last executing test programs: 2m49.633130377s ago: executing program 2 (id=442): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1f0) syz_io_uring_complete(0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000d0000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) 2m47.075856108s ago: executing program 2 (id=448): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x7, 0x0, 0x0, @void, @value}, 0x10) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r2, 0x29, 0x4e, &(0x7f0000000400)=0x2, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x248}}, './file0\x00'}) 2m46.933332568s ago: executing program 2 (id=449): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100), 0x4) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x57) socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r1) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffc}, {}, {0x0, 0x3}, {}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x3}) 2m46.802192942s ago: executing program 2 (id=450): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) close(0xffffffffffffffff) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r2}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000020a000000000000000000000850000001700000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x98, &(0x7f0000000000)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)={0x34, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x14, 0x2b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x1, 0x0, 0x0, @fd=r5}]}]}, 0x34}], 0x1}, 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000140)='./file0/file0\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x18, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r7}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x3d) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m46.433561653s ago: executing program 2 (id=453): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xdfe5) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x0, 0x0}}, 0xfc36) 2m45.434215768s ago: executing program 2 (id=457): syz_open_dev$vcsu(&(0x7f0000001340), 0x1ff, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x44895) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000001040), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000240)) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, {0x2, 0x4620, @local}, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)='pimreg0\x00', 0x8, 0x8000000000000001, 0xc}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'team_slave_1\x00'}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x2015}) read$FUSE(0xffffffffffffffff, &(0x7f0000001ac0)={0x2020}, 0x2020) 2m45.21080624s ago: executing program 32 (id=457): syz_open_dev$vcsu(&(0x7f0000001340), 0x1ff, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x44895) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000001040), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000240)) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, {0x2, 0x4620, @local}, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)='pimreg0\x00', 0x8, 0x8000000000000001, 0xc}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'team_slave_1\x00'}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x2015}) read$FUSE(0xffffffffffffffff, &(0x7f0000001ac0)={0x2020}, 0x2020) 13.792223652s ago: executing program 1 (id=858): timer_create(0x7, 0x0, &(0x7f00000011c0)=0x0) timer_delete(r0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200010004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500030000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r9 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000045fc980e4b49000c00018008000100", @ANYRES32=r10, @ANYBLOB], 0x20}}, 0xc0408c0) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_delete(0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c, 0x0}}], 0x1, 0x40) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x18, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000040)=0x8) 12.544444818s ago: executing program 0 (id=864): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 11.369949535s ago: executing program 1 (id=865): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0x14c, 0x30, 0x800, 0x70bd2c, 0x0, {}, [{0x138, 0x1, [@m_ct={0xf8, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0xb6, 0x6, "24006977003c20379d4f7c246dc1474873b7f452114c6cbf332ef1f51303019e98371791eaad1e122e78baccf663f5e7c5ea406edc148a4e9a03f35a7bfebb00d2153555e7ad9f49b57af700b9748dd4025dcc280fbcad766737cdf2d89d378f7be417b53adfa79cb5cf2fa3d755c409c684265407e79a90b8ac898e53836753eff4c4aa3db08813541b768013cc2c3dd3dfbb95d9470482f9e62f2ee53c5ed88c835d21b6e28e5800000000000080000000"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x3c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x11, 0x6, "1483cb2d03d45a140ea9deb368"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000680)=""/200, 0xc8}], 0x1}}], 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f00000001c0)=0x8000000000000000) sched_setscheduler(r2, 0x0, &(0x7f0000000100)=0x8001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r5, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$printer(r5, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6(0xa, 0x6, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000400)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="200d020000000f0a36ae699f48a1dbd44988ac074c"], &(0x7f00000002c0)=ANY=[@ANYBLOB="00038b0027c9ae6d6ed382a909db22dc83d96f11547054a077d59dabed491e729b37037513175851d7695085a788e375773a654f2a535a6a5cc2e5aafa62dee16511274ae382a6c4ec2881e96977e1946b396e834e8ed7b2f7b96540b77270d35b86964359811519a655d3c460dcc2e2b3a775f354b28273c247ba70e9e528c0ce198b1382aa0700"/145], &(0x7f0000000380)=ANY=[@ANYBLOB="002211ed0000aa3d3e89f485666df68a00000000000000"], &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0x68b}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="2010c3000000bbc342f956a2da3ad3f187f3cfba7134e0401d7458999738e0d2ab0de85ce239dcee83ead478057831b2c215ee5b3035be83500615c240234479dbea24115026d996c1beb9d46a637ab9442d7c52f78057d4044a5cb6330d3873af13d5d05087a9f501c1e92c2bf3fa7cc2d310893b81176bfe364596b5a7bd1632e3e246b089e019880004961135c032386a9d1e95502e447e5bbb0447d0b3ae69156a09179cb4a65b7dac9dc5e0f821a9e238ee4df3a228b3070d7368cb0c1a5bee99e68a18e61c74"], &(0x7f0000000540)={0x0, 0xa, 0x1, 0xbc}, &(0x7f0000000580)={0x0, 0x8, 0x1}, &(0x7f00000005c0)=ANY=[], &(0x7f0000000680)={0x20, 0x3, 0x1, 0xe}}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) 10.613988781s ago: executing program 5 (id=867): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) 10.591463602s ago: executing program 0 (id=868): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) (fail_nth: 1) 10.231721198s ago: executing program 5 (id=870): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) accept4(r0, 0x0, &(0x7f00000004c0), 0x800) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000000fedbdf250700000024000180060005004e21000008000700", @ANYRES32=0x0, @ANYBLOB="060001709d61ae000200000008000300"], 0x38}, 0x1, 0x0, 0x0, 0x45040}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xac, r5, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_KEYS={0x8c, 0x51, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xd, 0x4, "2572ac07636381c1da"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d2e2e7e3a59ee83f75ee9870ae"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "5520be5e07d898c06efb075e43"}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xb, 0x4, "6be4d4a37f86b7"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8d66c554cba0e2db802cc8beb2"}, @NL80211_KEY_SEQ={0x8, 0x4, "f7e4b81c"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0xf, 0x0, &(0x7f0000001280)) setgid(r3) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4000000c}, 0x18) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) 10.006624092s ago: executing program 5 (id=872): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) (async, rerun: 32) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000001140)={{0x4, 0x0, 0x9, 0xd}, 'syz0\x00', 0xd}) (async, rerun: 32) r2 = fcntl$dupfd(r1, 0x0, r1) (rerun: 32) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000000)={0x35}) (async, rerun: 64) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) (rerun: 64) ioctl$UI_DEV_CREATE(r1, 0x5501) 10.005838941s ago: executing program 0 (id=873): r0 = socket$caif_stream(0x25, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) getpid() fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)='ex') setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x25, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1555}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @generic={0x4, 0x7, 0x5, 0xa7, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x3, 0x0, 0x3, 0x7, 0x7, 0x80, 0x10}, @ldst={0x3, 0x2, 0x6, 0x3, 0x0, 0x30, 0x10}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x79, 0x92, &(0x7f0000000500)=""/146, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x0, 0x2, 0x9}, 0x10, 0x2dcaa, r4, 0x0, &(0x7f0000000740)=[0x1], 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@fallback=r5, 0x8, 0x0, 0x9, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@cgroup, r4, 0x20, 0x4, r8, @void, @value=r4, @void, @void, r9}, 0x20) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "679f672c00b69e65b0934066fc7c3406caf2c09e33bd50116312e2b00fee650af69b2150ccaa762a3db7ad752fe616e085e991c0436e7e7111238865d27b4e82dcc94700ddd1878b088736009d15f1fa"}, 0xd8) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) dup(r0) 8.431903636s ago: executing program 0 (id=874): bpf$PROG_LOAD_XDP(0x5, &(0x7f000000b880)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x0, 0x3, 0x0, 0x9}], 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = timerfd_create(0x0, 0x0) readv(r2, &(0x7f00000031c0)=[{&(0x7f00000020c0)=""/4088, 0xff8}], 0x1) timerfd_settime(r2, 0x3, &(0x7f0000000140), 0x0) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000080)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000200)={0x1, 0x8, 0xc2, &(0x7f0000000500)=""/194}) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000180)) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="54000000020601010000000000000023c5e3e978801ac72f0a000000000005000100070000000900020073797a30000000001400078005001500000000000800124000000000050004000000000005000500020000000500040000000000"], 0x54}}, 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0', [{0x20, '/&@:\xc0\xa76\xc7\xfd\x18MzQ7\xc9t\x97y\x83\xaaI\xdb\xd8\x82\xeeMWn{s\xb9x\x99W5\x86\xd2j\xd8pbt\x7f\xbf\xd5,o\xc1\f\xe0\xf2\xeb\x90\xbe`\xb0B\xe5\v\x0f\xa7\x1a]\x9b16m\x1e\xb2\x8b\xb2^\xc7=\f\xd9\x1a.\xf4\x99)\n\xa1\x84g\x12H\xb0i\x9aF\x032\xbf\x0e\xd0\t>\x80\xc1\x91'}, {0x20, '($\xe1/-}'}]}, 0x78) accept$alg(r5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a00060004000000070093f10ffd2fb2f181a04782296814e1aa3a60ee"], 0xf) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000400)=0x2fa, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f0408001620"], 0x7) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x1010, r1, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0xb000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000c508716240920f01007d86000000010902240001000000000904ab00021632e1000905080000000000000905060000000000"], 0x0) 8.054264623s ago: executing program 5 (id=877): ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000180)={0xa61, "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"}) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000240)="26670fae4d0065260f01cf363e0fc73f3edf94dcfbd9eb2e660fc7b59c6a0f20d86635080000000f22d80f38008100800fc7ad0900baf80c66b8fa59ef8366efbafc0cb8f3ffef", 0x47}], 0x1, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000001, 0x0) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f00000001c0)={0x0, 0xffff53a3, 0x7, '\x00', &(0x7f0000000000)=0x4}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) listen(r4, 0x100101) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000000000000"], 0x8) syz_usb_ep_write(r0, 0x7f, 0xc0, &(0x7f0000000c00)="496086a3b0b39f88b8d567434ea5224c43d6bc2b097579b710a3b9beda108b701e336fb0330ffd42c7c84a27d45400e79dc2f85ccbb043ddeda78f5f7ea217a06f9e7f2900a420cf2716a16e5a1697020169d033bcb0af87bf5a5d7c520b92d39e308bb3d82085f791688099e1cbb3ea27c7d36904d8413bbfeb99f3d6f02fddaf9e36abcaf97fecaa38af05c03e3bae0974f1e65cc8c646672b290775ecd76997998afa657856df783d18d3c838dfc54386ad7d9ea9bebbc56f449ae7af116d") accept4(r4, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x5) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) 7.054256135s ago: executing program 3 (id=879): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000fdffffff180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000017b703000000100500850000000400000095"], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.940168508s ago: executing program 3 (id=880): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000006c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) (async) ppoll(&(0x7f0000000740)=[{r4}], 0x1, 0x0, 0x0, 0x0) close(r3) 6.899398311s ago: executing program 1 (id=881): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8, 0x420, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8, 0x420, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000) dup(r0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x15) (async) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) dup(r5) (async) dup(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) 5.658125047s ago: executing program 3 (id=882): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r6, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24008044) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0xfffffffe}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4082) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x200, 0x400000, 0x4, 0x80000001, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x1000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 5.602670171s ago: executing program 4 (id=883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010200000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000048000000030a01300000000000000000010000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002"], 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5.489972906s ago: executing program 4 (id=884): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x5000aea5, &(0x7f0000000080)=ANY=[]) r4 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r4, 0x200002) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0xfffffffd, 0x4}}, 0xe8) connect$pppl2tp(r6, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r6, r5, 0x0, 0x80001d00c0d0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r0, 0x1000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r3, 0x5000aea5, &(0x7f0000000080)=ANY=[]) (async) open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) (async) ftruncate(r4, 0x200002) (async) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0xfffffffd, 0x4}}, 0xe8) (async) connect$pppl2tp(r6, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) (async) sendfile(r6, r5, 0x0, 0x80001d00c0d0) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r0, 0x1000) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) (async) 5.117919049s ago: executing program 0 (id=885): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc4) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x8a3, 0x0, 0x7}, {0x9f2, 0x0, 0x8}]}) (async) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000080)) fanotify_mark(r0, 0x10, 0x0, r0, &(0x7f00000000c0)='./file0\x00') r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='svcrdma_post_send\x00', r0, 0x0, 0xa}, 0x18) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x178, 0x14, 0x1, 0x70bd2b, 0x25dfdbfd, {0x25, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "e0dfac6e18592d365887208daa303f34ffd24ccc68cb184e4728068cf1049f1e92d447f3dbe571032c681bd67fb0c86702776c192ee8cee64b70d4107c57844ec6157081db2617f1be7278de36715914d35b3dacc9ab8eee835b601e4224b4835f45596451a857b38497f820c5b7533dd43d0364779a2015ad5e7289f4b3d738a3b505fa0044d5103d1df7572071e2dff1b4f66fbdd2c91b2f94be7ca6f53009df3cf8c2819dc506c6c6080b520026d02a4707170cfee48cab1c11de"}, @INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "937b907c7e3a928e4e50f02becb04248f791a65240a5fc2b616745fedd8d40f707fcc3801ef9774888e561665ad21a70d87885315cdfb36f9575eac6b4fbbfecc09182dc4049ac9e34afbc37813ed66eb8419c7a2d2e4ee3c97a8860955b37bb00180aa219486276ae"}, @INET_DIAG_REQ_BYTECODE={0x32, 0x1, "e8c6071b60dbc7aea76a460a04d47ee59523b80679baf09eeb100f8064aeba6d55cc2af8f6f01e2a0203e85d81ce"}]}, 0x178}, 0x1, 0x0, 0x0, 0x4840}, 0x4000) (async) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) (async) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x2, 0x6, 0x2, 0x8, 0x0, 0x3, 0x6, 0x279, 0x38, 0x1b7, 0x3, 0x2, 0x20, 0x3, 0x6, 0xd92, 0x80}, [{0x4, 0xa, 0x6, 0x8, 0x7, 0xffffff81, 0x5, 0xff}, {0xce976c48a0b65388, 0x490, 0xe, 0x0, 0x4, 0x3, 0x8000, 0x88f}, {0x60000000, 0x400, 0x9, 0x8, 0xad24, 0x2, 0x8, 0x4}], "84791a19208e9a1ac4e484262d48a54a8fae189db5ce8a9e417f80d1741481272e9747ebf574cbcd21e401c4245e82ce066304781597f0bb7910bfa33f", ['\x00', '\x00', '\x00', '\x00']}, 0x4d5) (async) r2 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000a40)=""/18) (async) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000a80)) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) (async) r3 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write$binfmt_elf32(r0, &(0x7f0000000b00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x9, 0x9, 0x80, 0x0, 0x2, 0x6, 0x4, 0x2d2, 0x38, 0x3a4, 0x7, 0x3ff, 0x20, 0x1, 0x3ff, 0xa9d, 0x4}, [{0x60000000, 0x7ff, 0x9, 0x8, 0x15, 0x7, 0x9, 0xb77}], "a1354c9f846a1c8b69ec40b09b58f7fc535c605fb1547c2b6fc5180eaef8ed8a8bb74c219a19d78a2faf0f01ca0d245c91d43c45dc8cd206ec141067d8f6fa2d1473808a7a93dd54a6238460adc851542a354c203197a35897ccb95fcbcc43bffd0a2e3816286fab9bf8458df073f654b31be63ae0719a73d09e267ab788a77aca386d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7db) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000001300)) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000001500)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001380)={0x134, 0x3, 0x1, 0x3, 0x0, 0x0, {0x1}, [@CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x104}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4c0}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x3}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xe54}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x59}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xd887}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x35}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffffffff}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}]}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x3c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5}, @CTA_PROTOINFO_TCP_STATE={0x5}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x4}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xfd}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x4, 0x5}}]}}]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000001540), &(0x7f0000001580)=0x10) (async) statx(r0, &(0x7f00000015c0)='./file0\x00', 0x400, 0x6f3, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000001700)=[0xee01, 0x0]) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000001740)={0xec35, 0x9, {0xffffffffffffffff}, {0xee01}, 0x0, 0x101}) (async) r8 = getgid() ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000001780)=0x0) shmctl$IPC_SET(r3, 0x1, &(0x7f00000017c0)={{0x1, r5, r6, r7, r8, 0x4, 0xbb}, 0x3, 0x6, 0x100, 0xfffffffffffffff7, 0xffffffffffffffff, r9, 0x6}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) connect$netrom(r0, &(0x7f0000001840)={{0x3, @default, 0x2}, [@null, @null, @bcast, @bcast, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) 5.022534612s ago: executing program 4 (id=886): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) io_uring_setup(0x20002880, &(0x7f0000000000)={0x0, 0xb07c, 0x7e}) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x8004587d, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0), 0x4) copy_file_range(r2, &(0x7f00000001c0), r0, 0x0, 0xfffffff7a003e45c, 0x10000000000000) 4.805609056s ago: executing program 0 (id=887): r0 = io_uring_setup(0x4d6e, &(0x7f0000000100)={0x0, 0xfd32, 0x10, 0x3, 0x1fe}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff], 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x2, 0xfffffffffffffe02, 0x0, 0xf, 0x81, 0x1, 0x201, 0xe, 0x2, 0x8, 'syz0\x00'}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r2], 0x1) syz_usb_connect(0x2, 0x3d, &(0x7f0000001440)=ANY=[@ANYBLOB="1201000019792e20b4070a0102010102030109022b0001000000440904bd00023467c3000905000000000000000705e37e1b82e609050b02000000000071b9746d238f3f72a68440715b3ab0278ada717182fa2d10bf9c7e39e788d338d8877a915687b53c1c3b993ff85562143d14692092fc3d4a2a03015ed36678fb872862f8a3fbd3403cfdacd7ebee18f8d6"], 0x0) r3 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x3a, @loopback, 0x4e23, 0x1, 'lblc\x00', 0x8, 0x5, 0x5a}, 0x2c) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect(0x3, 0xf52, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0xc5, 0xc9, 0x7a, 0x8, 0x2040, 0xb910, 0xd458, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf40, 0x4, 0x3, 0xb, 0x10, 0xd, [{{0x9, 0x4, 0xcc, 0xc, 0xf, 0x73, 0x40, 0xe2, 0x3, [], [{{0x9, 0x5, 0x9, 0x3, 0x20, 0xb, 0x6, 0x78}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x0, 0x6, 0x8, [@generic={0x33, 0x10, "d8ea8b403626971b8b1eb93128e07a2d0e9576ce8254151ee472ca14347dda41a29beb3af817a356326d38b58513fb6845"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x8}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x3, 0x8, 0x0, [@generic={0xa6, 0xd, "b7e3a382bbb14cec2772c5475754c0d6cd78cfc7578b1b6898ab7289fbea2829ee5f5175fe7eaab6383d95cddf8a2add02687396e619d4657d9959cb77f28802db045acf7716ac302dbce4b2a6721f007ff6aa7982f1c771f3a2533093e500b5dea03aac434ba593be18cf7c563c0f265e701e9d7d73899bce0ed94d44bd8731f3b5d21eafb6e197026bbd5712ca31c4a1d5bbf968e6f14a73720c2f2fed98be2359c200"}]}}, {{0x9, 0x5, 0xc, 0xb, 0x3ff, 0x0, 0xff, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x5523}]}}, {{0x9, 0x5, 0xf, 0x1, 0x200, 0xcf, 0xf9, 0x40}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x6f, 0xf, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x87}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x5}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x7a, 0x0, 0x8, [@generic={0xc6, 0x5, "f6f48d17f3c86b792c6e3fef9af9d35014ab8b7c5e3498bf28de6e56dfe2b326ca3408607aa139cc64364ed09ca09742c6f81813ec115276fc46188fb03e4663120156879f5c9a5775cc5e35cf9792d92f3f46250b45bfce5d6ef89f929d236d0c075e44f70614fd08197e9e150069a75167a734a1c7c995de63ebe59928f8c3d0508577bf71eea4a32794da3843b2e2f8953bbbf7135dc59565270d7a3c48f547972ab70744f9b60e2807c909a6dde73568eedb6f8164581ddd861b77a80c1895b4327d"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x10}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x0, 0x0, 0x0, [@generic={0x86, 0x30, "43602e5933ce91902af14470f2e722ca91361e1d7c76453d6af7d625782d30c7b2da3e898ee5d2cb7fd8fd43ecef39ad2b185336e365d471b0e310667c8c81533db4e5f8970a978ad467c4b80c31046fda4912b73427da08dda31a5f1d4e9e14e9153f65a59529e23c42e60ac7ae6beb672b943851faca24c3b3eab08009d2587b71832b"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x7, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xb5104d8c47ed7b6c, 0x9, 0x9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0xf7, 0xe, 0xa}}, {{0x9, 0x5, 0x40, 0x13, 0x20, 0x22, 0xa5, 0x8}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x2, 0xfd, 0xf4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x2}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x0, 0xf7, 0xd}}, {{0x9, 0x5, 0x1, 0x4, 0x10, 0xd9, 0xe0, 0xc, [@generic={0xb4, 0x11, "1721ef2895a1bbc4d92ee90b1ab13deaa96191b59b33f4b3f3339688f902bb4d21a0141e738997185a5bd3bd77945f5e9d9e09692907f0ae056bd8e77dbeb433ab12ce0203d2d2167b57d92d4f96632b211451f0135c42821e8ccb6ac59a868c6f05345370eda1795a9511f6b14b8c8c4800b01bb44b99a7d5246277bfe39d5f460dd7b1492781bd4bfe8b1b9322ce025d2d69ddd54bac49f6e9749f669d5a9607179346f809b426d6b9ecd724b0fb5a6dc1"}, @generic={0xfb, 0x23, "26056947ca7bce75b2f332319bff12a4db3c5b16d537d72dbdf2fbf048b15b345fd918c2e204de9f2d07654c1dfc52dd4b97b1d26556d9bcbbeff01a4e094df008f0f74db4e88b185a8784ec53a1f03afd4b0b715b362bded4c9671e2fa096a5adc2085e9e2c23578daa08d2175a8864e47a995f7e48cf74dec9046c21a1afe4303b822fa190630c79527ce03b18880e487c01dddc03d1bffce341697868405e941c14595d11970c7c7c844cae3c4d42507f55761a905fc780a6d69c37aad61bc68dc65faae432a0286284c3f4692847d5c2f523f81d5519d1645e545d1ac81bdf29df2ca6bfe6413868da6062241858959087dd0cf7240820"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0xa, 0x7, 0x6}}]}}, {{0x9, 0x4, 0x0, 0xb, 0xf, 0x3a, 0xb, 0xbf, 0x6, [], [{{0x9, 0x5, 0x7, 0x10, 0x8, 0xfc, 0x62, 0x6, [@generic={0xe5, 0x31, "80e1dddddf05985c2ff810c407bc1c504720a05a45b31d23fa55f93e3a0100c33565ade70c963e693ec5b655e650af0a931c76c05d359fe33f28827fad980dfd8298ee59b4724829a78b38abdc43955f0ad8f324c0e89285fd2e51962969afcd5143077229c218af79ffa170e3cb498110c43b3173e6f4306eb49105aad93e2126be48833b0951697572fad5012e5381aa56a330231cd537316bd972a2492ebf4258c8d437314cc41ce381b1e3c35a2b0e697cfc595c91c7544af717b4e6b9980ba21904f8d3daa5fb1084ec6da0a75966f09132483972c43cb5b53b50b464facce694"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x9, 0x8, 0x7, [@generic={0xf2, 0xd, "091f954bff610f511ba7b3fbb0538fd338caf72f0ab4a0431833257ff8cd1837ae0e6cacb12d9d1319c2a639444d1514fc8b873b1794a17e018270e9f5337b4c25b932497672879d905ab26a2406b33cf6347d497c72a8284e07bb4103d2f98a4fb0b59dc4f744eb710d6c7e675e00d3cbeac6d38805545d65a9ff5893af0f3dea615110637636e55b6ec2b72155fd8d8632a58dfb081d7d2f315dad27632d075e3faf99ab3707be5e871d53efd450b3b698725930c3016219d0459ec9437dff322dfeff2112de42ad1843f0d4b92c5a589d9a6539cbc22f96ca528445ab04ac98c722567dd11a799391a08ccdd51f7d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x6, 0x3, 0xb, [@generic={0x2a, 0x2, "f4a3867742fc6adf2b6539f71eebb1a51c9d9f927ebee6c2ea347c5df5172cfacc24b816f5961989"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x0, 0x7, 0x6, 0x80}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x6, 0x3, 0xc7, [@generic={0xc1, 0x3, "f9c57619f1e5ae202a89d48f110e43e3de07b110d6c745b72ebddd39d74cb3dd3a0a51d2e84bbf8c5b6d0130d5a1b68cb0cb24c6199768632f9814c9148f4be4299581cf3c2a7130a0e19004cbeb1c63d3d68b7410c37dc4cd10953a3afa16b14020f6b569c7d9e3c933fbc9201a4939d5e9686104076c4241850e6982b612a021201bbab98fe4e54042e52f994ded626d01107b308fda652083534bc4c9f0de809b820ab571eff2c9e6ea704557eb720ee3fec640b07b21b2734bc7012978"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xb, 0x5}]}}, {{0x9, 0x5, 0x4, 0x3, 0x40, 0x2, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x100}, @generic={0x89, 0x22, "ec5787d8e2bba9943d0b685373004617af9e9e95492bb8c312be7a34773a50e1009aba987b0e23cc739a7042f832f874c112c4f82f3283c6ec63532a03201a1e71f4f5e4822830df7915d382b145063ab1478b268af8e1719e4ab06a5b0b9d58b82a480eee4859e27026199362df33d0de79d15628d93db1b8bd04b59ab5d16be5cfe3e6bfe95f"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x7f, 0x80, 0x6}}, {{0x9, 0x5, 0x80, 0x10, 0x1d0b9e12bc0e15fc, 0x8, 0x3, 0x6, [@generic={0x75, 0xd, "9c9ea33f0d5c136a5f34e0bdd965e060373e44c78aeec62feb801278235f0564754bc54adbc9250944627d3f8563ac9f1fd7bf12557b0b91d1ed18cbece3d97d09f7bf12ecc9e1e1eea0629e3465e48e2fca97a6c26bfe36afda25912ec50fabe4a7c284be7fa67930e1f41757a8e321e576f0"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x5, 0x1, 0x69}}, {{0x9, 0x5, 0x8, 0xc, 0x20, 0x0, 0x5, 0x8}}, {{0x9, 0x5, 0x43, 0x0, 0x40, 0x3, 0xab, 0xff}}, {{0x9, 0x5, 0xe, 0xc, 0x8, 0x9e, 0x6d, 0xd1, [@generic={0xf7, 0x21, "0117a3bcd494f491175e4edfbc13d42d3297df83d2d95a4a75d760445bee68404681ba928f8b54dfa5af86031d2e954ef82d5b36358f33b597182861438035dece51922387147ef431d5cbfe0dfa58878808639ce65cf4ca1e4b74bec7be702a54749f2d3ce7d7ab8d71bbc60869050a263b39df053285c79e1745011dccd7dc093bdb2ecc4e4303c0c79aef79112e6ad0eeb4cbb9f77ac8aab3d07604305822f6eeb35d9d5807b31c296ebd905ee067328aefa89876e385c52ee060838da44012407ab98c0876e74b6458cefeb5df386d45f0bce3823b56acae7ba1986f9f9e7c6b14397a7ee22bb56758d5124384d7d5b9119333"}, @generic={0x2f, 0x1, "9cbb1b01d935c844bb6250a54ee940b9ae6d9a56b6b1588e407ac374fd1d373ef3cd973f17d6437bdfb555501b"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x4, 0xd5, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x1f8}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x8a, 0x80, 0x3, [@generic={0x3a, 0x6, "5ad4d5addf66db5deaab74c7adc7b782d95cb64a156eab6a14e651c185592008573e63f64fffec556e8b4bda4d7366181d5db5a722f7b72c"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x0, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xb, 0x3017}, @generic={0xa3, 0x3, "4f55253eb99d886dc97d1842ce7a42cad8338ec98987f2801522f0f744bced65ad5dc89db7fa338b1a746009f5232d4c071d9b29c90541ddc76ecbc2265376fd6fb22614d671ef1d3844c99647de9826b18f127c3f229f3990395697a21970d5933a17847a4704aa7d7c048de5368a968720006de6521d2548f10c0b54b61d10a1637fb76797dba93614ee85f0a83561d805bc5f47c78f058202023c8baaa0abed"}]}}]}}, {{0x9, 0x4, 0x6c, 0xc, 0x8, 0xd8, 0xed, 0xfe, 0x5, [@hid_hid={0x9, 0x21, 0x7, 0xc2, 0x1, {0x22, 0xe91}}, @hid_hid={0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0x8df}}], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x50, 0x6, 0xf, [@generic={0xac, 0x23, "19a0bf04d05284232d643eec9a1d5aa3e972892098ddf96551f91741f9d1f3008d32d211c88e13c737ce78af64975e46a3f2388efd1cfd661a220f6c0699568bbe5c7c025f4ba172fe8216d511df1d102fdbe29a7e0b6e4216afa7b862f4a7193b96c8d9df5ffdacd2f6d3f8c8d0b41a0c9f37a8148707aec3911e47265d3159dd016cc1a48a9a51262d5994d7e672bfa52b6b8541cef31ebc74e69b9bf8630cb79b5d0f970244c75bc4"}, @generic={0x4d, 0xe, "81c7ee44a8e40999607a0dd7930b764ad25ea10acdecf7fc1356a6eeeffe4af23353a7bfd85bdf08c80a7423ff7cecbd09802fc03d05055bfdef3b46f70356308ea14d4eea4f5753a622f4"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x0, 0x4, 0x5, 0x6}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x6, 0x6, 0xff}}, {{0x9, 0x5, 0x4, 0x1, 0x400, 0x6, 0x5, 0xf0}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0xe, 0x80, 0x5}}, {{0x9, 0x5, 0x2, 0x3, 0x8, 0x2, 0x8, 0x16, [@generic={0xd, 0xf, "8666277d0b4d74de40b363"}, @generic={0xb7, 0x37, "a97f84e9fbfd146dbd202fd7cf55150106c8222c0d43def61265794201e1597fa278b43e15225c48b2f944b56803d5b626763ff3bbb1ff1e62a8ef25221fe286ec1f84cd94607ff23d8282adf7db7b0281335d042fb73a46a176e7c9fea3bcb1a50dc55413a4712b4e1ce985c6cd4729e38655d7f4c105583f92f72c5439d44567cec8c18b9127045af7158add829ac12a23d615cae562acc0d48b3d9fe909975d7d0e60d52a441295d9b06d9c0a6dc12a3e75e000"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0x15, 0xc0, 0x7c, [@generic={0x3a, 0x5, "3fe1b86224d212122483f90dadc080b2b2e56d3d1cff20b4d874f5b6a7e6a6aaf8793864f412877eca41b329a06e9c55517bbdf4c6e521d7"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0xf, 0x1, 0x8}}]}}, {{0x9, 0x4, 0x57, 0x81, 0x2, 0x6a, 0xc, 0x4c, 0x80, [@hid_hid={0x9, 0x21, 0x9, 0x5, 0x1, {0x22, 0x94b}}, @generic={0xe6, 0xa, "becabfaa653df665a9c412daacec319c5d45c67f9205c267694b601b4d67dcb8197406013e665da0fe362857bc7eb536d56994826dd424be7bcc6dfb5d4e45187ecfe8ac797b29bbedd98b9be2a7261c237381f357a0c40fc081ac176b80c05d5cfb93823aad7c92b282d0145e2b7d6ac3e84d5da995764b5d0b8dd5041cd45128156a7a3ca50811427093bded8877e65ed1af1b3a8833c61d60ba68dfee2a2069b3c807fc74f56a2a894b03836dc86527a64c31ce8a9796a8996f49fd1248a155350f97228917f2a60f7eae1aae25d4f37e46c1c65d82d18311f0a24fe94ec823a0c698"}], [{{0x9, 0x5, 0x2, 0x10, 0x260, 0xc, 0x80, 0xfb, [@generic={0xc8, 0xd, "d77854efed13f6dce73f33d01be5c3b1fd595f02d0df8ed09b7d4132220f9f1d99d047e1a0d4195c55b3063b69853e6d0af07e0b45219381511c097eaae0f6347b0183aca6c9d8d5188fb9abb36980ecd0c901f0468ea485de1ad712a23e970ac2620c8a80b73f08501c266a200772626585eb8ff957ebe93f8d50516fed74ef3068492b2861f0f62f2c2a9b5e5d0a30f594194d8b348d2ade077cdd74248904301df058afd8ed369056cdef8077adebc3ea0da578d7cb855545f778358dcd27897d1a05bdad"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x3, 0x0, 0x7}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x40, 0x0, 0xff, 0x4f, 0x6}, 0x66, &(0x7f00000001c0)={0x5, 0xf, 0x66, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0xb4, 0x40, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xa, 0x2, 0x9}, @generic={0x42, 0x10, 0x1, "e05dc3d331a77827d395b908790c5cc7ff8a13106f474bd472e986cceeab1edfb7486015daaae72f21ac19b4f96f26a659188e496ec372c13b943aeb433ade"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0xf, 0x8001}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x9, 0x1}]}, 0x3, [{0x42, &(0x7f0000000240)=@string={0x42, 0x3, "cf54bb51bf8d2ea21a8c149ae21685b6dda955bc43970f620dfc958f40cebd02798afa720b7a52d5a809a38ee296535fb29421172c0a97c25060737224e70220"}}, {0xf, &(0x7f0000001400)=ANY=[@ANYBLOB="0f03b6671fd8a4bf1e7f24f347f7ffe4d3"]}, {0x70, &(0x7f0000001380)=@string={0x70, 0x3, "f3a2ec6277a7a495f568d3709cd983da80c2bcdbf849a43a27f47c816317dbc83fe0f6de877bb061d7ceb23a671f01bd37319e29c850a34451be0d90aa5f8295dab1778891fa59d06809dfd1dcce18533bf978ef9f38b35a039042000dbfb7392020ed01a33280582b0aaf814951"}}]}) syz_usb_control_io(r3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) write$dsp(r4, &(0x7f00000026c0)="a5287684", 0x4) close(0x3) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x63682, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r6, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffc]}, 0x45c) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r6, 0x5501) pwritev(r5, &(0x7f0000000740)=[{&(0x7f0000000400)="c4", 0x1}], 0x1, 0x4, 0x0) fallocate(r5, 0x3, 0x0, 0x100000800000000) socket$netlink(0x10, 0x3, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_SREGS(r7, 0x8138ae83, &(0x7f0000000ac0)) socket$netlink(0x10, 0x3, 0x0) 4.376576102s ago: executing program 1 (id=888): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00001f0000000000000800000000000008200b17", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400ea00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xa, 0x2, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmmsg$inet6(r0, &(0x7f0000001d40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000180)="0d755bc55301", 0x6}], 0x1}}, {{&(0x7f0000001600)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}, 0x5}, 0x1c, &(0x7f0000001980)=[{&(0x7f0000001640)="03501b2c", 0x4}], 0x1}}], 0x2, 0x24008040) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000), 0x8) 3.997448819s ago: executing program 4 (id=889): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x1005) sched_setaffinity(0x0, 0x2, &(0x7f00000005c0)=0x40000008) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$netlink(0x10, 0x3, 0x12) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async) ppoll(&(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0)={[0x2a]}, 0x8) (async) r3 = accept4$unix(r2, &(0x7f0000000300)=@abs, &(0x7f0000000540)=0x6e, 0x181000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'netdevsim0\x00'}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r6}) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[], 0x274}}, 0x48800) (async) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000f4740000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB='\t\x00ootmod\\=0000|A;0000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000003c0)={'gre0\x00', r6, 0x0, 0x80, 0xc390, 0x4, {{0xe, 0x4, 0x0, 0x0, 0xffffffffffffff8b, 0x66, 0x0, 0x10, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@end, @generic={0x43, 0xa, "226687d476089b22"}, @end, @lsrr={0x83, 0xb, 0x5c, [@empty, @dev={0xac, 0x14, 0x14, 0x3e}]}, @noop, @ssrr={0x89, 0x7, 0x8e, [@multicast2]}, @timestamp_addr={0x44, 0x4, 0xa0, 0x1, 0x9}]}}}}}) 3.925719058s ago: executing program 3 (id=890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1f0) syz_io_uring_complete(0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x208, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) io_setup(0x203, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) 3.265817233s ago: executing program 4 (id=891): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="ff0d61f2d733ddef8987d563a167e4f5a03073999a94e20eb68357aba3", 0x1d) r1 = io_uring_setup(0x2ac6, &(0x7f00000022c0)={0x0, 0x3f3a, 0x8, 0x0, 0x15d}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000002340)={0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$sock(r0, &(0x7f00000008c0)=[{{&(0x7f0000000380)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000400)="c1b37c518a9be36ea8def5ddcb2eb533a5e3dc62db7259c8c22bf4e8bab61314c005183c22405e5f5883eb42bba5a4246e2ce62d7d17768f400c39d7de66dc8862931e52ccc524a4e51b87b55327cdc7d35f34799187d3f8a877089508db01bd5b6201fba2927da98d8acfd1f2e8209ae8309aa07cbdc558", 0x78}], 0x1, &(0x7f0000000300)=[@timestamping={{0x14, 0x1, 0x25, 0x48}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x30}}, {{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x4, 0x2, 0x4, {0xa, 0x4e23, 0x40, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x6}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000500)="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", 0xfe}, {&(0x7f0000000600)="3bd0f8a872fb13b4a9e8e2413205b84bc2708f7bf71d59274b8b84b4bf5004228e4df50788960d12e33a779b0c6d2b38a185a0e71e367cc72a85bd66a5bb3bf6c326021fa26b9165", 0x48}, {&(0x7f0000000680)="264f9e80fc1052b27a94652010120761d44165cf8181c72bf7cded8b2cd2bda8a7909d0c612edeafabf5d1634562141af061f2cc8bdbaca00506278a7d3e4097b70960ec8ba3faef2f1100343eefccbec433c6ffa71aaa5477787d3f367dad86fc91675ab87cae76b9b884c1567d37ec390c0d39e19aaf513843f75f497cc8f0034f8cdf8a7324c046a4b38b1b17c30a5265fb89b989b0266b77411030a38434bcd22f8753f32cd95ea3df9663710849498c2a6686d25228d60bf0ebf660b3691ac78828da38a9e05634b0f595b90a265f8e8c0635b1ce8df0f00a6fa08a7c1ef3122b2da7c264c20d19", 0xea}, {&(0x7f0000000780)="0ffe95e9799e9b79eefb8bda440e94a1e12649ab17de789ff0c9773dd93a44a1a1c31bd8bf4d6fb8bac37a230c8c080ec16744", 0x33}], 0x4, &(0x7f0000000800)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffa}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xa}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}], 0x90}}], 0x2, 0xc0c0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYRESHEX=r5, @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001b6514000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x408d7d46, 0x0, 0x0, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffd, 0xa}, 0x0, 0x0) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, 0x0, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 3.001678572s ago: executing program 1 (id=892): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r1}, 0x10) get_robust_list(0x0, &(0x7f00000008c0)=0x0, &(0x7f0000000900)) read(r0, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x335, @time={0xc0, 0xe}}) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x40, r3, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6006}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) tkill(0x0, 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1e, &(0x7f0000000d40)=""/4078, &(0x7f0000000200)=0xfee) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbc0cfb91c82f4a9164dda5e67a46d8e841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d72166cb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d090014b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd8f200000017587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eb00ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbb1d44925ce66ea1a94e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 2.880771171s ago: executing program 3 (id=893): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) 2.814411073s ago: executing program 5 (id=894): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r6 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x1}]}}]}, 0x3c}}, 0x0) recvfrom$unix(r4, &(0x7f0000000400)=""/137, 0x89, 0x40000000, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x800}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r7, 0x0, 0x4ffe6, 0x0) socket$igmp(0x2, 0x3, 0x2) 2.653321739s ago: executing program 3 (id=895): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000660000000001000000000000af920200"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bf090000000000005509010000030000950000000000000085100000f5ffffffbf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x18, 0xffffffffffffffff, 0x401) unshare(0xa020400) socket$rxrpc(0x21, 0x2, 0x2) socket$packet(0x11, 0x2, 0x300) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@dev}, &(0x7f00000000c0)=0xc) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.634423868s ago: executing program 5 (id=896): dup(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x8000000004) unshare(0x4020400) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02000000000000000000000000000006"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\t\x00'/11, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="020000000100"/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r5, 0x50, 0x0}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x646, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000140021010000e0ffffff000023"], 0x2c}}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x6) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.150657173s ago: executing program 4 (id=897): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000000000000000009dc9000000", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=898): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$netlink(0x10, 0x3, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x28, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000800)={0x0, 0x30, &(0x7f0000000500)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="2c00b86e", @ANYRES16=r2, @ANYBLOB="010000000000020000000a00000008000300", @ANYRES32=r4, @ANYBLOB="1000508004000a000500020006000000"], 0x2c}}, 0x0) kernel console output (not intermixed with test programs): r 1 [ 152.063591][ T5918] usb 5-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 152.100887][ T5918] usb 5-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 152.125208][ T5918] usb 5-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 152.155204][ T5918] usb 5-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 152.193930][ T5918] usb 5-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 152.233452][ T5918] usb 5-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 152.255403][ T5918] usb 5-1: config 162 interface 84 has no altsetting 0 [ 152.262326][ T5918] usb 5-1: config 162 interface 2 has no altsetting 0 [ 152.396332][ T5918] usb 5-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 152.415519][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.423664][ T5918] usb 5-1: Product: syz [ 152.427928][ T5918] usb 5-1: Manufacturer: syz [ 152.432738][ T5918] usb 5-1: SerialNumber: syz [ 152.556851][ T6948] netlink: 36 bytes leftover after parsing attributes in process `syz.0.229'. [ 153.024799][ T5918] usb 5-1: USB disconnect, device number 8 [ 154.803548][ T6983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.234'. [ 156.644420][ T7039] FAULT_INJECTION: forcing a failure. [ 156.644420][ T7039] name failslab, interval 1, probability 0, space 0, times 0 [ 156.657162][ T7039] CPU: 0 UID: 0 PID: 7039 Comm: syz.1.239 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 156.667751][ T7039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 156.677813][ T7039] Call Trace: [ 156.681091][ T7039] [ 156.684036][ T7039] dump_stack_lvl+0x241/0x360 [ 156.688736][ T7039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.694085][ T7039] ? __pfx__printk+0x10/0x10 [ 156.698717][ T7039] ? fs_reclaim_acquire+0x93/0x130 [ 156.703847][ T7039] ? __pfx___might_resched+0x10/0x10 [ 156.709160][ T7039] should_fail_ex+0x3b0/0x4e0 [ 156.713862][ T7039] should_failslab+0xac/0x100 [ 156.718560][ T7039] __kmalloc_noprof+0xdd/0x4c0 [ 156.723335][ T7039] ? kstrtouint_from_user+0x128/0x190 [ 156.728748][ T7039] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 156.734506][ T7039] tomoyo_realpath_from_path+0xcf/0x5e0 [ 156.740073][ T7039] tomoyo_path_number_perm+0x236/0x860 [ 156.745543][ T7039] ? __lock_acquire+0x1397/0x2100 [ 156.750578][ T7039] ? tomoyo_path_number_perm+0x206/0x860 [ 156.756217][ T7039] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 156.762249][ T7039] ? __fget_files+0x2a/0x410 [ 156.766851][ T7039] ? __fget_files+0x2a/0x410 [ 156.771448][ T7039] security_file_ioctl+0xc6/0x2a0 [ 156.776477][ T7039] __se_sys_ioctl+0x46/0x170 [ 156.781094][ T7039] do_syscall_64+0xf3/0x230 [ 156.785622][ T7039] ? clear_bhb_loop+0x35/0x90 [ 156.790315][ T7039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.796234][ T7039] RIP: 0033:0x7f2a6017ff19 [ 156.800663][ T7039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.820285][ T7039] RSP: 002b:00007f2a6100f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.828717][ T7039] RAX: ffffffffffffffda RBX: 00007f2a60345fa0 RCX: 00007f2a6017ff19 [ 156.836711][ T7039] RDX: 0000000000000000 RSI: 00000000c008551a RDI: 0000000000000003 [ 156.844686][ T7039] RBP: 00007f2a6100f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 156.852664][ T7039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.860661][ T7039] R13: 0000000000000000 R14: 00007f2a60345fa0 R15: 00007ffd1c4f9cb8 [ 156.868652][ T7039] [ 156.871726][ C0] vkms_vblank_simulate: vblank timer overrun [ 157.343089][ T7039] ERROR: Out of memory at tomoyo_realpath_from_path. [ 157.359661][ T5918] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 157.600224][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 28, changing to 8 [ 157.652968][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 157.673451][ T5918] usb 4-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 157.690687][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.724928][ T5918] usb 4-1: config 0 descriptor?? [ 157.740446][ T5918] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 159.216717][ T5180] bcm5974 4-1:0.0: could not read from device [ 159.500051][ T5180] bcm5974 4-1:0.0: could not read from device [ 159.511625][ T5180] bcm5974 4-1:0.0: could not read from device [ 159.534722][ T5180] bcm5974 4-1:0.0: could not read from device [ 159.547777][ T5918] usb 4-1: USB disconnect, device number 13 [ 160.195431][ T7071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.246'. [ 160.972881][ T7077] fuse: Bad value for 'fd' [ 162.777595][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 163.091808][ T7091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.254'. [ 163.635321][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 163.687981][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.253'. [ 164.056839][ T8] usb 3-1: config 1 has an invalid descriptor of length 61, skipping remainder of the config [ 164.090827][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.154231][ T8] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 164.176977][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 164.185035][ T8] usb 3-1: SerialNumber: syz [ 164.217262][ T7106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.258'. [ 165.008672][ T8] usb 3-1: 0:2 : does not exist [ 165.013656][ T8] usb 3-1: unit 255 not found! [ 165.101703][ T8] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 165.239769][ T8] usb 3-1: USB disconnect, device number 6 [ 165.275157][ T5918] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 166.398391][ T7127] fuse: Bad value for 'fd' [ 169.352050][ T5876] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 170.590788][ T5876] usb 5-1: device descriptor read/all, error -71 [ 170.676854][ T5918] usb 1-1: unable to read config index 0 descriptor/all [ 170.683946][ T5918] usb 1-1: can't read configurations, error -71 [ 170.962760][ T7149] syz.4.271: attempt to access beyond end of device [ 170.962760][ T7149] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 171.027597][ T7149] XFS (nbd4): SB validate failed with error -5. [ 173.165675][ T5880] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 173.257542][ T5918] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 173.496571][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 173.535821][ T5875] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 173.737489][ T5880] usb 4-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 173.757603][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 173.758203][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.767116][ T5918] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 173.772744][ T5880] usb 4-1: Product: syz [ 173.788685][ T5880] usb 4-1: Manufacturer: syz [ 173.792129][ T5918] usb 5-1: config 0 has no interface number 0 [ 173.794354][ T5880] usb 4-1: SerialNumber: syz [ 173.804235][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 173.834372][ T5918] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 173.866727][ T5875] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 173.867132][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.879399][ T5880] usb 4-1: config 0 descriptor?? [ 173.895490][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.902302][ T5918] usb 5-1: Product: syz [ 173.907896][ T5918] usb 5-1: Manufacturer: syz [ 173.912587][ T5918] usb 5-1: SerialNumber: syz [ 173.918133][ T5875] usb 1-1: Product: syz [ 173.918154][ T5875] usb 1-1: Manufacturer: syz [ 173.918169][ T5875] usb 1-1: SerialNumber: syz [ 173.922129][ T5880] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 173.945980][ T5875] usb 1-1: config 0 descriptor?? [ 173.955319][ T5918] usb 5-1: config 0 descriptor?? [ 173.982055][ T5875] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 173.982479][ T5918] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 174.758268][ T5918] gspca_spca1528: reg_w err -110 [ 174.770593][ T5875] gp8psk: usb out operation failed. [ 174.776335][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 174.787602][ T5875] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 174.792513][ T5918] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 174.802494][ T5875] usb 1-1: media controller created [ 174.996386][ T7203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.003804][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.015757][ T7203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.116162][ T5880] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 175.136431][ T5875] gp8psk_fe: Frontend revision 1 attached [ 175.142407][ T5875] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 175.148715][ T7189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.161350][ T7189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.174197][ T5875] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 175.216170][ T5876] usb 4-1: USB disconnect, device number 14 [ 175.237646][ T5875] gp8psk: usb in 138 operation failed. [ 175.243151][ T5875] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 175.258860][ T5875] gp8psk: found Genpix USB device pID = 201 (hex) [ 175.274059][ T5875] usb 1-1: USB disconnect, device number 8 [ 175.292809][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 28, changing to 8 [ 175.354933][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 175.387043][ T5880] usb 2-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 175.400286][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.469684][ T5918] usb 5-1: USB disconnect, device number 11 [ 175.481999][ T5880] usb 2-1: config 0 descriptor?? [ 175.518492][ T5880] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 175.549652][ T5875] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 176.902718][ T5180] bcm5974 2-1:0.0: could not read from device [ 177.985737][ T5180] bcm5974 2-1:0.0: could not read from device [ 178.012301][ T5180] bcm5974 2-1:0.0: could not read from device [ 178.023520][ T5880] usb 2-1: USB disconnect, device number 6 [ 178.027017][ T5918] kernel write not supported for file bpf-prog (pid: 5918 comm: kworker/0:6) [ 178.030117][ T5879] kernel write not supported for file bpf-prog (pid: 5879 comm: kworker/1:7) [ 180.073489][ T7234] NILFS (loop4): device size too small [ 180.348321][ T5880] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 180.520065][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 180.569999][ T5880] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 180.667414][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.802920][ T5880] usb 4-1: Product: syz [ 180.807387][ T5880] usb 4-1: Manufacturer: syz [ 180.853398][ T5880] usb 4-1: SerialNumber: syz [ 180.927995][ T5880] usb 4-1: config 0 descriptor?? [ 180.971240][ T5880] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 182.122162][ T5879] usb 4-1: USB disconnect, device number 15 [ 182.188040][ T5880] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 182.302351][ T7255] Bluetooth: hci5: Frame reassembly failed (-84) [ 182.366701][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 182.386747][ T5880] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 182.395057][ T5880] usb 2-1: config 0 has no interface number 0 [ 182.404190][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.302'. [ 182.414237][ T7257] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 182.423165][ T7257] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (281410552266737) [ 182.491859][ T7261] overlayfs: missing 'lowerdir' [ 182.498062][ T5875] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 182.519725][ T5880] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 182.529053][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.537111][ T5880] usb 2-1: Product: syz [ 182.541643][ T5880] usb 2-1: Manufacturer: syz [ 182.546278][ T5880] usb 2-1: SerialNumber: syz [ 182.711728][ T5880] usb 2-1: config 0 descriptor?? [ 183.692275][ T5880] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 183.716297][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 183.732457][ T5875] usb 1-1: config index 0 descriptor too short (expected 9430, got 36) [ 183.754055][ T5875] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.805744][ T5875] usb 1-1: config 1 has no interfaces? [ 183.853608][ T5875] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 183.874237][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.239726][ T5880] gspca_spca1528: reg_w err -110 [ 184.260969][ T5880] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 184.498669][ T5841] Bluetooth: hci5: command 0x1003 tx timeout [ 184.505810][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 184.577280][ T7275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.306'. [ 185.305081][ T8] usb 2-1: USB disconnect, device number 7 [ 185.396811][ T5918] usb 1-1: USB disconnect, device number 9 [ 186.298575][ T7304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.310'. [ 186.468485][ T7305] dvmrp2: entered allmulticast mode [ 188.469010][ T7323] Falling back ldisc for ttyS3. [ 188.795584][ T5879] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 189.125141][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 189.170606][ T5879] usb 1-1: config index 0 descriptor too short (expected 786, got 18) [ 189.182448][ T5879] usb 1-1: New USB device found, idVendor=a3fd, idProduct=0105, bcdDevice=43.55 [ 189.191862][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.200024][ T5879] usb 1-1: Product: syz [ 189.204403][ T5879] usb 1-1: Manufacturer: syz [ 189.209113][ T5879] usb 1-1: SerialNumber: syz [ 189.233238][ T5879] usb 1-1: config 0 descriptor?? [ 189.626149][ T5879] usb 1-1: USB disconnect, device number 10 [ 189.794478][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.322'. [ 189.966447][ T7337] xfrm1: entered promiscuous mode [ 189.996371][ T7337] xfrm1: entered allmulticast mode [ 190.835677][ T5879] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 192.074018][ T5879] usb 2-1: Using ep0 maxpacket: 32 [ 192.510294][ T5879] usb 2-1: config 0 has an invalid interface number: 244 but max is 0 [ 192.518955][ T5879] usb 2-1: config 0 has no interface number 0 [ 192.548113][ T5879] usb 2-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 192.582908][ T5879] usb 2-1: config 0 interface 244 has no altsetting 0 [ 192.621284][ T29] audit: type=1326 audit(1733867893.174:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7354 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9dcb7ff19 code=0x7ffc0000 [ 192.872864][ T5879] usb 2-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 192.882579][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.891896][ T5879] usb 2-1: Product: syz [ 192.896364][ T5879] usb 2-1: Manufacturer: syz [ 192.912846][ T5879] usb 2-1: SerialNumber: syz [ 192.961681][ T5879] usb 2-1: config 0 descriptor?? [ 193.106053][ T29] audit: type=1326 audit(1733867893.174:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7354 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fe9dcb7ff19 code=0x7ffc0000 [ 193.271282][ T5879] snd_usb_toneport 2-1:0.244: Line 6 GuitarPort found [ 193.278974][ T5879] snd_usb_toneport 2-1:0.244: cannot get proper max packet size [ 193.279282][ T5879] snd_usb_toneport 2-1:0.244: Line 6 GuitarPort now disconnected [ 193.280678][ T5879] snd_usb_toneport 2-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 193.293422][ T29] audit: type=1326 audit(1733867893.174:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7354 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9dcb7ff19 code=0x7ffc0000 [ 193.307410][ T7361] netlink: 256 bytes leftover after parsing attributes in process `syz.4.330'. [ 193.325474][ T29] audit: type=1326 audit(1733867893.174:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7354 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe9dcb7ff19 code=0x7ffc0000 [ 193.394800][ T29] audit: type=1326 audit(1733867893.174:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7354 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9dcb7ff19 code=0x7ffc0000 [ 193.448275][ T29] audit: type=1326 audit(1733867893.174:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7354 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9dcb7ff19 code=0x7ffc0000 [ 193.477762][ T29] audit: type=1326 audit(1733867893.174:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7354 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9dcb7ff19 code=0x7ffc0000 [ 193.493662][ T8] usb 2-1: USB disconnect, device number 8 [ 193.526383][ T29] audit: type=1326 audit(1733867893.174:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7354 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9dcb7ff19 code=0x7ffc0000 [ 193.552277][ T29] audit: type=1326 audit(1733867893.174:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7354 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9dcb7ff19 code=0x7ffc0000 [ 193.740146][ T29] audit: type=1326 audit(1733867893.174:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7354 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe9dcb7ff19 code=0x7ffc0000 [ 194.701909][ T7390] fuse: Invalid rootmode [ 194.910836][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 195.086766][ T8] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 195.109452][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.131286][ T8] usb 1-1: config 0 descriptor?? [ 195.137653][ T46] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 195.164694][ T8] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 195.397338][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.409440][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.422481][ T46] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 195.432297][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.533433][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.557824][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.783673][ T46] usb 5-1: config 0 descriptor?? [ 196.043286][ T8] gspca_sunplus: reg_w_riv err -71 [ 196.051686][ T8] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 196.084660][ T8] usb 1-1: USB disconnect, device number 11 [ 196.147630][ T5876] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 196.320844][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 196.353463][ T5876] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 196.447688][ T5876] usb 2-1: config 0 has no interface number 0 [ 196.473038][ T46] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 196.533386][ T46] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 196.658250][ T46] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 196.658997][ T46] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 196.659598][ T46] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 196.660315][ T46] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 196.740989][ T46] arvo 0003:1E7D:30D4.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 196.763145][ T5876] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 196.763181][ T5876] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 196.763212][ T5876] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 196.763243][ T5876] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 196.763270][ T5876] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.765793][ T5876] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 196.765828][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.765853][ T5876] usb 2-1: Product: syz [ 196.765871][ T5876] usb 2-1: Manufacturer: syz [ 196.765890][ T5876] usb 2-1: SerialNumber: syz [ 196.769813][ T5876] usb 2-1: config 0 descriptor?? [ 196.772334][ T7405] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 196.776320][ T5876] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 197.244077][ T5876] usb 5-1: USB disconnect, device number 12 [ 197.452014][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'. [ 197.475884][ T5876] usb 2-1: USB disconnect, device number 9 [ 197.757205][ T5133] Bluetooth: hci1: command 0x0406 tx timeout [ 197.763444][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 197.769499][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 197.776383][ T5133] Bluetooth: hci3: command 0x0406 tx timeout [ 197.782519][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 198.051275][ T7451] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 198.859696][ T7457] tmpfs: Bad value for 'mpol' [ 199.466478][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'. [ 201.080586][ T5876] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 201.152282][ T7485] netlink: 10 bytes leftover after parsing attributes in process `syz.1.365'. [ 201.408617][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 201.421507][ T5876] usb 5-1: config 4 has an invalid interface number: 137 but max is 0 [ 201.436912][ T5876] usb 5-1: config 4 has an invalid descriptor of length 36, skipping remainder of the config [ 201.513822][ T7487] FAULT_INJECTION: forcing a failure. [ 201.513822][ T7487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.527099][ T7487] CPU: 0 UID: 0 PID: 7487 Comm: syz.2.366 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 201.537716][ T7487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 201.547811][ T7487] Call Trace: [ 201.551115][ T7487] [ 201.554077][ T7487] dump_stack_lvl+0x241/0x360 [ 201.558804][ T7487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.564036][ T7487] ? __pfx__printk+0x10/0x10 [ 201.568663][ T7487] ? __pfx_lock_release+0x10/0x10 [ 201.573720][ T7487] should_fail_ex+0x3b0/0x4e0 [ 201.578439][ T7487] _copy_from_user+0x2f/0xc0 [ 201.583100][ T7487] copy_msghdr_from_user+0xae/0x680 [ 201.588337][ T7487] ? __pfx___might_resched+0x10/0x10 [ 201.593669][ T7487] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 201.599522][ T7487] ? __sys_sendmmsg+0x392/0x720 [ 201.604407][ T7487] ? __might_fault+0xaa/0x120 [ 201.609228][ T7487] __sys_sendmmsg+0x32b/0x720 [ 201.614191][ T7487] ? __lock_acquire+0x1397/0x2100 [ 201.619292][ T7487] ? __pfx___sys_sendmmsg+0x10/0x10 [ 201.624556][ T7487] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 201.630921][ T7487] ? do_raw_spin_unlock+0x13c/0x8b0 [ 201.636166][ T7487] ? finish_task_switch+0x1e5/0x870 [ 201.641397][ T7487] ? lockdep_hardirqs_on+0x99/0x150 [ 201.646632][ T7487] ? finish_task_switch+0x1e5/0x870 [ 201.651887][ T7487] ? __schedule+0x1803/0x4be0 [ 201.656601][ T7487] ? vfs_write+0x730/0xd30 [ 201.661059][ T7487] ? __mutex_unlock_slowpath+0x21e/0x790 [ 201.666765][ T7487] ? __pfx___schedule+0x10/0x10 [ 201.671662][ T7487] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 201.677677][ T7487] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 201.684049][ T7487] ? do_syscall_64+0x100/0x230 [ 201.688919][ T7487] __x64_sys_sendmmsg+0xa0/0xb0 [ 201.693803][ T7487] do_syscall_64+0xf3/0x230 [ 201.698342][ T7487] ? clear_bhb_loop+0x35/0x90 [ 201.703058][ T7487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.708993][ T7487] RIP: 0033:0x7f973f77ff19 [ 201.713442][ T7487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.733167][ T7487] RSP: 002b:00007f97404be058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 201.741616][ T7487] RAX: ffffffffffffffda RBX: 00007f973f946160 RCX: 00007f973f77ff19 [ 201.749613][ T7487] RDX: 0400000000000077 RSI: 0000000020000180 RDI: 0000000000000003 [ 201.757611][ T7487] RBP: 00007f97404be0a0 R08: 0000000000000000 R09: 0000000000000000 [ 201.765609][ T7487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.773601][ T7487] R13: 0000000000000000 R14: 00007f973f946160 R15: 00007fff6fbca698 [ 201.781627][ T7487] [ 201.994612][ T5876] usb 5-1: config 4 has no interface number 0 [ 202.228660][ T5876] usb 5-1: string descriptor 0 read error: -71 [ 202.235457][ T5876] usb 5-1: New USB device found, idVendor=1e2d, idProduct=0069, bcdDevice=6a.7d [ 202.272969][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.369'. [ 202.295935][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.415122][ T5876] usb 5-1: can't set config #4, error -71 [ 202.522053][ T5876] usb 5-1: USB disconnect, device number 13 [ 208.166463][ T7590] netlink: 'syz.0.387': attribute type 11 has an invalid length. [ 208.966519][ T7605] Failed to get privilege flags for destination (handle=0x2:0x0) [ 209.331813][ T7615] block device autoloading is deprecated and will be removed. [ 209.933670][ T7637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.400'. [ 210.388795][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 210.549158][ T8] usb 3-1: device descriptor read/64, error -71 [ 210.618828][ T7657] netlink: 240 bytes leftover after parsing attributes in process `syz.0.406'. [ 210.678297][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 210.678315][ T29] audit: type=1107 audit(1733867910.076:101): pid=7658 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 210.805736][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 210.824554][ T7665] netlink: 'syz.4.408': attribute type 10 has an invalid length. [ 210.837159][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.845958][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.886383][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.891323][ T5879] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 210.893654][ T7665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.906942][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'. [ 210.908484][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.924304][ T7665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.944720][ T8] usb 3-1: device descriptor read/64, error -71 [ 210.954002][ T7665] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 210.982106][ T7666] bridge_slave_1: left allmulticast mode [ 210.988172][ T7666] bridge_slave_1: left promiscuous mode [ 210.994837][ T7666] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.010819][ T7666] bridge_slave_0: left allmulticast mode [ 211.016529][ T7666] bridge_slave_0: left promiscuous mode [ 211.023999][ T7666] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.138005][ T7670] Bluetooth: MGMT ver 1.23 [ 211.162161][ T5879] usb 1-1: Invalid ep0 maxpacket: 16 [ 211.460069][ T5879] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 211.837803][ T8] usb usb3-port1: attempt power cycle [ 211.886423][ T5879] usb 1-1: Invalid ep0 maxpacket: 16 [ 211.903232][ T5879] usb usb1-port1: attempt power cycle [ 211.948327][ T7666] bond0: (slave bridge0): Releasing backup interface [ 212.227997][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 212.261126][ T8] usb 3-1: device descriptor read/8, error -71 [ 212.345320][ T5879] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 212.378231][ T5879] usb 1-1: Invalid ep0 maxpacket: 16 [ 212.730278][ T5879] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 213.150670][ T7696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.416'. [ 213.406506][ T7697] dvmrp2: entered allmulticast mode [ 213.520688][ T5840] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 213.521609][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 213.530726][ T5879] usb 1-1: Invalid ep0 maxpacket: 16 [ 213.540990][ T5879] usb usb1-port1: unable to enumerate USB device [ 213.563879][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 213.577709][ T8] usb 3-1: device descriptor read/8, error -71 [ 213.779726][ T8] usb usb3-port1: unable to enumerate USB device [ 213.823088][ T7700] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 214.190959][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 215.188850][ T8] usb 3-1: device descriptor read/64, error -71 [ 215.507078][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 215.641802][ T8] usb 3-1: device descriptor read/64, error -71 [ 215.757661][ T8] usb usb3-port1: attempt power cycle [ 216.119000][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 216.173067][ T8] usb 3-1: device descriptor read/8, error -71 [ 216.526411][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 217.113160][ T8] usb 3-1: device descriptor read/8, error -71 [ 217.388249][ T8] usb usb3-port1: unable to enumerate USB device [ 217.628786][ T7766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.435'. [ 217.965089][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 220.211788][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 220.280813][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.294184][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.360058][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.378372][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.393313][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.466530][ T7787] hfs: Bad value for 'gid' [ 220.477906][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.758673][ T9] usb 2-1: usb_control_msg returned -71 [ 220.764328][ T9] usbtmc 2-1:16.0: can't read capabilities [ 221.678522][ T9] usb 2-1: USB disconnect, device number 10 [ 221.926528][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.445'. [ 222.236333][ T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 222.266396][ T5876] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 222.298225][ T5918] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 222.450828][ T5876] usb 5-1: device descriptor read/64, error -71 [ 222.469472][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 222.736455][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.748556][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.762060][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 222.773284][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.843462][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 222.859287][ T8] usb 1-1: config 0 descriptor?? [ 222.877516][ T8] hub 1-1:0.0: USB hub found [ 222.943162][ T5918] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=58.4c [ 222.952358][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.961047][ T5918] usb 4-1: Product: syz [ 222.965279][ T5918] usb 4-1: Manufacturer: syz [ 222.969970][ T5918] usb 4-1: SerialNumber: syz [ 222.986724][ T5918] usb 4-1: config 0 descriptor?? [ 223.003698][ T5876] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 223.087458][ T8] hub 1-1:0.0: 1 port detected [ 223.149952][ T5876] usb 5-1: device descriptor read/64, error -71 [ 223.282531][ T5876] usb usb5-port1: attempt power cycle [ 223.316534][ T5918] usb 4-1: USB disconnect, device number 16 [ 223.361606][ T7816] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.369259][ T7816] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.830481][ T5876] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 224.169729][ T5876] usb 5-1: device descriptor read/8, error -71 [ 224.257718][ T7822] overlay: filesystem on ./bus not supported as upperdir [ 224.387860][ T3073] usb 1-1: USB disconnect, device number 16 [ 224.500352][ T5876] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 224.527915][ T5876] usb 5-1: device descriptor read/8, error -71 [ 224.529337][ T7827] netlink: 20 bytes leftover after parsing attributes in process `syz.1.455'. [ 224.650321][ T5876] usb usb5-port1: unable to enumerate USB device [ 224.700840][ T4927] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.848014][ T4927] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.125752][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.139122][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.147236][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.156588][ T4927] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.173564][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.185067][ T5876] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 225.200967][ T5835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 225.213858][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.296937][ T4927] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.400483][ T5876] usb 2-1: unable to get BOS descriptor or descriptor too short [ 225.453687][ T5876] usb 2-1: config 0 interface 0 has no altsetting 0 [ 225.476569][ T5876] usb 2-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=15.eb [ 225.504541][ T7848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.463'. [ 225.537542][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.545648][ T5876] usb 2-1: Product: syz [ 225.596842][ T5876] usb 2-1: Manufacturer: syz [ 225.639939][ T5876] usb 2-1: SerialNumber: syz [ 225.659524][ T7852] evm: overlay not supported [ 225.673436][ T5876] usb 2-1: config 0 descriptor?? [ 226.472275][ T7837] netlink: 'syz.1.459': attribute type 3 has an invalid length. [ 226.520049][ T4927] bridge_slave_1: left allmulticast mode [ 226.526181][ T4927] bridge_slave_1: left promiscuous mode [ 226.562040][ T4927] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.570000][ T5876] snd_usb_podhd 2-1:0.0: Line 6 POD HDDESKTOP found [ 226.591067][ T4927] bridge_slave_0: left allmulticast mode [ 226.606493][ T4927] bridge_slave_0: left promiscuous mode [ 226.626572][ T4927] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.117185][ T5876] snd_usb_podhd 2-1:0.0: endpoint not available, using fallback values [ 227.131200][ T5876] snd_usb_podhd 2-1:0.0: invalid control EP [ 227.142742][ T5876] snd_usb_podhd 2-1:0.0: cannot start listening: -22 [ 227.152904][ T5876] snd_usb_podhd 2-1:0.0: Line 6 POD HDDESKTOP now disconnected [ 227.170391][ T5876] snd_usb_podhd 2-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 227.345701][ T46] usb 2-1: USB disconnect, device number 11 [ 227.422530][ T5835] Bluetooth: hci4: command tx timeout [ 227.666619][ T4927] dvmrp2 (unregistering): left allmulticast mode [ 227.750441][ T5879] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 227.949800][ T5879] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 227.961367][ T4927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.961440][ T5879] usb 1-1: config 0 has no interface number 0 [ 227.990280][ T4927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.996722][ T5879] usb 1-1: config 0 interface 239 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 511 [ 228.023436][ T5879] usb 1-1: New USB device found, idVendor=eb1a, idProduct=e359, bcdDevice=34.64 [ 228.040249][ T4927] bond0 (unregistering): Released all slaves [ 228.055156][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.063549][ T5879] usb 1-1: Product: syz [ 228.067747][ T5879] usb 1-1: Manufacturer: syz [ 228.072455][ T5879] usb 1-1: SerialNumber: syz [ 228.083001][ T5879] usb 1-1: config 0 descriptor?? [ 228.119235][ T7841] chnl_net:caif_netlink_parms(): no params data found [ 228.126884][ T7874] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 228.143735][ T5879] em28xx 1-1:0.239: New device syz syz @ 480 Mbps (eb1a:e359, interface 239, class 239) [ 228.182167][ T5879] em28xx 1-1:0.239: Video interface 239 found: bulk [ 229.461577][ T5879] em28xx 1-1:0.239: unknown em28xx chip ID (0) [ 229.590720][ T5876] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 229.594162][ T5879] em28xx 1-1:0.239: reading from i2c device at 0xa0 failed (error=-5) [ 229.653940][ T5835] Bluetooth: hci4: command tx timeout [ 229.654347][ T5879] em28xx 1-1:0.239: board has no eeprom [ 229.763046][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 229.774136][ T5876] usb 2-1: config 0 has an invalid descriptor of length 168, skipping remainder of the config [ 229.788083][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.841361][ T7896] netlink: 16 bytes leftover after parsing attributes in process `syz.0.466'. [ 229.850909][ T5879] em28xx 1-1:0.239: Identified as Kworld 355 U DVB-T (card=42) [ 229.860768][ T5879] em28xx 1-1:0.239: [ 229.860768][ T5879] [ 229.860768][ T5879] The support for this board weren't valid yet. [ 229.860768][ T5879] Please send a report of having this working [ 229.860768][ T5879] not to V4L mailing list (and/or to other addresses) [ 229.860768][ T5879] [ 229.864890][ T5876] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.09 [ 229.972319][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.021028][ T5879] em28xx 1-1:0.239: Currently, V4L2 is not supported on this model [ 230.072480][ T5876] usb 2-1: config 0 descriptor?? [ 230.074335][ T46] em28xx 1-1:0.239: Binding DVB extension [ 230.082158][ T7841] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.085279][ T46] em28xx 1-1:0.239: no endpoint for DVB mode and transfer type 0 [ 230.090792][ T7841] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.102217][ T46] em28xx 1-1:0.239: failed to pre-allocate USB transfer buffers for DVB. [ 230.114942][ T46] em28xx 1-1:0.239: Remote control support is not available for this card. [ 230.166421][ T5879] usb 1-1: USB disconnect, device number 17 [ 230.191744][ T7841] bridge_slave_0: entered allmulticast mode [ 230.225332][ T7841] bridge_slave_0: entered promiscuous mode [ 230.231731][ T5879] em28xx 1-1:0.239: Disconnecting em28xx [ 230.237426][ T5879] em28xx 1-1:0.239: Closing input extension [ 230.303965][ T5879] em28xx 1-1:0.239: Freeing device [ 230.464357][ T7841] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.475137][ T7841] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.508979][ T7841] bridge_slave_1: entered allmulticast mode [ 230.531074][ T7841] bridge_slave_1: entered promiscuous mode [ 230.580793][ T5876] usb 2-1: string descriptor 0 read error: -71 [ 230.589848][ T5876] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 230.604742][ T5876] usb 2-1: USB disconnect, device number 12 [ 230.838016][ T7906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.472'. [ 231.162071][ T7841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.470598][ T3073] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 231.521195][ T4927] hsr_slave_0: left promiscuous mode [ 231.534273][ T4927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.619455][ T4927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.640339][ T4927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.649028][ T3073] usb 5-1: Using ep0 maxpacket: 16 [ 231.661211][ T3073] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 231.677881][ T3073] usb 5-1: config 0 has no interface number 0 [ 231.685131][ T4927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.749291][ T3073] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.823110][ T4927] veth1_macvtap: left promiscuous mode [ 231.869425][ T4927] veth0_macvtap: left promiscuous mode [ 231.869558][ T5835] Bluetooth: hci4: command tx timeout [ 231.886792][ T3073] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.012424][ T3073] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 232.073556][ T3073] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.345408][ T3073] usb 5-1: config 0 descriptor?? [ 232.970862][ T4927] team0 (unregistering): Port device team_slave_1 removed [ 233.072558][ T4927] team0 (unregistering): Port device team_slave_0 removed [ 233.253810][ T3073] uclogic 0003:28BD:0071.0007: failed retrieving string descriptor #100: -71 [ 233.273041][ T3073] uclogic 0003:28BD:0071.0007: failed retrieving pen parameters: -71 [ 233.297736][ T3073] uclogic 0003:28BD:0071.0007: pen probing failed: -71 [ 233.315952][ T3073] uclogic 0003:28BD:0071.0007: failed probing parameters: -71 [ 233.324000][ T3073] uclogic 0003:28BD:0071.0007: probe with driver uclogic failed with error -71 [ 233.346556][ T3073] usb 5-1: USB disconnect, device number 18 [ 234.091915][ T5835] Bluetooth: hci4: command tx timeout [ 234.269562][ T29] audit: type=1326 audit(1733867932.143:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7943 comm="syz.3.479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f762bd7ff19 code=0x0 [ 234.620130][ T7946] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.695640][ T7841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.758373][ T7841] team0: Port device team_slave_0 added [ 234.799460][ T7841] team0: Port device team_slave_1 added [ 234.896987][ T7953] netlink: 96 bytes leftover after parsing attributes in process `syz.0.482'. [ 234.908474][ T7841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.932620][ T7841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.966495][ T7841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.979477][ T7841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.986586][ T7841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.012631][ T7841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.184801][ T7958] netlink: 20 bytes leftover after parsing attributes in process `syz.4.483'. [ 235.580368][ T7841] hsr_slave_0: entered promiscuous mode [ 236.033371][ T7841] hsr_slave_1: entered promiscuous mode [ 236.040232][ T7841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.049085][ T7841] Cannot create hsr debugfs directory [ 236.496135][ T5875] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 236.523083][ T4927] IPVS: stop unused estimator thread 0... [ 236.669761][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 28, changing to 8 [ 236.700815][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 236.728634][ T5875] usb 1-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 236.755332][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.810458][ T5875] usb 1-1: config 0 descriptor?? [ 236.893109][ T5875] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 237.208939][ T5180] bcm5974 1-1:0.0: could not read from device [ 239.567755][ T5875] usb 1-1: USB disconnect, device number 18 [ 240.238767][ T7841] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 240.839844][ T7841] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 240.908501][ T7841] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 240.946806][ T7841] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 242.068771][ T7841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.205963][ T7841] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.256732][ T6529] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.263912][ T6529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.302381][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.309569][ T6529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.513265][ T7841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 242.542953][ T7841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.923355][ T5876] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 243.349730][ T5876] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 243.882723][ T8091] trusted_key: encrypted_key: insufficient parameters specified [ 244.691510][ T8086] netlink: 'syz.3.503': attribute type 3 has an invalid length. [ 244.699463][ T8086] netlink: 666 bytes leftover after parsing attributes in process `syz.3.503'. [ 245.302633][ T7841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.203052][ T5876] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 247.443073][ T8148] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 248.510303][ T7841] veth0_vlan: entered promiscuous mode [ 248.541555][ T7841] veth1_vlan: entered promiscuous mode [ 248.679644][ T7841] veth0_macvtap: entered promiscuous mode [ 248.773471][ T7841] veth1_macvtap: entered promiscuous mode [ 248.892422][ T8169] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 248.924420][ T8169] macvtap1: entered promiscuous mode [ 248.935233][ T8169] macvtap1: entered allmulticast mode [ 248.946057][ T8169] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 249.230330][ T8169] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 249.388611][ T8169] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 249.842986][ T46] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 249.949618][ T8167] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 249.982458][ T8167] macvtap1: entered promiscuous mode [ 249.996212][ T8167] macvtap1: entered allmulticast mode [ 250.018902][ T8167] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 250.032562][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 250.053221][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 250.073255][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.082580][ T8167] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 250.094164][ T8167] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 250.103107][ T46] usb 5-1: config 0 descriptor?? [ 250.109435][ T8176] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 250.159983][ T8183] gtp0: entered promiscuous mode [ 250.165187][ T8183] gtp0: entered allmulticast mode [ 250.195689][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.207042][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.217608][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.251951][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.263617][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.275392][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.285252][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.295979][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.310504][ T7841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.329172][ T5875] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 250.536125][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 250.688987][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.701354][ T5875] usb 4-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 250.713843][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.722629][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.824273][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.841595][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.925447][ T5875] usb 4-1: config 0 descriptor?? [ 251.000327][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.049290][ T8192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.091720][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.092254][ T8192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.102118][ T5876] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 251.181434][ T7841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.226814][ T7841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.256572][ T7841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.321268][ T7841] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.339052][ T7841] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.348419][ T7841] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.357751][ T7841] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.011337][ T5875] elecom 0003:056E:00E6.0009: item fetching failed at offset 3/7 [ 252.018139][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 28, changing to 8 [ 252.021172][ T5875] elecom 0003:056E:00E6.0009: probe with driver elecom failed with error -22 [ 252.030474][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 252.060747][ T5875] usb 4-1: USB disconnect, device number 17 [ 252.094024][ T46] usbhid 5-1:0.0: can't add hid device: -71 [ 252.116193][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 252.137385][ T46] usb 5-1: USB disconnect, device number 20 [ 252.139904][ T6529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.205945][ T6529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.216079][ T5836] udevd[5836]: setting mode of /dev/bus/usb/005/020 to 020664 failed: No such file or directory [ 252.238524][ T5876] usb 1-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 252.263597][ T5836] udevd[5836]: setting owner of /dev/bus/usb/005/020 to uid=0, gid=0 failed: No such file or directory [ 252.278379][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.298539][ T6529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.316769][ T5876] usb 1-1: config 0 descriptor?? [ 252.328067][ T6529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.380392][ T5876] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 252.625785][ T5180] bcm5974 1-1:0.0: could not read from device [ 252.659983][ T5876] usb 1-1: USB disconnect, device number 19 [ 252.691928][ T5180] bcm5974 1-1:0.0: could not read from device [ 252.710475][ T5180] bcm5974 1-1:0.0: could not read from device [ 254.103383][ T8232] capability: warning: `syz.4.525' uses 32-bit capabilities (legacy support in use) [ 254.221551][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.526'. [ 254.241271][ T8237] netlink: 20 bytes leftover after parsing attributes in process `syz.5.526'. [ 254.250661][ T8237] netlink: 24 bytes leftover after parsing attributes in process `syz.5.526'. [ 256.008961][ T8266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.040912][ T8266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.251658][ T5876] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 256.403101][ T8279] vxcan2: entered allmulticast mode [ 256.740983][ T8293] /dev/sg0: Can't lookup blockdev [ 257.222794][ T8308] netlink: 20 bytes leftover after parsing attributes in process `syz.4.538'. [ 258.776928][ T5876] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 259.223560][ T5876] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 259.272792][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.419620][ T5876] usb 5-1: config 0 descriptor?? [ 259.807336][ T5876] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 259.832047][ T5876] asix 5-1:0.0: probe with driver asix failed with error -61 [ 261.118286][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.124765][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.796731][ T5875] usb 5-1: USB disconnect, device number 21 [ 263.659472][ T8421] fuse: Bad value for 'fd' [ 263.993208][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.559'. [ 266.739286][ T8459] nbd3: detected capacity change from 0 to 32 [ 266.828695][ T5835] block nbd3: Receive control failed (result -32) [ 266.841162][ T8461] block nbd3: shutting down sockets [ 266.897842][ T5836] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 266.935820][ T5836] Buffer I/O error on dev nbd3, logical block 0, async page read [ 266.960842][ T5836] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.121432][ T5836] Buffer I/O error on dev nbd3, logical block 0, async page read [ 267.220728][ T5836] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.303688][ T5836] Buffer I/O error on dev nbd3, logical block 0, async page read [ 267.356545][ T5836] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.415108][ T5836] Buffer I/O error on dev nbd3, logical block 0, async page read [ 267.499830][ T5836] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.574798][ T5836] Buffer I/O error on dev nbd3, logical block 0, async page read [ 267.641151][ T5836] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.714277][ T5836] Buffer I/O error on dev nbd3, logical block 0, async page read [ 267.725946][ T5836] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.753401][ T5836] Buffer I/O error on dev nbd3, logical block 0, async page read [ 267.780583][ T5836] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.802614][ T5836] Buffer I/O error on dev nbd3, logical block 0, async page read [ 267.815194][ T5836] ldm_validate_partition_table(): Disk read failed. [ 267.825964][ T5836] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.853035][ T5836] Buffer I/O error on dev nbd3, logical block 0, async page read [ 267.873483][ T5836] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 267.903666][ T5836] Buffer I/O error on dev nbd3, logical block 0, async page read [ 267.922791][ T5836] Dev nbd3: unable to read RDB block 0 [ 267.965805][ T5836] nbd3: unable to read partition table [ 267.990101][ T5879] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 267.999245][ T5836] ldm_validate_partition_table(): Disk read failed. [ 268.016806][ T5836] Dev nbd3: unable to read RDB block 0 [ 268.025907][ T5836] nbd3: unable to read partition table [ 268.194495][ T5879] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 268.227425][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.275813][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.318838][ T5879] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 268.558020][ T5879] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 269.048923][ T8496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.549441][ T5879] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 269.557710][ T5879] usb 6-1: Manufacturer: syz [ 269.566762][ T5879] usb 6-1: config 0 descriptor?? [ 271.375976][ T5879] usbhid 6-1:0.0: can't add hid device: -71 [ 271.385323][ T5879] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 271.460277][ T5879] usb 6-1: USB disconnect, device number 2 [ 271.568200][ T973] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 274.331707][ T5876] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 275.454222][ T8549] bridge_slave_0: default FDB implementation only supports local addresses [ 275.947057][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.580'. [ 275.976883][ T8545] bond_slave_0: entered promiscuous mode [ 275.982903][ T8545] bond_slave_1: entered promiscuous mode [ 276.009645][ T8545] macvtap1: entered promiscuous mode [ 276.029107][ T8545] bond0: entered promiscuous mode [ 276.034596][ T8545] macvtap1: entered allmulticast mode [ 276.047886][ T8545] bond0: entered allmulticast mode [ 276.058312][ T8545] bond_slave_0: entered allmulticast mode [ 276.067220][ T8545] bond_slave_1: entered allmulticast mode [ 276.074525][ T8545] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 276.174668][ T8548] bond0: left allmulticast mode [ 276.240603][ T8548] bond_slave_0: left allmulticast mode [ 276.253665][ T8548] bond_slave_1: left allmulticast mode [ 276.259222][ T8548] bond0: left promiscuous mode [ 276.265335][ T8548] bond_slave_0: left promiscuous mode [ 276.271078][ T8548] bond_slave_1: left promiscuous mode [ 276.439526][ T46] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 276.646797][ T46] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 276.814499][ T46] usb 1-1: config 0 has no interface number 0 [ 276.862914][ T46] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 276.884326][ T46] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 276.905808][ T46] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 276.920512][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.955064][ T8564] overlay: ./file1 is not a directory [ 276.980182][ T46] usb 1-1: config 0 descriptor?? [ 276.990331][ T8553] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 277.000120][ T8567] netlink: 'syz.3.586': attribute type 16 has an invalid length. [ 277.020787][ T46] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 277.027549][ T8567] netlink: 'syz.3.586': attribute type 3 has an invalid length. [ 277.055169][ T8567] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.586'. [ 277.377685][ T5918] usb 1-1: USB disconnect, device number 20 [ 277.506936][ T8585] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.509188][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 277.517545][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 277.892166][ T8592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.588'. [ 278.606819][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 278.622394][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 278.649448][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 278.676773][ T973] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 278.696497][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.712687][ T9] usb 2-1: Product: syz [ 278.727608][ T9] usb 2-1: Manufacturer: syz [ 278.741468][ T9] usb 2-1: SerialNumber: syz [ 278.779989][ T9] usb 2-1: config 0 descriptor?? [ 278.823369][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 278.907327][ T973] usb 4-1: config index 0 descriptor too short (expected 31, got 27) [ 278.915863][ T973] usb 4-1: config 1 interface 0 has no altsetting 0 [ 278.927083][ T973] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 278.985895][ T973] usb 4-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 279.032049][ T973] usb 4-1: Product: syz [ 279.086064][ T973] usb 4-1: Manufacturer: syz [ 279.113640][ T973] usb 4-1: SerialNumber: syz [ 280.140891][ T973] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 280.176338][ T8629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.598'. [ 280.672027][ T9] gspca_zc3xx: reg_w_i err -110 [ 282.243896][ T8648] tty tty3: ldisc open failed (-12), clearing slot 2 [ 282.293754][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 282.300121][ T9] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 282.354115][ T9] usb 2-1: USB disconnect, device number 13 [ 282.749740][ T5918] usb 4-1: USB disconnect, device number 20 [ 282.861049][ T5918] usblp0: removed [ 286.666998][ T8708] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 287.008470][ T973] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 287.105184][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 287.168700][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 287.176466][ T973] usb 6-1: Using ep0 maxpacket: 8 [ 287.195082][ T973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.207031][ T973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.228466][ T973] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 287.253393][ T973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.277048][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 287.296004][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.307001][ T973] usb 6-1: config 0 descriptor?? [ 287.323284][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 287.340924][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 287.358748][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 287.375492][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 287.385852][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.396884][ T8] usb 2-1: config 0 has an invalid interface number: 82 but max is 2 [ 287.405337][ T8] usb 2-1: config 0 has an invalid interface number: 159 but max is 2 [ 287.413839][ T9] usb 1-1: Product: syz [ 287.418196][ T9] usb 1-1: Manufacturer: syz [ 287.423017][ T8] usb 2-1: config 0 has an invalid interface number: 156 but max is 2 [ 287.431777][ T9] usb 1-1: SerialNumber: syz [ 287.448375][ T8] usb 2-1: config 0 has no interface number 0 [ 287.457921][ T8] usb 2-1: config 0 has no interface number 1 [ 287.488590][ T8] usb 2-1: config 0 has no interface number 2 [ 287.499941][ T8] usb 2-1: config 0 interface 82 has no altsetting 0 [ 287.526570][ T8] usb 2-1: config 0 interface 159 has no altsetting 0 [ 287.593871][ T8] usb 2-1: config 0 interface 156 has no altsetting 0 [ 287.625920][ T8] usb 2-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=b2.1d [ 287.656890][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.711679][ T8] usb 2-1: Product: syz [ 287.722290][ T8] usb 2-1: Manufacturer: syz [ 287.732520][ T8] usb 2-1: SerialNumber: syz [ 287.743490][ T8] usb 2-1: config 0 descriptor?? [ 287.791186][ T973] kone 0003:1E7D:2CED.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 288.063146][ T973] usb 6-1: USB disconnect, device number 4 [ 288.284097][ T8] usb 2-1: USB disconnect, device number 14 [ 288.334503][ T3073] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 288.553499][ T3073] usb 4-1: Using ep0 maxpacket: 32 [ 288.581676][ T3073] usb 4-1: unable to get BOS descriptor or descriptor too short [ 288.593880][ T5955] udevd[5955]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.156/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 288.612402][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.159/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 288.629234][ T8752] netlink: 60 bytes leftover after parsing attributes in process `syz.4.621'. [ 288.640095][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.82/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 288.657755][ T3073] usb 4-1: config 125 has an invalid interface number: 7 but max is 0 [ 288.666745][ T3073] usb 4-1: config 125 has an invalid descriptor of length 0, skipping remainder of the config [ 288.733881][ T3073] usb 4-1: config 125 has no interface number 0 [ 288.769162][ T3073] usb 4-1: config 125 interface 7 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 288.823921][ T3073] usb 4-1: config 125 interface 7 has no altsetting 0 [ 288.853520][ T3073] usb 4-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70 [ 288.889628][ T3073] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.939240][ T3073] usb 4-1: Product: syz [ 288.956592][ T3073] usb 4-1: Manufacturer: syz [ 289.199954][ T3073] usb 4-1: SerialNumber: syz [ 289.845805][ T3073] hub 4-1:125.7: bad descriptor, ignoring hub [ 289.852463][ T3073] hub 4-1:125.7: probe with driver hub failed with error -5 [ 289.860381][ T3073] usb 4-1: Expected 3 endpoints, found: 0 [ 290.519930][ T3073] usb 4-1: USB disconnect, device number 21 [ 291.209758][ T5876] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 291.229762][ T9] usb 1-1: cannot find UAC_HEADER [ 291.345235][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 291.380945][ T9] usb 1-1: USB disconnect, device number 21 [ 291.701816][ T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 292.711226][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 28, changing to 8 [ 292.722335][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 292.735585][ T5876] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 292.745038][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.876780][ T5876] usb 5-1: config 0 descriptor?? [ 292.895350][ T5876] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 292.905820][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.931053][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 292.943721][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 292.954672][ T8] usb 2-1: config 127 has an invalid interface number: 179 but max is 0 [ 292.984014][ T8] usb 2-1: config 127 has no interface number 0 [ 293.021486][ T8] usb 2-1: config 127 interface 179 altsetting 1 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 293.293095][ T8] usb 2-1: config 127 interface 179 has no altsetting 0 [ 295.009577][ T8] usb 2-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d0.96 [ 295.018884][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.030863][ T8] usb 2-1: Product: syz [ 295.042382][ T8] usb 2-1: Manufacturer: syz [ 295.053831][ T8] usb 2-1: SerialNumber: syz [ 295.064344][ T8813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.073589][ T8813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.096751][ T9] usb 5-1: USB disconnect, device number 22 [ 295.103465][ T5180] bcm5974 5-1:0.0: could not read from device [ 295.291812][ T8819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.636'. [ 295.371580][ T5953] bcm5974 5-1:0.0: could not read from device [ 295.766458][ T8829] netlink: 108 bytes leftover after parsing attributes in process `syz.4.637'. [ 295.776121][ T8829] netlink: 236 bytes leftover after parsing attributes in process `syz.4.637'. [ 296.801086][ T8] iowarrior 2-1:127.179: no interrupt-out endpoint found [ 296.918983][ T8] usb 2-1: USB disconnect, device number 15 [ 297.252159][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.642'. [ 298.049335][ T8835] hsr0: entered promiscuous mode [ 298.059284][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.640'. [ 299.125413][ T8848] netlink: 48 bytes leftover after parsing attributes in process `syz.5.642'. [ 299.849439][ T46] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 300.075552][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 28, changing to 8 [ 300.240802][ T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 300.421325][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 300.477372][ T46] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 300.502694][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.733746][ T46] usb 5-1: config 0 descriptor?? [ 300.909212][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 28, changing to 8 [ 300.956687][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 301.007933][ T8] usb 2-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 301.410844][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.468758][ T8] usb 2-1: config 0 descriptor?? [ 301.503401][ T8] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13 [ 301.723205][ T5180] bcm5974 2-1:0.0: could not read from device [ 301.770720][ T46] usb 5-1: can't set config #0, error -71 [ 301.791070][ T46] usb 5-1: USB disconnect, device number 23 [ 301.819816][ T5180] bcm5974 2-1:0.0: could not read from device [ 301.848097][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 301.851303][ T5180] bcm5974 2-1:0.0: could not read from device [ 301.862188][ T8] usb 2-1: USB disconnect, device number 16 [ 302.028727][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 302.056380][ T9] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 302.078170][ T9] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 302.097754][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.123447][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.147870][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.167128][ T9] usb 6-1: Product: syz [ 302.178037][ T9] usb 6-1: Manufacturer: syz [ 302.184145][ T9] usb 6-1: SerialNumber: syz [ 302.274772][ T46] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 302.937395][ T46] usb 5-1: Invalid ep0 maxpacket: 16 [ 303.102541][ T46] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 303.119432][ T8906] netlink: 104 bytes leftover after parsing attributes in process `syz.3.657'. [ 303.311738][ T9] usb 6-1: 0:2 : does not exist [ 303.319764][ T46] usb 5-1: Invalid ep0 maxpacket: 16 [ 303.337103][ T46] usb usb5-port1: attempt power cycle [ 303.737628][ T8931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.661'. [ 303.857478][ T46] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 303.903867][ T46] usb 5-1: Invalid ep0 maxpacket: 16 [ 304.070661][ T46] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 304.092761][ T46] usb 5-1: Invalid ep0 maxpacket: 16 [ 304.098541][ T46] usb usb5-port1: unable to enumerate USB device [ 305.049541][ T9] usb 6-1: USB disconnect, device number 5 [ 306.863353][ T8973] syz.1.667[8973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.863459][ T8973] syz.1.667[8973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.875190][ T8973] syz.1.667[8973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 308.744933][ T8984] FAULT_INJECTION: forcing a failure. [ 308.744933][ T8984] name failslab, interval 1, probability 0, space 0, times 0 [ 309.500241][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.5.669'. [ 309.524197][ T8992] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.532962][ T8992] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.541722][ T8992] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.552222][ T8992] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.561092][ T8992] vxlan0: entered promiscuous mode [ 309.562142][ T8984] CPU: 0 UID: 0 PID: 8984 Comm: syz.1.672 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 309.576815][ T8984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 309.586903][ T8984] Call Trace: [ 309.590212][ T8984] [ 309.593169][ T8984] dump_stack_lvl+0x241/0x360 [ 309.597896][ T8984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.603149][ T8984] ? __pfx__printk+0x10/0x10 [ 309.607791][ T8984] ? kmem_cache_alloc_noprof+0x48/0x380 [ 309.613404][ T8984] ? __pfx___might_resched+0x10/0x10 [ 309.618738][ T8984] should_fail_ex+0x3b0/0x4e0 [ 309.623475][ T8984] should_failslab+0xac/0x100 [ 309.628203][ T8984] ? vm_area_dup+0x61/0x290 [ 309.632746][ T8984] kmem_cache_alloc_noprof+0x70/0x380 [ 309.638173][ T8984] vm_area_dup+0x61/0x290 [ 309.642554][ T8984] __split_vma+0x1cb/0xc50 [ 309.647016][ T8984] ? ima_match_policy+0x111/0x2230 [ 309.652167][ T8984] ? __pfx___split_vma+0x10/0x10 [ 309.657142][ T8984] ? __pfx_validate_chain+0x10/0x10 [ 309.662396][ T8984] ? __pfx_up_write+0x10/0x10 [ 309.667106][ T8984] ? ima_get_action+0x75/0xb0 [ 309.671812][ T8984] vms_gather_munmap_vmas+0x2e6/0x1600 [ 309.677335][ T8984] ? mtree_range_walk+0x6fd/0x8e0 [ 309.682415][ T8984] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 309.688366][ T8984] ? mas_find+0x8c0/0xbb0 [ 309.692756][ T8984] __mmap_region+0x7de/0x2cd0 [ 309.697501][ T8984] ? __pfx_lock_release+0x10/0x10 [ 309.702589][ T8984] ? __pfx___mmap_region+0x10/0x10 [ 309.707719][ T8984] ? __lock_acquire+0x1397/0x2100 [ 309.712787][ T8984] ? __pfx_validate_chain+0x10/0x10 [ 309.718010][ T8984] ? mark_lock+0x9a/0x360 [ 309.722496][ T8984] ? arch_get_unmapped_area_topdown+0x28e/0xc50 [ 309.728776][ T8984] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 309.735391][ T8984] ? cap_mmap_addr+0x163/0x2c0 [ 309.740180][ T8984] mmap_region+0x1d0/0x2c0 [ 309.744610][ T8984] ? security_mmap_addr+0x6f/0x250 [ 309.749741][ T8984] do_mmap+0x8f0/0x1000 [ 309.753935][ T8984] ? __pfx_do_mmap+0x10/0x10 [ 309.758560][ T8984] ? __pfx_down_write_killable+0x10/0x10 [ 309.764216][ T8984] ? __pfx_lock_acquire+0x10/0x10 [ 309.769262][ T8984] vm_mmap_pgoff+0x1dd/0x3d0 [ 309.773875][ T8984] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 309.778998][ T8984] ? __fget_files+0x2a/0x410 [ 309.783594][ T8984] ? __fget_files+0x395/0x410 [ 309.788274][ T8984] ? __fget_files+0x2a/0x410 [ 309.792876][ T8984] ksys_mmap_pgoff+0x4eb/0x720 [ 309.797650][ T8984] ? __x64_sys_mmap+0x7f/0x140 [ 309.802427][ T8984] do_syscall_64+0xf3/0x230 [ 309.806949][ T8984] ? clear_bhb_loop+0x35/0x90 [ 309.811647][ T8984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.817557][ T8984] RIP: 0033:0x7f2a6017ff19 [ 309.821990][ T8984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.841615][ T8984] RSP: 002b:00007f2a6100f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 309.850038][ T8984] RAX: ffffffffffffffda RBX: 00007f2a60345fa0 RCX: 00007f2a6017ff19 [ 309.858029][ T8984] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 309.866014][ T8984] RBP: 00007f2a6100f0a0 R08: 0000000000000003 R09: 0000000100000000 [ 309.873995][ T8984] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 309.881975][ T8984] R13: 0000000000000000 R14: 00007f2a60345fa0 R15: 00007ffd1c4f9cb8 [ 309.889971][ T8984] [ 311.637265][ T9029] netlink: 'syz.0.684': attribute type 4 has an invalid length. [ 312.207224][ T9046] netlink: 20 bytes leftover after parsing attributes in process `syz.4.683'. [ 312.928880][ T9051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.685'. [ 312.965536][ T9051] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.974295][ T9051] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.983857][ T9051] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.993234][ T9051] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.002506][ T9051] vxlan0: entered promiscuous mode [ 313.724163][ T8] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 313.919343][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 314.544507][ T8] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 314.553780][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.561958][ T8] usb 4-1: Product: syz [ 314.566168][ T8] usb 4-1: Manufacturer: syz [ 314.571078][ T8] usb 4-1: SerialNumber: syz [ 314.605476][ T8] usb 4-1: config 0 descriptor?? [ 314.839798][ T8] gspca_main: sq930x-2.14.0 probing 2770:930c [ 315.450587][ T8] gspca_sq930x: reg_r 001f failed -110 [ 315.457677][ T8] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 316.484227][ T46] usb 4-1: USB disconnect, device number 22 [ 318.327118][ T9130] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 318.371235][ T9130] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 319.342759][ T9134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.699'. [ 320.206365][ T9123] ALSA: mixer_oss: invalid OSS volume '' [ 320.212032][ T9123] ALSA: mixer_oss: invalid OSS volume '' [ 320.469977][ T46] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 320.675857][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 320.759247][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 320.875656][ T46] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 320.885863][ T46] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 320.918474][ T46] usb 4-1: Product: syz [ 320.941708][ T46] usb 4-1: Manufacturer: syz [ 320.965138][ T46] usb 4-1: SerialNumber: syz [ 321.114438][ T46] usb 4-1: config 0 descriptor?? [ 322.171474][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.451765][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.466793][ T9] usb 6-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 322.480827][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.998849][ T9171] fuse: Bad value for 'rootmode' [ 323.745187][ T9] usbhid 6-1:1.0: can't add hid device: -71 [ 323.751282][ T9] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 323.783845][ T9] usb 6-1: USB disconnect, device number 6 [ 323.934428][ T5918] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 324.019359][ T9] usb 4-1: USB disconnect, device number 23 [ 324.774058][ T9193] FAULT_INJECTION: forcing a failure. [ 324.774058][ T9193] name failslab, interval 1, probability 0, space 0, times 0 [ 324.786962][ T9193] CPU: 0 UID: 0 PID: 9193 Comm: syz.3.714 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 324.797576][ T9193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 324.807668][ T9193] Call Trace: [ 324.810952][ T9193] [ 324.813885][ T9193] dump_stack_lvl+0x241/0x360 [ 324.818574][ T9193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.823778][ T9193] ? __pfx__printk+0x10/0x10 [ 324.828375][ T9193] ? kmem_cache_alloc_noprof+0x48/0x380 [ 324.833935][ T9193] ? __pfx___might_resched+0x10/0x10 [ 324.839231][ T9193] should_fail_ex+0x3b0/0x4e0 [ 324.843936][ T9193] should_failslab+0xac/0x100 [ 324.848677][ T9193] ? vm_area_alloc+0x24/0x1d0 [ 324.853404][ T9193] kmem_cache_alloc_noprof+0x70/0x380 [ 324.858829][ T9193] vm_area_alloc+0x24/0x1d0 [ 324.863369][ T9193] __mmap_region+0x196e/0x2cd0 [ 324.868199][ T9193] ? __pfx___mmap_region+0x10/0x10 [ 324.873345][ T9193] ? __lock_acquire+0x1397/0x2100 [ 324.878444][ T9193] ? __pfx_validate_chain+0x10/0x10 [ 324.883686][ T9193] ? __pfx_validate_chain+0x10/0x10 [ 324.889279][ T9193] ? arch_get_unmapped_area_topdown+0x28e/0xc50 [ 324.895538][ T9193] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 324.902153][ T9193] ? cap_mmap_addr+0x163/0x2c0 [ 324.907031][ T9193] mmap_region+0x1d0/0x2c0 [ 324.911465][ T9193] ? security_mmap_addr+0x6f/0x250 [ 324.916597][ T9193] do_mmap+0x8f0/0x1000 [ 324.920971][ T9193] ? __pfx_do_mmap+0x10/0x10 [ 324.925581][ T9193] ? __pfx_down_write_killable+0x10/0x10 [ 324.931244][ T9193] ? __pfx_lock_acquire+0x10/0x10 [ 324.936287][ T9193] vm_mmap_pgoff+0x1dd/0x3d0 [ 324.940900][ T9193] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 324.946028][ T9193] ? __fget_files+0x2a/0x410 [ 324.950643][ T9193] ? __fget_files+0x395/0x410 [ 324.955329][ T9193] ? __fget_files+0x2a/0x410 [ 324.959932][ T9193] ksys_mmap_pgoff+0x4eb/0x720 [ 324.964709][ T9193] ? __x64_sys_mmap+0x7f/0x140 [ 324.969486][ T9193] do_syscall_64+0xf3/0x230 [ 324.974016][ T9193] ? clear_bhb_loop+0x35/0x90 [ 324.978727][ T9193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.984638][ T9193] RIP: 0033:0x7f762bd7ff19 [ 324.989062][ T9193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.008688][ T9193] RSP: 002b:00007f762caad058 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 325.017120][ T9193] RAX: ffffffffffffffda RBX: 00007f762bf45fa0 RCX: 00007f762bd7ff19 [ 325.025106][ T9193] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 325.033088][ T9193] RBP: 00007f762caad0a0 R08: 0000000000000003 R09: 0000000100000000 [ 325.041070][ T9193] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 325.049045][ T9193] R13: 0000000000000000 R14: 00007f762bf45fa0 R15: 00007ffdb7479f08 [ 325.057041][ T9193] [ 325.060169][ C0] vkms_vblank_simulate: vblank timer overrun [ 325.223847][ T5918] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 325.256053][ T5918] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 325.267273][ T5918] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 325.276389][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.373797][ T9174] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 325.761855][ T9174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.795960][ T5918] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 325.887392][ T9174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.887587][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'. [ 325.902254][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 325.927032][ T9207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.717'. [ 325.980665][ T5918] usb 2-1: USB disconnect, device number 17 [ 326.804522][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.811048][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.863915][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 326.948469][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 327.066126][ T5876] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 328.114154][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 28, changing to 8 [ 328.125499][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 328.135301][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 328.148263][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 328.157836][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.168980][ T9] usb 4-1: config 0 descriptor?? [ 328.175083][ T5876] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 328.185940][ T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 328.204078][ T5876] usb 1-1: config 0 has no interface number 0 [ 328.220770][ T5876] usb 1-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 328.284846][ T5876] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 328.315652][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.341536][ T5876] usb 1-1: Product: syz [ 328.348929][ T5876] usb 1-1: Manufacturer: syz [ 328.353746][ T5876] usb 1-1: SerialNumber: syz [ 328.390992][ T5876] usb 1-1: config 0 descriptor?? [ 328.408900][ T9219] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 328.451177][ T5876] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 328.509837][ T5876] em28xx 1-1:0.132: Video interface 132 found: bulk [ 328.737298][ T5180] bcm5974 4-1:0.0: could not read from device [ 328.763961][ T5180] bcm5974 4-1:0.0: could not read from device [ 328.782867][ T5180] bcm5974 4-1:0.0: could not read from device [ 328.791157][ T9] usb 4-1: USB disconnect, device number 24 [ 328.825264][ T5180] bcm5974 4-1:0.0: could not read from device [ 328.923819][ T5876] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 329.031645][ T9246] FAULT_INJECTION: forcing a failure. [ 329.031645][ T9246] name failslab, interval 1, probability 0, space 0, times 0 [ 329.047894][ T9246] CPU: 1 UID: 0 PID: 9246 Comm: syz.1.725 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 329.058548][ T9246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 329.068654][ T9246] Call Trace: [ 329.071963][ T9246] [ 329.074926][ T9246] dump_stack_lvl+0x241/0x360 [ 329.079656][ T9246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.084910][ T9246] ? __pfx__printk+0x10/0x10 [ 329.089546][ T9246] ? kmem_cache_alloc_noprof+0x48/0x380 [ 329.095152][ T9246] ? __pfx___might_resched+0x10/0x10 [ 329.100515][ T9246] should_fail_ex+0x3b0/0x4e0 [ 329.105255][ T9246] should_failslab+0xac/0x100 [ 329.110007][ T9246] ? vm_area_alloc+0x10e/0x1d0 [ 329.114821][ T9246] kmem_cache_alloc_noprof+0x70/0x380 [ 329.120261][ T9246] vm_area_alloc+0x10e/0x1d0 [ 329.124902][ T9246] __mmap_region+0x196e/0x2cd0 [ 329.129738][ T9246] ? __pfx___mmap_region+0x10/0x10 [ 329.134898][ T9246] ? __lock_acquire+0x1397/0x2100 [ 329.140001][ T9246] ? __pfx_validate_chain+0x10/0x10 [ 329.145271][ T9246] ? arch_get_unmapped_area_topdown+0x28e/0xc50 [ 329.151561][ T9246] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 329.158199][ T9246] ? cap_mmap_addr+0x163/0x2c0 [ 329.163010][ T9246] mmap_region+0x1d0/0x2c0 [ 329.167463][ T9246] ? security_mmap_addr+0x6f/0x250 [ 329.172620][ T9246] do_mmap+0x8f0/0x1000 [ 329.176820][ T9246] ? __pfx_do_mmap+0x10/0x10 [ 329.181446][ T9246] ? __pfx_down_write_killable+0x10/0x10 [ 329.187120][ T9246] ? __pfx_lock_acquire+0x10/0x10 [ 329.192193][ T9246] vm_mmap_pgoff+0x1dd/0x3d0 [ 329.196832][ T9246] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 329.201979][ T9246] ? __fget_files+0x2a/0x410 [ 329.206599][ T9246] ? __fget_files+0x395/0x410 [ 329.211308][ T9246] ? __fget_files+0x2a/0x410 [ 329.215932][ T9246] ksys_mmap_pgoff+0x4eb/0x720 [ 329.220723][ T9246] ? __x64_sys_mmap+0x7f/0x140 [ 329.225518][ T9246] do_syscall_64+0xf3/0x230 [ 329.230064][ T9246] ? clear_bhb_loop+0x35/0x90 [ 329.234788][ T9246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.240726][ T9246] RIP: 0033:0x7f2a6017ff19 [ 329.245191][ T9246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.264850][ T9246] RSP: 002b:00007f2a6100f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 329.273351][ T9246] RAX: ffffffffffffffda RBX: 00007f2a60345fa0 RCX: 00007f2a6017ff19 [ 329.281365][ T9246] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 329.289381][ T9246] RBP: 00007f2a6100f0a0 R08: 0000000000000003 R09: 0000000100000000 [ 329.297388][ T9246] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 329.305393][ T9246] R13: 0000000000000000 R14: 00007f2a60345fa0 R15: 00007ffd1c4f9cb8 [ 329.313409][ T9246] [ 329.370299][ T5876] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 329.406680][ T5876] em28xx 1-1:0.132: board has no eeprom [ 329.503612][ T5876] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 329.523550][ T5876] em28xx 1-1:0.132: analog set to bulk mode. [ 329.546303][ T8] em28xx 1-1:0.132: Registering V4L2 extension [ 330.208609][ T46] usb 1-1: USB disconnect, device number 22 [ 330.317207][ T46] em28xx 1-1:0.132: Disconnecting em28xx [ 330.336119][ T8] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 330.509847][ T9255] Driver unsupported XDP return value 0 on prog (id 196) dev N/A, expect packet loss! [ 330.626574][ T5878] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 330.710222][ T8] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 330.729761][ T8] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 330.778349][ T8] em28xx 1-1:0.132: No AC97 audio processor [ 330.822474][ T8] usb 1-1: Decoder not found [ 330.839834][ T8] em28xx 1-1:0.132: failed to create media graph [ 330.839832][ T5879] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 330.852949][ T5878] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 330.887921][ T8] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 330.906972][ T5878] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 330.963255][ T8] em28xx 1-1:0.132: Remote control support is not available for this card. [ 330.978787][ T5878] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 331.000144][ T46] em28xx 1-1:0.132: Closing input extension [ 331.010905][ T5879] usb 6-1: Using ep0 maxpacket: 32 [ 331.032201][ T5878] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 331.041281][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.069561][ T46] em28xx 1-1:0.132: Freeing device [ 331.076658][ T5879] usb 6-1: config 0 has no interfaces? [ 331.082274][ T5879] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 331.143946][ T9271] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 331.181370][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.202719][ T9271] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 331.441004][ T9302] binder: BINDER_SET_CONTEXT_MGR already set [ 331.448134][ T9302] binder: 9292:9302 ioctl 4018620d 200001c0 returned -16 [ 332.266632][ T5879] usb 6-1: config 0 descriptor?? [ 333.347967][ T9298] ªªªªªªÿÿ: renamed from veth1_to_batadv (while UP) [ 333.587511][ T3073] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 333.799158][ T3073] usb 2-1: Using ep0 maxpacket: 32 [ 333.913970][ T5918] usb 6-1: USB disconnect, device number 7 [ 333.930012][ T5878] usb 5-1: can't set config #27, error -71 [ 333.937967][ T5878] usb 5-1: USB disconnect, device number 28 [ 333.944628][ T3073] usb 2-1: config 1 has an invalid interface number: 214 but max is 0 [ 333.953226][ T3073] usb 2-1: config 1 has an invalid descriptor of length 202, skipping remainder of the config [ 333.974969][ T3073] usb 2-1: config 1 has no interface number 0 [ 333.981425][ T3073] usb 2-1: config 1 interface 214 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.046545][ T3073] usb 2-1: config 1 interface 214 has no altsetting 0 [ 334.098917][ T3073] usb 2-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=92.ec [ 334.109848][ T3073] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.139349][ T3073] usb 2-1: Product: syz [ 334.164335][ T3073] usb 2-1: Manufacturer: syz [ 334.192324][ T3073] usb 2-1: SerialNumber: syz [ 334.211870][ T3073] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 335.255313][ T3073] usb 2-1: no configuration chosen from 1 choice [ 336.992898][ T9315] delete_channel: no stack [ 337.702701][ T5875] usb 2-1: USB disconnect, device number 18 [ 338.682759][ T9344] syz.3.742 (9344): attempted to duplicate a private mapping with mremap. This is not supported. [ 338.796724][ T9345] netlink: 'syz.5.743': attribute type 2 has an invalid length. [ 339.267744][ T5878] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 339.593298][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 339.604965][ T5878] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 339.842529][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 339.884410][ T5878] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 339.896051][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 339.906323][ T5878] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 339.938223][ T5878] usb 6-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 339.948420][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.956623][ T5878] usb 6-1: Product: syz [ 339.962168][ T5878] usb 6-1: Manufacturer: syz [ 339.966876][ T5878] usb 6-1: SerialNumber: syz [ 340.044277][ T5878] usb 6-1: config 0 descriptor?? [ 340.123864][ T5878] port100 6-1:0.0: NFC: Could not get supported command types [ 340.333159][ T5918] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 340.360445][ T8] usb 6-1: USB disconnect, device number 8 [ 340.492064][ T5918] usb 4-1: device descriptor read/64, error -71 [ 340.525770][ T9] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 340.569736][ T9382] netlink: 'syz.4.750': attribute type 6 has an invalid length. [ 341.175438][ T9389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.751'. [ 341.609388][ T9391] Invalid ELF header type: 3 != 1 [ 342.950869][ T5918] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 342.980860][ T9396] Invalid ELF header magic: != ELF [ 343.463559][ T9407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.756'. [ 344.038127][ T29] audit: type=1804 audit(1733868033.830:103): pid=9396 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.755" name="/newroot/152/bus/bus" dev="overlay" ino=842 res=1 errno=0 [ 344.096322][ T9409] netlink: 'syz.5.758': attribute type 12 has an invalid length. [ 344.284197][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 344.292622][ T9] usb 2-1: can't read configurations, error -71 [ 345.496665][ T5918] usb 4-1: device descriptor read/64, error -71 [ 345.941710][ T5918] usb usb4-port1: attempt power cycle [ 346.010120][ T9435] trusted_key: encrypted_key: master key parameter '' is invalid [ 346.220800][ T9442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.244495][ T9442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.408808][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 347.417436][ T5918] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 347.503192][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 347.526444][ T5918] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 347.546655][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.599697][ T5918] usb 4-1: config 0 descriptor?? [ 347.824664][ T5918] usb 4-1: can't set config #0, error -71 [ 347.832015][ T5918] usb 4-1: USB disconnect, device number 27 [ 348.281469][ T9462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.771'. [ 348.650438][ T5918] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 348.773289][ T9467] netlink: 'syz.0.775': attribute type 21 has an invalid length. [ 348.782337][ T9467] netlink: 'syz.0.775': attribute type 6 has an invalid length. [ 348.800094][ T9467] netlink: 132 bytes leftover after parsing attributes in process `syz.0.775'. [ 349.190529][ T9481] netlink: 40 bytes leftover after parsing attributes in process `syz.0.778'. [ 349.257957][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 349.268454][ T5918] usb 4-1: config 0 interface 0 has no altsetting 0 [ 349.275470][ T5918] usb 4-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 349.284849][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.299977][ T5918] usb 4-1: config 0 descriptor?? [ 349.310459][ T5918] usb 4-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 349.385677][ T5918] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 349.431240][ T5918] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 349.500330][ T5918] usb 4-1: media controller created [ 349.587530][ T9497] tmpfs: Bad value for 'smackfshat' [ 349.600931][ T9497] netlink: 100 bytes leftover after parsing attributes in process `syz.5.781'. [ 349.811957][ T5875] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 351.630242][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 351.705528][ T5918] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 351.807518][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.818535][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 351.831513][ T5875] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 351.840734][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.937691][ T5918] error writing reg: 0xff, val: 0x00 [ 352.004671][ T5875] usb 5-1: config 0 descriptor?? [ 352.267684][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 352.631833][ T5875] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 352.709014][ T5918] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 352.804265][ T5918] usb 4-1: USB disconnect, device number 28 [ 352.810391][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 352.816409][ T5875] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 352.868121][ T5875] usb 5-1: USB disconnect, device number 29 [ 352.998280][ T9] usb 6-1: device descriptor read/all, error -71 [ 353.076481][ T46] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 353.237306][ T46] usb 1-1: device descriptor read/64, error -71 [ 353.264933][ T29] audit: type=1326 audit(1733868043.455:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9530 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6017ff19 code=0x7ffc0000 [ 353.286485][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.310392][ T29] audit: type=1326 audit(1733868043.483:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9530 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6017ff19 code=0x7ffc0000 [ 353.381207][ T29] audit: type=1326 audit(1733868043.483:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9530 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f2a6017ff19 code=0x7ffc0000 [ 353.417189][ T29] audit: type=1326 audit(1733868043.483:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9530 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6017ff19 code=0x7ffc0000 [ 353.457331][ T9535] @: renamed from bridge_slave_0 (while UP) [ 353.494779][ T29] audit: type=1326 audit(1733868043.483:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9530 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6017ff19 code=0x7ffc0000 [ 353.526180][ T46] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 353.552650][ T29] audit: type=1326 audit(1733868043.483:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9530 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f2a6017ff19 code=0x7ffc0000 [ 353.639031][ T29] audit: type=1326 audit(1733868043.483:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9530 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6017ff19 code=0x7ffc0000 [ 353.686722][ T29] audit: type=1326 audit(1733868043.483:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9530 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2a6017ff19 code=0x7ffc0000 [ 353.686928][ T5918] libceph: connect (1)[c::]:6789 error -101 [ 353.709062][ T46] usb 1-1: device descriptor read/64, error -71 [ 353.721243][ T29] audit: type=1326 audit(1733868043.483:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9530 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6017ff19 code=0x7ffc0000 [ 353.743175][ T29] audit: type=1326 audit(1733868043.483:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9530 comm="syz.1.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a6017ff19 code=0x7ffc0000 [ 353.756388][ T9547] ceph: No mds server is up or the cluster is laggy [ 353.791256][ T5918] libceph: mon0 (1)[c::]:6789 connect error [ 353.878861][ T46] usb usb1-port1: attempt power cycle [ 354.172780][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 354.427651][ T9] usb 6-1: config index 0 descriptor too short (expected 4114, got 18) [ 354.653346][ T9] usb 6-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 354.899349][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.968637][ T46] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 354.995173][ T46] usb 1-1: device descriptor read/8, error -71 [ 355.061037][ T9] usb 6-1: Product: syz [ 355.066150][ T9] usb 6-1: Manufacturer: syz [ 355.071111][ T9] usb 6-1: SerialNumber: syz [ 355.090124][ T9] usb 6-1: config 0 descriptor?? [ 355.257604][ T46] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 355.282623][ T46] usb 1-1: device descriptor read/8, error -71 [ 355.402438][ T46] usb usb1-port1: unable to enumerate USB device [ 355.425962][ T9546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.449988][ T5875] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 355.453818][ T9546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.558844][ T9] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 355.569533][ T9] asix 6-1:0.0: probe with driver asix failed with error -71 [ 355.589450][ T9] usb 6-1: USB disconnect, device number 10 [ 355.687234][ T5875] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.698033][ T5875] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 355.719362][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.734664][ T9577] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.755682][ T5875] usb 2-1: config 0 descriptor?? [ 355.778077][ T5875] pwc: Askey VC010 type 2 USB webcam detected. [ 355.860005][ T9585] loop2: detected capacity change from 0 to 7 [ 355.871003][ T9585] Dev loop2: unable to read RDB block 7 [ 355.878072][ T9585] loop2: unable to read partition table [ 355.883948][ T9585] loop2: partition table beyond EOD, truncated [ 355.909786][ T9585] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 355.998140][ T5875] pwc: send_video_command error -71 [ 356.012275][ T5875] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 356.032297][ T5875] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 356.090008][ T5875] usb 2-1: USB disconnect, device number 21 [ 356.327289][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.795'. [ 356.655523][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.801'. [ 356.756994][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 357.216230][ T9569] hsr_slave_1 (unregistering): left promiscuous mode [ 357.231313][ T9616] geneve0: entered promiscuous mode [ 357.289036][ T9616] geneve0: left promiscuous mode [ 361.419274][ T9685] netlink: 'syz.1.817': attribute type 1 has an invalid length. [ 361.468501][ T9685] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 361.476335][ T9685] IPv6: NLM_F_CREATE should be set when creating new route [ 361.684862][ T46] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 361.724657][ T9686] netlink: 'syz.1.817': attribute type 1 has an invalid length. [ 361.745624][ T9686] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 361.842741][ T46] usb 6-1: device descriptor read/64, error -71 [ 362.155129][ T46] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 362.334608][ T46] usb 6-1: device descriptor read/64, error -71 [ 362.505599][ T46] usb usb6-port1: attempt power cycle [ 363.760925][ T46] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 363.788876][ T46] usb 6-1: device descriptor read/8, error -71 [ 364.248302][ T46] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 364.283713][ T46] usb 6-1: device descriptor read/8, error -71 [ 364.512682][ T46] usb usb6-port1: unable to enumerate USB device [ 364.626562][ T9741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'. [ 364.967375][ T9736] overlay: filesystem on ./bus not supported as upperdir [ 368.144193][ T9803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.842'. [ 370.386324][ T9813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.844'. [ 370.521468][ T9814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.843'. [ 373.228187][ T5878] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 373.327260][ T9813] dvmrp2: entered allmulticast mode [ 373.463345][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 373.471127][ T5878] usb 4-1: unable to get BOS descriptor or descriptor too short [ 373.899962][ T5878] usb 4-1: config 7 has an invalid interface number: 164 but max is 0 [ 373.908459][ T5878] usb 4-1: config 7 has no interface number 0 [ 373.914772][ T5878] usb 4-1: config 7 interface 164 altsetting 50 has an invalid descriptor for endpoint zero, skipping [ 373.926170][ T5878] usb 4-1: config 7 interface 164 altsetting 50 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 373.951354][ T5878] usb 4-1: config 7 interface 164 altsetting 50 has an invalid descriptor for endpoint zero, skipping [ 373.963293][ T5878] usb 4-1: config 7 interface 164 altsetting 50 endpoint 0x1 has an invalid bInterval 235, changing to 7 [ 373.975231][ T5878] usb 4-1: config 7 interface 164 altsetting 50 has a duplicate endpoint with address 0x6, skipping [ 373.986455][ T5878] usb 4-1: config 7 interface 164 altsetting 50 endpoint 0x9 has invalid maxpacket 3007, setting to 64 [ 373.998028][ T5878] usb 4-1: config 7 interface 164 altsetting 50 has a duplicate endpoint with address 0x6, skipping [ 374.009164][ T5878] usb 4-1: config 7 interface 164 has no altsetting 0 [ 375.205809][ T46] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 375.323209][ T5878] usb 4-1: string descriptor 0 read error: -22 [ 375.329657][ T5878] usb 4-1: New USB device found, idVendor=057c, idProduct=8501, bcdDevice=3f.7d [ 375.344790][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.384582][ T9823] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 375.549496][ T46] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 375.557649][ T46] usb 5-1: config 0 has no interface number 0 [ 375.564349][ T46] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 375.591043][ T46] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 375.608801][ T46] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 375.624251][ T9823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.636222][ T46] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 375.655355][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 375.656433][ T46] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 375.669119][ T9823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.690161][ T5918] usb 4-1: USB disconnect, device number 29 [ 375.708947][ T46] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 375.743167][ T46] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 375.761699][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.784220][ T46] usb 5-1: config 0 descriptor?? [ 375.790045][ T9832] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 375.797859][ T9832] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 375.826071][ T46] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 375.826382][ T9] usb 6-1: device descriptor read/64, error -71 [ 376.070598][ T9870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.856'. [ 376.079919][ T9870] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 376.125344][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 376.276530][ T9] usb 6-1: device descriptor read/64, error -71 [ 376.393135][ T9] usb usb6-port1: attempt power cycle [ 376.766247][ T5918] usb 5-1: USB disconnect, device number 30 [ 376.798950][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 376.870773][ T5918] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 376.885488][ T9] usb 6-1: device descriptor read/8, error -71 [ 377.367922][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 377.408743][ T9] usb 6-1: device descriptor read/8, error -71 [ 377.418161][ T9892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.858'. [ 377.526584][ T9] usb usb6-port1: unable to enumerate USB device [ 377.541159][ T9895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.860'. [ 379.561533][ T9910] FAULT_INJECTION: forcing a failure. [ 379.561533][ T9910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.628837][ T9910] CPU: 0 UID: 0 PID: 9910 Comm: syz.0.868 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 379.639519][ T9910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 379.649604][ T9910] Call Trace: [ 379.652914][ T9910] [ 379.655879][ T9910] dump_stack_lvl+0x241/0x360 [ 379.660605][ T9910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.665841][ T9910] ? __pfx__printk+0x10/0x10 [ 379.670481][ T9910] ? vfs_write+0x730/0xd30 [ 379.674941][ T9910] should_fail_ex+0x3b0/0x4e0 [ 379.679698][ T9910] _copy_from_user+0x2f/0xc0 [ 379.684338][ T9910] move_addr_to_kernel+0x82/0x150 [ 379.689413][ T9910] __sys_bind+0x124/0x290 [ 379.693812][ T9910] ? __pfx___sys_bind+0x10/0x10 [ 379.698723][ T9910] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 379.705095][ T9910] ? do_syscall_64+0x100/0x230 [ 379.709918][ T9910] __x64_sys_bind+0x7a/0x90 [ 379.714551][ T9910] do_syscall_64+0xf3/0x230 [ 379.719094][ T9910] ? clear_bhb_loop+0x35/0x90 [ 379.723810][ T9910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.729777][ T9910] RIP: 0033:0x7fe9dcb7ff19 [ 379.734224][ T9910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.753872][ T9910] RSP: 002b:00007fe9dd9f0058 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 379.762344][ T9910] RAX: ffffffffffffffda RBX: 00007fe9dcd45fa0 RCX: 00007fe9dcb7ff19 [ 379.770352][ T9910] RDX: 000000000000001c RSI: 0000000020000080 RDI: 0000000000000004 [ 379.778353][ T9910] RBP: 00007fe9dd9f00a0 R08: 0000000000000000 R09: 0000000000000000 [ 379.786452][ T9910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.792218][ T5878] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 379.794429][ T9910] R13: 0000000000000000 R14: 00007fe9dcd45fa0 R15: 00007ffc7fb6d6d8 [ 379.794470][ T9910] [ 379.870912][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.870'. [ 379.880457][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.870'. [ 380.080791][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 380.850020][ T5878] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 380.862402][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.123393][ T5878] usb 2-1: config 0 descriptor?? [ 381.600248][ T5878] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 381.610712][ T5878] asix 2-1:0.0: probe with driver asix failed with error -32 [ 381.668078][ T9927] input: syz0 as /devices/virtual/input/input17 [ 381.769883][ T9930] netlink: 64 bytes leftover after parsing attributes in process `syz.0.874'. [ 381.820799][ T5840] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 382.238423][ T5878] usb 2-1: USB disconnect, device number 22 [ 382.528044][ T5875] IPVS: starting estimator thread 0... [ 382.658286][ T9943] IPVS: using max 19 ests per chain, 45600 per kthread [ 383.095529][ T5918] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 383.106240][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 383.266633][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 383.457006][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.468509][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 384.144295][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 384.154094][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 384.163785][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.186074][ T5918] usb 1-1: device descriptor read/64, error -71 [ 384.225131][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 384.275032][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 384.285026][ T9] usb 6-1: Manufacturer: syz [ 384.362986][ T9] usb 6-1: config 0 descriptor?? [ 384.496106][ T5918] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 384.639530][ T5918] usb 1-1: device descriptor read/64, error -71 [ 384.764057][ T5918] usb usb1-port1: attempt power cycle [ 384.891545][ T5875] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 385.075745][ T5875] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 385.083981][ T9] rc_core: IR keymap rc-hauppauge not found [ 385.093282][ T9] Registered IR keymap rc-empty [ 385.098435][ T5875] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 385.123691][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 385.126719][ T5875] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 385.158794][ T5875] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 385.159210][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 385.172326][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.212500][ T9959] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 385.224499][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 385.270734][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input18 [ 385.323955][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 385.383565][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 385.404775][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 385.430972][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 385.468943][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 385.498636][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 385.512155][ T5918] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 385.526286][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 385.536210][ T5875] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 385.548407][ T5875] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input19 [ 385.576606][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 385.583198][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 385.597889][ T5875] usb 4-1: USB disconnect, device number 30 [ 385.618794][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 385.672187][ T5918] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 385.680146][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 385.725878][ T5918] usb 1-1: config 0 has an invalid interface number: 189 but max is 0 [ 385.736274][ T9] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 385.745527][ T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 385.762850][ T5918] usb 1-1: config 0 has no interface number 0 [ 385.776799][ T5918] usb 1-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 385.803656][ T5918] usb 1-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 385.828588][ T5918] usb 1-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 385.860407][ T5918] usb 1-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 385.882707][ T5918] usb 1-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 385.925118][ T5918] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 385.945955][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.963625][ T5918] usb 1-1: Product: syz [ 385.970308][ T5918] usb 1-1: Manufacturer: syz [ 385.992670][ T5918] usb 1-1: SerialNumber: syz [ 386.032120][ T5918] usb 1-1: config 0 descriptor?? [ 386.043811][ T9987] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 386.074222][ T5918] ums-alauda 1-1:0.189: USB Mass Storage device detected [ 386.155450][ T5835] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 386.164863][ T5835] Bluetooth: hci1: Injecting HCI hardware error event [ 386.173945][ T5830] Bluetooth: hci1: hardware error 0x00 [ 386.175694][ T5918] scsi host1: usb-storage 1-1:0.189 [ 386.378810][ T9987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.506538][ T9987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.987142][T10005] input: syz1 as /devices/virtual/input/input20 [ 387.170388][ T5875] usb 6-1: USB disconnect, device number 19 [ 387.376584][ T35] scsi 1:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 387.400134][ T35] scsi 1:0:0:1: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 387.553523][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 387.646148][ T35] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 387.793365][ T35] scsi 1:0:0:1: Attached scsi generic sg2 type 0 [ 387.821946][ T5875] usb 1-1: USB disconnect, device number 31 [ 387.935236][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.5.894'. [ 388.031700][ T6529] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 388.042969][ T6560] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 388.411791][ T5830] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 388.469689][ T6529] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 388.480614][ T6529] sd 1:0:0:1: [sdc] Sense not available. [ 388.494051][ T6529] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 388.501456][ T6529] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 388.609428][ T6529] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 388.653446][ T6529] sd 1:0:0:1: [sdc] Asking for cache data failed [ 388.735063][T10032] netlink: 20 bytes leftover after parsing attributes in process `syz.5.896'. [ 390.034070][ T6560] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 390.050297][ T6529] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 390.060461][ T6529] [ 390.062817][ T6529] ====================================================== [ 390.069854][ T6529] WARNING: possible circular locking dependency detected [ 390.076892][ T6529] 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 Not tainted [ 390.084119][ T6529] ------------------------------------------------------ [ 390.091147][ T6529] kworker/u8:14/6529 is trying to acquire lock: [ 390.097379][ T6529] ffff888027b08918 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_mq_init_sched+0x3fa/0x830 [ 390.106947][ T6529] [ 390.106947][ T6529] but task is already holding lock: [ 390.114302][ T6529] ffff888027b080e0 (&q->q_usage_counter(queue)#53){++++}-{0:0}, at: add_disk_fwnode+0x10d/0xf80 [ 390.124855][ T6529] [ 390.124855][ T6529] which lock already depends on the new lock. [ 390.124855][ T6529] [ 390.135282][ T6529] [ 390.135282][ T6529] the existing dependency chain (in reverse order) is: [ 390.144329][ T6529] [ 390.144329][ T6529] -> #5 (&q->q_usage_counter(queue)#53){++++}-{0:0}: [ 390.153218][ T6529] lock_acquire+0x1ed/0x550 [ 390.158254][ T6529] blk_queue_enter+0xe1/0x600 [ 390.163488][ T6529] blk_mq_alloc_request+0x4fa/0xaa0 [ 390.169299][ T6529] scsi_execute_cmd+0x177/0x1090 [ 390.174763][ T6529] read_capacity_10+0x256/0x9c0 [ 390.180159][ T6529] sd_revalidate_disk+0x1066/0xbce0 [ 390.185883][ T6529] sd_probe+0x9fa/0x1100 [ 390.190649][ T6529] really_probe+0x2b8/0xad0 [ 390.195705][ T6529] __driver_probe_device+0x1a2/0x390 [ 390.201509][ T6529] driver_probe_device+0x50/0x430 [ 390.207052][ T6529] __device_attach_driver+0x2d6/0x530 [ 390.212946][ T6529] bus_for_each_drv+0x24e/0x2e0 [ 390.218334][ T6529] __device_attach_async_helper+0x22d/0x300 [ 390.224749][ T6529] async_run_entry_fn+0xa8/0x420 [ 390.230217][ T6529] process_scheduled_works+0xa66/0x1840 [ 390.236297][ T6529] worker_thread+0x870/0xd30 [ 390.241409][ T6529] kthread+0x2f0/0x390 [ 390.246002][ T6529] ret_from_fork+0x4b/0x80 [ 390.250943][ T6529] ret_from_fork_asm+0x1a/0x30 [ 390.256239][ T6529] [ 390.256239][ T6529] -> #4 (&q->limits_lock){+.+.}-{4:4}: [ 390.263904][ T6529] lock_acquire+0x1ed/0x550 [ 390.268941][ T6529] __mutex_lock+0x1ac/0xee0 [ 390.274007][ T6529] nbd_set_size+0x2e0/0x8f0 [ 390.279042][ T6529] nbd_ioctl+0x5dc/0xf40 [ 390.283815][ T6529] blkdev_ioctl+0x57d/0x6a0 [ 390.288842][ T6529] __se_sys_ioctl+0xf5/0x170 [ 390.293988][ T6529] do_syscall_64+0xf3/0x230 [ 390.299031][ T6529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.305458][ T6529] [ 390.305458][ T6529] -> #3 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 390.314095][ T6529] lock_acquire+0x1ed/0x550 [ 390.319147][ T6529] blk_mq_submit_bio+0x1536/0x2390 [ 390.324780][ T6529] __submit_bio+0x2c6/0x560 [ 390.329808][ T6529] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 390.335968][ T6529] block_read_full_folio+0x9b3/0xae0 [ 390.341777][ T6529] filemap_read_folio+0x148/0x3b0 [ 390.347325][ T6529] filemap_get_pages+0x18ca/0x2080 [ 390.352974][ T6529] filemap_read+0x452/0xf50 [ 390.358014][ T6529] blkdev_read_iter+0x2d8/0x430 [ 390.363390][ T6529] vfs_read+0x991/0xb70 [ 390.368095][ T6529] ksys_read+0x18f/0x2b0 [ 390.372872][ T6529] do_syscall_64+0xf3/0x230 [ 390.377908][ T6529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.384335][ T6529] [ 390.384335][ T6529] -> #2 (mapping.invalidate_lock#2){++++}-{4:4}: [ 390.392877][ T6529] lock_acquire+0x1ed/0x550 [ 390.397915][ T6529] down_read+0xb1/0xa40 [ 390.402601][ T6529] page_cache_ra_unbounded+0x142/0x720 [ 390.408587][ T6529] do_sync_mmap_readahead+0x499/0x970 [ 390.414480][ T6529] filemap_fault+0x8a9/0x1490 [ 390.419678][ T6529] __do_fault+0x135/0x390 [ 390.424535][ T6529] handle_pte_fault+0x39eb/0x5ed0 [ 390.430175][ T6529] handle_mm_fault+0x1053/0x1ad0 [ 390.435634][ T6529] exc_page_fault+0x2b9/0x8b0 [ 390.440840][ T6529] asm_exc_page_fault+0x26/0x30 [ 390.446223][ T6529] rep_movs_alternative+0x30/0x70 [ 390.451877][ T6529] _copy_from_user+0x7f/0xc0 [ 390.457022][ T6529] copy_msghdr_from_user+0xae/0x680 [ 390.462755][ T6529] do_recvmmsg+0x3bd/0xab0 [ 390.467694][ T6529] __x64_sys_recvmmsg+0x199/0x250 [ 390.473248][ T6529] do_syscall_64+0xf3/0x230 [ 390.478282][ T6529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.484724][ T6529] [ 390.484724][ T6529] -> #1 (&mm->mmap_lock){++++}-{4:4}: [ 390.492294][ T6529] lock_acquire+0x1ed/0x550 [ 390.497329][ T6529] __might_fault+0xc6/0x120 [ 390.502360][ T6529] _copy_from_user+0x2a/0xc0 [ 390.507507][ T6529] blk_trace_ioctl+0x1ad/0x9a0 [ 390.512815][ T6529] blkdev_ioctl+0x40c/0x6a0 [ 390.517842][ T6529] __se_sys_ioctl+0xf5/0x170 [ 390.522961][ T6529] do_syscall_64+0xf3/0x230 [ 390.528003][ T6529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.534428][ T6529] [ 390.534428][ T6529] -> #0 (&q->debugfs_mutex){+.+.}-{4:4}: [ 390.542259][ T6529] validate_chain+0x18ef/0x5920 [ 390.547640][ T6529] __lock_acquire+0x1397/0x2100 [ 390.553015][ T6529] lock_acquire+0x1ed/0x550 [ 390.558046][ T6529] __mutex_lock+0x1ac/0xee0 [ 390.563080][ T6529] blk_mq_init_sched+0x3fa/0x830 [ 390.568542][ T6529] elevator_init_mq+0x20e/0x320 [ 390.573920][ T6529] add_disk_fwnode+0x10d/0xf80 [ 390.579211][ T6529] sd_probe+0xba6/0x1100 [ 390.584072][ T6529] really_probe+0x2b8/0xad0 [ 390.589128][ T6529] __driver_probe_device+0x1a2/0x390 [ 390.594936][ T6529] driver_probe_device+0x50/0x430 [ 390.600666][ T6529] __device_attach_driver+0x2d6/0x530 [ 390.606564][ T6529] bus_for_each_drv+0x24e/0x2e0 [ 390.611953][ T6529] __device_attach_async_helper+0x22d/0x300 [ 390.618381][ T6529] async_run_entry_fn+0xa8/0x420 [ 390.623872][ T6529] process_scheduled_works+0xa66/0x1840 [ 390.630035][ T6529] worker_thread+0x870/0xd30 [ 390.635150][ T6529] kthread+0x2f0/0x390 [ 390.639747][ T6529] ret_from_fork+0x4b/0x80 [ 390.644707][ T6529] ret_from_fork_asm+0x1a/0x30 [ 390.650070][ T6529] [ 390.650070][ T6529] other info that might help us debug this: [ 390.650070][ T6529] [ 390.660325][ T6529] Chain exists of: [ 390.660325][ T6529] &q->debugfs_mutex --> &q->limits_lock --> &q->q_usage_counter(queue)#53 [ 390.660325][ T6529] [ 390.674889][ T6529] Possible unsafe locking scenario: [ 390.674889][ T6529] [ 390.682341][ T6529] CPU0 CPU1 [ 390.687704][ T6529] ---- ---- [ 390.693072][ T6529] lock(&q->q_usage_counter(queue)#53); [ 390.698723][ T6529] lock(&q->limits_lock); [ 390.705696][ T6529] lock(&q->q_usage_counter(queue)#53); [ 390.713879][ T6529] lock(&q->debugfs_mutex); [ 390.718511][ T6529] [ 390.718511][ T6529] *** DEADLOCK *** [ 390.718511][ T6529] [ 390.726652][ T6529] 4 locks held by kworker/u8:14/6529: [ 390.732019][ T6529] #0: ffff88801baef148 ((wq_completion)async){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 390.742957][ T6529] #1: ffffc9001041fd00 ((work_completion)(&entry->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 390.754828][ T6529] #2: ffff88805d994378 (&dev->mutex){....}-{4:4}, at: __device_attach_async_helper+0xfc/0x300 [ 390.765222][ T6529] #3: ffff888027b080e0 (&q->q_usage_counter(queue)#53){++++}-{0:0}, at: add_disk_fwnode+0x10d/0xf80 [ 390.776126][ T6529] [ 390.776126][ T6529] stack backtrace: [ 390.782019][ T6529] CPU: 0 UID: 0 PID: 6529 Comm: kworker/u8:14 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 390.792957][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 390.803020][ T6529] Workqueue: async async_run_entry_fn [ 390.808413][ T6529] Call Trace: [ 390.811694][ T6529] [ 390.814637][ T6529] dump_stack_lvl+0x241/0x360 [ 390.819341][ T6529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.824554][ T6529] ? __pfx__printk+0x10/0x10 [ 390.829161][ T6529] print_circular_bug+0x13a/0x1b0 [ 390.834196][ T6529] check_noncircular+0x36a/0x4a0 [ 390.839143][ T6529] ? __pfx_check_noncircular+0x10/0x10 [ 390.844607][ T6529] ? lockdep_lock+0x123/0x2b0 [ 390.849294][ T6529] validate_chain+0x18ef/0x5920 [ 390.854163][ T6529] ? __pfx_validate_chain+0x10/0x10 [ 390.859370][ T6529] ? stack_trace_save+0x118/0x1d0 [ 390.864410][ T6529] ? unwind_next_frame+0x18e6/0x22d0 [ 390.869697][ T6529] ? deref_stack_reg+0x17c/0x210 [ 390.874636][ T6529] ? preempt_count_add+0x93/0x190 [ 390.879671][ T6529] ? unwind_next_frame+0x193b/0x22d0 [ 390.884976][ T6529] ? look_up_lock_class+0x77/0x170 [ 390.890108][ T6529] ? register_lock_class+0x102/0x980 [ 390.895396][ T6529] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 390.901554][ T6529] ? __pfx_register_lock_class+0x10/0x10 [ 390.907186][ T6529] ? arch_stack_walk+0x11c/0x150 [ 390.912123][ T6529] ? mark_lock+0x9a/0x360 [ 390.916452][ T6529] __lock_acquire+0x1397/0x2100 [ 390.921311][ T6529] lock_acquire+0x1ed/0x550 [ 390.925817][ T6529] ? blk_mq_init_sched+0x3fa/0x830 [ 390.930937][ T6529] ? __pfx_lock_acquire+0x10/0x10 [ 390.935963][ T6529] ? __device_attach_driver+0x2d6/0x530 [ 390.941536][ T6529] ? bus_for_each_drv+0x24e/0x2e0 [ 390.946569][ T6529] ? __pfx___might_resched+0x10/0x10 [ 390.951866][ T6529] ? kthread+0x2f0/0x390 [ 390.956107][ T6529] ? ret_from_fork+0x4b/0x80 [ 390.960695][ T6529] ? ret_from_fork_asm+0x1a/0x30 [ 390.965645][ T6529] __mutex_lock+0x1ac/0xee0 [ 390.970151][ T6529] ? blk_mq_init_sched+0x3fa/0x830 [ 390.975267][ T6529] ? __asan_memset+0x23/0x50 [ 390.979867][ T6529] ? lockdep_init_map_type+0xa1/0x910 [ 390.985243][ T6529] ? blk_mq_init_sched+0x3fa/0x830 [ 390.990381][ T6529] ? __pfx___mutex_lock+0x10/0x10 [ 390.995416][ T6529] ? blk_queue_flag_set+0x24/0x40 [ 391.000456][ T6529] blk_mq_init_sched+0x3fa/0x830 [ 391.005415][ T6529] ? percpu_ref_is_zero+0xe9/0x100 [ 391.010533][ T6529] ? __pfx_blk_mq_init_sched+0x10/0x10 [ 391.015992][ T6529] ? blk_mq_cancel_work_sync+0xf3/0x140 [ 391.021535][ T6529] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 391.027515][ T6529] ? percpu_ref_kill_and_confirm+0xa0/0x130 [ 391.033419][ T6529] ? add_disk_fwnode+0x10d/0xf80 [ 391.038370][ T6529] elevator_init_mq+0x20e/0x320 [ 391.043229][ T6529] add_disk_fwnode+0x10d/0xf80 [ 391.047995][ T6529] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.053194][ T6529] ? lockdep_hardirqs_on+0x99/0x150 [ 391.058398][ T6529] sd_probe+0xba6/0x1100 [ 391.062650][ T6529] ? __pfx_sd_probe+0x10/0x10 [ 391.067327][ T6529] really_probe+0x2b8/0xad0 [ 391.071839][ T6529] __driver_probe_device+0x1a2/0x390 [ 391.077133][ T6529] driver_probe_device+0x50/0x430 [ 391.082161][ T6529] __device_attach_driver+0x2d6/0x530 [ 391.087535][ T6529] bus_for_each_drv+0x24e/0x2e0 [ 391.092423][ T6529] ? __pfx___device_attach_driver+0x10/0x10 [ 391.098322][ T6529] ? __pfx_bus_for_each_drv+0x10/0x10 [ 391.103710][ T6529] __device_attach_async_helper+0x22d/0x300 [ 391.109608][ T6529] ? __pfx___device_attach_async_helper+0x10/0x10 [ 391.116117][ T6529] ? process_scheduled_works+0x976/0x1840 [ 391.121858][ T6529] ? read_tsc+0x9/0x20 [ 391.125934][ T6529] ? ktime_get+0x1c5/0x1f0 [ 391.130361][ T6529] ? __pfx___device_attach_async_helper+0x10/0x10 [ 391.136811][ T6529] async_run_entry_fn+0xa8/0x420 [ 391.141772][ T6529] ? process_scheduled_works+0x976/0x1840 [ 391.147532][ T6529] process_scheduled_works+0xa66/0x1840 [ 391.153103][ T6529] ? __pfx_process_scheduled_works+0x10/0x10 [ 391.159276][ T6529] ? assign_work+0x364/0x3d0 [ 391.163889][ T6529] worker_thread+0x870/0xd30 [ 391.168487][ T6529] ? __kthread_parkme+0x169/0x1d0 [ 391.173513][ T6529] ? __pfx_worker_thread+0x10/0x10 [ 391.178624][ T6529] kthread+0x2f0/0x390 [ 391.182692][ T6529] ? __pfx_worker_thread+0x10/0x10 [ 391.187800][ T6529] ? __pfx_kthread+0x10/0x10 [ 391.192394][ T6529] ret_from_fork+0x4b/0x80 [ 391.196814][ T6529] ? __pfx_kthread+0x10/0x10 [ 391.201418][ T6529] ret_from_fork_asm+0x1a/0x30 [ 391.206199][ T6529] [ 391.320508][ T6529] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 391.343951][ T5921] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 391.676926][ T5921] udevd[5921]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 391.679241][ T5955] udevd[5955]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 391.760898][ T5836] udevd[5836]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 391.792524][ T5953] udevd[5953]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 392.484190][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.490522][ T1294] ieee802154 phy1 wpan1: encryption failed: -22