr_slave_1: entered promiscuous mode [ 383.058883][ T9606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.066475][ T9606] Cannot create hsr debugfs directory [ 383.209396][ T5836] Bluetooth: hci5: command tx timeout [ 384.608907][ T5872] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 384.671593][ T1095] bridge_slave_1: left allmulticast mode [ 384.694308][ T1095] bridge_slave_1: left promiscuous mode [ 384.722529][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.768449][ T1095] bridge_slave_0: left allmulticast mode [ 384.783166][ T5872] usb 5-1: config index 0 descriptor too short (expected 1051, got 27) [ 384.795777][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.804227][ T5872] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 384.849162][ T5872] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 384.862419][ T5872] usb 5-1: config 0 interface 0 altsetting 12 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 384.887979][ T5872] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 384.913438][ T5872] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0 [ 384.946454][ T5872] usb 5-1: config 0 interface 0 has no altsetting 0 [ 384.985209][ T5872] usb 5-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 385.035049][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.081295][ T5872] usb 5-1: Product: syz [ 385.098246][ T5872] usb 5-1: Manufacturer: syz [ 385.118579][ T5872] usb 5-1: SerialNumber: syz [ 385.138488][ T5872] usb 5-1: config 0 descriptor?? [ 385.288912][ T5828] Bluetooth: hci5: command tx timeout [ 387.392077][ T5828] Bluetooth: hci5: command 0x0405 tx timeout [ 387.983479][ T5872] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 387.991221][ T5872] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 387.999328][ T5872] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 388.026987][ T5872] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 388.064322][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.064590][ T5872] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 388.525609][ T5872] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 388.534907][ T5872] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 388.543956][ T5872] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 388.553198][ T5872] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 388.585352][ T5872] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 388.594869][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.615296][ T1095] bond0 (unregistering): Released all slaves [ 388.633586][ T5872] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 388.891103][ T9728] overlay: Unknown parameter 'rootcontext' [ 388.900842][ T9727] .: renamed from bond0 (while UP) [ 389.255748][ T5872] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 389.264427][ T5872] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 389.286289][ T5872] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 389.385041][ T5872] usb 5-1: USB disconnect, device number 19 [ 389.839161][ T5872] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 389.879094][ T5872] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 389.904151][ T5872] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 389.942097][ T5872] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 390.046897][ T5872] keyspan 5-1:0.0: device disconnected [ 390.284412][ T9606] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 391.093428][ T9606] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 391.392536][ T9767] loop6: detected capacity change from 0 to 524287999 [ 391.406281][ T9606] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 391.429522][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 391.439031][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 391.458778][ T9606] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 391.471468][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 391.480724][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 391.490794][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 391.499997][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 391.536615][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 391.545853][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 392.440419][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 392.449609][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 392.478628][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 392.487847][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 392.504631][ T1095] hsr_slave_0: left promiscuous mode [ 392.529835][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 392.539047][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 392.559693][ T1095] hsr_slave_1: left promiscuous mode [ 392.568422][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.577195][ T9767] ldm_validate_partition_table(): Disk read failed. [ 392.578252][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 392.593372][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 392.611524][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 392.620721][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 392.630937][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 392.640131][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 392.645521][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.669015][ T9767] Dev loop6: unable to read RDB block 0 [ 392.677290][ T9767] loop6: unable to read partition table [ 392.690677][ T9767] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 392.699349][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.707278][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.930819][ T1095] veth1_macvtap: left promiscuous mode [ 392.978731][ T1095] veth0_macvtap: left promiscuous mode [ 392.997530][ T1095] veth1_vlan: left promiscuous mode [ 393.023845][ T1095] veth0_vlan: left promiscuous mode [ 397.524937][ T1095] team0 (unregistering): Port device team_slave_1 removed [ 397.584283][ T5833] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 397.632299][ T1095] team0 (unregistering): Port device team_slave_0 removed [ 397.762738][ T5833] usb 6-1: Using ep0 maxpacket: 32 [ 397.788413][ T5833] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 398.365763][ T5833] usb 6-1: config 0 has no interface number 0 [ 398.383334][ T5833] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 398.392919][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.401024][ T5833] usb 6-1: Product: syz [ 398.405201][ T5833] usb 6-1: Manufacturer: syz [ 398.410036][ T5833] usb 6-1: SerialNumber: syz [ 398.417253][ T5833] usb 6-1: config 0 descriptor?? [ 398.638318][ T5833] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 398.767693][ T5833] usb 6-1: USB disconnect, device number 16 [ 399.103914][ T9746] udevd[9746]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.141746][ T9804] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1019'. [ 399.265814][ T9606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.282579][ T9606] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.295657][ T6326] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.302820][ T6326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.340505][ T6326] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.347603][ T6326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.455292][ T9827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.546123][ T9606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.779639][ T5919] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 399.848811][ T5916] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 399.928944][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 399.931371][ T5919] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 399.931402][ T5919] usb 4-1: config 0 has no interface number 0 [ 399.931437][ T5919] usb 4-1: config 0 interface 184 has no altsetting 0 [ 399.934853][ T5919] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 399.934890][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.934912][ T5919] usb 4-1: Product: syz [ 399.934927][ T5919] usb 4-1: Manufacturer: syz [ 399.934943][ T5919] usb 4-1: SerialNumber: syz [ 399.937952][ T5919] usb 4-1: config 0 descriptor?? [ 399.942471][ T5919] smsc75xx v1.0.0 [ 400.009634][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 400.011669][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.011702][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.011751][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 400.011790][ T5916] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 400.011812][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.014117][ T5916] usb 2-1: config 0 descriptor?? [ 400.021844][ T9606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.354603][ T29] audit: type=1326 audit(1735034387.918:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9828 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79f985d29 code=0x7ffc0000 [ 400.370392][ T29] audit: type=1326 audit(1735034387.938:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9828 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd79f985d29 code=0x7ffc0000 [ 400.370436][ T29] audit: type=1326 audit(1735034387.938:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9828 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79f985d29 code=0x7ffc0000 [ 400.370555][ T29] audit: type=1326 audit(1735034387.938:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9828 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fd79f985d29 code=0x7ffc0000 [ 400.370589][ T29] audit: type=1326 audit(1735034387.000:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9828 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79f985d29 code=0x7ffc0000 [ 400.370619][ T29] audit: type=1326 audit(1735034387.000:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9828 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd79f98592b code=0x7ffc0000 [ 400.370649][ T29] audit: type=1326 audit(1735034387.000:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9828 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd79f98592b code=0x7ffc0000 [ 400.399545][ T29] audit: type=1326 audit(1735034387.019:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9828 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd79f9b85e5 code=0x7ffc0000 [ 400.456015][ T5916] input: HID 0955:7214 Haptics as /devices/virtual/input/input21 [ 400.619709][ T29] audit: type=1326 audit(1735034387.229:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9828 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79f985d29 code=0x7ffc0000 [ 400.619752][ T29] audit: type=1326 audit(1735034387.239:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9828 comm="syz.3.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd79f98592b code=0x7ffc0000 [ 400.674022][ T9606] veth0_vlan: entered promiscuous mode [ 400.678787][ T9606] veth1_vlan: entered promiscuous mode [ 400.705734][ T9606] veth0_macvtap: entered promiscuous mode [ 400.708563][ T9606] veth1_macvtap: entered promiscuous mode [ 400.717705][ T9606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.717745][ T9606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.717758][ T9606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.717773][ T9606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.717784][ T9606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.717798][ T9606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.719878][ T9606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.726554][ T9606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.726576][ T9606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.726588][ T9606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.726602][ T9606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.726615][ T9606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.726629][ T9606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.727405][ T9606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.750749][ T9606] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.750821][ T9606] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.750850][ T9606] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.750876][ T9606] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.894104][ T5919] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 400.894200][ T5919] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 401.246136][ T5916] shield 0003:0955:7214.0009: Registered Thunderstrike controller [ 401.684358][ T5916] shield 0003:0955:7214.0009: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 401.752990][ T5874] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 401.754412][ T5874] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 401.755512][ T5874] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 401.758726][ T5874] shield 0003:0955:7214.0009: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 401.764537][ T5916] usb 2-1: USB disconnect, device number 28 [ 401.792179][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.792221][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.832307][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.832427][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.825503][ T9888] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 402.825568][ T9888] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 402.984262][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 403.633175][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 403.633211][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 403.635009][ T9] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 403.635040][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.635062][ T9] usb 5-1: Product: syz [ 403.635078][ T9] usb 5-1: Manufacturer: syz [ 403.635093][ T9] usb 5-1: SerialNumber: syz [ 403.637302][ T9] usb 5-1: config 0 descriptor?? [ 403.637914][ T9886] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 403.638003][ T9886] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 403.842382][ T9886] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 403.842548][ T9886] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 403.950860][ T5919] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 403.950894][ T5919] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 403.950915][ T5919] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 403.950935][ T5919] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 403.951076][ T5919] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 403.962589][ T5919] usb 4-1: USB disconnect, device number 27 [ 404.254573][ T9] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 404.942784][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1040'. [ 405.607598][ T9949] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 405.627420][ T9949] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 406.451625][ T9] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 406.483185][ T9958] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1045'. [ 406.598041][ T5962] udevd[5962]: failed to send result of seq 14149 to main daemon: Connection refused [ 406.629820][ T9] usb 5-1: USB disconnect, device number 20 [ 408.549374][ T9991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.560008][ T9991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.746468][ T9999] overlay: Unknown parameter 'rootcontext' [ 409.865383][ T5874] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 410.037728][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1057'. [ 410.052152][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 410.063724][ T5874] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 410.081663][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.112994][ T5874] usb 4-1: config 0 descriptor?? [ 410.141946][ T5874] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 410.188926][ T5919] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 410.351778][ T5874] gspca_nw80x: reg_w err -71 [ 410.361450][ T5874] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 410.386725][ T5874] usb 4-1: USB disconnect, device number 28 [ 410.425162][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.047267][ T5919] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.113296][ T5919] usb 7-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 412.331995][ T5919] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.541654][ T5919] usb 7-1: config 0 descriptor?? [ 413.306643][ T5919] usbhid 7-1:0.0: can't add hid device: -71 [ 413.332526][ T5919] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 413.410373][ T5833] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 413.716374][ T5919] usb 7-1: USB disconnect, device number 2 [ 414.066706][ T5833] usb 2-1: unable to get BOS descriptor or descriptor too short [ 414.084480][ T5833] usb 2-1: config 247 has an invalid interface number: 141 but max is 0 [ 414.108771][ T5833] usb 2-1: config 247 has no interface number 0 [ 414.117145][ T5833] usb 2-1: config 247 interface 141 has no altsetting 0 [ 414.289359][ T5833] usb 2-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 414.308943][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.418915][ T5833] usb 2-1: Product: syz [ 414.446604][ T5833] usb 2-1: Manufacturer: syz [ 414.453557][ T5833] usb 2-1: SerialNumber: syz [ 414.736068][T10048] openvswitch: netlink: IP tunnel dst address not specified [ 416.849516][ T5833] hso 2-1:247.141: Not our interface [ 416.862102][ T5833] usb 2-1: USB disconnect, device number 29 [ 416.918211][T10083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 416.929559][T10083] fuse: Bad value for 'fd' [ 417.873417][T10094] tty tty2: ldisc open failed (-12), clearing slot 1 [ 420.531308][T10131] overlayfs: missing 'lowerdir' [ 420.578036][T10131] overlayfs: failed to resolve './file1': -2 [ 422.325059][T10148] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1084'. [ 422.484387][T10151] FAULT_INJECTION: forcing a failure. [ 422.484387][T10151] name failslab, interval 1, probability 0, space 0, times 0 [ 422.545216][T10151] CPU: 0 UID: 0 PID: 10151 Comm: syz.1.1085 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 422.556046][T10151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 422.566477][T10151] Call Trace: [ 422.569786][T10151] [ 422.572745][T10151] dump_stack_lvl+0x241/0x360 [ 422.577459][T10151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.582684][T10151] ? __pfx__printk+0x10/0x10 [ 422.587314][T10151] should_fail_ex+0x3b0/0x4e0 [ 422.592025][T10151] should_failslab+0xac/0x100 [ 422.596736][T10151] ? skb_clone+0x20c/0x390 [ 422.601181][T10151] kmem_cache_alloc_noprof+0x70/0x380 [ 422.606589][T10151] skb_clone+0x20c/0x390 [ 422.610858][T10151] __netlink_deliver_tap+0x3cc/0x7f0 [ 422.616181][T10151] ? netlink_deliver_tap+0x2e/0x1b0 [ 422.621402][T10151] netlink_deliver_tap+0x19d/0x1b0 [ 422.626535][T10151] netlink_dump+0x8c6/0xe10 [ 422.631073][T10151] ? __pfx_netlink_dump+0x10/0x10 [ 422.636131][T10151] ? netlink_recvmsg+0x60a/0x11d0 [ 422.641185][T10151] ? netlink_recvmsg+0x60a/0x11d0 [ 422.646236][T10151] netlink_recvmsg+0x6bb/0x11d0 [ 422.651116][T10151] ? __pfx_netlink_recvmsg+0x10/0x10 [ 422.656439][T10151] ? __fget_files+0x2a/0x410 [ 422.661051][T10151] ? __fget_files+0x395/0x410 [ 422.665752][T10151] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 422.671060][T10151] ? __pfx_netlink_recvmsg+0x10/0x10 [ 422.676360][T10151] sock_recvmsg+0x22f/0x280 [ 422.680894][T10151] __sys_recvfrom+0x202/0x380 [ 422.685600][T10151] ? __pfx___sys_recvfrom+0x10/0x10 [ 422.690845][T10151] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 422.696933][T10151] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 422.703286][T10151] __x64_sys_recvfrom+0xde/0x100 [ 422.708254][T10151] do_syscall_64+0xf3/0x230 [ 422.712786][T10151] ? clear_bhb_loop+0x35/0x90 [ 422.717486][T10151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.723403][T10151] RIP: 0033:0x7f728bd87af4 [ 422.727842][T10151] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 422.747475][T10151] RSP: 002b:00007f728cbd2ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 422.755922][T10151] RAX: ffffffffffffffda RBX: 00007f728cbd2fc0 RCX: 00007f728bd87af4 [ 422.763917][T10151] RDX: 0000000000001000 RSI: 00007f728cbd3010 RDI: 000000000000000b [ 422.771911][T10151] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 422.779899][T10151] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 422.787886][T10151] R13: 00007f728cbd2f68 R14: 00007f728cbd3010 R15: 0000000000000000 [ 422.795896][T10151] [ 423.826750][T10188] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1092'. [ 423.872053][T10183] FAULT_INJECTION: forcing a failure. [ 423.872053][T10183] name failslab, interval 1, probability 0, space 0, times 0 [ 423.885360][T10183] CPU: 0 UID: 0 PID: 10183 Comm: syz.4.1091 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 423.896152][T10183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 423.906221][T10183] Call Trace: [ 423.909510][T10183] [ 423.912452][T10183] dump_stack_lvl+0x241/0x360 [ 423.917152][T10183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.922368][T10183] ? __pfx__printk+0x10/0x10 [ 423.926985][T10183] should_fail_ex+0x3b0/0x4e0 [ 423.931694][T10183] should_failslab+0xac/0x100 [ 423.936417][T10183] __kmalloc_noprof+0xdd/0x4c0 [ 423.941200][T10183] ? __kmalloc_cache_noprof+0x243/0x390 [ 423.946765][T10183] ? nsim_fib_event_nb+0x287/0x10b0 [ 423.952000][T10183] nsim_fib_event_nb+0x287/0x10b0 [ 423.957066][T10183] notifier_call_chain+0x1a5/0x3f0 [ 423.962207][T10183] ? atomic_notifier_call_chain+0x26/0x180 [ 423.968037][T10183] atomic_notifier_call_chain+0xdb/0x180 [ 423.973689][T10183] call_fib_notifiers+0x31/0x60 [ 423.978571][T10183] call_fib6_multipath_entry_notifiers+0x142/0x1c0 [ 423.985188][T10183] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 423.992236][T10183] ? inet6_rtm_newroute+0x102f/0x2100 [ 423.997647][T10183] inet6_rtm_newroute+0x1b78/0x2100 [ 424.002890][T10183] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 424.008463][T10183] ? __mutex_trylock_common+0x183/0x2e0 [ 424.014041][T10183] ? __pfx___might_resched+0x10/0x10 [ 424.019361][T10183] ? __mutex_lock+0x37f/0xee0 [ 424.024070][T10183] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 424.029624][T10183] rtnetlink_rcv_msg+0x73f/0xcf0 [ 424.034559][T10183] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 424.039677][T10183] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 424.045177][T10183] ? ref_tracker_free+0x643/0x7e0 [ 424.050204][T10183] netlink_rcv_skb+0x1e3/0x430 [ 424.054965][T10183] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 424.060424][T10183] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 424.065736][T10183] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.070934][T10183] netlink_unicast+0x7f6/0x990 [ 424.075711][T10183] ? __pfx_netlink_unicast+0x10/0x10 [ 424.080996][T10183] ? __virt_addr_valid+0x45f/0x530 [ 424.086126][T10183] ? __phys_addr_symbol+0x2f/0x70 [ 424.091149][T10183] ? __check_object_size+0x47a/0x730 [ 424.096439][T10183] netlink_sendmsg+0x8e4/0xcb0 [ 424.101210][T10183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.106497][T10183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.111778][T10183] __sock_sendmsg+0x221/0x270 [ 424.116455][T10183] ____sys_sendmsg+0x52a/0x7e0 [ 424.121222][T10183] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.126500][T10183] ? __fget_files+0x2a/0x410 [ 424.131083][T10183] ? __fget_files+0x2a/0x410 [ 424.135672][T10183] __sys_sendmsg+0x269/0x350 [ 424.140264][T10183] ? __pfx_lock_release+0x10/0x10 [ 424.145286][T10183] ? __pfx___sys_sendmsg+0x10/0x10 [ 424.150400][T10183] ? __pfx_vfs_write+0x10/0x10 [ 424.155184][T10183] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 424.161511][T10183] ? do_syscall_64+0x100/0x230 [ 424.166276][T10183] ? do_syscall_64+0xb6/0x230 [ 424.170956][T10183] do_syscall_64+0xf3/0x230 [ 424.175460][T10183] ? clear_bhb_loop+0x35/0x90 [ 424.180135][T10183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.186027][T10183] RIP: 0033:0x7f5c57585d29 [ 424.190439][T10183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.210040][T10183] RSP: 002b:00007f5c583c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.218451][T10183] RAX: ffffffffffffffda RBX: 00007f5c57775fa0 RCX: 00007f5c57585d29 [ 424.226417][T10183] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000007 [ 424.234384][T10183] RBP: 00007f5c583c4090 R08: 0000000000000000 R09: 0000000000000000 [ 424.242353][T10183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.250316][T10183] R13: 0000000000000000 R14: 00007f5c57775fa0 R15: 00007fff79cebba8 [ 424.258293][T10183] [ 424.281355][T10183] IPv6: NLM_F_REPLACE set, but no existing node found! [ 425.136540][ T5836] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 426.563831][T10219] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 426.865076][T10221] netlink: zone id is out of range [ 426.898264][T10221] netlink: zone id is out of range [ 426.914682][T10221] netlink: zone id is out of range [ 426.999164][T10221] netlink: zone id is out of range [ 427.033613][T10221] netlink: zone id is out of range [ 427.068843][T10221] netlink: zone id is out of range [ 427.113989][T10221] netlink: zone id is out of range [ 427.140979][T10221] netlink: zone id is out of range [ 427.165043][T10221] netlink: zone id is out of range [ 427.512694][T10250] .: renamed from bond0 (while UP) [ 427.770825][T10256] overlay: Unknown parameter 'rootcontext' [ 427.910276][ T5919] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 428.548931][ T5919] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 428.557373][ T5919] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 428.565824][ T5919] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 428.574895][ T5919] usb 2-1: config 0 interface 0 altsetting 12 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 428.586739][ T5919] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 428.598000][ T5919] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0 [ 428.608124][ T5919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 429.347505][ T5919] usb 2-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 429.357436][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.369527][ T5919] usb 2-1: Product: syz [ 429.373807][ T5919] usb 2-1: Manufacturer: syz [ 429.378423][ T5919] usb 2-1: SerialNumber: syz [ 429.404755][ T5919] usb 2-1: config 0 descriptor?? [ 430.968387][T10293] 9pnet_fd: Insufficient options for proto=fd [ 431.585508][ T5919] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 431.603406][ T5919] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 431.809746][ T8077] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 431.817826][ T5919] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 431.826813][ T5919] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 431.834728][ T5919] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 432.835735][ T5919] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 432.845084][ T5919] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 432.959054][ T5919] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 432.969205][ T5919] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 432.987982][ T8077] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.033343][ T5919] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 433.041612][ T8077] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.271274][ T5919] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 433.280464][ T5919] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 433.288920][ T5919] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 433.297717][ T5919] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 433.308663][ T5919] usb 2-1: USB disconnect, device number 30 [ 433.318718][ T5919] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 433.331443][ T8077] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 433.340837][ T8077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 433.349011][ T8077] usb 6-1: SerialNumber: syz [ 433.354915][ T5919] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 434.056385][ T5919] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 434.161135][ T5919] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 434.338728][ T5919] keyspan 2-1:0.0: device disconnected [ 434.681854][ T8077] usb 6-1: 0:2 : does not exist [ 434.715418][ T8077] usb 6-1: USB disconnect, device number 17 [ 435.736496][T10343] overlayfs: missing 'lowerdir' [ 438.965866][T10387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1134'. [ 438.975026][T10387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1134'. [ 438.984044][T10387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1134'. [ 438.993144][T10387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1134'. [ 439.999848][ T8077] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 440.025441][T10408] cifs: Unknown parameter 'mode' [ 440.242297][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 440.242314][ T29] audit: type=1326 audit(1735034426.859:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10410 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c57585d29 code=0x7ffc0000 [ 440.252923][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.273159][ T8077] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.032796][ T8077] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.066195][ T5833] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 441.093095][ T8077] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 441.099096][ T29] audit: type=1326 audit(1735034426.859:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10410 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c57585d29 code=0x7ffc0000 [ 441.120124][ T8077] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.138836][ T29] audit: type=1326 audit(1735034427.699:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10410 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c57585d29 code=0x7ffc0000 [ 441.160865][ T29] audit: type=1326 audit(1735034427.699:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10410 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c57585d29 code=0x7ffc0000 [ 441.182982][ T29] audit: type=1326 audit(1735034427.699:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10410 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c57585d29 code=0x7ffc0000 [ 441.204919][ T29] audit: type=1326 audit(1735034427.699:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10410 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f5c57585d29 code=0x7ffc0000 [ 441.226739][ T29] audit: type=1326 audit(1735034427.699:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10410 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c57585d29 code=0x7ffc0000 [ 441.248437][ T29] audit: type=1326 audit(1735034427.699:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10410 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5c57585d29 code=0x7ffc0000 [ 441.270518][ T29] audit: type=1326 audit(1735034427.699:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10410 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c57585d29 code=0x7ffc0000 [ 441.292528][ T29] audit: type=1326 audit(1735034427.699:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10410 comm="syz.4.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c57585d29 code=0x7ffc0000 [ 441.332430][ T8077] usb 2-1: config 0 descriptor?? [ 442.614535][ T5833] usb 7-1: unable to get BOS descriptor or descriptor too short [ 442.641485][ T5833] usb 7-1: config 247 has an invalid interface number: 141 but max is 0 [ 442.650061][ T5833] usb 7-1: config 247 has no interface number 0 [ 442.664238][ T5833] usb 7-1: config 247 interface 141 has no altsetting 0 [ 442.706202][ T5833] usb 7-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 442.743772][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.772394][ T5833] usb 7-1: Product: syz [ 442.786374][ T5833] usb 7-1: Manufacturer: syz [ 443.683863][ T5833] usb 7-1: SerialNumber: syz [ 443.786687][ T5833] usb 7-1: can't set config #247, error -71 [ 443.795439][ T5833] usb 7-1: USB disconnect, device number 3 [ 443.975190][ T8077] usbhid 2-1:0.0: can't add hid device: -71 [ 443.996054][ T8077] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 444.037581][ T8077] usb 2-1: USB disconnect, device number 31 [ 445.508845][ T838] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 445.649157][ T838] usb 2-1: device descriptor read/64, error -71 [ 445.878752][ T8077] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 445.910034][ T838] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 446.058790][ T838] usb 2-1: device descriptor read/64, error -71 [ 446.179100][ T838] usb usb2-port1: attempt power cycle [ 446.278716][ T8077] usb 7-1: Using ep0 maxpacket: 32 [ 446.319826][ T8077] usb 7-1: config 0 has no interfaces? [ 446.388231][ T8077] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 446.412292][ T8077] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.442768][T10496] evm: overlay not supported [ 446.448965][ T8077] usb 7-1: Product: syz [ 446.518587][ T8077] usb 7-1: Manufacturer: syz [ 446.547802][ T8077] usb 7-1: SerialNumber: syz [ 446.558775][ T838] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 446.577650][ T8077] usb 7-1: config 0 descriptor?? [ 446.620770][ T838] usb 2-1: device descriptor read/8, error -71 [ 446.924408][ T838] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 446.991353][ T838] usb 2-1: device descriptor read/8, error -71 [ 447.128891][ T5833] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 447.188980][ T838] usb usb2-port1: unable to enumerate USB device [ 447.982178][ T5919] usb 7-1: USB disconnect, device number 4 [ 448.181265][ T5833] usb 5-1: config index 0 descriptor too short (expected 1051, got 27) [ 448.231093][ T5833] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 448.279559][ T5833] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 448.337616][ T5833] usb 5-1: config 0 interface 0 altsetting 12 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 448.393180][ T5833] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 448.442457][ T5833] usb 5-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0 [ 448.480423][ T5833] usb 5-1: config 0 interface 0 has no altsetting 0 [ 448.648786][ T5919] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 448.749953][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1161'. [ 448.812702][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1161'. [ 449.450334][ T5833] usb 5-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 449.472109][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.481500][ T5919] usb 2-1: unable to get BOS descriptor or descriptor too short [ 449.496118][ T5833] usb 5-1: Product: syz [ 449.511759][ T5833] usb 5-1: Manufacturer: syz [ 449.524880][ T5833] usb 5-1: SerialNumber: syz [ 449.569640][ T5833] usb 5-1: config 0 descriptor?? [ 449.606776][ T5919] usb 2-1: config 247 has an invalid interface number: 141 but max is 0 [ 449.628753][ T5919] usb 2-1: config 247 has no interface number 0 [ 449.645162][ T5919] usb 2-1: config 247 interface 141 has no altsetting 0 [ 449.655481][ T5919] usb 2-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 449.706227][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.734537][ T5919] usb 2-1: Product: syz [ 449.768674][ T5919] usb 2-1: Manufacturer: syz [ 449.773762][ T5919] usb 2-1: SerialNumber: syz [ 451.639027][ T5919] hso 2-1:247.141: Not our interface [ 451.902045][ T5833] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 451.918811][ T5833] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 451.926520][ T5833] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 451.971928][ T5919] usb 2-1: USB disconnect, device number 36 [ 452.046119][ T5833] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 452.068715][ T5833] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 452.147375][ T5833] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 452.156343][ T5833] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 452.178878][ T5833] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 452.188294][T10553] netlink: 'syz.3.1165': attribute type 29 has an invalid length. [ 452.199471][ T5833] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 452.207173][ T5833] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 452.218762][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1165'. [ 452.272714][ T5833] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 452.299512][ T5833] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 452.351325][ T5833] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 452.412292][T10557] xt_TCPMSS: Only works on TCP SYN packets [ 452.415872][ T5833] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 452.445899][ T5833] usb 5-1: USB disconnect, device number 21 [ 452.465005][ T5833] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 452.511116][ T5833] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 452.541265][ T5833] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 452.569063][ T5833] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 452.659858][ T5833] keyspan 5-1:0.0: device disconnected [ 453.240196][T10567] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 453.338802][T10566] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 453.345873][T10566] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 453.397604][T10566] vhci_hcd vhci_hcd.0: Device attached [ 453.579300][ T5919] vhci_hcd: vhci_device speed not set [ 453.585516][T10573] vhci_hcd: connection closed [ 454.133036][ T35] vhci_hcd: stop threads [ 454.142417][ T5919] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 454.177348][ T35] vhci_hcd: release socket [ 454.190229][ T35] vhci_hcd: disconnect device [ 454.889380][ T5836] Bluetooth: hci5: unexpected event for opcode 0x2019 [ 455.014978][T10592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1176'. [ 456.208991][ T5874] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 456.469590][ T5874] usb 6-1: unable to get BOS descriptor or descriptor too short [ 456.483302][ T5874] usb 6-1: config 247 has an invalid interface number: 141 but max is 0 [ 456.492436][ T5874] usb 6-1: config 247 has no interface number 0 [ 456.499044][ T5874] usb 6-1: config 247 interface 141 has no altsetting 0 [ 456.539716][ T5874] usb 6-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 456.550526][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.558701][ T5874] usb 6-1: Product: syz [ 456.562970][ T5874] usb 6-1: Manufacturer: syz [ 456.567704][ T5874] usb 6-1: SerialNumber: syz [ 458.150207][ T5874] hso 6-1:247.141: Not our interface [ 458.178412][T10605] netlink: 'syz.4.1179': attribute type 10 has an invalid length. [ 458.195608][T10605] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 458.205007][ T5874] usb 6-1: USB disconnect, device number 18 [ 458.205302][T10605] .: (slave netdevsim0): Enslaving as an active interface with an up link [ 458.512343][T10623] overlayfs: failed to clone lowerpath [ 459.304508][T10625] overlay: Unknown parameter 'rootcontext' [ 459.396657][ T5919] vhci_hcd: vhci_device speed not set [ 460.845905][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 461.197274][T10640] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 463.219077][ T5874] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 463.289970][T10677] .: renamed from bond0 (while UP) [ 463.343567][T10678] overlay: Unknown parameter 'rootcontext' [ 463.600693][ T5874] usb 5-1: unable to get BOS descriptor or descriptor too short [ 463.641846][ T5874] usb 5-1: config 247 has an invalid interface number: 141 but max is 0 [ 463.668980][ T5874] usb 5-1: config 247 has no interface number 0 [ 463.675296][ T5874] usb 5-1: config 247 interface 141 has no altsetting 0 [ 463.699112][ T5874] usb 5-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 463.714731][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.735491][ T5874] usb 5-1: Product: syz [ 463.748669][ T5874] usb 5-1: Manufacturer: syz [ 463.753371][ T5874] usb 5-1: SerialNumber: syz [ 463.832009][T10684] vivid-002: disconnect [ 465.693169][T10693] binder: BINDER_SET_CONTEXT_MGR already set [ 465.699315][T10693] binder: 10685:10693 ioctl 4018620d 200002c0 returned -16 [ 465.722707][ T5874] hso 5-1:247.141: Not our interface [ 465.732207][ T5874] usb 5-1: USB disconnect, device number 23 [ 467.382005][T10706] binder: binder_mmap: 10705 20ffd000-21000000 bad vm_flags failed -1 [ 468.610911][T10602] vivid-002: reconnect [ 469.405060][T10725] loop8: detected capacity change from 0 to 7 [ 469.422193][T10725] Dev loop8: unable to read RDB block 7 [ 469.469772][T10725] loop8: unable to read partition table [ 469.485864][T10725] loop8: partition table beyond EOD, truncated [ 469.502438][T10725] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 469.502438][T10725] ) failed (rc=-5) [ 470.022238][ T5872] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 470.220514][ T5872] usb 6-1: unable to get BOS descriptor or descriptor too short [ 470.232858][ T5872] usb 6-1: config 247 has an invalid interface number: 141 but max is 0 [ 470.241458][ T5872] usb 6-1: config 247 has no interface number 0 [ 470.247790][ T5872] usb 6-1: config 247 interface 141 has no altsetting 0 [ 470.264343][ T5872] usb 6-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 470.283437][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.321634][ T5872] usb 6-1: Product: syz [ 470.325878][ T5872] usb 6-1: Manufacturer: syz [ 470.348668][ T5872] usb 6-1: SerialNumber: syz [ 471.296950][T10776] Invalid logical block size (1792) [ 471.419828][ T5833] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 471.659148][ T5872] hso 6-1:247.141: Not our interface [ 472.025314][ T5872] usb 6-1: USB disconnect, device number 19 [ 472.123878][ T5833] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 472.137232][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.165869][ T5833] usb 7-1: Product: syz [ 472.176186][ T5833] usb 7-1: Manufacturer: syz [ 472.198882][ T5833] usb 7-1: SerialNumber: syz [ 472.537167][ T5833] usb 7-1: config 0 descriptor?? [ 473.130088][ T5833] usb 7-1: Firmware: major: 233, minor: 208, hardware type: UNKNOWN (243) [ 473.330680][ T5833] usb 7-1: Read permanent extended address 00:00:00:00:00:00:f0:d8 from device [ 473.342501][ T5833] usb 7-1: atusb_probe: initialization failed, error = -524 [ 473.368389][ T5833] atusb 7-1:0.0: probe with driver atusb failed with error -524 [ 473.798473][T10811] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1236'. [ 474.554334][ T5919] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 474.588298][ T5833] usb 7-1: USB disconnect, device number 5 [ 474.950037][ T5919] usb 2-1: unable to get BOS descriptor or descriptor too short [ 474.959476][ T5919] usb 2-1: config 247 has an invalid interface number: 141 but max is 0 [ 474.968437][ T5919] usb 2-1: config 247 has no interface number 0 [ 475.078797][ T5919] usb 2-1: config 247 interface 141 has no altsetting 0 [ 475.462844][T10695] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 475.504648][ T5919] usb 2-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 475.513906][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.522890][ T5919] usb 2-1: Product: syz [ 475.527090][ T5919] usb 2-1: Manufacturer: syz [ 475.531821][ T5919] usb 2-1: SerialNumber: syz [ 475.543598][T10841] FAULT_INJECTION: forcing a failure. [ 475.543598][T10841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.557316][T10841] CPU: 0 UID: 0 PID: 10841 Comm: syz.5.1245 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 475.568073][T10841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 475.578125][T10841] Call Trace: [ 475.581408][T10841] [ 475.584328][T10841] dump_stack_lvl+0x241/0x360 [ 475.589002][T10841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.594201][T10841] ? __pfx__printk+0x10/0x10 [ 475.598848][T10841] ? __pfx_lock_release+0x10/0x10 [ 475.603889][T10841] should_fail_ex+0x3b0/0x4e0 [ 475.608592][T10841] _copy_from_user+0x2f/0xc0 [ 475.613201][T10841] copy_msghdr_from_user+0xae/0x680 [ 475.618442][T10841] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 475.624262][T10841] ? __fget_files+0x2a/0x410 [ 475.628857][T10841] ? __fget_files+0x2a/0x410 [ 475.633444][T10841] __sys_sendmsg+0x209/0x350 [ 475.638059][T10841] ? __pfx_lock_release+0x10/0x10 [ 475.643107][T10841] ? __pfx___sys_sendmsg+0x10/0x10 [ 475.648257][T10841] ? __pfx_vfs_write+0x10/0x10 [ 475.653037][T10841] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 475.659375][T10841] ? do_syscall_64+0x100/0x230 [ 475.664147][T10841] ? do_syscall_64+0xb6/0x230 [ 475.668829][T10841] do_syscall_64+0xf3/0x230 [ 475.673342][T10841] ? clear_bhb_loop+0x35/0x90 [ 475.678037][T10841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.683946][T10841] RIP: 0033:0x7f2d84b85d29 [ 475.688358][T10841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.707970][T10841] RSP: 002b:00007f2d85a47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.716386][T10841] RAX: ffffffffffffffda RBX: 00007f2d84d76080 RCX: 00007f2d84b85d29 [ 475.724400][T10841] RDX: 0000000020040000 RSI: 0000000020000200 RDI: 000000000000000c [ 475.732399][T10841] RBP: 00007f2d85a47090 R08: 0000000000000000 R09: 0000000000000000 [ 475.740389][T10841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.748368][T10841] R13: 0000000000000000 R14: 00007f2d84d76080 R15: 00007ffdd4f87018 [ 475.756360][T10841] [ 475.917834][T10695] usb 7-1: Using ep0 maxpacket: 16 [ 476.343572][T10695] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.373242][T10695] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.522479][T10695] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 476.597126][T10695] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.720307][T10695] usb 7-1: config 0 descriptor?? [ 476.946298][T10848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1247'. [ 477.171519][ T5919] hso 2-1:247.141: Not our interface [ 477.197791][ T5919] usb 2-1: USB disconnect, device number 37 [ 477.408782][ T5833] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 477.563151][ T5833] usb 6-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=6e.50 [ 477.579391][T10695] letsketch 0003:6161:4D15.000A: Device info: à š [ 477.591496][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.661022][ T5833] usb 6-1: Product: syz [ 477.679620][ T5833] usb 6-1: Manufacturer: syz [ 477.693451][ T5833] usb 6-1: SerialNumber: syz [ 477.713943][ T5833] usb 6-1: config 0 descriptor?? [ 477.729863][ T5833] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 478.191377][T10695] letsketch 0003:6161:4D15.000A: Device info: Д [ 478.204361][T10695] letsketch 0003:6161:4D15.000A: Device info: í—¶ [ 478.358777][ T5833] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 478.439544][T10695] usb 7-1: Max retries (5) exceeded reading string descriptor 1 [ 478.447978][T10695] letsketch 0003:6161:4D15.000A: probe with driver letsketch failed with error -71 [ 478.462847][T10695] usb 7-1: USB disconnect, device number 6 [ 478.514605][ T5833] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 478.523000][ T5833] usb 4-1: config 0 has no interface number 0 [ 478.530131][ T5833] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.563080][ T5833] usb 4-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.573165][ T5833] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 478.587727][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.598379][ T5833] usb 4-1: config 0 descriptor?? [ 479.209490][ T5833] uclogic 0003:256C:006D.000B: interface is invalid, ignoring [ 479.349898][T10885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1259'. [ 479.407323][ T5874] usb 4-1: USB disconnect, device number 29 [ 479.848973][T10695] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 480.032014][T10695] usb 5-1: unable to get BOS descriptor or descriptor too short [ 480.048910][ T5872] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 480.108986][T10695] usb 5-1: config 247 has an invalid interface number: 141 but max is 0 [ 480.138448][ T5833] usb 6-1: USB disconnect, device number 20 [ 480.156463][T10695] usb 5-1: config 247 has no interface number 0 [ 480.182896][T10695] usb 5-1: config 247 interface 141 has no altsetting 0 [ 480.231672][T10695] usb 5-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 480.242402][T10695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.259893][T10695] usb 5-1: Product: syz [ 480.266006][ T5872] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 480.268584][T10695] usb 5-1: Manufacturer: syz [ 480.289821][ T5872] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 480.292864][T10695] usb 5-1: SerialNumber: syz [ 480.303450][ T5872] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 480.363276][ T5872] usb 2-1: config 0 interface 0 altsetting 12 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 480.391035][ T5872] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 480.418733][ T5872] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0 [ 480.452639][ T5872] usb 2-1: config 0 interface 0 has no altsetting 0 [ 480.483298][ T5872] usb 2-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 480.516093][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.543155][ T5872] usb 2-1: Product: syz [ 481.314732][ T5872] usb 2-1: Manufacturer: syz [ 481.381840][ T5872] usb 2-1: SerialNumber: syz [ 481.400805][ T5872] usb 2-1: config 0 descriptor?? [ 481.409764][T10695] hso 5-1:247.141: Not our interface [ 481.631158][T10695] usb 5-1: USB disconnect, device number 24 [ 481.690343][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 481.690361][ T29] audit: type=1326 audit(1735034468.309:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.6.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3889185d29 code=0x7ffc0000 [ 482.527091][ T29] audit: type=1326 audit(1735034468.499:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.6.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3889185d29 code=0x7ffc0000 [ 482.622723][ T29] audit: type=1326 audit(1735034469.169:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.6.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3889185d29 code=0x7ffc0000 [ 482.668769][ T29] audit: type=1326 audit(1735034469.169:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.6.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3889185d29 code=0x7ffc0000 [ 482.712681][ T29] audit: type=1326 audit(1735034469.169:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.6.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3889185d29 code=0x7ffc0000 [ 482.752960][ T29] audit: type=1326 audit(1735034469.169:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.6.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3889185d29 code=0x7ffc0000 [ 482.775236][ T29] audit: type=1326 audit(1735034469.219:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.6.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f388917cce7 code=0x7ffc0000 [ 482.797506][ T29] audit: type=1326 audit(1735034469.219:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.6.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3889121f29 code=0x7ffc0000 [ 482.865350][ T29] audit: type=1326 audit(1735034469.219:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.6.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f388917cce7 code=0x7ffc0000 [ 482.881283][T10912] sg_write: process 130 (syz.6.1268) changed security contexts after opening file descriptor, this is not allowed. [ 482.893503][ T29] audit: type=1326 audit(1735034469.219:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz.6.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3889121f29 code=0x7ffc0000 [ 482.978319][T10913] program syz.6.1268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 483.659859][ T5872] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 483.667496][ T5872] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 483.818698][ T5872] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 483.827035][ T5872] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 483.868454][ T5872] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 483.944946][ T5872] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 483.989592][ T5872] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 484.024092][ T5872] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 484.059837][ T5872] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 484.075924][ T5872] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 484.093366][T10933] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 484.109598][ T5872] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 484.152267][ T5872] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 484.169383][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1276'. [ 484.200245][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1276'. [ 484.242925][T10938] virtiofs: Unknown parameter 'fd' [ 484.267081][ T5872] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 484.329257][ T5872] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 484.356368][ T5872] usb 2-1: USB disconnect, device number 38 [ 484.374272][ T5872] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 484.405742][ T5872] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 484.443765][ T5872] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 484.467813][ T5872] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 484.500168][ T5872] keyspan 2-1:0.0: device disconnected [ 484.738765][ T5919] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 484.900777][ T5919] usb 4-1: unable to get BOS descriptor or descriptor too short [ 485.032670][ T5919] usb 4-1: config 247 has an invalid interface number: 141 but max is 0 [ 485.041381][ T5919] usb 4-1: config 247 has no interface number 0 [ 485.047689][ T5919] usb 4-1: config 247 interface 141 has no altsetting 0 [ 485.058483][ T5919] usb 4-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 485.068809][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.076887][ T5919] usb 4-1: Product: syz [ 485.081287][ T5919] usb 4-1: Manufacturer: syz [ 485.085965][ T5919] usb 4-1: SerialNumber: syz [ 486.963771][T10965] .: renamed from bond0 (while UP) [ 487.019944][T10967] overlay: Unknown parameter 'rootcontext' [ 487.142996][ T5919] hso 4-1:247.141: Not our interface [ 487.380211][ T5919] usb 4-1: USB disconnect, device number 30 [ 489.995306][T10992] overlay: Unknown parameter 'rootcontext' [ 493.844418][ T5833] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 494.193148][ T5833] usb 6-1: unable to get BOS descriptor or descriptor too short [ 494.204585][ T5833] usb 6-1: config 247 has an invalid interface number: 141 but max is 0 [ 494.215271][ T5833] usb 6-1: config 247 has no interface number 0 [ 494.231964][ T5833] usb 6-1: config 247 interface 141 has no altsetting 0 [ 494.251870][ T5833] usb 6-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 494.265643][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.283255][ T5833] usb 6-1: Product: syz [ 494.290965][ T5833] usb 6-1: Manufacturer: syz [ 494.313401][ T5833] usb 6-1: SerialNumber: syz [ 495.779811][T11045] binder: 11032:11045 ioctl 8933 20000340 returned -22 [ 499.756210][ T5874] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 499.977591][ T5874] usb 4-1: no configurations [ 499.999324][ T5874] usb 4-1: can't read configurations, error -22 [ 500.246604][ T5874] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 500.359216][ T5833] hso 6-1:247.141: Not our interface [ 500.560792][ T5874] usb 4-1: no configurations [ 500.628969][ T5874] usb 4-1: can't read configurations, error -22 [ 500.749745][ T5874] usb usb4-port1: attempt power cycle [ 501.180139][ T5874] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 502.012133][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.126278][ T5874] usb 4-1: device descriptor read/all, error -71 [ 503.189045][ T5833] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 503.361720][ T5833] usb 7-1: unable to get BOS descriptor or descriptor too short [ 503.478494][ T5833] usb 7-1: config 247 has an invalid interface number: 141 but max is 0 [ 503.735714][ T5833] usb 7-1: config 247 has no interface number 0 [ 504.443030][ T5833] usb 7-1: config 247 interface 141 has no altsetting 0 [ 504.464435][ T5833] usb 7-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 504.473881][ T5828] Bluetooth: hci5: command 0x0405 tx timeout [ 504.480109][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.480138][ T5833] usb 7-1: Product: syz [ 504.480154][ T5833] usb 7-1: Manufacturer: syz [ 504.496984][ T5833] usb 7-1: SerialNumber: syz [ 507.266084][T11146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.289191][T11146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.739330][T11141] overlay: Unknown parameter 'rootcontext' [ 507.753523][ T5833] hso 7-1:247.141: Not our interface [ 507.765554][ T5833] usb 7-1: USB disconnect, device number 7 [ 510.326118][T11168] Unsupported ieee802154 address type: 0 [ 511.071188][ T5833] usb 6-1: USB disconnect, device number 21 [ 512.363734][ T8] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 512.539887][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 512.558055][ T8] usb 4-1: config 247 has an invalid interface number: 141 but max is 0 [ 512.568129][ T8] usb 4-1: config 247 has no interface number 0 [ 513.100776][ T8] usb 4-1: config 247 interface 141 has no altsetting 0 [ 514.007009][ T8] usb 4-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 514.016184][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.024256][ T8] usb 4-1: Product: syz [ 514.028444][ T8] usb 4-1: Manufacturer: syz [ 514.956359][ T8] usb 4-1: SerialNumber: syz [ 515.384996][ T8] hso 4-1:247.141: Not our interface [ 515.401518][ T8] usb 4-1: USB disconnect, device number 35 [ 516.475841][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 516.475859][ T29] audit: type=1326 audit(1735034503.089:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11226 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728bd85d29 code=0x7ffc0000 [ 516.518986][ T29] audit: type=1326 audit(1735034503.089:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11226 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728bd85d29 code=0x7ffc0000 [ 516.645057][ T29] audit: type=1326 audit(1735034503.259:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11226 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f728bd85d29 code=0x7ffc0000 [ 516.772117][ T29] audit: type=1326 audit(1735034503.379:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11226 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728bd85d29 code=0x7ffc0000 [ 517.069459][ T29] audit: type=1326 audit(1735034503.489:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11226 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728bd85d29 code=0x7ffc0000 [ 517.127087][ T29] audit: type=1326 audit(1735034503.689:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11226 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f728bd85d29 code=0x7ffc0000 [ 517.149266][ T29] audit: type=1326 audit(1735034503.689:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11226 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728bd85d29 code=0x7ffc0000 [ 517.178592][ T29] audit: type=1326 audit(1735034503.689:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11226 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f728bd7cce7 code=0x7ffc0000 [ 517.200364][ T29] audit: type=1326 audit(1735034503.689:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11226 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f728bd21f29 code=0x7ffc0000 [ 517.223935][ T29] audit: type=1326 audit(1735034503.729:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11226 comm="syz.1.1352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f728bd85d29 code=0x7ffc0000 [ 519.946567][ T5872] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 520.291017][ T5833] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 520.988555][ T5833] usb 5-1: unable to get BOS descriptor or descriptor too short [ 520.997177][ T5833] usb 5-1: config 247 has an invalid interface number: 141 but max is 0 [ 521.005890][ T5833] usb 5-1: config 247 has no interface number 0 [ 521.012648][ T5833] usb 5-1: config 247 interface 141 has no altsetting 0 [ 521.024397][ T5833] usb 5-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 521.033705][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.041825][ T5833] usb 5-1: Product: syz [ 521.046327][ T5833] usb 5-1: Manufacturer: syz [ 521.056202][ T5833] usb 5-1: SerialNumber: syz [ 523.265777][ T5833] hso 5-1:247.141: Not our interface [ 523.317998][ T5833] usb 5-1: USB disconnect, device number 25 [ 524.689450][T11303] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 525.438505][T10695] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 525.890405][T10695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.900430][T10695] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 525.911820][T10695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.950204][T10695] usb 4-1: config 0 descriptor?? [ 525.971541][T10695] appletouch 4-1:0.0: Could not find int-in endpoint [ 525.998846][T10695] appletouch 4-1:0.0: probe with driver appletouch failed with error -5 [ 526.008049][T10695] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 526.737597][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 526.737617][ T29] audit: type=1326 audit(1735034513.329:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11317 comm="syz.6.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3889185d29 code=0x7ffc0000 [ 526.935831][ T29] audit: type=1326 audit(1735034513.399:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11317 comm="syz.6.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3889185d29 code=0x7ffc0000 [ 527.010445][T11327] FAULT_INJECTION: forcing a failure. [ 527.010445][T11327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.028716][ T29] audit: type=1326 audit(1735034513.429:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11317 comm="syz.6.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3889185d29 code=0x7ffc0000 [ 527.083339][T11327] CPU: 1 UID: 0 PID: 11327 Comm: syz.4.1378 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 527.094192][T11327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 527.095422][ T5833] usb 4-1: USB disconnect, device number 36 [ 527.104249][T11327] Call Trace: [ 527.104285][T11327] [ 527.104296][T11327] dump_stack_lvl+0x241/0x360 [ 527.121086][T11327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.126296][T11327] ? __pfx__printk+0x10/0x10 [ 527.128755][ T29] audit: type=1326 audit(1735034513.429:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11317 comm="syz.6.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3889185d29 code=0x7ffc0000 [ 527.130899][T11327] ? snprintf+0xda/0x120 [ 527.130927][T11327] should_fail_ex+0x3b0/0x4e0 [ 527.161358][T11327] _copy_to_user+0x31/0xb0 [ 527.165785][T11327] simple_read_from_buffer+0xca/0x150 [ 527.171170][T11327] proc_fail_nth_read+0x1e9/0x250 [ 527.176202][T11327] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 527.181752][T11327] ? rw_verify_area+0x55e/0x6f0 [ 527.186602][T11327] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 527.192151][T11327] vfs_read+0x1fc/0xb70 [ 527.196311][T11327] ? __pfx___mutex_lock+0x10/0x10 [ 527.201342][T11327] ? __pfx_vfs_read+0x10/0x10 [ 527.206021][T11327] ? __fget_files+0x2a/0x410 [ 527.210611][T11327] ? __fget_files+0x395/0x410 [ 527.215282][T11327] ? __fget_files+0x2a/0x410 [ 527.219878][T11327] ksys_read+0x18f/0x2b0 [ 527.224120][T11327] ? __pfx_ksys_read+0x10/0x10 [ 527.228883][T11327] ? do_syscall_64+0x100/0x230 [ 527.233651][T11327] ? do_syscall_64+0xb6/0x230 [ 527.238330][T11327] do_syscall_64+0xf3/0x230 [ 527.242835][T11327] ? clear_bhb_loop+0x35/0x90 [ 527.247515][T11327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.253409][T11327] RIP: 0033:0x7f5c5758473c [ 527.257824][T11327] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 527.277429][T11327] RSP: 002b:00007f5c583c4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 527.285846][T11327] RAX: ffffffffffffffda RBX: 00007f5c57775fa0 RCX: 00007f5c5758473c [ 527.293818][T11327] RDX: 000000000000000f RSI: 00007f5c583c40a0 RDI: 0000000000000005 [ 527.301793][T11327] RBP: 00007f5c583c4090 R08: 0000000000000000 R09: 0000000000000000 [ 527.309767][T11327] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.317738][T11327] R13: 0000000000000000 R14: 00007f5c57775fa0 R15: 00007fff79cebba8 [ 527.325721][T11327] [ 527.335541][ T29] audit: type=1326 audit(1735034513.429:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11317 comm="syz.6.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3889185d29 code=0x7ffc0000 [ 527.364850][ T29] audit: type=1326 audit(1735034513.439:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11317 comm="syz.6.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3889185d29 code=0x7ffc0000 [ 527.568885][ T29] audit: type=1326 audit(1735034513.439:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11317 comm="syz.6.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3889185d29 code=0x7ffc0000 [ 527.880105][ T29] audit: type=1326 audit(1735034513.439:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11317 comm="syz.6.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3889185d29 code=0x7ffc0000 [ 527.904925][ T29] audit: type=1326 audit(1735034513.439:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11317 comm="syz.6.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3889185d29 code=0x7ffc0000 [ 527.953370][ T29] audit: type=1326 audit(1735034513.439:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11317 comm="syz.6.1376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3889185d29 code=0x7ffc0000 [ 530.456059][T11367] Unsupported ieee802154 address type: 0 [ 533.179004][T10695] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 534.240281][T10695] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.260115][T10695] usb 4-1: config 0 has no interfaces? [ 534.301913][T10695] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 534.373715][T10695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.382043][T10695] usb 4-1: Product: syz [ 534.386987][T10695] usb 4-1: Manufacturer: syz [ 534.391878][T10695] usb 4-1: SerialNumber: syz [ 534.713040][T10695] usb 4-1: config 0 descriptor?? [ 535.509159][ T5872] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 535.614304][T10695] usb 4-1: USB disconnect, device number 37 [ 535.820067][ T5872] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 535.851099][ T5872] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 535.876386][ T5872] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 535.904463][ T5872] usb 2-1: config 0 interface 0 altsetting 12 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 536.175594][ T5874] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 536.664979][ T5872] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 536.684589][ T5872] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x82 has invalid wMaxPacketSize 0 [ 536.748820][ T5874] usb 7-1: Using ep0 maxpacket: 32 [ 536.755992][ T5872] usb 2-1: config 0 interface 0 has no altsetting 0 [ 536.767662][ T5874] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 536.804922][T11411] overlay: Unknown parameter 'rootcontext' [ 536.828843][ T5874] usb 7-1: config 0 has no interface number 0 [ 536.877168][ T5874] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 536.906982][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.927245][ T5874] usb 7-1: Product: syz [ 536.932014][ T5874] usb 7-1: Manufacturer: syz [ 536.936758][ T5874] usb 7-1: SerialNumber: syz [ 536.957531][ T5874] usb 7-1: config 0 descriptor?? [ 537.383900][T11431] netlink: 341 bytes leftover after parsing attributes in process `syz.3.1405'. [ 538.121525][ T5874] radio-si470x 7-1:0.35: si470x_get_report: usb_control_msg returned -110 [ 538.130361][ T5874] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5 [ 538.175216][ T5874] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 538.201000][ T5874] usb 7-1: USB disconnect, device number 8 [ 538.409182][ T5872] usb 2-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 538.418373][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.461004][ T5872] usb 2-1: config 0 descriptor?? [ 538.466535][ T5872] usb 2-1: can't set config #0, error -71 [ 539.438771][ T5872] usb 2-1: USB disconnect, device number 40 [ 540.078821][ T5919] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 541.080444][ T5919] usb 4-1: unable to get BOS descriptor or descriptor too short [ 541.108146][ T5919] usb 4-1: config 247 has an invalid interface number: 141 but max is 0 [ 541.145914][ T5919] usb 4-1: config 247 has no interface number 0 [ 541.156044][ T5919] usb 4-1: config 247 interface 141 has no altsetting 0 [ 543.478539][ T5919] usb 4-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 543.514274][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.643514][ T5919] usb 4-1: can't set config #247, error -71 [ 543.651049][ T5919] usb 4-1: USB disconnect, device number 38 [ 547.819841][ T5872] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 548.256359][ T5872] usb 2-1: unable to get BOS descriptor or descriptor too short [ 548.277333][ T5872] usb 2-1: config 247 has an invalid interface number: 141 but max is 0 [ 548.290559][ T5872] usb 2-1: config 247 has no interface number 0 [ 548.297103][ T5872] usb 2-1: config 247 interface 141 has no altsetting 0 [ 548.308195][ T5872] usb 2-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 548.327707][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.338889][ T5872] usb 2-1: Product: syz [ 548.343095][ T5872] usb 2-1: Manufacturer: syz [ 548.355402][ T47] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 548.381559][ T5872] usb 2-1: SerialNumber: syz [ 548.491913][ T47] usb 7-1: device descriptor read/64, error -71 [ 548.553887][ T5833] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 549.641924][ T5833] usb 6-1: Using ep0 maxpacket: 16 [ 549.788727][ T47] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 550.219416][ T47] usb 7-1: device descriptor read/64, error -71 [ 550.224359][ T5872] hso 2-1:247.141: Not our interface [ 550.409442][ T47] usb usb7-port1: attempt power cycle [ 550.533411][ T5872] usb 2-1: USB disconnect, device number 41 [ 550.549571][ T5833] usb 6-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 550.558851][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.566868][ T5833] usb 6-1: Product: syz [ 550.571267][ T5833] usb 6-1: Manufacturer: syz [ 550.575848][ T5833] usb 6-1: SerialNumber: syz [ 550.584056][ T5833] usb 6-1: config 0 descriptor?? [ 550.596428][ T5833] as10x_usb: device has been detected [ 550.602361][ T5833] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 550.620681][ T5833] usb 6-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 550.821883][ T5833] as10x_usb: error during firmware upload part1 [ 550.828740][ T47] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 550.836959][ T5833] Registered device Sky IT Digital Key (green led) [ 550.849366][ T47] usb 7-1: device descriptor read/8, error -71 [ 551.602333][ T5872] usb 6-1: USB disconnect, device number 22 [ 551.622245][ T5872] Unregistered device Sky IT Digital Key (green led) [ 551.625993][ T5872] as10x_usb: device has been disconnected [ 552.829592][ T838] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 553.257794][T11565] FAULT_INJECTION: forcing a failure. [ 553.257794][T11565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.271770][T11565] CPU: 0 UID: 0 PID: 11565 Comm: syz.6.1444 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 553.282574][T11565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 553.292652][T11565] Call Trace: [ 553.295938][T11565] [ 553.298863][T11565] dump_stack_lvl+0x241/0x360 [ 553.303547][T11565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 553.308750][T11565] ? __pfx__printk+0x10/0x10 [ 553.313362][T11565] ? __pfx_lock_release+0x10/0x10 [ 553.318406][T11565] should_fail_ex+0x3b0/0x4e0 [ 553.323093][T11565] _copy_from_iter+0x1e9/0x1c20 [ 553.327947][T11565] ? __virt_addr_valid+0x183/0x530 [ 553.333062][T11565] ? __alloc_skb+0x28f/0x440 [ 553.337652][T11565] ? __pfx__copy_from_iter+0x10/0x10 [ 553.342937][T11565] ? __virt_addr_valid+0x183/0x530 [ 553.348050][T11565] ? __virt_addr_valid+0x183/0x530 [ 553.353171][T11565] ? __virt_addr_valid+0x45f/0x530 [ 553.358291][T11565] ? __phys_addr_symbol+0x2f/0x70 [ 553.363319][T11565] ? __check_object_size+0x47a/0x730 [ 553.368630][T11565] netlink_sendmsg+0x73d/0xcb0 [ 553.373416][T11565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.378715][T11565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.383999][T11565] __sock_sendmsg+0x221/0x270 [ 553.388685][T11565] ____sys_sendmsg+0x52a/0x7e0 [ 553.393463][T11565] ? __pfx_____sys_sendmsg+0x10/0x10 [ 553.398751][T11565] ? __fget_files+0x2a/0x410 [ 553.403349][T11565] ? __fget_files+0x2a/0x410 [ 553.407941][T11565] __sys_sendmmsg+0x36a/0x720 [ 553.412641][T11565] ? __pfx___sys_sendmmsg+0x10/0x10 [ 553.417850][T11565] ? __pfx_lock_release+0x10/0x10 [ 553.422868][T11565] ? kstrtouint_from_user+0x128/0x190 [ 553.428252][T11565] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 553.434147][T11565] ? ksys_write+0x22a/0x2b0 [ 553.438649][T11565] ? __pfx_lock_release+0x10/0x10 [ 553.443671][T11565] ? vfs_write+0x730/0xd30 [ 553.448087][T11565] ? __mutex_unlock_slowpath+0x21e/0x790 [ 553.453735][T11565] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 553.459720][T11565] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 553.466040][T11565] ? do_syscall_64+0x100/0x230 [ 553.470806][T11565] __x64_sys_sendmmsg+0xa0/0xb0 [ 553.475656][T11565] do_syscall_64+0xf3/0x230 [ 553.480174][T11565] ? clear_bhb_loop+0x35/0x90 [ 553.484860][T11565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.490758][T11565] RIP: 0033:0x7f3889185d29 [ 553.495188][T11565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.514807][T11565] RSP: 002b:00007f3889f0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 553.523228][T11565] RAX: ffffffffffffffda RBX: 00007f3889375fa0 RCX: 00007f3889185d29 [ 553.531212][T11565] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 553.539190][T11565] RBP: 00007f3889f0e090 R08: 0000000000000000 R09: 0000000000000000 [ 553.547176][T11565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.555148][T11565] R13: 0000000000000000 R14: 00007f3889375fa0 R15: 00007ffe471f33b8 [ 553.563130][T11565] [ 553.585388][ T838] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 553.598920][ T838] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 553.607030][ T838] usb 6-1: Product: syz [ 553.611328][ T838] usb 6-1: Manufacturer: syz [ 553.615948][ T838] usb 6-1: SerialNumber: syz [ 553.661731][ T838] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 554.322224][ T838] vp7045: USB control message 'out' went wrong. [ 554.330325][ T838] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 554.340871][ T838] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 554.441473][ T838] usb 6-1: USB disconnect, device number 23 [ 554.474379][T11574] overlayfs: missing 'lowerdir' [ 555.590067][ T838] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 556.287361][ T838] usb 7-1: unable to get BOS descriptor or descriptor too short [ 556.569108][ T838] usb 7-1: config 247 has an invalid interface number: 141 but max is 0 [ 556.586960][ T838] usb 7-1: config 247 has no interface number 0 [ 556.596940][ T838] usb 7-1: config 247 interface 141 has no altsetting 0 [ 556.667239][ T838] usb 7-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 556.686959][ T838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.707479][ T838] usb 7-1: Product: syz [ 556.755940][ T838] usb 7-1: Manufacturer: syz [ 556.772588][ T838] usb 7-1: SerialNumber: syz [ 558.079340][ T838] hso 7-1:247.141: Not our interface [ 558.119514][ T838] usb 7-1: USB disconnect, device number 13 [ 559.418851][ T47] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 559.587438][ T47] usb 2-1: no configurations [ 559.592233][ T47] usb 2-1: can't read configurations, error -22 [ 559.724400][T11622] overlayfs: missing 'lowerdir' [ 559.944886][ T47] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 560.190471][ T47] usb 2-1: no configurations [ 560.195204][ T47] usb 2-1: can't read configurations, error -22 [ 560.239483][ T47] usb usb2-port1: attempt power cycle [ 560.599128][ T47] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 560.619669][ T47] usb 2-1: no configurations [ 560.624306][ T47] usb 2-1: can't read configurations, error -22 [ 560.648526][T11632] netlink: 'syz.6.1462': attribute type 1 has an invalid length. [ 560.691890][T11632] bond0: (slave ip6erspan0): making interface the new active one [ 560.869041][T11632] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 560.958742][ T47] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 560.991581][ T47] usb 2-1: no configurations [ 561.702633][ T47] usb 2-1: can't read configurations, error -22 [ 561.749702][ T47] usb usb2-port1: unable to enumerate USB device [ 562.269386][ T47] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 562.576149][T11655] overlay: Unknown parameter 'rootcontext' [ 562.579783][ T47] usb 2-1: unable to get BOS descriptor or descriptor too short [ 562.861905][ T47] usb 2-1: config 247 has an invalid interface number: 141 but max is 0 [ 562.943683][ T47] usb 2-1: config 247 has no interface number 0 [ 563.009824][ T47] usb 2-1: config 247 interface 141 has no altsetting 0 [ 563.034449][ T47] usb 2-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 563.064783][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.131662][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.168246][ T47] usb 2-1: Product: syz [ 563.182103][ T47] usb 2-1: Manufacturer: syz [ 563.190060][ T47] usb 2-1: SerialNumber: syz [ 563.351775][T11662] Invalid logical block size (768) [ 564.528824][ T838] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 565.053142][ T47] hso 2-1:247.141: Not our interface [ 565.067663][ T47] usb 2-1: USB disconnect, device number 46 [ 565.151035][T11673] 9pnet_fd: Insufficient options for proto=fd [ 565.301618][ T838] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 565.318214][ T838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 231, changing to 11 [ 565.331910][ T838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 33964, setting to 1024 [ 565.333278][T11676] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 565.344364][ T838] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 565.367560][ T838] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 565.377486][ T838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.407489][ T838] usb 4-1: config 0 descriptor?? [ 565.414136][T11664] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 565.598852][ T5872] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 566.454047][ T838] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 566.478839][ T838] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 566.501454][ T5872] usb 2-1: no configurations [ 566.506057][ T5872] usb 2-1: can't read configurations, error -22 [ 566.537149][ T838] usb 4-1: USB disconnect, device number 39 [ 566.648830][ T5872] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 566.810535][ T5872] usb 2-1: no configurations [ 566.848425][ T5872] usb 2-1: can't read configurations, error -22 [ 566.905269][ T5872] usb usb2-port1: attempt power cycle [ 567.448936][ T5872] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 567.577714][ T5872] usb 2-1: no configurations [ 567.582380][ T5872] usb 2-1: can't read configurations, error -22 [ 567.727056][ T5872] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 567.771001][ T5872] usb 2-1: no configurations [ 567.807038][T11693] overlay: Unknown parameter 'rootcontext' [ 568.014068][ T5872] usb 2-1: can't read configurations, error -22 [ 568.125540][ T5872] usb usb2-port1: unable to enumerate USB device [ 569.207382][T11712] 9pnet_fd: Insufficient options for proto=fd [ 569.467621][T11714] overlay: Unknown parameter 'rootcontext' [ 569.598867][ T5833] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 570.617736][ T5833] usb 4-1: unable to get BOS descriptor or descriptor too short [ 570.656478][ T5833] usb 4-1: config 247 has an invalid interface number: 141 but max is 0 [ 570.784883][ T5833] usb 4-1: config 247 has no interface number 0 [ 570.791955][ T5833] usb 4-1: config 247 interface 141 has no altsetting 0 [ 570.805816][ T5833] usb 4-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 570.816529][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.838694][ T5833] usb 4-1: Product: syz [ 570.842928][ T5833] usb 4-1: Manufacturer: syz [ 570.873470][ T5833] usb 4-1: SerialNumber: syz [ 572.622077][ T5833] hso 4-1:247.141: Not our interface [ 572.634695][ T5833] usb 4-1: USB disconnect, device number 40 [ 574.058774][ T5874] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 574.933937][ T5874] usb 2-1: no configurations [ 575.233053][ T5874] usb 2-1: can't read configurations, error -22 [ 575.921833][ T5874] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 576.040294][ T29] audit: type=1326 audit(1735034562.659:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11759 comm="syz.5.1497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d84b85d29 code=0x0 [ 576.091410][ T5874] usb 2-1: no configurations [ 576.096067][ T5874] usb 2-1: can't read configurations, error -22 [ 576.132038][ T5874] usb usb2-port1: attempt power cycle [ 576.303183][T11769] Unsupported ieee802154 address type: 0 [ 579.559607][ T5874] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 580.274898][T11794] 9pnet_fd: Insufficient options for proto=fd [ 580.290973][ T5874] usb 2-1: unable to get BOS descriptor or descriptor too short [ 580.299884][ T5874] usb 2-1: config 247 has an invalid interface number: 141 but max is 0 [ 580.378955][ T5874] usb 2-1: config 247 has no interface number 0 [ 580.395061][ T5874] usb 2-1: config 247 interface 141 has no altsetting 0 [ 580.407892][ T5874] usb 2-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 580.417124][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.427295][ T5874] usb 2-1: Product: syz [ 580.431582][ T5874] usb 2-1: Manufacturer: syz [ 580.436767][ T5874] usb 2-1: SerialNumber: syz [ 580.528784][ T47] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 580.708136][ T47] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 581.941147][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 581.958400][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 581.968235][ T47] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 581.981440][ T47] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 581.990767][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.007316][ T5874] hso 2-1:247.141: Not our interface [ 582.019001][ T47] usb 6-1: config 0 descriptor?? [ 582.024708][ T5874] usb 2-1: USB disconnect, device number 54 [ 582.502972][ T47] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 582.617636][ T47] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 583.300454][T11817] overlay: Unknown parameter 'rootcontext' [ 583.425884][ T47] usb 6-1: USB disconnect, device number 24 [ 588.378759][ T5833] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 588.531309][ T5833] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 588.539028][ T5833] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 588.549136][ T5833] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 588.560547][ T5833] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 588.571845][ T5833] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 588.586886][ T5833] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 588.594507][ T5833] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 588.605012][ T5833] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 588.616664][ T5833] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 588.627994][ T5833] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 588.640627][ T5833] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 588.648053][ T5833] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 588.658295][ T5833] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 588.668540][ T5833] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 588.680904][ T5833] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 588.696800][ T5833] usb 2-1: string descriptor 0 read error: -22 [ 588.704793][ T5833] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 588.718741][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.739619][ T5833] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 589.443174][T11860] overlay: Unknown parameter 'rootcontext' [ 589.805871][ T9] usb 2-1: USB disconnect, device number 55 [ 590.128937][T10695] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 590.310461][T10695] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 590.349251][T10695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 590.382479][T10695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 590.408807][T10695] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 590.423409][T10695] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 590.433331][T10695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.438913][ T5833] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 590.443346][T10695] usb 4-1: config 0 descriptor?? [ 590.622510][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.655516][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.684111][ T5833] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 590.702421][ T5833] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 590.739290][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.742421][T11873] netlink: 'syz.6.1528': attribute type 1 has an invalid length. [ 590.753858][ T5833] usb 6-1: config 0 descriptor?? [ 590.967786][T10695] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 591.098327][T10695] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 591.192840][ T5833] hid-udraw 0003:20D6:CB17.000F: unknown main item tag 0x0 [ 591.220346][ T5833] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.000F/input/input24 [ 591.229671][ T47] usb 4-1: USB disconnect, device number 41 [ 592.417139][ T5833] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.000F/input/input25 [ 593.006260][ T5833] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.000F/input/input26 [ 593.052251][ T5833] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.000F/input/input27 [ 593.102057][ T5833] hid-udraw 0003:20D6:CB17.000F: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.5-1/input0 [ 593.155105][ T5833] usb 6-1: USB disconnect, device number 25 [ 594.379722][T11909] overlay: Unknown parameter 'rootcontext' [ 594.791330][ T5833] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 594.968762][ T5833] usb 7-1: Using ep0 maxpacket: 32 [ 595.035927][ T5833] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 595.045205][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.079820][ T5833] usb 7-1: config 0 descriptor?? [ 595.099791][ T5833] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 595.399054][T11912] netlink: 'syz.1.1539': attribute type 1 has an invalid length. [ 596.324690][T11903] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1535'. [ 596.578971][T10695] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 597.034410][ T5833] gspca_nw80x: reg_w err -110 [ 597.044101][ T5833] nw80x 7-1:0.0: probe with driver nw80x failed with error -110 [ 597.183870][T10695] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 597.771867][T10695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 597.782940][T10695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 597.807208][T10695] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 597.820524][T10695] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 597.829771][T10695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.861792][T11935] overlay: Unknown parameter 'rootcontext' [ 597.871611][T10695] usb 2-1: config 0 descriptor?? [ 599.920382][T10695] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 599.947936][T10695] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 599.959120][ T9] usb 7-1: USB disconnect, device number 14 [ 599.973874][T10695] usb 2-1: USB disconnect, device number 56 [ 605.294595][T11990] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 605.684440][T12002] Unsupported ieee802154 address type: 0 [ 605.958746][T10695] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 607.154355][T10695] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 607.286766][T10695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 607.294909][T12016] tipc: Enabling of bearer rejected, failed to enable media [ 607.314201][T10695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 607.324471][T10695] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 607.971122][T10695] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 607.980702][T10695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.078400][T10695] usb 4-1: config 0 descriptor?? [ 608.238807][ T5872] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 608.438737][ T5872] usb 7-1: unable to get BOS descriptor or descriptor too short [ 608.454085][ T5872] usb 7-1: config 247 has an invalid interface number: 141 but max is 0 [ 608.464499][ T5872] usb 7-1: config 247 has no interface number 0 [ 608.479897][ T5872] usb 7-1: config 247 interface 141 has no altsetting 0 [ 608.503846][ T5872] usb 7-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 608.516073][ T5872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.523127][T10695] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 608.524284][ T5872] usb 7-1: Product: syz [ 608.548769][ T5872] usb 7-1: Manufacturer: syz [ 608.550520][T10695] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 608.553572][ T5872] usb 7-1: SerialNumber: syz [ 609.992044][ T5872] hso 7-1:247.141: Not our interface [ 610.000064][ T5872] usb 7-1: USB disconnect, device number 15 [ 610.072039][ T5833] usb 4-1: USB disconnect, device number 42 [ 612.088979][ T47] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 612.136687][T12067] overlay: Unknown parameter 'rootcontext' [ 612.270932][ T47] usb 2-1: no configurations [ 612.348249][T12066] Unsupported ieee802154 address type: 0 [ 612.356814][ T47] usb 2-1: can't read configurations, error -22 [ 612.558982][ T47] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 612.739487][ T47] usb 2-1: no configurations [ 612.744138][ T47] usb 2-1: can't read configurations, error -22 [ 612.776413][ T47] usb usb2-port1: attempt power cycle [ 613.649458][ T47] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 613.693534][ T47] usb 2-1: no configurations [ 613.716263][ T47] usb 2-1: can't read configurations, error -22 [ 613.881263][ T47] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 613.924646][ T47] usb 2-1: no configurations [ 613.937237][ T47] usb 2-1: can't read configurations, error -22 [ 613.955377][ T47] usb usb2-port1: unable to enumerate USB device [ 614.118862][ T5833] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 614.282122][ T5833] usb 5-1: config 5 has an invalid interface number: 189 but max is 0 [ 614.290461][ T5833] usb 5-1: config 5 has no interface number 0 [ 614.298430][ T5833] usb 5-1: New USB device found, idVendor=2639, idProduct=0013, bcdDevice=3a.2d [ 614.308363][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.316416][ T5833] usb 5-1: Product: syz [ 614.320589][ T5833] usb 5-1: Manufacturer: syz [ 614.325171][ T5833] usb 5-1: SerialNumber: syz [ 614.398829][ T47] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 614.478738][ T5874] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 614.543204][ T5833] usb 5-1: USB disconnect, device number 26 [ 614.562673][ T47] usb 4-1: unable to get BOS descriptor or descriptor too short [ 614.573552][ T47] usb 4-1: config 247 has an invalid interface number: 141 but max is 0 [ 614.582168][ T47] usb 4-1: config 247 has no interface number 0 [ 614.588652][ T47] usb 4-1: config 247 interface 141 has no altsetting 0 [ 614.597873][ T47] usb 4-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 614.607244][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.615366][ T47] usb 4-1: Product: syz [ 614.620737][ T47] usb 4-1: Manufacturer: syz [ 614.625516][ T47] usb 4-1: SerialNumber: syz [ 614.650857][ T5874] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 614.662579][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 614.673584][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 614.683630][ T5874] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 614.696607][ T5874] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 614.705789][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.715691][ T5874] usb 7-1: config 0 descriptor?? [ 615.601932][ T5874] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 615.689466][ T47] hso 4-1:247.141: Not our interface [ 615.700332][ T47] usb 4-1: USB disconnect, device number 43 [ 615.710581][ T5874] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 615.998725][ T29] audit: type=1326 audit(1735034602.589:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12090 comm="syz.4.1589" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c57585d29 code=0x0 [ 616.043167][T10695] usb 7-1: USB disconnect, device number 16 [ 617.256506][T12111] netlink: 'syz.5.1593': attribute type 10 has an invalid length. [ 617.305448][T12111] team0: Port device geneve1 added [ 617.470349][T12120] Unsupported ieee802154 address type: 0 [ 617.660965][T10695] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 617.725043][ T5874] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 617.841399][T10695] usb 6-1: Using ep0 maxpacket: 16 [ 617.903205][ T5874] usb 4-1: no configurations [ 617.908213][ T5874] usb 4-1: can't read configurations, error -22 [ 618.295266][T10695] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 618.304259][T10695] usb 6-1: config 0 has no interface number 0 [ 618.316673][T10695] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 618.329963][T10695] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 32770, setting to 1024 [ 618.366199][T10695] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 618.381652][T10695] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 618.402167][T10695] usb 6-1: Product: syz [ 618.410815][T10695] usb 6-1: SerialNumber: syz [ 618.428006][T10695] usb 6-1: config 0 descriptor?? [ 618.448687][T10695] cm109 6-1:0.8: invalid payload size 1024, expected 4 [ 618.458835][ T5874] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 618.477711][T10695] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input28 [ 618.619603][ T5874] usb 4-1: no configurations [ 618.624274][ T5874] usb 4-1: can't read configurations, error -22 [ 618.648430][ T5874] usb usb4-port1: attempt power cycle [ 619.009640][ T5874] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 619.040982][ T5874] usb 4-1: no configurations [ 619.045656][ T5874] usb 4-1: can't read configurations, error -22 [ 619.200634][ T5874] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 619.245323][ T5874] usb 4-1: no configurations [ 619.255758][ T5874] usb 4-1: can't read configurations, error -22 [ 619.270897][ T5874] usb usb4-port1: unable to enumerate USB device [ 619.498947][ T5872] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 619.670222][ T5872] usb 2-1: unable to get BOS descriptor or descriptor too short [ 619.696807][ T5872] usb 2-1: config 247 has an invalid interface number: 141 but max is 0 [ 619.725733][ T5872] usb 2-1: config 247 has no interface number 0 [ 619.735701][ T5872] usb 2-1: config 247 interface 141 has no altsetting 0 [ 619.746853][ T5872] usb 2-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 2.22 [ 619.756492][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.774805][ T5872] usb 2-1: Product: syz [ 619.780357][ T5872] usb 2-1: Manufacturer: syz [ 619.785186][ T5872] usb 2-1: SerialNumber: syz [ 620.912531][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1596'. [ 620.970320][T12111] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 621.023898][ C1] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71 [ 621.024561][ T838] usb 6-1: USB disconnect, device number 26 [ 621.030892][ C1] ------------[ cut here ]------------ [ 621.042779][ C1] URB ffff8880322f1000 submitted while active [ 621.049620][ C1] WARNING: CPU: 1 PID: 1149 at drivers/usb/core/urb.c:379 usb_submit_urb+0x1039/0x1930 [ 621.059325][ C1] Modules linked in: [ 621.063256][ C1] CPU: 1 UID: 0 PID: 1149 Comm: kworker/u8:8 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 621.074140][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 621.084244][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 621.092112][ C1] RIP: 0010:usb_submit_urb+0x1039/0x1930 [ 621.097800][ C1] Code: 00 eb 66 e8 49 cc 65 fa e9 79 f0 ff ff e8 3f cc 65 fa c6 05 80 ee c8 08 01 90 48 c7 c7 00 c5 ae 8c 4c 89 ee e8 58 6f 26 fa 90 <0f> 0b 90 90 e9 40 f0 ff ff e8 19 cc 65 fa eb 12 e8 12 cc 65 fa 41 [ 621.117447][ C1] RSP: 0018:ffffc90000a18790 EFLAGS: 00010046 [ 621.123561][ C1] RAX: c78cdfb924916500 RBX: 0000000000000820 RCX: 0000000000040000 [ 621.131565][ C1] RDX: ffffc90002404000 RSI: 0000000000037422 RDI: 0000000000037423 [ 621.139570][ C1] RBP: ffff8880322f1008 R08: ffffffff816019a2 R09: fffffbfff1cfa210 [ 621.147572][ C1] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 000000000000000f [ 621.155574][ C1] R13: ffff8880322f1000 R14: dffffc0000000000 R15: 0000000000000046 [ 621.163582][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 621.172548][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 621.179174][ C1] CR2: 00007f4525379ade CR3: 000000004bcd4000 CR4: 00000000003526f0 [ 621.187186][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 621.195193][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 621.203204][ C1] Call Trace: [ 621.206509][ C1] [ 621.209394][ C1] ? __warn+0x165/0x4d0 [ 621.213595][ C1] ? usb_submit_urb+0x1039/0x1930 [ 621.218665][ C1] ? report_bug+0x2b3/0x500 [ 621.223208][ C1] ? usb_submit_urb+0x1039/0x1930 [ 621.228278][ C1] ? handle_bug+0x60/0x90 [ 621.232647][ C1] ? exc_invalid_op+0x1a/0x50 [ 621.237358][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 621.242431][ C1] ? __warn_printk+0x292/0x360 [ 621.247231][ C1] ? usb_submit_urb+0x1039/0x1930 [ 621.252300][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 621.258232][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 621.263482][ C1] cm109_urb_irq_callback+0x6ce/0xc20 [ 621.268901][ C1] __usb_hcd_giveback_urb+0x42c/0x6e0 [ 621.274315][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 621.280248][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 621.285493][ C1] dummy_timer+0x856/0x4620 [ 621.290035][ C1] ? debug_object_deactivate+0x2d5/0x390 [ 621.295752][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 621.300728][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 621.305705][ C1] __hrtimer_run_queues+0x59b/0xd30 [ 621.310956][ C1] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 621.316989][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 621.322750][ C1] ? read_tsc+0x9/0x20 [ 621.326008][ T5872] hso 2-1:247.141: Not our interface [ 621.326835][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 621.334918][ T5872] usb 2-1: USB disconnect, device number 61 [ 621.338179][ C1] hrtimer_run_softirq+0x19a/0x2c0 [ 621.349228][ C1] handle_softirqs+0x2d4/0x9b0 [ 621.354046][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 621.358863][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 621.364208][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 621.369463][ C1] __irq_exit_rcu+0xf7/0x220 [ 621.374089][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 621.379344][ C1] irq_exit_rcu+0x9/0x30 [ 621.383626][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 621.389302][ C1] [ 621.392252][ C1] [ 621.395374][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 621.401391][ C1] RIP: 0010:rcu_is_watching+0x4e/0xb0 [ 621.406803][ C1] Code: ff df 4c 8d 34 dd 50 0b 2d 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 3c 41 7e 00 48 c7 c3 d8 7c 03 00 49 03 1e <48> 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 22 8b 03 65 ff 0d 21 [ 621.426440][ C1] RSP: 0018:ffffc90004147840 EFLAGS: 00000286 [ 621.432532][ C1] RAX: 1ffffffff1c5a16b RBX: ffff8880b8737cd8 RCX: ffffffff817aaf04 [ 621.440508][ C1] RDX: 0000000000000000 RSI: ffffffff8c5edcc0 RDI: ffffffff8c5edc80 [ 621.448471][ C1] RBP: ffffc900041479a8 R08: ffffffff90185277 R09: 1ffffffff2030a4e [ 621.456436][ C1] R10: dffffc0000000000 R11: fffffbfff2030a4f R12: 1ffff92000828f14 [ 621.464401][ C1] R13: dffffc0000000000 R14: ffffffff8e2d0b58 R15: dffffc0000000000 [ 621.472368][ C1] ? lock_acquire+0xd4/0x550 [ 621.476968][ C1] lock_acquire+0xe3/0x550 [ 621.481383][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 621.486401][ C1] ? batadv_iv_ogm_schedule+0x41e/0x10a0 [ 621.492032][ C1] ? __pfx_lock_release+0x10/0x10 [ 621.497055][ C1] ? check_preemption_disabled+0x4d/0x120 [ 621.502784][ C1] batadv_iv_ogm_schedule+0x43f/0x10a0 [ 621.508243][ C1] ? batadv_iv_ogm_schedule+0x41e/0x10a0 [ 621.513889][ C1] ? batadv_iv_ogm_schedule+0x41e/0x10a0 [ 621.519519][ C1] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 621.525406][ C1] ? batadv_send_skb_packet+0x439/0x690 [ 621.530983][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6fe/0x810 [ 621.538008][ C1] ? process_scheduled_works+0x976/0x1840 [ 621.543726][ C1] process_scheduled_works+0xa66/0x1840 [ 621.549288][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 621.555270][ C1] ? assign_work+0x364/0x3d0 [ 621.559858][ C1] worker_thread+0x870/0xd30 [ 621.564447][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 621.570334][ C1] ? __kthread_parkme+0x169/0x1d0 [ 621.575350][ C1] ? __pfx_worker_thread+0x10/0x10 [ 621.580453][ C1] kthread+0x2f0/0x390 [ 621.584537][ C1] ? __pfx_worker_thread+0x10/0x10 [ 621.589639][ C1] ? __pfx_kthread+0x10/0x10 [ 621.594226][ C1] ret_from_fork+0x4b/0x80 [ 621.598648][ C1] ? __pfx_kthread+0x10/0x10 [ 621.603287][ C1] ret_from_fork_asm+0x1a/0x30 [ 621.608081][ C1] [ 621.611116][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 621.618420][ C1] CPU: 1 UID: 0 PID: 1149 Comm: kworker/u8:8 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 621.629252][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 621.639296][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 621.647103][ C1] Call Trace: [ 621.650376][ C1] [ 621.653214][ C1] dump_stack_lvl+0x241/0x360 [ 621.657888][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.663084][ C1] ? __pfx__printk+0x10/0x10 [ 621.667669][ C1] ? vscnprintf+0x5d/0x90 [ 621.671991][ C1] panic+0x349/0x880 [ 621.675899][ C1] ? __warn+0x174/0x4d0 [ 621.680068][ C1] ? __pfx_panic+0x10/0x10 [ 621.684507][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 621.689442][ C1] __warn+0x344/0x4d0 [ 621.693434][ C1] ? usb_submit_urb+0x1039/0x1930 [ 621.698457][ C1] report_bug+0x2b3/0x500 [ 621.702783][ C1] ? usb_submit_urb+0x1039/0x1930 [ 621.707806][ C1] handle_bug+0x60/0x90 [ 621.711979][ C1] exc_invalid_op+0x1a/0x50 [ 621.716481][ C1] asm_exc_invalid_op+0x1a/0x20 [ 621.721337][ C1] RIP: 0010:usb_submit_urb+0x1039/0x1930 [ 621.726968][ C1] Code: 00 eb 66 e8 49 cc 65 fa e9 79 f0 ff ff e8 3f cc 65 fa c6 05 80 ee c8 08 01 90 48 c7 c7 00 c5 ae 8c 4c 89 ee e8 58 6f 26 fa 90 <0f> 0b 90 90 e9 40 f0 ff ff e8 19 cc 65 fa eb 12 e8 12 cc 65 fa 41 [ 621.746577][ C1] RSP: 0018:ffffc90000a18790 EFLAGS: 00010046 [ 621.752671][ C1] RAX: c78cdfb924916500 RBX: 0000000000000820 RCX: 0000000000040000 [ 621.760641][ C1] RDX: ffffc90002404000 RSI: 0000000000037422 RDI: 0000000000037423 [ 621.768622][ C1] RBP: ffff8880322f1008 R08: ffffffff816019a2 R09: fffffbfff1cfa210 [ 621.776605][ C1] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 000000000000000f [ 621.784570][ C1] R13: ffff8880322f1000 R14: dffffc0000000000 R15: 0000000000000046 [ 621.792542][ C1] ? __warn_printk+0x292/0x360 [ 621.797325][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 621.803246][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 621.808448][ C1] cm109_urb_irq_callback+0x6ce/0xc20 [ 621.813820][ C1] __usb_hcd_giveback_urb+0x42c/0x6e0 [ 621.819199][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 621.825090][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 621.830298][ C1] dummy_timer+0x856/0x4620 [ 621.834800][ C1] ? debug_object_deactivate+0x2d5/0x390 [ 621.840455][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 621.845384][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 621.850312][ C1] __hrtimer_run_queues+0x59b/0xd30 [ 621.855507][ C1] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 621.861488][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 621.867200][ C1] ? read_tsc+0x9/0x20 [ 621.871264][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 621.877369][ C1] hrtimer_run_softirq+0x19a/0x2c0 [ 621.882494][ C1] handle_softirqs+0x2d4/0x9b0 [ 621.887281][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 621.892043][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 621.897330][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 621.902522][ C1] __irq_exit_rcu+0xf7/0x220 [ 621.907111][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 621.912307][ C1] irq_exit_rcu+0x9/0x30 [ 621.916542][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 621.922170][ C1] [ 621.925108][ C1] [ 621.928041][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 621.934034][ C1] RIP: 0010:rcu_is_watching+0x4e/0xb0 [ 621.939418][ C1] Code: ff df 4c 8d 34 dd 50 0b 2d 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 3c 41 7e 00 48 c7 c3 d8 7c 03 00 49 03 1e <48> 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 22 8b 03 65 ff 0d 21 [ 621.959016][ C1] RSP: 0018:ffffc90004147840 EFLAGS: 00000286 [ 621.965112][ C1] RAX: 1ffffffff1c5a16b RBX: ffff8880b8737cd8 RCX: ffffffff817aaf04 [ 621.973081][ C1] RDX: 0000000000000000 RSI: ffffffff8c5edcc0 RDI: ffffffff8c5edc80 [ 621.981061][ C1] RBP: ffffc900041479a8 R08: ffffffff90185277 R09: 1ffffffff2030a4e [ 621.989034][ C1] R10: dffffc0000000000 R11: fffffbfff2030a4f R12: 1ffff92000828f14 [ 621.996999][ C1] R13: dffffc0000000000 R14: ffffffff8e2d0b58 R15: dffffc0000000000 [ 622.004967][ C1] ? lock_acquire+0xd4/0x550 [ 622.009575][ C1] lock_acquire+0xe3/0x550 [ 622.014018][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 622.019084][ C1] ? batadv_iv_ogm_schedule+0x41e/0x10a0 [ 622.024719][ C1] ? __pfx_lock_release+0x10/0x10 [ 622.029754][ C1] ? check_preemption_disabled+0x4d/0x120 [ 622.035473][ C1] batadv_iv_ogm_schedule+0x43f/0x10a0 [ 622.040943][ C1] ? batadv_iv_ogm_schedule+0x41e/0x10a0 [ 622.046589][ C1] ? batadv_iv_ogm_schedule+0x41e/0x10a0 [ 622.052219][ C1] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 622.058116][ C1] ? batadv_send_skb_packet+0x439/0x690 [ 622.063786][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6fe/0x810 [ 622.070810][ C1] ? process_scheduled_works+0x976/0x1840 [ 622.076546][ C1] process_scheduled_works+0xa66/0x1840 [ 622.082277][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 622.088272][ C1] ? assign_work+0x364/0x3d0 [ 622.092890][ C1] worker_thread+0x870/0xd30 [ 622.097484][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 622.103371][ C1] ? __kthread_parkme+0x169/0x1d0 [ 622.108385][ C1] ? __pfx_worker_thread+0x10/0x10 [ 622.113484][ C1] kthread+0x2f0/0x390 [ 622.117558][ C1] ? __pfx_worker_thread+0x10/0x10 [ 622.122670][ C1] ? __pfx_kthread+0x10/0x10 [ 622.127268][ C1] ret_from_fork+0x4b/0x80 [ 622.131673][ C1] ? __pfx_kthread+0x10/0x10 [ 622.136255][ C1] ret_from_fork_asm+0x1a/0x30 [ 622.141036][ C1] [ 622.144338][ C1] Kernel Offset: disabled [ 622.148747][ C1] Rebooting in 86400 seconds..