last executing test programs: 1m42.096610067s ago: executing program 4 (id=10): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001080)={0x0, 0xa1, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010001fff000000010000000000000000", @ANYRES32=0x0, @ANYBLOB="0404000000000000240012800b00010062726964676500001400028008001a00ff0700000500190001"], 0x44}}, 0x0) 1m41.735919423s ago: executing program 4 (id=12): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x8018) sendto$inet6(r1, 0x0, 0x0, 0x20000004, 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000001c0), 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x1, 0x0, @val=@netfilter={0x5, 0x0, 0xceb}}, 0x20) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb4, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}}}, 0xb4}}, 0x0) 1m40.817314869s ago: executing program 4 (id=13): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x200, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r7, 0x0, 0x0}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x100000, 0x0, 0x0, 0xfffffffc}, 0x0, &(0x7f00000003c0)) io_uring_setup(0x7058, &(0x7f0000000040)={0x0, 0x0, 0x482, 0x4000000, 0x30c}) io_uring_setup(0x5a97, &(0x7f00000002c0)={0x0, 0xf1a3, 0x1, 0x3, 0x257, 0x0, r5}) 1m38.635223396s ago: executing program 4 (id=20): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000240)=@e={0xff, 0x9, 0xd, 0x0, @generic}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000002380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000004c0)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1201030c, 0x803, 0x0, 0x0, 0x4}}, 0x50) read$FUSE(r1, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) truncate(&(0x7f0000000080)='./file0\x00', 0x30) write$FUSE_INIT(r1, &(0x7f0000006500)={0x50, 0x0, r3, {0x7, 0x28, 0x0, 0x140, 0x0, 0x0, 0x40000001, 0x0, 0x0, 0x0, 0x100}}, 0x50) 1m37.911299437s ago: executing program 4 (id=23): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x200, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r7, 0x0, 0x0}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x100000, 0x0, 0x0, 0xfffffffc}, 0x0, &(0x7f00000003c0)) io_uring_setup(0x7058, &(0x7f0000000040)={0x0, 0x0, 0x482, 0x4000000, 0x30c}) io_uring_setup(0x5a97, &(0x7f00000002c0)={0x0, 0xf1a3, 0x1, 0x3, 0x257, 0x0, r5}) 1m37.841809822s ago: executing program 0 (id=24): syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) (fail_nth: 5) 1m37.659933747s ago: executing program 4 (id=26): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x200, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r7, 0x0, 0x0}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x100000, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000140), &(0x7f00000003c0)) io_uring_setup(0x7058, &(0x7f0000000040)={0x0, 0x0, 0x482, 0x4000000, 0x30c}) io_uring_setup(0x5a97, &(0x7f00000002c0)={0x0, 0xf1a3, 0x1, 0x3, 0x257, 0x0, r5}) 1m37.659753278s ago: executing program 0 (id=27): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001080)={0x0, 0xa1, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010001fff000000010000000000000000", @ANYRES32=0x0, @ANYBLOB="0404000000000000240012800b00010062726964676500001400028008001a00ff0700000500190001"], 0x44}}, 0x0) 1m37.3627513s ago: executing program 32 (id=26): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x200, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r7, 0x0, 0x0}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x100000, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000140), &(0x7f00000003c0)) io_uring_setup(0x7058, &(0x7f0000000040)={0x0, 0x0, 0x482, 0x4000000, 0x30c}) io_uring_setup(0x5a97, &(0x7f00000002c0)={0x0, 0xf1a3, 0x1, 0x3, 0x257, 0x0, r5}) 1m37.357813425s ago: executing program 0 (id=29): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendto$inet(r0, 0x0, 0x700, 0x20048000, &(0x7f0000001240)={0x2, 0x6e23, @rand_addr=0x64010102}, 0x10) 1m37.231670918s ago: executing program 0 (id=33): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000240)="4160e41b1b6f87de10e476aa7f2a5444c6594c8c05ca035cc31a0693683eaf9949", 0x21) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000100)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x20000000000005, 0x3a, '/dev/bus/usb/$0#e\xb4\x98%/', 0x3a, '/dev\xc4\xf8\x98WBbus+u\xe8b/\"0#/', 0x3a, './file0'}, 0x51) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="b0000000000000"], 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r6 = dup(r5) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000000}) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000000c0)=0x10000) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m36.579223162s ago: executing program 0 (id=35): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}}, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "b1348a2fdf4bd032", "be214298687c62bc5b63c359fc146f68", "f48b7e34", "bad7cfa5892235d9"}, 0x28) setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, &(0x7f0000000100)=0x1000000, 0x63) 1m35.907869021s ago: executing program 0 (id=39): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0x4e) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r2, 0x3, 0x0) vmsplice(r0, &(0x7f0000000680)=[{&(0x7f0000000000)='*', 0x1}], 0x1, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x1000000000200, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000380)={0xa}) keyctl$join(0x1, &(0x7f0000001d00)={'syz', 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300000007000000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000020000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fremovexattr(r6, &(0x7f0000000040)=@random={'trusted.', '\\\x00'}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) sched_setattr(r7, &(0x7f0000000140)={0x38, 0x0, 0x10000002, 0x9, 0x7, 0x5, 0x2, 0x6, 0xfffffff9, 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x4900) 1m35.730684981s ago: executing program 33 (id=39): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0x4e) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r2, 0x3, 0x0) vmsplice(r0, &(0x7f0000000680)=[{&(0x7f0000000000)='*', 0x1}], 0x1, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x1000000000200, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000380)={0xa}) keyctl$join(0x1, &(0x7f0000001d00)={'syz', 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300000007000000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000020000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fremovexattr(r6, &(0x7f0000000040)=@random={'trusted.', '\\\x00'}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) sched_setattr(r7, &(0x7f0000000140)={0x38, 0x0, 0x10000002, 0x9, 0x7, 0x5, 0x2, 0x6, 0xfffffff9, 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x4900) 1m24.407968153s ago: executing program 1 (id=74): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xc, 0x4) sendto$packet(r0, &(0x7f0000000040)="c0e80300e8fe091c6202a0fffffeff006003180000007f010034e3bd190f5f61a7c6", 0xbc, 0x0, &(0x7f0000000000)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 1m23.975802706s ago: executing program 1 (id=76): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000bc0)=0xc) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ptrace(0x10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x7, 0x1, 0xa}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r3, 0x713, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000000}, 0x20) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r6, @ANYBLOB="05", @ANYRES16=r6], 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x107, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) ptrace$getregset(0x4205, 0x0, 0x202, &(0x7f0000000240)={0x0}) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') 1m20.788144365s ago: executing program 1 (id=90): syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@private=0xa010101}]}, @ssrr={0x89, 0x3, 0xca}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (fail_nth: 6) 1m20.385655724s ago: executing program 1 (id=92): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x88, &(0x7f0000000440)=ANY=[@ANYBLOB="02020080221dafebc1e927a38378c573342d0d913957a2df93acb08d1c8b3af5e9dfc016667c49cf9b68e84f50aa7fba0781cff746932d14a68acc7533149e10c4"]) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x9ca, 0x0}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000006380)=""/1024, 0x400) syz_fuse_handle_req(r2, &(0x7f0000006780), 0x2000, &(0x7f0000008780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008800)={0x30, 0x0, 0x0, [{0x0, 0x0, 0x4, 0x0, '#,,-'}]}, 0x0, 0x0, 0x0, 0x0}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r1, 0x53) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) dup(r5) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r6, 0x4030ae7b, &(0x7f0000000040)={0x4, 0x6, 0xfffffff7, 0x2, 0x8}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0400000f62aa8054c0400000", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) syz_usb_connect(0x0, 0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="120100002c464708c2153b7a80f1464e67d72dcdc9d49d810a003e66010203010902220001000000000904000001e3fe2a000964c390a2204233775a05000000947a8047f70b6130b41192ee03df27b1536b4fdc44a6caa7ad714b50e05a13882a0246540442d8f466e545407cab6b888fd94ea905f4b5e8067eb926826cbe53aa596b6334d8b8a39dca2d13"], 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r8, 0x1e, &(0x7f0000000080)={r5}, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r10 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f7, &(0x7f0000000000)={'macvlan1\x00', 0x0}) sendto$packet(r7, 0x0, 0x0, 0x44, &(0x7f00000001c0)={0x11, 0x15, r9, 0x1, 0x8, 0x6, @broadcast}, 0x14) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) 1m17.943764075s ago: executing program 1 (id=105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x541b, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xad57, 0xeec, 0xfffffffffffffffd}, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x3, 0x0, 0x5, 0x9}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x217c}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000380)={{0x3, 0x27ddde970254c7b5, 0x0, 0x2, 0x3}, 0x0, 0x2, 0xffff}) 1m17.592625322s ago: executing program 1 (id=107): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x200, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r7, 0x0, 0x0}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x100000, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000140), 0x0) io_uring_setup(0x7058, &(0x7f0000000040)={0x0, 0x0, 0x482, 0x4000000, 0x30c}) io_uring_setup(0x5a97, &(0x7f00000002c0)={0x0, 0xf1a3, 0x1, 0x3, 0x257, 0x0, r5}) 1m17.196854642s ago: executing program 34 (id=107): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x200, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r7, 0x0, 0x0}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x100000, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000140), 0x0) io_uring_setup(0x7058, &(0x7f0000000040)={0x0, 0x0, 0x482, 0x4000000, 0x30c}) io_uring_setup(0x5a97, &(0x7f00000002c0)={0x0, 0xf1a3, 0x1, 0x3, 0x257, 0x0, r5}) 5.555920051s ago: executing program 5 (id=545): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x448e00) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000140)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r2 = epoll_create1(0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="22000000002000004e55c10ba0fabbd3faf7764b02d7f8b2d8d5f460a46ea29aab3d940ce25dc805af51f3411fe5e470cf3de14bd93728c7ab2f40320f137f70ba14cf6be1c233574096e31f6ffb2b240127193b704ed570c44c72a02e227475a195cc82399cb18ddd4302ec9ded98891a5e76a0185cf793f4c551ac0a0ac4c07fa0cd8744af1f07f0129803a3653324a6950b27228353453e8ac14d9396924277ab632ec4458e81cb331d540eeb743f1c4ca288", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)) r4 = epoll_create1(0x0) ppoll(&(0x7f0000000080)=[{r4, 0x17}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xa0000001}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) getpeername$packet(r7, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000540)=0x14) (async) ioctl$FS_IOC_GETFLAGS(r6, 0x80046601, 0x0) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x0, @dev}}) (async) r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r8, 0xc0405668, &(0x7f0000000100)={0x0, 0x0, 0xc}) (async) r9 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r9, 0x80045017, 0x0) (async) r10 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) (async) io_setup(0x4, &(0x7f0000000080)=0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_cancel(r11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0xddf9, r9, &(0x7f0000000200)="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", 0xfc, 0x9, 0x0, 0x4}, &(0x7f0000000480)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r10, 0xc0684113, &(0x7f0000000380)={0x0, 0xa, 0x80000000, 0x1001, 0xccca, 0x0, 0xffffffed, 0xfffffffd, 0xffffffff, 0x0, 0xffffffe9}) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)) r12 = socket(0x2b, 0x80801, 0x1) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 5.497760749s ago: executing program 3 (id=548): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_open_dev$vim2m(&(0x7f0000000c00), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000c40)={0xf, 0x1, 0x0, "7deb91d437e2dd6fc1432eea703c0bf501ac5a36ff3c7829c2779640450064eb", 0x38303553}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c009900ff07000070000000000000cc00"], 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x0) close(r3) timerfd_create(0x6, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') r7 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$sock_int(r7, 0x1, 0x23, &(0x7f0000000100)=0x1, 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, 0x0, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @window, @sack_perm, @timestamp, @timestamp, @timestamp], 0x8) sendto$inet(r8, &(0x7f0000001740)="cb", 0x1, 0x8001, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4) 5.482720474s ago: executing program 6 (id=549): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x214, 0x214, 0x720d, 0x148, 0x0, 0x148, 0x2c4, 0x240, 0x240, 0x2c4, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @remote, 0xffffffff, 0x0, 'ip6gre0\x00', 'bond0\x00', {0xff}, {}, 0x84, 0x3, 0x11}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x1e01, 0x2, 0x7], 0x1}, {0xffffffffffffffff, [0x6, 0xb2cc575b459b5b33, 0x1, 0x5, 0x21], 0x6, 0x3}}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x12ee6d772310561e, 'bond_slave_0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x67, 0x2, 0x40}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x100]}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x270) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r1}, &(0x7f0000001cc0)=""/199, 0xc7, &(0x7f00000000c0)={&(0x7f0000000000)={'sm3\x00'}}) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$update(0x2, r2, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="78dff97fda81643885c486", 0xb, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r2, r3}, &(0x7f0000000540)=""/4096, 0x1000, &(0x7f00000001c0)={&(0x7f0000000100)={'sha256-mb\x00'}, &(0x7f0000000140)="9c51fb3db10db5ae897bd3aeb1af514ca4501a2e97578257834762902d5d3ea0d2e7ab76cf133796fbfb19a6d6faaebdae36d0d0d3561ba9ca4ca8a3a5ba2a1b9527d93cc5", 0x45}) 5.247961486s ago: executing program 6 (id=550): r0 = socket(0x40000000015, 0x800, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f00000003c0), 0x4) write$cgroup_subtree(r2, 0x0, 0xffbf) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f2131ba377a1b2cc32b38d3440c6942cb76cab300"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x6c, 0xeb, 0x85, 0x40, 0x249c, 0x9002, 0xdead, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xdf, 0x6d}}]}}]}}, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c454461fc1cb1d79a1f014f0000005200010000000000000000000a2b796a8491f7bd", @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) 5.200622925s ago: executing program 5 (id=551): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) open(&(0x7f0000000040)='./file0\x00', 0x40c6, 0x1b2) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e00000010000000000000000020001000000000000000300000000000300050000000000020000007f0000010000000000000000020013"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000004c40)={@private1, r6}, 0x14) 5.165319116s ago: executing program 3 (id=552): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x14) (async) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x14) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) (async) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x200800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000380)={0x5, 0x4, 0x0, 'queue0\x00', 0x100}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=0x1, 0xa, 0x1, 0x80000001, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) fchown(r4, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@map=r4, r1, 0x1b, 0x2010, r0, @value, @void, @void, @void, r3}, 0x20) pipe(&(0x7f00000000c0)) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$char_usb(r5, &(0x7f0000000280)="ec596457", 0x4) (async) write$char_usb(r5, &(0x7f0000000280)="ec596457", 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100), 0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="120100003ca12a102c105161e644000000010902120701000000000904"], 0x0) 5.020144838s ago: executing program 5 (id=553): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xae, 0x48, 0x81, 0x20, 0x4f1, 0x1001, 0x1963, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfa, 0x0, 0x0, 0x49, 0xab, 0x6b}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0x10f) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a0001000000000002000000800220"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.556275755s ago: executing program 2 (id=554): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x8000, 0x200, 0x4, 0xffffffff}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r2, @ANYBLOB], 0x54}}, 0x0) r4 = openat$pfkey(0xffffff9c, &(0x7f0000000080), 0x80400, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000280)={0xe4bd, 0xfffffffa, 0x0, {0x3, @pix_mp={0x1, 0x7, 0x32315659, 0x5, 0x5, [{0xdfd, 0x3}, {0x9, 0xe7a6}, {0xfd6, 0x3}, {0x80000000, 0x3fc0000}, {0x7f, 0x2e50}, {0x3, 0xfffffeff}, {0x800}, {0x7, 0xb}], 0x1, 0x7f, 0x7ee2172176ee944f, 0x1, 0x3}}, 0x3}) 4.446986109s ago: executing program 2 (id=555): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x10}, [@FRA_DST={0x8, 0x1, @multicast1}]}, 0x24}}, 0x0) (fail_nth: 6) 3.908245736s ago: executing program 2 (id=556): socket$inet6(0xa, 0x800000000000002, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000006ac0)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d0009058a", @ANYBLOB="d93e92e85b"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x1e7780) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x6, 0x1, 0x5, 0x80000001, 0x3, 0x8000}) 3.538940062s ago: executing program 3 (id=557): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000003f80)=[{{0x0, 0x2000, 0x0}}, {{&(0x7f0000000280)={0x1e, 0x204, @rand_addr=0x1000000}, 0x9a33803930063b44, 0x0}}], 0x2, 0x0) 3.48583566s ago: executing program 3 (id=558): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3], 0x34}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$radio(&(0x7f0000002b40), 0x3, 0x2) ioctl$VIDIOC_QUERYMENU(r6, 0xc02c5625, &(0x7f0000000000)={0x98f907, 0x5, @name="03489dc364b8b035b088af7cd259cf32928518e18ff9ffffff08581448a7fc5e"}) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002, 0x800, @empty, 0x8a7}, 0x1c) r7 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0x40}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYRESHEX=r4], 0x0) 3.398562414s ago: executing program 6 (id=560): socket$nl_route(0x10, 0x3, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) (async) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r1 = io_uring_setup(0x1fc3, &(0x7f00000002c0)) (async) r2 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) (async) close_range(r1, 0xffffffffffffffff, 0x0) 3.368775454s ago: executing program 5 (id=561): preadv(0xffffffffffffffff, &(0x7f0000002700)=[{&(0x7f00000008c0)=""/98, 0x62}], 0x1, 0x1c, 0x0) 3.218652968s ago: executing program 5 (id=562): syz_usb_connect(0x3, 0x1e3, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000484d8e40da0b290145d4010203010902d10101000000000904"], 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x1, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x5, 0x4, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x240, 0x7, 0xb4, 0xd}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x2, 0x3, 0x40, 0x20, 0x4}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x5f, 0x4}]}, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2837}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1801}}, {0xe8, &(0x7f0000000340)=@string={0xe8, 0x3, "16c38efc0b4d5c33bed330cc74e8f53e290fae87bd74949c93b7dc6755aff337339cf5f7dff07b77834501b78cb94fa7f4b6012761f915c766aae46b26bc5265eaff9b92ab5ad507451a87a6e5d89abf151212403b1db4539f398c2ac564c50773b7bcb25b05d15807a270518c2f492db1f0a3cbd340a7458a6279a7a65c7627057adfa87426c567edf88f2037c19b35a84eea1c8ef53e536ad05d49cf8fbe17685f740ccde0214a32e6a7920824e521fb2eba034c2324032c537585e43d384a59800fe8993e36e187b713d952348babcfd4c8ab7dbef41499221f800b16ecfef8cb60fc3342"}}]}) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x4, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_open_dev$video(&(0x7f0000000080), 0xf3b2, 0x410800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x5, &(0x7f0000000480)=0x1) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x88c20, &(0x7f0000000000)=ANY=[@ANYBLOB=',f,'], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000100)={0x3, r2, 0x0, 0x7ffffe02, 0xb, 0x1fd, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x1}, {0x20}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) 3.180797489s ago: executing program 7 (id=563): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000010101010000000000000000020000000c00198008"], 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, 0x0, 0x0) socket$kcm(0x25, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0xa000000, 0x0, 0x0) 3.132321965s ago: executing program 6 (id=564): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000010101010000000000000000020000000c00198008"], 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, 0x0, 0x0) socket$kcm(0x25, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0xa000000, 0x0, 0x0) 2.372075994s ago: executing program 3 (id=565): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x8000, 0x200, 0x4, 0xffffffff}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r2, @ANYBLOB="08000100000000"], 0x54}}, 0x0) r4 = openat$pfkey(0xffffff9c, &(0x7f0000000080), 0x80400, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000280)={0xe4bd, 0xfffffffa, 0x0, {0x3, @pix_mp={0x1, 0x7, 0x32315659, 0x5, 0x5, [{0xdfd, 0x3}, {0x9, 0xe7a6}, {0xfd6, 0x3}, {0x80000000, 0x3fc0000}, {0x7f, 0x2e50}, {0x3, 0xfffffeff}, {0x800}, {0x7, 0xb}], 0x1, 0x7f, 0x7ee2172176ee944f, 0x1, 0x3}}, 0x3}) 2.347539888s ago: executing program 3 (id=566): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/21, 0x15}], 0x1) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f2, 0x1421, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="20a1100000000000000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12) syz_emit_ethernet(0x2e, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000000aaaaaa4be5a803a635cabe2000000000010290780000000000000000110007e3dc439078e000000100820000"], 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r1, 0x30}) r5 = socket$alg(0x26, 0x5, 0x0) io_uring_enter(r2, 0x4506, 0xcc7c, 0x11, &(0x7f00000000c0)={[0x1, 0x2]}, 0x8) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r7, 0x7b1, &(0x7f0000000040)={0x0, 0xb338bc11f352303c, 0x0, 0x9}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x40, 0x30, 0x7, 0x0, 0x10, 0x2001, {0x0, 0x0, 0x1}, {}, {0x0, 0x7}, {0xfffffffc, 0x0, 0x800008}, 0x0, 0x3f0, 0x7fff, 0x200006, 0x0, 0x2, 0x10000, 0x0, 0x100, 0x0, 0x0, 0x20, 0xe, 0x0, 0x0, 0x8}) r9 = socket(0x22, 0x2, 0x4) getsockname(r9, 0x0, 0x0) pread64(r0, &(0x7f0000000440)=""/249, 0xf9, 0x359) 2.287648795s ago: executing program 7 (id=567): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0xa, 0x2, 0x4, "a600000000000000009e7379d557a6050000000040ed00000002000500", 0x34324948}) setsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, 0x3a) rmdir(&(0x7f00000001c0)='./file0\x00') r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c00000001040108050001000100"/28], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c0000000104010200000000000033a4000000040500010000000000"], 0x1c}}, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000180)={0x0, 0xfffffffffffffffe, 0x7a, 0x0, @scatter={0x0, 0x1200, 0x0}, &(0x7f0000000100)="a1000c6a084878c3d69f1b4c98e8b7e90e408e297ec868f09b42780f861d6b27c52a0806e19e678d5672140f4b46a6ade680210e791456604a93cab4db1a0ba6b29aab03c9ce5efb45fc0f76d330b8979153a7131600bb03087e103bc314c97f4f1cf1247c1f64c6ecd2093276f188b4bf8ba004acfdc0bfe801", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$bsg(0xffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffff9, 0xe7, 0x100, 0x8000, 0x8, 0x0, 0x4, 0x2, 0x1, 0x400, 0x9, 0x0, 0x10001, 0x7, 0x8, 0x8], 0x1, 0x20c101}) 2.11594425s ago: executing program 7 (id=568): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_sa2={0x2, 0x13, 0x1}]}, 0x60}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) tkill(0x0, 0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000200)={0x3, 0x7, 0x8, 0x7, 0x5, 0x6, 0x81, 0x5}, &(0x7f0000000240)={0x5, 0xb, 0x8000000000000000, 0x100000000003, 0xf43, 0x7ed9, 0x89, 0xffffffff00000001}, &(0x7f0000000480)={0x4, 0x2, 0x8, 0x7fffffff, 0x4, 0x4, 0x6, 0x9}, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x9, 0x81]}, 0x8}) r2 = io_uring_setup(0xfdc, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x2, 0x257}) io_uring_enter(r2, 0x0, 0x2, 0xf, 0x0, 0x0) r3 = dup(r1) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140)) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x250, 0xa, 0x0, 0x0, 0x3e, 0x180, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfcc2bb8dafb2b72d}) (fail_nth: 4) 2.037744885s ago: executing program 2 (id=569): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8042}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x13, 0x1a}}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) (fail_nth: 6) 2.004429124s ago: executing program 6 (id=570): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x84, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x7fff, 0x7f, 0x8001, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xd}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x1, 0x4, 0x0, 0x1bb, 0x4}}]}}}]}, 0x84}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x84, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x7fff, 0x7f, 0x8001, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xd}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x1, 0x4, 0x0, 0x1bb, 0x4}}]}}}]}, 0x84}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000010000000600000000000000010000000203000040ff"]) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"]) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"]) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x10000]}}) r6 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r6, &(0x7f0000001b40)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x20000894) (async) sendmmsg$inet6(r6, &(0x7f0000001b40)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x20000894) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x1, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x1, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) 1.044223603s ago: executing program 2 (id=571): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x20, 0x0, 0x0, 0x4, 0x0) 980.171836ms ago: executing program 7 (id=572): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x403, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}]}}}]}, 0x38}}, 0x10) (fail_nth: 6) 914.925672ms ago: executing program 2 (id=573): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000600000069104e000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fchdir(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0xfffffffffffffffe, &(0x7f00000002c0)) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005c00)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x9, 0xc}, {0xa, 0xc}, {0x10, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0xd0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x7800, 0x20, 0x7, 0x4, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x66, 0x0, 0x9, 0x4, 0x0, @multicast1, @local}}}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x680201, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) sysfs$3(0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="73c8"], 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$int_in(r9, 0x5421, &(0x7f0000000040)=0x81b) r10 = socket(0x22, 0x2, 0x4) getsockname(r10, 0x0, 0x0) read$char_usb(r9, 0x0, 0x4) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@float={0x1, 0x0, 0x0, 0x10, 0x8}, @typedef={0xb, 0x0, 0x0, 0x8, 0x4}, @union={0x10, 0x1, 0x0, 0x5, 0x0, 0xc, [{0x6, 0x1, 0x101}]}]}, {0x0, [0x2e, 0x5f, 0x30, 0x61, 0x5f, 0x0]}}, &(0x7f0000000000)=""/2, 0x50, 0x2, 0x0, 0x230c, 0x10000, @value=r5}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x7, 0x401, 0x1, 0x4931, r1, 0x8, '\x00', 0x0, r11, 0x4, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34005118", @ANYRES16=r8, @ANYBLOB="0500ffffffff0a0000002e00000008000300", @ANYRES8=r5, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000b04fcff", 0x58}], 0x1) 403.975438ms ago: executing program 7 (id=574): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newtaction={0x54, 0x1c, 0x109, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x40, 0x1, [@m_mirred={0x3c, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0xf, 0x6, "9dbedb73e516277ab12a3a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x0) 178.295229ms ago: executing program 6 (id=575): r0 = syz_usbip_server_init(0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) mkdir(0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x400, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x40}}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) syz_usbip_server_init(0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x294ef98252e47195, 0x31, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000002140)='net/ip_tables_targets\x00') lseek(r5, 0x4, 0x0) getdents64(r5, 0xffffffffffffffff, 0x43) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r9) connect$unix(r8, &(0x7f0000000140)=@abs, 0x6e) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close(r7) r10 = syz_open_procfs(0x0, &(0x7f0000000ac0)='net/nfsfs\x00') lseek(r10, 0x3ff, 0x3) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r6, 0xc0505405, 0x0) 100.514158ms ago: executing program 7 (id=576): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x8000, 0x200, 0x4, 0xffffffff}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r2, @ANYBLOB="08000100000000"], 0x54}}, 0x0) r4 = openat$pfkey(0xffffff9c, &(0x7f0000000080), 0x80400, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000280)={0xe4bd, 0xfffffffa, 0x0, {0x3, @pix_mp={0x1, 0x7, 0x32315659, 0x5, 0x5, [{0xdfd, 0x3}, {0x9, 0xe7a6}, {0xfd6, 0x3}, {0x80000000, 0x3fc0000}, {0x7f, 0x2e50}, {0x3, 0xfffffeff}, {0x800}, {0x7, 0xb}], 0x1, 0x7f, 0x7ee2172176ee944f, 0x1, 0x3}}, 0x3}) 0s ago: executing program 5 (id=577): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000010101010000000000000000020000000c00198008"], 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, 0x0, 0x0) socket$kcm(0x25, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0xa000000, 0x0, 0x0) kernel console output (not intermixed with test programs): d USB device number 16 using dummy_hcd [ 127.956896][ T5884] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 127.984212][ T5884] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.015899][ T5884] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.039044][ T8] m920x_read = error: -19 [ 128.043472][ T8] dvb-usb: error -19 while querying for an remote control event. [ 128.056833][ T5884] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 128.066975][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.098027][ T5884] usb 3-1: Product: syz [ 128.109349][ T5884] usb 3-1: Manufacturer: syz [ 128.117825][ T5884] usb 3-1: SerialNumber: syz [ 128.178150][ T5886] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 128.206282][ T5886] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.216766][ T119] m920x_read = error: -19 [ 128.221757][ T119] dvb-usb: error -19 while querying for an remote control event. [ 128.238862][ T5886] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.259202][ T5886] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.322135][ T5886] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 128.344092][ T29] audit: type=1326 audit(1733990504.287:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 128.375050][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 128.389191][ T119] m920x_read = error: -19 [ 128.394456][ T119] dvb-usb: error -19 while querying for an remote control event. [ 128.413514][ T5886] usb 4-1: Product: syz [ 128.417777][ T5886] usb 4-1: Manufacturer: syz [ 128.424579][ T7383] netlink: 'syz.2.307': attribute type 6 has an invalid length. [ 128.434155][ T29] audit: type=1326 audit(1733990504.307:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 128.446219][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.307'. [ 128.455882][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.469247][ T29] audit: type=1326 audit(1733990504.307:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=289 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 128.511367][ T5886] cdc_wdm 4-1:1.0: skipping garbage [ 128.516658][ T5886] cdc_wdm 4-1:1.0: skipping garbage [ 128.547148][ T5886] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 128.564429][ T5886] cdc_wdm 4-1:1.0: Unknown control protocol [ 128.564576][ T29] audit: type=1326 audit(1733990504.307:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 128.594314][ T29] audit: type=1326 audit(1733990504.307:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 128.599322][ T119] m920x_read = error: -19 [ 128.617200][ T29] audit: type=1326 audit(1733990504.307:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 128.670915][ T29] audit: type=1326 audit(1733990504.307:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 128.682487][ T119] dvb-usb: error -19 while querying for an remote control event. [ 128.693634][ T29] audit: type=1326 audit(1733990504.307:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 128.724983][ T29] audit: type=1326 audit(1733990504.307:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 128.747717][ T29] audit: type=1326 audit(1733990504.307:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7346 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 128.823789][ T119] usb 4-1: USB disconnect, device number 16 [ 128.929354][ T5886] m920x_read = error: -19 [ 128.935811][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 129.119283][ T5886] m920x_read = error: -19 [ 129.129104][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 129.207864][ T7402] netlink: 12 bytes leftover after parsing attributes in process `syz.6.318'. [ 129.310726][ T5886] m920x_read = error: -19 [ 129.316997][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 129.532483][ T5886] m920x_read = error: -19 [ 129.536915][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 129.719083][ T5886] m920x_read = error: -19 [ 129.724326][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 129.924614][ T119] m920x_read = error: -19 [ 129.929552][ T119] dvb-usb: error -19 while querying for an remote control event. [ 130.022725][ T7435] xt_TCPMSS: Only works on TCP SYN packets [ 130.039464][ T7434] xt_TCPMSS: Only works on TCP SYN packets [ 130.054084][ T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 130.099267][ T5886] m920x_read = error: -19 [ 130.099904][ T46] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 130.103767][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 130.119713][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.326'. [ 130.239789][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 130.265212][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 130.289216][ T5886] m920x_read = error: -19 [ 130.293711][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 130.303710][ T46] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.313513][ T8] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 130.323696][ T46] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.323742][ T46] usb 8-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 130.323767][ T46] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.327932][ T46] usb 8-1: config 0 descriptor?? [ 130.395553][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.429126][ T8] usb 4-1: Product: syz [ 130.433381][ T8] usb 4-1: Manufacturer: syz [ 130.458638][ T8] usb 4-1: SerialNumber: syz [ 130.476556][ T8] usb 4-1: config 0 descriptor?? [ 130.489575][ T7421] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 130.509510][ T5886] m920x_read = error: -19 [ 130.514030][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 130.529308][ T8] hub 4-1:0.0: bad descriptor, ignoring hub [ 130.535306][ T8] hub 4-1:0.0: probe with driver hub failed with error -5 [ 130.634259][ T5884] usb 3-1: 0:2 : does not exist [ 130.649951][ T8] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 130.720131][ T5883] m920x_read = error: -19 [ 130.724560][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 130.810160][ T46] chicony 0003:04F2:1421.0009: unknown main item tag 0x0 [ 130.838591][ T46] chicony 0003:04F2:1421.0009: unknown main item tag 0x0 [ 130.841629][ T5884] usb 3-1: USB disconnect, device number 13 [ 130.876199][ T46] chicony 0003:04F2:1421.0009: unknown main item tag 0x0 [ 130.909059][ T46] chicony 0003:04F2:1421.0009: unknown main item tag 0x0 [ 130.919463][ T5883] m920x_read = error: -19 [ 130.930586][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 130.934020][ T46] chicony 0003:04F2:1421.0009: unknown main item tag 0x0 [ 130.958082][ T7468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.332'. [ 130.998909][ T46] chicony 0003:04F2:1421.0009: hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.7-1/input0 [ 131.089071][ T5884] m920x_read = error: -19 [ 131.093543][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 131.108189][ T6168] udevd[6168]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.284091][ T46] usb 8-1: USB disconnect, device number 6 [ 131.329844][ T5883] m920x_read = error: -19 [ 131.339557][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 131.533920][ T5883] m920x_read = error: -19 [ 131.538394][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 131.749287][ T8] m920x_read = error: -19 [ 131.755093][ T8] dvb-usb: error -19 while querying for an remote control event. [ 131.939289][ T5883] m920x_read = error: -19 [ 131.944022][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 132.110203][ T5881] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 132.129209][ T5883] m920x_read = error: -19 [ 132.134014][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 132.330536][ T5881] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.339496][ T5881] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.349771][ T5881] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.350276][ T5884] m920x_read = error: -19 [ 132.358730][ T5881] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.361104][ T5881] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 132.384470][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.392711][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 132.458224][ T5881] usb 3-1: Product: syz [ 132.482624][ T5881] usb 3-1: Manufacturer: syz [ 132.513494][ T5881] cdc_wdm 3-1:1.0: skipping garbage [ 132.518787][ T5881] cdc_wdm 3-1:1.0: skipping garbage [ 132.550748][ T5884] m920x_read = error: -19 [ 132.555230][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 132.566855][ T5881] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 132.598817][ T5881] cdc_wdm 3-1:1.0: Unknown control protocol [ 132.707581][ T7513] netlink: 16 bytes leftover after parsing attributes in process `syz.6.342'. [ 132.757803][ T5884] m920x_read = error: -19 [ 132.769121][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 132.828133][ T5884] usb 3-1: USB disconnect, device number 14 [ 132.923689][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.7.344'. [ 132.959283][ T5883] m920x_read = error: -19 [ 132.974081][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 132.995875][ T5883] usb 4-1: USB disconnect, device number 17 [ 133.001982][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 133.105986][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.112520][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.159242][ T5886] m920x_read = error: -19 [ 133.164215][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 133.329044][ T5884] m920x_read = error: -19 [ 133.333542][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 133.509135][ T5883] m920x_read = error: -19 [ 133.514347][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 133.679311][ T5886] m920x_read = error: -19 [ 133.683800][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 133.783331][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.6.352'. [ 133.794787][ T7557] ALSA: mixer_oss: invalid OSS volume '' [ 133.820093][ T5881] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 133.839081][ T5884] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 133.860515][ T5883] m920x_read = error: -19 [ 133.865101][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 133.879596][ T7564] FAULT_INJECTION: forcing a failure. [ 133.879596][ T7564] name failslab, interval 1, probability 0, space 0, times 0 [ 133.895251][ T7564] CPU: 0 UID: 0 PID: 7564 Comm: syz.3.353 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 133.905956][ T7564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 133.916047][ T7564] Call Trace: [ 133.919352][ T7564] [ 133.922304][ T7564] dump_stack_lvl+0x241/0x360 [ 133.927024][ T7564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.932268][ T7564] ? __pfx__printk+0x10/0x10 [ 133.936899][ T7564] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 133.943444][ T7564] ? __pfx___might_resched+0x10/0x10 [ 133.948768][ T7564] should_fail_ex+0x3b0/0x4e0 [ 133.953489][ T7564] should_failslab+0xac/0x100 [ 133.958203][ T7564] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 133.964565][ T7564] ? drm_set_client_name+0x8d/0x1f0 [ 133.969109][ T5881] usb 8-1: Using ep0 maxpacket: 16 [ 133.969775][ T7564] memdup_user_nul+0x2f/0x100 [ 133.976734][ T5881] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.979539][ T7564] drm_set_client_name+0x8d/0x1f0 [ 133.979570][ T7564] drm_ioctl_kernel+0x337/0x440 [ 133.979590][ T7564] ? __pfx_drm_set_client_name+0x10/0x10 [ 133.979608][ T7564] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 133.979625][ T7564] ? __might_fault+0xc6/0x120 [ 133.979646][ T7564] drm_ioctl+0x60e/0xad0 [ 133.979663][ T7564] ? __pfx_drm_set_client_name+0x10/0x10 [ 133.979688][ T7564] ? __pfx_drm_ioctl+0x10/0x10 [ 133.979715][ T7564] ? __fget_files+0x2a/0x410 [ 133.979736][ T7564] ? drm_compat_ioctl+0xab/0x340 [ 133.979761][ T7564] __se_compat_sys_ioctl+0x502/0xc10 [ 133.979783][ T7564] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 133.979802][ T7564] ? __fget_files+0x2a/0x410 [ 133.979827][ T7564] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 133.979850][ T7564] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 133.979876][ T7564] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 133.979900][ T7564] ? lockdep_hardirqs_on+0x99/0x150 [ 133.979924][ T7564] __do_fast_syscall_32+0xb4/0x110 [ 133.979948][ T7564] ? exc_page_fault+0x590/0x8b0 [ 133.979973][ T7564] do_fast_syscall_32+0x34/0x80 [ 133.980014][ T7564] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 133.980045][ T7564] RIP: 0023:0xf742d579 [ 133.980063][ T7564] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 133.980080][ T7564] RSP: 002b:00000000f510657c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 133.980102][ T7564] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c02064d1 [ 133.980115][ T7564] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 133.980128][ T7564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 133.980140][ T7564] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 133.980152][ T7564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 133.980174][ T7564] [ 134.039054][ T5886] m920x_read = error: -19 [ 134.039081][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 134.081511][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.084968][ T5881] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.094861][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.099704][ T5881] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 134.099738][ T5881] usb 8-1: config 0 interface 0 has no altsetting 0 [ 134.099772][ T5881] usb 8-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 134.099796][ T5881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.113844][ T5881] usb 8-1: config 0 descriptor?? [ 134.137533][ T5884] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 134.173253][ T7571] FAULT_INJECTION: forcing a failure. [ 134.173253][ T7571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.209110][ T5883] m920x_read = error: -19 [ 134.247613][ T7571] CPU: 1 UID: 0 PID: 7571 Comm: syz.3.354 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 134.306573][ T7571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 134.316635][ T7571] Call Trace: [ 134.319914][ T7571] [ 134.322886][ T7571] dump_stack_lvl+0x241/0x360 [ 134.327571][ T7571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.332776][ T7571] ? __pfx__printk+0x10/0x10 [ 134.337375][ T7571] ? snprintf+0xda/0x120 [ 134.341620][ T7571] should_fail_ex+0x3b0/0x4e0 [ 134.346307][ T7571] _copy_to_user+0x31/0xb0 [ 134.350728][ T7571] simple_read_from_buffer+0xca/0x150 [ 134.356105][ T7571] proc_fail_nth_read+0x1e9/0x250 [ 134.361138][ T7571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 134.366684][ T7571] ? rw_verify_area+0x55e/0x6f0 [ 134.371529][ T7571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 134.377079][ T7571] vfs_read+0x1fc/0xb70 [ 134.381241][ T7571] ? __pfx___mutex_lock+0x10/0x10 [ 134.386270][ T7571] ? __pfx_vfs_read+0x10/0x10 [ 134.390960][ T7571] ? __fget_files+0x2a/0x410 [ 134.395556][ T7571] ? __fget_files+0x395/0x410 [ 134.400237][ T7571] ? __fget_files+0x2a/0x410 [ 134.404836][ T7571] ksys_read+0x18f/0x2b0 [ 134.409079][ T7571] ? __pfx_ksys_read+0x10/0x10 [ 134.413843][ T7571] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 134.420440][ T7571] ? lockdep_hardirqs_on+0x99/0x150 [ 134.425752][ T7571] __do_fast_syscall_32+0xb4/0x110 [ 134.430864][ T7571] ? exc_page_fault+0x590/0x8b0 [ 134.435725][ T7571] do_fast_syscall_32+0x34/0x80 [ 134.440584][ T7571] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.446928][ T7571] RIP: 0023:0xf742d579 [ 134.451027][ T7571] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 134.470640][ T7571] RSP: 002b:00000000f50e55b0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 134.479055][ T7571] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f50e5620 [ 134.487020][ T7571] RDX: 000000000000000f RSI: 00000000f741bff4 RDI: 0000000000000000 [ 134.494989][ T7571] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 134.502970][ T7571] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 134.510945][ T7571] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.518925][ T7571] [ 134.522001][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.550093][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 134.561885][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.581528][ T5884] usb 3-1: config 0 descriptor?? [ 134.717259][ T5886] m920x_read = error: -19 [ 134.726118][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.5.357'. [ 134.726952][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 134.845260][ T5881] hid-generic 0003:045E:05DA.000A: unbalanced collection at end of report description [ 134.856059][ T5881] hid-generic 0003:045E:05DA.000A: probe with driver hid-generic failed with error -22 [ 134.915775][ T7584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.356'. [ 134.956954][ T7584] netlink: 68 bytes leftover after parsing attributes in process `syz.3.356'. [ 134.976051][ T5886] m920x_read = error: -19 [ 134.989220][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 134.999931][ T5884] chicony 0003:04F2:1421.000B: unknown main item tag 0x0 [ 135.033576][ T5884] chicony 0003:04F2:1421.000B: unknown main item tag 0x0 [ 135.049092][ T5884] chicony 0003:04F2:1421.000B: unknown main item tag 0x0 [ 135.056196][ T5884] chicony 0003:04F2:1421.000B: unknown main item tag 0x0 [ 135.079246][ T5884] chicony 0003:04F2:1421.000B: unknown main item tag 0x0 [ 135.100303][ T5884] chicony 0003:04F2:1421.000B: hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.2-1/input0 [ 135.199202][ T5884] m920x_read = error: -19 [ 135.212335][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 135.390635][ T5886] m920x_read = error: -19 [ 135.395079][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 135.414628][ T5884] usb 3-1: USB disconnect, device number 15 [ 135.611430][ T5883] m920x_read = error: -19 [ 135.616273][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 135.636837][ T7614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.362'. [ 135.646479][ T7613] netlink: 'syz.7.347': attribute type 13 has an invalid length. [ 135.918052][ T7622] FAULT_INJECTION: forcing a failure. [ 135.918052][ T7622] name failslab, interval 1, probability 0, space 0, times 0 [ 135.940197][ T5884] m920x_read = error: -19 [ 135.944632][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 135.954696][ T7622] CPU: 1 UID: 0 PID: 7622 Comm: syz.5.364 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 135.965337][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 135.975422][ T7622] Call Trace: [ 135.978733][ T7622] [ 135.981718][ T7622] dump_stack_lvl+0x241/0x360 [ 135.986435][ T7622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.991666][ T7622] ? __pfx__printk+0x10/0x10 [ 135.996287][ T7622] ? __kmalloc_noprof+0xb5/0x4c0 [ 136.001260][ T7622] ? __pfx___might_resched+0x10/0x10 [ 136.006583][ T7622] should_fail_ex+0x3b0/0x4e0 [ 136.011300][ T7622] should_failslab+0xac/0x100 [ 136.016013][ T7622] __kmalloc_noprof+0xdd/0x4c0 [ 136.020815][ T7622] ? nla_strdup+0x9c/0x140 [ 136.025259][ T7622] ? __kasan_kmalloc+0x98/0xb0 [ 136.030053][ T7622] nla_strdup+0x9c/0x140 [ 136.034329][ T7622] nf_tables_newtable+0x59b/0x1e40 [ 136.039478][ T7622] ? nfnl_pernet+0x23/0x240 [ 136.044020][ T7622] ? __pfx_nf_tables_newtable+0x10/0x10 [ 136.049603][ T7622] ? __nla_parse+0x40/0x60 [ 136.055817][ T7622] nfnetlink_rcv+0x14e3/0x2ab0 [ 136.060638][ T7622] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 136.065804][ T7622] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.071012][ T7622] ? skb_clone+0x240/0x390 [ 136.075436][ T7622] ? __pfx_lock_release+0x10/0x10 [ 136.080481][ T7622] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.085683][ T7622] netlink_unicast+0x7f6/0x990 [ 136.090462][ T7622] ? __pfx_netlink_unicast+0x10/0x10 [ 136.095746][ T7622] ? __virt_addr_valid+0x45f/0x530 [ 136.100861][ T7622] ? __phys_addr_symbol+0x2f/0x70 [ 136.105887][ T7622] ? __check_object_size+0x47a/0x730 [ 136.111174][ T7622] netlink_sendmsg+0x8e4/0xcb0 [ 136.115944][ T7622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.121230][ T7622] ? __pfx_lock_release+0x10/0x10 [ 136.126248][ T7622] ? aa_sock_msg_perm+0x91/0x160 [ 136.131184][ T7622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.136462][ T7622] __sock_sendmsg+0x221/0x270 [ 136.141143][ T7622] ____sys_sendmsg+0x52a/0x7e0 [ 136.145912][ T7622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.151210][ T7622] __sys_sendmsg+0x269/0x350 [ 136.155800][ T7622] ? __pfx_lock_release+0x10/0x10 [ 136.160826][ T7622] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.165946][ T7622] ? __pfx_vfs_write+0x10/0x10 [ 136.170729][ T7622] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 136.177344][ T7622] ? lockdep_hardirqs_on+0x99/0x150 [ 136.182563][ T7622] __do_fast_syscall_32+0xb4/0x110 [ 136.187687][ T7622] ? exc_page_fault+0x590/0x8b0 [ 136.192545][ T7622] do_fast_syscall_32+0x34/0x80 [ 136.197402][ T7622] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.203736][ T7622] RIP: 0023:0xf7f20579 [ 136.207807][ T7622] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 136.227412][ T7622] RSP: 002b:00000000f509657c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 136.235828][ T7622] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 136.243804][ T7622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.251778][ T7622] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.259747][ T7622] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 136.267716][ T7622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.277805][ T7622] [ 136.282715][ T5886] m920x_read = error: -19 [ 136.287101][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 136.305204][ T7613] gretap0: refused to change device tx_queue_len [ 136.331363][ T7613] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 136.449531][ T5886] m920x_read = error: -19 [ 136.453913][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 136.475774][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.5.367'. [ 136.547873][ T7641] netlink: 32 bytes leftover after parsing attributes in process `syz.3.368'. [ 136.553176][ T7636] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20000 [ 136.576261][ T5884] usb 8-1: USB disconnect, device number 7 [ 136.588171][ T7641] FAULT_INJECTION: forcing a failure. [ 136.588171][ T7641] name failslab, interval 1, probability 0, space 0, times 0 [ 136.601131][ T7641] CPU: 0 UID: 0 PID: 7641 Comm: syz.3.368 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 136.611758][ T7641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 136.621846][ T7641] Call Trace: [ 136.625141][ T7641] [ 136.628089][ T7641] dump_stack_lvl+0x241/0x360 [ 136.632799][ T7641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.638038][ T7641] ? __pfx__printk+0x10/0x10 [ 136.642667][ T7641] ? ref_tracker_alloc+0x332/0x490 [ 136.647812][ T7641] should_fail_ex+0x3b0/0x4e0 [ 136.647852][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.5.367'. [ 136.652506][ T7641] should_failslab+0xac/0x100 [ 136.652532][ T7641] ? skb_clone+0x20c/0x390 [ 136.652551][ T7641] kmem_cache_alloc_noprof+0x70/0x380 [ 136.652577][ T7641] skb_clone+0x20c/0x390 [ 136.652599][ T7641] __netlink_deliver_tap+0x3cc/0x7f0 [ 136.652627][ T7641] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.690559][ T7641] netlink_deliver_tap+0x19d/0x1b0 [ 136.695708][ T7641] netlink_sendskb+0x68/0x140 [ 136.700428][ T7641] netlink_unicast+0x39d/0x990 [ 136.705241][ T7641] ? __pfx_netlink_unicast+0x10/0x10 [ 136.710565][ T7641] netlink_rcv_skb+0x262/0x430 [ 136.715357][ T7641] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.720845][ T7641] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.726176][ T7641] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.731400][ T7641] netlink_unicast+0x7f6/0x990 [ 136.736202][ T7641] ? __pfx_netlink_unicast+0x10/0x10 [ 136.741519][ T7641] ? __virt_addr_valid+0x45f/0x530 [ 136.746661][ T7641] ? __phys_addr_symbol+0x2f/0x70 [ 136.751714][ T7641] ? __check_object_size+0x47a/0x730 [ 136.757034][ T7641] netlink_sendmsg+0x8e4/0xcb0 [ 136.761841][ T7641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.767160][ T7641] ? __pfx_lock_release+0x10/0x10 [ 136.772213][ T7641] ? aa_sock_msg_perm+0x91/0x160 [ 136.777184][ T7641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.782506][ T7641] __sock_sendmsg+0x221/0x270 [ 136.787222][ T7641] ____sys_sendmsg+0x52a/0x7e0 [ 136.792027][ T7641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.797360][ T7641] __sys_sendmsg+0x269/0x350 [ 136.801980][ T7641] ? __pfx_lock_release+0x10/0x10 [ 136.807037][ T7641] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.812192][ T7641] ? __pfx_vfs_write+0x10/0x10 [ 136.817020][ T7641] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 136.823644][ T7641] ? lockdep_hardirqs_on+0x99/0x150 [ 136.828879][ T7641] __do_fast_syscall_32+0xb4/0x110 [ 136.834024][ T7641] ? exc_page_fault+0x590/0x8b0 [ 136.838907][ T7641] do_fast_syscall_32+0x34/0x80 [ 136.843784][ T7641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.850145][ T7641] RIP: 0023:0xf742d579 [ 136.854237][ T7641] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 136.873873][ T7641] RSP: 002b:00000000f510657c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 136.882328][ T7641] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 136.890327][ T7641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 136.898331][ T7641] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.906330][ T7641] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 136.914338][ T7641] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.922442][ T7641] [ 136.925620][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.949057][ T5886] m920x_read = error: -19 [ 136.953448][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 137.029102][ T5882] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 137.142293][ T5883] m920x_read = error: -19 [ 137.146724][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 137.199338][ T5882] usb 7-1: Using ep0 maxpacket: 8 [ 137.217398][ T5882] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 137.273713][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.311476][ T5882] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.335460][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 137.350134][ T5884] m920x_read = error: -19 [ 137.354520][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 137.383453][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 137.438492][ T5882] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 137.451866][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.462245][ T5882] usb 7-1: config 0 descriptor?? [ 137.469946][ T7650] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 137.479454][ T7650] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 137.549277][ T5884] m920x_read = error: -19 [ 137.553675][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 137.602375][ T7683] syz.7.376 uses obsolete (PF_INET,SOCK_PACKET) [ 137.739442][ T5883] m920x_read = error: -19 [ 137.743835][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 137.835946][ T5881] usb 7-1: USB disconnect, device number 11 [ 137.843924][ T5838] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 137.866473][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.378'. [ 137.889346][ T5884] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 137.989294][ T5883] m920x_read = error: -19 [ 137.993695][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 138.123528][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.167352][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.191077][ T5883] m920x_read = error: -19 [ 138.195503][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 138.219006][ T5884] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 138.252071][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.313197][ T5884] usb 3-1: config 0 descriptor?? [ 138.409251][ T5883] m920x_read = error: -19 [ 138.413702][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 138.487407][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.6.384'. [ 138.609219][ T5886] m920x_read = error: -19 [ 138.613838][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 138.726252][ T5883] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 138.737983][ T5884] chicony 0003:04F2:1421.000C: unknown main item tag 0x0 [ 138.773147][ T5884] chicony 0003:04F2:1421.000C: unknown main item tag 0x0 [ 138.800150][ T5884] chicony 0003:04F2:1421.000C: unknown main item tag 0x0 [ 138.809251][ T5886] m920x_read = error: -19 [ 138.817642][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 138.849971][ T5884] chicony 0003:04F2:1421.000C: unknown main item tag 0x0 [ 138.888827][ T5884] chicony 0003:04F2:1421.000C: unknown main item tag 0x0 [ 138.915821][ T5884] chicony 0003:04F2:1421.000C: hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.2-1/input0 [ 138.947758][ T5883] usb 6-1: Using ep0 maxpacket: 16 [ 138.961388][ T5883] usb 6-1: config 0 has an invalid interface number: 39 but max is 0 [ 138.961419][ T5883] usb 6-1: config 0 has no interface number 0 [ 138.963324][ T5883] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d [ 138.963354][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.963376][ T5883] usb 6-1: Product: syz [ 138.963421][ T5883] usb 6-1: Manufacturer: syz [ 138.963438][ T5883] usb 6-1: SerialNumber: syz [ 138.965445][ T5883] usb 6-1: config 0 descriptor?? [ 138.968613][ T5883] i2c-tiny-usb 6-1:0.39: version 70.6d found at bus 006 address 009 [ 139.020563][ T5884] m920x_read = error: -19 [ 139.020587][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 139.027461][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.6.388'. [ 139.189356][ T5884] m920x_read = error: -19 [ 139.189409][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 139.350039][ T5884] m920x_read = error: -19 [ 139.357139][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 139.402183][ T5883] (null): failure reading functionality [ 139.460572][ T5884] usb 3-1: USB disconnect, device number 16 [ 139.539324][ T5886] m920x_read = error: -19 [ 139.543723][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 139.717593][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.6.392'. [ 139.779190][ T5884] m920x_read = error: -19 [ 139.786699][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 139.790445][ T7749] netlink: 'syz.3.393': attribute type 1 has an invalid length. [ 139.962843][ T5884] m920x_read = error: -19 [ 139.968252][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 140.193852][ T5886] m920x_read = error: -19 [ 140.198339][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 140.361674][ T5883] i2c i2c-2: failure reading functionality [ 140.413953][ T5883] i2c i2c-2: connected i2c-tiny-usb device [ 140.420447][ T5886] m920x_read = error: -19 [ 140.434783][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 140.447930][ T5883] usb 6-1: USB disconnect, device number 9 [ 140.510526][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 140.619883][ T5886] m920x_read = error: -19 [ 140.624552][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 140.819329][ T5883] m920x_read = error: -19 [ 140.823724][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 141.009105][ T5886] m920x_read = error: -19 [ 141.013506][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 141.240802][ T5886] m920x_read = error: -19 [ 141.245209][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 141.486209][ T5883] m920x_read = error: -19 [ 141.490694][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 141.680456][ T5883] m920x_read = error: -19 [ 141.684948][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 141.788324][ T7810] netlink: 8280 bytes leftover after parsing attributes in process `syz.6.404'. [ 141.811363][ T7810] netlink: 8280 bytes leftover after parsing attributes in process `syz.6.404'. [ 141.919162][ T5883] m920x_read = error: -19 [ 141.923569][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 142.689021][ T46] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 143.309118][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 143.323667][ T46] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 143.344313][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 143.366664][ T46] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 143.382267][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.418667][ T46] usb 3-1: Product: syz [ 143.436233][ T46] usb 3-1: Manufacturer: syz [ 143.456584][ T46] usb 3-1: SerialNumber: syz [ 143.513326][ T46] usb 3-1: config 0 descriptor?? [ 143.555097][ T46] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 143.639619][ T46] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 143.649222][ T5882] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 143.831116][ T5882] usb 6-1: config 0 has an invalid descriptor of length 174, skipping remainder of the config [ 143.859370][ T5882] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 143.905405][ T5882] usb 6-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 143.975735][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.018316][ T5882] usb 6-1: config 0 descriptor?? [ 144.166297][ T46] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 144.180206][ T46] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 144.224165][ T5886] m920x_read = error: -19 [ 144.228592][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 144.379631][ T5882] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 144.395840][ T46] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 144.402408][ T5883] m920x_read = error: -19 [ 144.403315][ T46] em28xx 3-1:0.0: No AC97 audio processor [ 144.420153][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 144.541552][ T5882] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 144.569030][ T5882] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.592140][ T5883] m920x_read = error: -19 [ 144.596531][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 144.598926][ T5882] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 144.625748][ T7850] netlink: 'syz.3.415': attribute type 3 has an invalid length. [ 144.633509][ T5882] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.641980][ T7850] netlink: 28 bytes leftover after parsing attributes in process `syz.3.415'. [ 144.654610][ T5882] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 144.664433][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 144.683130][ T5882] usb 7-1: Product: syz [ 144.687557][ T5882] usb 7-1: Manufacturer: syz [ 144.699336][ T5882] cdc_wdm 7-1:1.0: skipping garbage [ 144.704582][ T5882] cdc_wdm 7-1:1.0: skipping garbage [ 144.721829][ T5882] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 144.727782][ T5882] cdc_wdm 7-1:1.0: Unknown control protocol [ 144.809188][ T5884] m920x_read = error: -19 [ 144.813571][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 144.955814][ T7864] netlink: 12 bytes leftover after parsing attributes in process `syz.7.417'. [ 144.989107][ T5884] m920x_read = error: -19 [ 144.993504][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 145.070986][ T7876] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.418'. [ 145.106100][ T7876] netlink: 8280 bytes leftover after parsing attributes in process `syz.3.418'. [ 145.169863][ T5884] m920x_read = error: -19 [ 145.191790][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 145.389686][ T5884] m920x_read = error: -19 [ 145.398145][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 145.427733][ T46] usb 3-1: USB disconnect, device number 17 [ 145.440692][ T46] em28xx 3-1:0.0: Disconnecting em28xx [ 145.488804][ T46] em28xx 3-1:0.0: Freeing device [ 145.584204][ T5884] m920x_read = error: -19 [ 145.594335][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 145.779852][ T5884] m920x_read = error: -19 [ 145.788803][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 145.960074][ T5884] m920x_read = error: -19 [ 145.964634][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 146.129167][ T5884] m920x_read = error: -19 [ 146.133589][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 146.189135][ T5882] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 146.299403][ T5886] m920x_read = error: -19 [ 146.303798][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 146.342014][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.354823][ T5881] usb 6-1: USB disconnect, device number 10 [ 146.361990][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.378423][ T5882] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 146.388503][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.434666][ T5882] usb 4-1: config 0 descriptor?? [ 146.469559][ T5884] m920x_read = error: -19 [ 146.487798][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 146.614270][ T7923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.429'. [ 146.669234][ T5886] m920x_read = error: -19 [ 146.679590][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 146.743537][ T7927] netlink: 8280 bytes leftover after parsing attributes in process `syz.7.430'. [ 146.771937][ T7927] netlink: 8280 bytes leftover after parsing attributes in process `syz.7.430'. [ 146.839052][ T5886] m920x_read = error: -19 [ 146.847974][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 146.869591][ T7931] FAULT_INJECTION: forcing a failure. [ 146.869591][ T7931] name failslab, interval 1, probability 0, space 0, times 0 [ 146.874365][ T5882] chicony 0003:04F2:1421.000D: unknown main item tag 0x0 [ 146.883000][ T7931] CPU: 0 UID: 0 PID: 7931 Comm: syz.2.432 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 146.900275][ T7931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 146.910345][ T7931] Call Trace: [ 146.913625][ T7931] [ 146.916554][ T7931] dump_stack_lvl+0x241/0x360 [ 146.921244][ T7931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.926446][ T7931] ? __pfx__printk+0x10/0x10 [ 146.931038][ T7931] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 146.936938][ T7931] ? __pfx___might_resched+0x10/0x10 [ 146.942228][ T7931] ? lockdep_init_map_type+0xa1/0x910 [ 146.947600][ T7931] should_fail_ex+0x3b0/0x4e0 [ 146.952285][ T7931] should_failslab+0xac/0x100 [ 146.956966][ T7931] ? __alloc_workqueue+0x934/0x1f20 [ 146.962163][ T7931] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 146.967885][ T7931] __alloc_workqueue+0x934/0x1f20 [ 146.972923][ T7931] ? bd_prepare_to_claim+0x432/0x4d0 [ 146.978212][ T7931] alloc_workqueue+0xd6/0x210 [ 146.982890][ T7931] ? __pfx___mutex_lock+0x10/0x10 [ 146.987965][ T7931] ? loop_configure+0x425/0xeb0 [ 146.992836][ T7931] ? __pfx_alloc_workqueue+0x10/0x10 [ 146.998136][ T7931] ? __asan_memcpy+0x40/0x70 [ 147.002817][ T7931] ? loop_set_status_from_info+0x181/0x2b0 [ 147.008629][ T7931] loop_configure+0x519/0xeb0 [ 147.013317][ T7931] lo_ioctl+0x846/0x1f50 [ 147.017557][ T7931] ? __asan_memset+0x23/0x50 [ 147.022142][ T7931] ? unwind_next_frame+0x18e6/0x22d0 [ 147.027429][ T7931] ? __pfx_lo_ioctl+0x10/0x10 [ 147.032109][ T7931] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.038631][ T7931] ? __lock_acquire+0x1397/0x2100 [ 147.043659][ T7931] ? __pfx_validate_chain+0x10/0x10 [ 147.048860][ T7931] ? __pfx_validate_chain+0x10/0x10 [ 147.054068][ T7931] ? __lock_acquire+0x1397/0x2100 [ 147.059096][ T7931] ? __pfx_validate_chain+0x10/0x10 [ 147.064311][ T7931] ? mark_lock+0x9a/0x360 [ 147.068656][ T7931] ? validate_chain+0x11e/0x5920 [ 147.073597][ T7931] ? mark_lock+0x9a/0x360 [ 147.077932][ T7931] ? __lock_acquire+0x1397/0x2100 [ 147.082974][ T7931] ? __pfx_lock_acquire+0x10/0x10 [ 147.087995][ T7931] ? is_bpf_text_address+0x26/0x2a0 [ 147.093201][ T7931] ? __pfx_lock_release+0x10/0x10 [ 147.098225][ T7931] ? unwind_next_frame+0x18e6/0x22d0 [ 147.103512][ T7931] ? preempt_count_add+0x93/0x190 [ 147.108549][ T7931] ? is_bpf_text_address+0x285/0x2a0 [ 147.113833][ T7931] ? is_bpf_text_address+0x26/0x2a0 [ 147.119032][ T7931] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 147.125184][ T7931] ? kernel_text_address+0xa7/0xe0 [ 147.130295][ T7931] ? __kernel_text_address+0xd/0x40 [ 147.135499][ T7931] ? unwind_get_return_address+0x4d/0x90 [ 147.141151][ T7931] ? arch_stack_walk+0xfd/0x150 [ 147.146007][ T7931] ? stack_trace_save+0x118/0x1d0 [ 147.151030][ T7931] ? __pfx_stack_trace_save+0x10/0x10 [ 147.156402][ T7931] ? stack_depot_save_flags+0x37/0x940 [ 147.161889][ T7931] lo_compat_ioctl+0x292/0x330 [ 147.166659][ T7931] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 147.171945][ T7931] ? blkdev_common_ioctl+0xfb2/0x2460 [ 147.177311][ T7931] ? tomoyo_path_number_perm+0x679/0x860 [ 147.182965][ T7931] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 147.188684][ T7931] ? tomoyo_path_number_perm+0x6f9/0x860 [ 147.194327][ T7931] ? tomoyo_path_number_perm+0x206/0x860 [ 147.199965][ T7931] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 147.205968][ T7931] ? __pfx_lock_acquire+0x10/0x10 [ 147.211008][ T7931] ? file_to_blk_mode+0xcc/0x140 [ 147.215950][ T7931] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 147.221235][ T7931] compat_blkdev_ioctl+0x5d8/0x7b0 [ 147.226352][ T7931] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 147.231982][ T7931] ? __fget_files+0x2a/0x410 [ 147.236584][ T7931] __se_compat_sys_ioctl+0x502/0xc10 [ 147.241880][ T7931] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 147.247691][ T7931] ? __fget_files+0x2a/0x410 [ 147.252287][ T7931] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 147.258272][ T7931] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 147.264608][ T7931] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 147.271196][ T7931] ? lockdep_hardirqs_on+0x99/0x150 [ 147.276400][ T7931] __do_fast_syscall_32+0xb4/0x110 [ 147.281517][ T7931] ? exc_page_fault+0x590/0x8b0 [ 147.286373][ T7931] do_fast_syscall_32+0x34/0x80 [ 147.291223][ T7931] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.297558][ T7931] RIP: 0023:0xf740d579 [ 147.301621][ T7931] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 147.321225][ T7931] RSP: 002b:00000000f50e657c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 147.329643][ T7931] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c0a [ 147.337616][ T7931] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.345593][ T7931] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.353568][ T7931] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 147.361542][ T7931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.369529][ T7931] [ 147.374646][ T5886] m920x_read = error: -19 [ 147.379065][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 147.399063][ T5882] chicony 0003:04F2:1421.000D: unknown main item tag 0x0 [ 147.408835][ T5882] chicony 0003:04F2:1421.000D: unknown main item tag 0x0 [ 147.455796][ T5882] chicony 0003:04F2:1421.000D: unknown main item tag 0x0 [ 147.455835][ T5882] chicony 0003:04F2:1421.000D: unknown main item tag 0x0 [ 147.484846][ T5886] usb 7-1: USB disconnect, device number 12 [ 147.539351][ T5882] chicony 0003:04F2:1421.000D: hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.3-1/input0 [ 147.539960][ T5883] m920x_read = error: -19 [ 147.581031][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 147.711290][ T7934] netlink: 24 bytes leftover after parsing attributes in process `syz.7.433'. [ 147.761517][ T5881] usb 4-1: USB disconnect, device number 18 [ 147.811214][ T5884] m920x_read = error: -19 [ 147.815613][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 147.893539][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz.6.434'. [ 147.896834][ T7947] FAULT_INJECTION: forcing a failure. [ 147.896834][ T7947] name failslab, interval 1, probability 0, space 0, times 0 [ 147.921346][ T7949] capability: warning: `syz.2.439' uses deprecated v2 capabilities in a way that may be insecure [ 147.924517][ T7947] CPU: 0 UID: 0 PID: 7947 Comm: syz.7.438 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 147.942475][ T7947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 147.952554][ T7947] Call Trace: [ 147.955859][ T7947] [ 147.958806][ T7947] dump_stack_lvl+0x241/0x360 [ 147.963517][ T7947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.968744][ T7947] ? __pfx__printk+0x10/0x10 [ 147.973365][ T7947] ? fs_reclaim_acquire+0x93/0x130 [ 147.978509][ T7947] ? __pfx___might_resched+0x10/0x10 [ 147.983829][ T7947] should_fail_ex+0x3b0/0x4e0 [ 147.988533][ T7947] should_failslab+0xac/0x100 [ 147.993228][ T7947] __kmalloc_noprof+0xdd/0x4c0 [ 147.998025][ T7947] ? tomoyo_encode+0x26f/0x540 [ 148.002827][ T7947] tomoyo_encode+0x26f/0x540 [ 148.007458][ T7947] tomoyo_realpath_from_path+0x59e/0x5e0 [ 148.013137][ T7947] tomoyo_check_open_permission+0x258/0x4f0 [ 148.019074][ T7947] ? tomoyo_check_open_permission+0x207/0x4f0 [ 148.025174][ T7947] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 148.031654][ T7947] ? do_raw_spin_unlock+0x13c/0x8b0 [ 148.036866][ T7947] security_file_open+0xac/0x250 [ 148.041818][ T7947] do_dentry_open+0x328/0x1b70 [ 148.046639][ T7947] vfs_open+0x3e/0x330 [ 148.050743][ T7947] path_openat+0x2c84/0x3590 [ 148.055391][ T7947] ? __pfx_path_openat+0x10/0x10 [ 148.059122][ T5882] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 148.060352][ T7947] do_filp_open+0x27f/0x4e0 [ 148.072408][ T7947] ? __pfx_do_filp_open+0x10/0x10 [ 148.077458][ T7947] ? do_raw_spin_lock+0x14f/0x370 [ 148.082542][ T7947] do_sys_openat2+0x13e/0x1d0 [ 148.087248][ T7947] ? __pfx_do_sys_openat2+0x10/0x10 [ 148.092444][ T7947] ? __fget_files+0x2a/0x410 [ 148.097032][ T7947] ? __fget_files+0x2a/0x410 [ 148.101617][ T7947] __ia32_compat_sys_openat+0x23f/0x290 [ 148.107165][ T7947] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 148.113231][ T7947] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 148.119818][ T7947] ? lockdep_hardirqs_on+0x99/0x150 [ 148.125010][ T7947] __do_fast_syscall_32+0xb4/0x110 [ 148.130116][ T7947] ? exc_page_fault+0x590/0x8b0 [ 148.134956][ T7947] do_fast_syscall_32+0x34/0x80 [ 148.139802][ T7947] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 148.146125][ T7947] RIP: 0023:0xf7f87579 [ 148.150184][ T7947] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 148.169803][ T7947] RSP: 002b:00000000f50f657c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 148.178265][ T7947] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000480 [ 148.186232][ T7947] RDX: 0000000000010000 RSI: 00000000000001a2 RDI: 0000000000000000 [ 148.194198][ T7947] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.202168][ T7947] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 148.210165][ T7947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.218149][ T7947] [ 148.223558][ T5884] m920x_read = error: -19 [ 148.227978][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 148.239159][ T7947] ERROR: Out of memory at tomoyo_realpath_from_path. [ 148.255551][ T5882] usb 6-1: config 0 has an invalid descriptor of length 174, skipping remainder of the config [ 148.282771][ T5882] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 148.326462][ T5882] usb 6-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 148.381717][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.400001][ T5884] m920x_read = error: -19 [ 148.404394][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 148.420900][ T5882] usb 6-1: config 0 descriptor?? [ 148.432171][ T7954] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 148.454797][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.7.442'. [ 148.635453][ T5884] m920x_read = error: -19 [ 148.640024][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 148.812745][ T5884] m920x_read = error: -19 [ 148.817127][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 148.819353][ T46] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 148.991036][ T5886] m920x_read = error: -19 [ 148.995419][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 149.005056][ T46] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 149.030268][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.066837][ T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 149.072507][ T7991] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 149.076156][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.104104][ T46] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 149.114499][ T46] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 149.123034][ T46] usb 3-1: Product: syz [ 149.129428][ T46] usb 3-1: Manufacturer: syz [ 149.148451][ T46] cdc_wdm 3-1:1.0: skipping garbage [ 149.154036][ T46] cdc_wdm 3-1:1.0: skipping garbage [ 149.164538][ T46] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 149.169155][ T5886] m920x_read = error: -19 [ 149.171512][ T46] cdc_wdm 3-1:1.0: Unknown control protocol [ 149.174849][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 149.329155][ T5884] m920x_read = error: -19 [ 149.333549][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 149.439159][ T5886] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 149.520293][ T5883] m920x_read = error: -19 [ 149.530153][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 149.629212][ T5886] usb 8-1: Using ep0 maxpacket: 16 [ 149.644435][ T5886] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.661373][ T5886] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.677218][ T5886] usb 8-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 149.688376][ T5886] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.705232][ T5886] usb 8-1: config 0 descriptor?? [ 149.710890][ T5883] m920x_read = error: -19 [ 149.715297][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 149.879198][ T5883] m920x_read = error: -19 [ 149.886568][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 149.929146][ T5881] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 150.049256][ T5883] m920x_read = error: -19 [ 150.053823][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 150.079239][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 150.086326][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.096925][ T5881] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 150.107273][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.117954][ T5881] usb 4-1: config 0 descriptor?? [ 150.126650][ T5881] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 150.144177][ T5886] wacom 0003:056A:0059.000E: item fetching failed at offset 3/5 [ 150.152783][ T5886] wacom 0003:056A:0059.000E: parse failed [ 150.158639][ T5886] wacom 0003:056A:0059.000E: probe with driver wacom failed with error -22 [ 150.229671][ T5886] m920x_read = error: -19 [ 150.234101][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 150.345805][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.7.455'. [ 150.358219][ T46] usb 8-1: USB disconnect, device number 8 [ 150.399780][ T5883] m920x_read = error: -19 [ 150.404297][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 150.573443][ T5883] m920x_read = error: -19 [ 150.581498][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 150.615601][ T8022] FAULT_INJECTION: forcing a failure. [ 150.615601][ T8022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.629092][ T8022] CPU: 1 UID: 0 PID: 8022 Comm: syz.6.465 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 150.639732][ T8022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 150.649817][ T8022] Call Trace: [ 150.653105][ T8022] [ 150.656031][ T8022] dump_stack_lvl+0x241/0x360 [ 150.660728][ T8022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.665955][ T8022] ? __pfx__printk+0x10/0x10 [ 150.670588][ T8022] ? snprintf+0xda/0x120 [ 150.674854][ T8022] should_fail_ex+0x3b0/0x4e0 [ 150.679561][ T8022] _copy_to_user+0x31/0xb0 [ 150.684004][ T8022] simple_read_from_buffer+0xca/0x150 [ 150.689385][ T8022] proc_fail_nth_read+0x1e9/0x250 [ 150.694419][ T8022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.699987][ T8022] ? rw_verify_area+0x55e/0x6f0 [ 150.704858][ T8022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.710418][ T8022] vfs_read+0x1fc/0xb70 [ 150.714579][ T8022] ? __pfx___mutex_lock+0x10/0x10 [ 150.719613][ T8022] ? __pfx_vfs_read+0x10/0x10 [ 150.724300][ T8022] ? __fget_files+0x2a/0x410 [ 150.728894][ T8022] ? __fget_files+0x395/0x410 [ 150.733578][ T8022] ? __fget_files+0x2a/0x410 [ 150.738186][ T8022] ksys_read+0x18f/0x2b0 [ 150.742428][ T8022] ? __pfx_ksys_read+0x10/0x10 [ 150.747195][ T8022] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 150.753786][ T8022] ? lockdep_hardirqs_on+0x99/0x150 [ 150.758992][ T8022] __do_fast_syscall_32+0xb4/0x110 [ 150.764111][ T8022] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 150.770279][ T8022] ? lockdep_hardirqs_on+0x99/0x150 [ 150.775480][ T8022] do_fast_syscall_32+0x34/0x80 [ 150.780339][ T8022] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.786672][ T8022] RIP: 0023:0xf7f16579 [ 150.790737][ T8022] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 150.810347][ T8022] RSP: 002b:00000000f50865b0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 150.818768][ T8022] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5086620 [ 150.826746][ T8022] RDX: 000000000000000f RSI: 00000000f739bff4 RDI: 0000000000000000 [ 150.834722][ T8022] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 150.842698][ T8022] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 150.850667][ T8022] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.858650][ T8022] [ 150.861715][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.872042][ T5883] m920x_read = error: -19 [ 150.876459][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 150.877364][ T8018] input: syz1 as /devices/virtual/input/input13 [ 150.999219][ T5886] usb 6-1: USB disconnect, device number 11 [ 151.041947][ T5881] gspca_vc032x: reg_r err -110 [ 151.059714][ T5883] m920x_read = error: -19 [ 151.064159][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 151.065961][ T5881] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 151.230082][ T5883] m920x_read = error: -19 [ 151.234568][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 151.339155][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.6.471'. [ 151.409229][ T5883] m920x_read = error: -19 [ 151.413724][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 151.499665][ T5886] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 151.563084][ T8044] binder: 8043:8044 ioctl c0306201 20001e40 returned -14 [ 151.589271][ T8] m920x_read = error: -19 [ 151.594426][ T5881] usb 3-1: USB disconnect, device number 18 [ 151.598055][ T8] dvb-usb: error -19 while querying for an remote control event. [ 151.670597][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.686857][ T5886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.697340][ T5886] usb 6-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 151.707444][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.732658][ T5886] usb 6-1: config 0 descriptor?? [ 151.779670][ T8048] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 151.799476][ T5883] m920x_read = error: -19 [ 151.803962][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 152.000243][ T8] m920x_read = error: -19 [ 152.004685][ T8] dvb-usb: error -19 while querying for an remote control event. [ 152.147661][ T5886] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 152.158655][ T5886] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 152.167194][ T5886] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 152.169188][ T5881] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 152.179053][ T5883] m920x_read = error: -19 [ 152.198428][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 152.216674][ T5886] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 152.224786][ T5886] chicony 0003:04F2:1421.000F: unknown main item tag 0x0 [ 152.240662][ T5886] chicony 0003:04F2:1421.000F: hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.5-1/input0 [ 152.308760][ T8065] FAULT_INJECTION: forcing a failure. [ 152.308760][ T8065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.324175][ T8065] CPU: 0 UID: 0 PID: 8065 Comm: syz.2.483 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 152.334783][ T8065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 152.342370][ T5881] usb 8-1: config 0 has an invalid descriptor of length 174, skipping remainder of the config [ 152.344837][ T8065] Call Trace: [ 152.344850][ T8065] [ 152.344860][ T8065] dump_stack_lvl+0x241/0x360 [ 152.344893][ T8065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.362298][ T5881] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 152.366001][ T8065] ? __pfx__printk+0x10/0x10 [ 152.366042][ T8065] ? snprintf+0xda/0x120 [ 152.366064][ T8065] should_fail_ex+0x3b0/0x4e0 [ 152.372787][ T5881] usb 8-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 152.380187][ T8065] _copy_to_user+0x31/0xb0 [ 152.380224][ T8065] simple_read_from_buffer+0xca/0x150 [ 152.380248][ T8065] proc_fail_nth_read+0x1e9/0x250 [ 152.380271][ T8065] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.380299][ T8065] ? rw_verify_area+0x55e/0x6f0 [ 152.380316][ T8065] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.380334][ T8065] vfs_read+0x1fc/0xb70 [ 152.380355][ T8065] ? __pfx___mutex_lock+0x10/0x10 [ 152.380379][ T8065] ? __pfx_vfs_read+0x10/0x10 [ 152.380395][ T8065] ? __se_compat_sys_ioctl+0x150/0xc10 [ 152.380417][ T8065] ? __fget_files+0x2a/0x410 [ 152.380440][ T8065] ? __fget_files+0x395/0x410 [ 152.380460][ T8065] ? __fget_files+0x2a/0x410 [ 152.380491][ T8065] ksys_read+0x18f/0x2b0 [ 152.380511][ T8065] ? __pfx_ksys_read+0x10/0x10 [ 152.380531][ T8065] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 152.390802][ T5881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.394004][ T8065] ? lockdep_hardirqs_on+0x99/0x150 [ 152.394039][ T8065] __do_fast_syscall_32+0xb4/0x110 [ 152.394064][ T8065] ? exc_page_fault+0x590/0x8b0 [ 152.412192][ T5881] usb 8-1: config 0 descriptor?? [ 152.412845][ T8065] do_fast_syscall_32+0x34/0x80 [ 152.412879][ T8065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 152.521774][ T8065] RIP: 0023:0xf740d579 [ 152.525856][ T8065] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 152.545477][ T8065] RSP: 002b:00000000f50e65b0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 152.553922][ T8065] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50e6620 [ 152.561906][ T8065] RDX: 000000000000000f RSI: 00000000f73fbff4 RDI: 0000000000000000 [ 152.569910][ T8065] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 152.577898][ T8065] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 152.585872][ T8065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 152.593873][ T8065] [ 152.598373][ T5886] m920x_read = error: -19 [ 152.602796][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 152.645160][ T5883] usb 6-1: USB disconnect, device number 12 [ 152.736561][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.6.484'. [ 152.761325][ T5886] usb 4-1: USB disconnect, device number 19 [ 152.769276][ T8] m920x_read = error: -19 [ 152.773650][ T8] dvb-usb: error -19 while querying for an remote control event. [ 152.882918][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.485'. [ 152.949263][ T5883] m920x_read = error: -19 [ 152.953648][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 152.980257][ T8078] input: syz0 as /devices/virtual/input/input14 [ 153.006560][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.488'. [ 153.124846][ T5884] m920x_read = error: -19 [ 153.135762][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 153.149796][ T46] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 153.159321][ T5886] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 153.320965][ T5884] m920x_read = error: -19 [ 153.332332][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 153.341932][ T46] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 153.349126][ T5886] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 153.373410][ T5886] usb 4-1: config 0 has no interface number 0 [ 153.379875][ T46] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.379903][ T46] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 153.379940][ T46] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.421538][ T5886] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 153.422114][ T46] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 153.441891][ T941] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 153.449080][ T5886] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 153.463956][ T5886] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 153.482610][ T46] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 153.496597][ T46] usb 7-1: Product: syz [ 153.501316][ T46] usb 7-1: Manufacturer: syz [ 153.519056][ T5886] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 153.520341][ T46] cdc_wdm 7-1:1.0: skipping garbage [ 153.547090][ T5886] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 153.547344][ T46] cdc_wdm 7-1:1.0: skipping garbage [ 153.563980][ T5886] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 153.574997][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.586250][ T119] m920x_read = error: -19 [ 153.591002][ T119] dvb-usb: error -19 while querying for an remote control event. [ 153.604658][ T46] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 153.610175][ T5886] usb 4-1: config 0 descriptor?? [ 153.612166][ T46] cdc_wdm 7-1:1.0: Unknown control protocol [ 153.621782][ T941] usb 3-1: Using ep0 maxpacket: 16 [ 153.626724][ T8073] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 153.629749][ T941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.668788][ T941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.685590][ T5886] ldusb 4-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 153.761293][ T5886] m920x_read = error: -19 [ 153.765767][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 153.773733][ T941] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 153.773781][ T941] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 153.819459][ T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.836496][ T5881] usb 7-1: USB disconnect, device number 13 [ 153.851219][ T941] usb 3-1: config 0 descriptor?? [ 153.883493][ T8073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.895916][ T8073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.907327][ T119] usb 4-1: USB disconnect, device number 20 [ 153.921410][ T119] ldusb 4-1:0.55: LD USB Device #1 now disconnected [ 153.941952][ T5886] m920x_read = error: -19 [ 153.946350][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 153.950974][ T8112] netlink: 60 bytes leftover after parsing attributes in process `syz.5.493'. [ 154.129272][ T119] m920x_read = error: -19 [ 154.133675][ T119] dvb-usb: error -19 while querying for an remote control event. [ 154.268827][ T8087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.290476][ T8087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.309668][ T119] m920x_read = error: -19 [ 154.323709][ T119] dvb-usb: error -19 while querying for an remote control event. [ 154.539650][ T5886] m920x_read = error: -19 [ 154.544211][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 154.580660][ T941] usbhid 3-1:0.0: can't add hid device: -71 [ 154.586814][ T941] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 154.635767][ T941] usb 3-1: USB disconnect, device number 19 [ 154.729155][ T5886] m920x_read = error: -19 [ 154.733611][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 154.746384][ T8143] netlink: 'syz.3.499': attribute type 6 has an invalid length. [ 154.754363][ T8143] netlink: 'syz.3.499': attribute type 7 has an invalid length. [ 154.764499][ T8143] netlink: 'syz.3.499': attribute type 8 has an invalid length. [ 154.785612][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.5.498'. [ 154.909224][ T5886] m920x_read = error: -19 [ 154.914886][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 154.999868][ T46] usb 8-1: USB disconnect, device number 9 [ 155.091366][ T5886] m920x_read = error: -19 [ 155.096118][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 155.106515][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.113034][ T5883] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 155.120136][ T5883] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 155.131669][ T119] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 155.158829][ T8160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.505'. [ 155.224849][ T8162] netlink: 60 bytes leftover after parsing attributes in process `syz.7.504'. [ 155.260954][ T5884] m920x_read = error: -19 [ 155.265427][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 155.297406][ T119] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.324982][ T119] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.334818][ T5882] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 155.348087][ T119] usb 7-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 155.377950][ T119] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.398415][ T119] usb 7-1: config 0 descriptor?? [ 155.430530][ T5886] m920x_read = error: -19 [ 155.434959][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 155.489465][ T5882] usb 6-1: Using ep0 maxpacket: 32 [ 155.499610][ T5882] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 155.508008][ T5882] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 155.516788][ T5882] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 155.526258][ T5882] usb 6-1: config 1 has no interface number 0 [ 155.532882][ T5882] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.544604][ T5882] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 155.557830][ T5882] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 155.567076][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.585447][ T5882] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 155.600194][ T5884] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 155.619941][ T5886] m920x_read = error: -19 [ 155.624436][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 155.771373][ T5884] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 155.786280][ T5884] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.800203][ T5884] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 155.806853][ T5882] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 155.809461][ T5886] m920x_read = error: -19 [ 155.809484][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 155.822244][ T5884] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.859328][ T119] chicony 0003:04F2:1421.0010: unknown main item tag 0x0 [ 155.866440][ T119] chicony 0003:04F2:1421.0010: unknown main item tag 0x0 [ 155.880044][ T119] chicony 0003:04F2:1421.0010: unknown main item tag 0x0 [ 155.888043][ T119] chicony 0003:04F2:1421.0010: unknown main item tag 0x0 [ 155.896468][ T5884] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 155.911958][ T119] chicony 0003:04F2:1421.0010: unknown main item tag 0x0 [ 155.919239][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 155.928661][ T5884] usb 3-1: Product: syz [ 155.933656][ T119] chicony 0003:04F2:1421.0010: hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.6-1/input0 [ 155.946066][ T5884] usb 3-1: Manufacturer: syz [ 155.962004][ T5884] cdc_wdm 3-1:1.0: skipping garbage [ 155.967263][ T5884] cdc_wdm 3-1:1.0: skipping garbage [ 155.972669][ T5886] m920x_read = error: -19 [ 155.977039][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 156.013648][ T5884] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 156.027092][ T5884] cdc_wdm 3-1:1.0: Unknown control protocol [ 156.080058][ T5884] usb 7-1: USB disconnect, device number 14 [ 156.159262][ T119] m920x_read = error: -19 [ 156.175119][ T119] dvb-usb: error -19 while querying for an remote control event. [ 156.196190][ T5886] usb 3-1: USB disconnect, device number 20 [ 156.369484][ T119] m920x_read = error: -19 [ 156.373886][ T119] dvb-usb: error -19 while querying for an remote control event. [ 156.443989][ T8206] netlink: 'syz.7.511': attribute type 6 has an invalid length. [ 156.539074][ T5884] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 156.565858][ T119] m920x_read = error: -19 [ 156.574029][ T119] dvb-usb: error -19 while querying for an remote control event. [ 156.720791][ T8213] FAULT_INJECTION: forcing a failure. [ 156.720791][ T8213] name failslab, interval 1, probability 0, space 0, times 0 [ 156.741635][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 156.759705][ T8213] CPU: 0 UID: 0 PID: 8213 Comm: syz.7.512 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 156.770337][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 156.780405][ T8213] Call Trace: [ 156.783703][ T8213] [ 156.786651][ T8213] dump_stack_lvl+0x241/0x360 [ 156.791388][ T8213] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.796601][ T8213] ? __pfx__printk+0x10/0x10 [ 156.801206][ T8213] ? kmem_cache_alloc_lru_noprof+0x4d/0x390 [ 156.807109][ T8213] ? __pfx___might_resched+0x10/0x10 [ 156.812417][ T8213] should_fail_ex+0x3b0/0x4e0 [ 156.817136][ T8213] should_failslab+0xac/0x100 [ 156.821840][ T8213] ? __d_alloc+0x31/0x700 [ 156.826190][ T8213] kmem_cache_alloc_lru_noprof+0x75/0x390 [ 156.831936][ T8213] __d_alloc+0x31/0x700 [ 156.836103][ T8213] path_from_stashed+0x625/0xba0 [ 156.841058][ T8213] ? path_from_stashed+0xe2/0xba0 [ 156.846104][ T8213] ? __pfx_path_from_stashed+0x10/0x10 [ 156.851595][ T8213] ? __pfx_lock_release+0x10/0x10 [ 156.856642][ T8213] open_namespace+0x92/0x180 [ 156.861252][ T8213] ? __pfx_open_namespace+0x10/0x10 [ 156.866467][ T8213] pidfd_ioctl+0x12ab/0x1780 [ 156.871071][ T8213] ? __pfx_pidfd_ioctl+0x10/0x10 [ 156.876015][ T8213] ? __fget_files+0x2a/0x410 [ 156.880620][ T8213] ? __fget_files+0x2a/0x410 [ 156.885228][ T8213] __se_compat_sys_ioctl+0x502/0xc10 [ 156.890551][ T8213] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 156.896355][ T8213] ? __fget_files+0x2a/0x410 [ 156.900948][ T8213] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 156.906954][ T8213] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 156.913307][ T8213] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 156.919920][ T8213] ? lockdep_hardirqs_on+0x99/0x150 [ 156.925223][ T8213] __do_fast_syscall_32+0xb4/0x110 [ 156.930357][ T8213] ? exc_page_fault+0x590/0x8b0 [ 156.935212][ T8213] do_fast_syscall_32+0x34/0x80 [ 156.940072][ T8213] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.946413][ T8213] RIP: 0023:0xf7f87579 [ 156.950490][ T8213] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 156.970118][ T8213] RSP: 002b:00000000f50f657c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 156.978554][ T8213] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ff0a [ 156.986587][ T8213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 156.994750][ T8213] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.002753][ T8213] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 157.010728][ T8213] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.018716][ T8213] [ 157.026613][ T119] m920x_read = error: -19 [ 157.032914][ T941] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 157.039245][ T119] dvb-usb: error -19 while querying for an remote control event. [ 157.224294][ T5886] m920x_read = error: -19 [ 157.228822][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 157.248263][ T5884] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 157.257244][ T5884] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.270132][ T5884] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.290241][ T5883] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 157.296381][ T5883] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 157.299736][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.312850][ T5884] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.376026][ T8215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.380415][ T5882] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 157.387887][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.399657][ T8215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.408913][ T9] m920x_read = error: -19 [ 157.432973][ T9] dvb-usb: error -19 while querying for an remote control event. [ 157.473156][ T5884] usb 4-1: Product: syz [ 157.485259][ T5884] usb 4-1: Manufacturer: syz [ 157.498687][ T5884] usb 4-1: SerialNumber: syz [ 157.540497][ T5882] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 157.580654][ T5882] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.615238][ T5882] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 157.629283][ T5886] m920x_read = error: -19 [ 157.633847][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 157.645080][ T5882] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.663688][ T5882] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 157.693313][ T5882] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.716323][ T5882] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 157.729064][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 157.744086][ T5882] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.757266][ T8197] netlink: 'syz.3.509': attribute type 6 has an invalid length. [ 157.766040][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 157.784799][ T5882] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 157.839204][ T5886] m920x_read = error: -19 [ 157.846171][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 157.850529][ T5882] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.870162][ T5884] usb 4-1: 0:2 : does not exist [ 157.890732][ T9] usb 3-1: config 0 has an invalid descriptor of length 174, skipping remainder of the config [ 157.903177][ T5884] usb 4-1: USB disconnect, device number 21 [ 157.912467][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 157.933604][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 157.945776][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.961832][ T9] usb 3-1: config 0 descriptor?? [ 157.977072][ T5882] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.020066][ T5882] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.022798][ T9] m920x_read = error: -19 [ 158.037042][ T9] dvb-usb: error -19 while querying for an remote control event. [ 158.047206][ T5882] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.085416][ T5882] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.100980][ T6168] udevd[6168]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 158.162311][ T5882] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.183451][ T5882] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.199336][ T5882] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.209520][ T5884] m920x_read = error: -19 [ 158.214075][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 158.221817][ T5882] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 158.221849][ T5882] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 158.221870][ T5882] usb 7-1: Product: syz [ 158.221884][ T5882] usb 7-1: Manufacturer: syz [ 158.221900][ T5882] usb 7-1: SerialNumber: syz [ 158.240828][ T5882] usb 7-1: config 0 descriptor?? [ 158.280643][ T5882] yurex 7-1:0.0: Could not find endpoints [ 158.447923][ T8232] netlink: 60 bytes leftover after parsing attributes in process `syz.7.517'. [ 158.457074][ T5884] m920x_read = error: -19 [ 158.462203][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 158.493281][ T5882] usb 7-1: USB disconnect, device number 15 [ 158.613402][ T8240] FAULT_INJECTION: forcing a failure. [ 158.613402][ T8240] name failslab, interval 1, probability 0, space 0, times 0 [ 158.626800][ T8240] CPU: 1 UID: 0 PID: 8240 Comm: syz.3.519 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 158.637430][ T8240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 158.647491][ T8240] Call Trace: [ 158.650765][ T8240] [ 158.653772][ T8240] dump_stack_lvl+0x241/0x360 [ 158.658447][ T8240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.663642][ T8240] ? __pfx__printk+0x10/0x10 [ 158.668227][ T8240] ? kmem_cache_alloc_noprof+0x48/0x380 [ 158.673768][ T8240] ? __pfx___might_resched+0x10/0x10 [ 158.679059][ T8240] should_fail_ex+0x3b0/0x4e0 [ 158.683750][ T8240] should_failslab+0xac/0x100 [ 158.688424][ T8240] ? vm_area_alloc+0x10e/0x1d0 [ 158.693188][ T8240] kmem_cache_alloc_noprof+0x70/0x380 [ 158.698568][ T8240] vm_area_alloc+0x10e/0x1d0 [ 158.703167][ T8240] __mmap_region+0x196e/0x2cd0 [ 158.707959][ T8240] ? __pfx___mmap_region+0x10/0x10 [ 158.713072][ T8240] ? __lock_acquire+0x1397/0x2100 [ 158.718139][ T8240] ? arch_get_unmapped_area_topdown+0x28e/0xc50 [ 158.724383][ T8240] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 158.730974][ T8240] ? cap_mmap_addr+0x163/0x2c0 [ 158.735733][ T8240] mmap_region+0x226/0x2c0 [ 158.740149][ T8240] do_mmap+0x8f0/0x1000 [ 158.744301][ T8240] ? __pfx_do_mmap+0x10/0x10 [ 158.748880][ T8240] ? __pfx_down_write_killable+0x10/0x10 [ 158.754502][ T8240] ? common_file_perm+0x1a6/0x210 [ 158.759534][ T8240] vm_mmap_pgoff+0x1dd/0x3d0 [ 158.764116][ T8240] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 158.769234][ T8240] ? __fget_files+0x2a/0x410 [ 158.773816][ T8240] ? __fget_files+0x395/0x410 [ 158.778503][ T8240] ? __fget_files+0x2a/0x410 [ 158.783085][ T8240] ksys_mmap_pgoff+0x4eb/0x720 [ 158.787847][ T8240] ? __ia32_sys_mmap_pgoff+0x21/0xf0 [ 158.793133][ T8240] __do_fast_syscall_32+0xb4/0x110 [ 158.798238][ T8240] ? exc_page_fault+0x590/0x8b0 [ 158.803108][ T8240] do_fast_syscall_32+0x34/0x80 [ 158.807956][ T8240] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.814279][ T8240] RIP: 0023:0xf742d579 [ 158.818341][ T8240] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 158.837938][ T8240] RSP: 002b:00000000f510657c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 158.846346][ T8240] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000b36000 [ 158.854309][ T8240] RDX: 0000000001000006 RSI: 0000000000038011 RDI: 0000000000000003 [ 158.862287][ T8240] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.870326][ T8240] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 158.878317][ T8240] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.886307][ T8240] [ 158.890709][ T5884] m920x_read = error: -19 [ 158.895093][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 159.059095][ T9] m920x_read = error: -19 [ 159.063498][ T9] dvb-usb: error -19 while querying for an remote control event. [ 159.229253][ T9] m920x_read = error: -19 [ 159.233733][ T9] dvb-usb: error -19 while querying for an remote control event. [ 159.409192][ T5884] m920x_read = error: -19 [ 159.413630][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 159.522202][ T5882] usb 6-1: USB disconnect, device number 13 [ 159.528878][ T5882] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 159.590353][ T5884] m920x_read = error: -19 [ 159.594745][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 159.604396][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 159.659072][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 159.659156][ T5883] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 159.674696][ T8258] netlink: 'syz.7.526': attribute type 177 has an invalid length. [ 159.685755][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.5.525'. [ 159.709107][ T5883] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 159.779827][ T5881] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 159.781315][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.798626][ T5886] m920x_read = error: -19 [ 159.805338][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 159.832364][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.859039][ T9] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 159.888464][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.907950][ T9] usb 4-1: config 0 descriptor?? [ 159.923633][ T8266] netlink: 60 bytes leftover after parsing attributes in process `syz.5.528'. [ 159.940826][ T5881] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 159.950050][ T5881] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.969265][ T5881] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 159.979369][ T5882] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 159.979633][ T5886] m920x_read = error: -19 [ 159.987355][ T5881] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.999778][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 160.007331][ T5881] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 160.021557][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 160.030359][ T5881] usb 7-1: Product: syz [ 160.034937][ T5881] usb 7-1: Manufacturer: syz [ 160.050738][ T5881] cdc_wdm 7-1:1.0: skipping garbage [ 160.055995][ T5881] cdc_wdm 7-1:1.0: skipping garbage [ 160.062727][ T5881] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 160.068676][ T5881] cdc_wdm 7-1:1.0: Unknown control protocol [ 160.150208][ T5882] usb 8-1: Using ep0 maxpacket: 32 [ 160.172463][ T5882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.184401][ T5882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.194943][ T5882] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 160.219345][ T5882] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 160.228443][ T5882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.230810][ T5886] m920x_read = error: -19 [ 160.239180][ T5882] usb 8-1: config 0 descriptor?? [ 160.262755][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 160.273506][ T46] usb 7-1: USB disconnect, device number 16 [ 160.323210][ T9] chicony 0003:04F2:1421.0011: unknown main item tag 0x0 [ 160.337689][ T9] chicony 0003:04F2:1421.0011: unknown main item tag 0x0 [ 160.355778][ T9] chicony 0003:04F2:1421.0011: unknown main item tag 0x0 [ 160.376032][ T9] chicony 0003:04F2:1421.0011: unknown main item tag 0x0 [ 160.390503][ T9] chicony 0003:04F2:1421.0011: unknown main item tag 0x0 [ 160.406059][ T8273] netlink: 'syz.5.531': attribute type 6 has an invalid length. [ 160.406565][ T9] chicony 0003:04F2:1421.0011: hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.3-1/input0 [ 160.416671][ T8273] netlink: 'syz.5.531': attribute type 7 has an invalid length. [ 160.439130][ T9] m920x_read = error: -19 [ 160.444473][ T9] dvb-usb: error -19 while querying for an remote control event. [ 160.457949][ T8273] netlink: 'syz.5.531': attribute type 8 has an invalid length. [ 160.553074][ T8275] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 160.563006][ T8275] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 160.572590][ T8275] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 160.582410][ T9] usb 4-1: USB disconnect, device number 22 [ 160.610253][ T5886] m920x_read = error: -19 [ 160.614668][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 160.779585][ T9] m920x_read = error: -19 [ 160.786639][ T9] dvb-usb: error -19 while querying for an remote control event. [ 160.949402][ T5886] m920x_read = error: -19 [ 160.953805][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 161.037151][ T5886] usb 3-1: USB disconnect, device number 21 [ 161.087205][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.534'. [ 161.131582][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.534'. [ 161.149294][ T9] m920x_read = error: -19 [ 161.169386][ T9] dvb-usb: error -19 while querying for an remote control event. [ 161.283691][ T8282] FAULT_INJECTION: forcing a failure. [ 161.283691][ T8282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.333222][ T8282] CPU: 0 UID: 0 PID: 8282 Comm: syz.3.535 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 161.343872][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 161.353959][ T8282] Call Trace: [ 161.357268][ T8282] [ 161.360222][ T8282] dump_stack_lvl+0x241/0x360 [ 161.364936][ T8282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.370173][ T8282] ? __pfx__printk+0x10/0x10 [ 161.374805][ T8282] ? __pfx_lock_release+0x10/0x10 [ 161.379871][ T8282] should_fail_ex+0x3b0/0x4e0 [ 161.384590][ T8282] _copy_from_user+0x2f/0xc0 [ 161.389218][ T8282] binder_ioctl_write_read+0xcef/0xb620 [ 161.394826][ T8282] ? kernel_text_address+0xa7/0xe0 [ 161.399997][ T8282] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 161.406014][ T8282] ? stack_trace_save+0x118/0x1d0 [ 161.411073][ T8282] ? mark_lock+0x9a/0x360 [ 161.415446][ T8282] ? __lock_acquire+0x1397/0x2100 [ 161.420509][ T8282] ? tomoyo_path_number_perm+0x679/0x860 [ 161.426198][ T8282] ? binder_get_thread+0x16e/0x6c0 [ 161.431348][ T8282] ? __pfx_lock_release+0x10/0x10 [ 161.436411][ T8282] ? do_raw_spin_unlock+0x13c/0x8b0 [ 161.441658][ T8282] ? _raw_spin_unlock+0x28/0x50 [ 161.446539][ T8282] ? binder_get_thread+0x178/0x6c0 [ 161.451687][ T8282] binder_ioctl+0x436/0x1cb0 [ 161.456317][ T8282] ? tomoyo_path_number_perm+0x6f9/0x860 [ 161.461989][ T8282] ? tomoyo_path_number_perm+0x206/0x860 [ 161.467661][ T8282] ? __pfx_binder_ioctl+0x10/0x10 [ 161.472723][ T8282] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 161.478753][ T8282] ? __pfx_lock_acquire+0x10/0x10 [ 161.483828][ T8282] ? __fget_files+0x2a/0x410 [ 161.488452][ T8282] ? __fget_files+0x2a/0x410 [ 161.493076][ T8282] __se_compat_sys_ioctl+0x502/0xc10 [ 161.498395][ T8282] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 161.504250][ T8282] ? __fget_files+0x2a/0x410 [ 161.508881][ T8282] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 161.514896][ T8282] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 161.521266][ T8282] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 161.527891][ T8282] ? lockdep_hardirqs_on+0x99/0x150 [ 161.533127][ T8282] __do_fast_syscall_32+0xb4/0x110 [ 161.538275][ T8282] ? exc_page_fault+0x590/0x8b0 [ 161.543161][ T8282] do_fast_syscall_32+0x34/0x80 [ 161.548045][ T8282] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.554414][ T8282] RIP: 0023:0xf742d579 [ 161.558516][ T8282] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 161.578151][ T8282] RSP: 002b:00000000f510657c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 161.586604][ T8282] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0306201 [ 161.594613][ T8282] RDX: 0000000020000880 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.602618][ T8282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.610618][ T8282] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 161.618608][ T8282] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.626621][ T8282] [ 161.653881][ T8282] binder: 8281:8282 ioctl c0306201 20000880 returned -14 [ 161.666238][ T5886] m920x_read = error: -19 [ 161.674774][ T5886] dvb-usb: error -19 while querying for an remote control event. [ 161.861558][ T5883] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 161.867692][ T5883] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 161.876018][ T9] m920x_read = error: -19 [ 161.880838][ T9] dvb-usb: error -19 while querying for an remote control event. [ 161.895557][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 162.016271][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.539'. [ 162.041972][ T9] m920x_read = error: -19 [ 162.046475][ T9] dvb-usb: error -19 while querying for an remote control event. [ 162.193969][ T8295] netlink: 60 bytes leftover after parsing attributes in process `syz.5.540'. [ 162.229143][ T9] m920x_read = error: -19 [ 162.254378][ T9] dvb-usb: error -19 while querying for an remote control event. [ 162.444819][ T9] m920x_read = error: -19 [ 162.461234][ T9] dvb-usb: error -19 while querying for an remote control event. [ 162.569829][ T8301] netlink: 'syz.6.542': attribute type 6 has an invalid length. [ 162.577601][ T8301] netlink: 'syz.6.542': attribute type 7 has an invalid length. [ 162.613516][ T8301] netlink: 'syz.6.542': attribute type 8 has an invalid length. [ 162.639608][ T9] m920x_read = error: -19 [ 162.646171][ T9] dvb-usb: error -19 while querying for an remote control event. [ 162.670995][ T5882] usbhid 8-1:0.0: can't add hid device: -71 [ 162.689465][ T5882] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 162.749301][ T5882] usb 8-1: USB disconnect, device number 10 [ 162.829585][ T9] m920x_read = error: -19 [ 162.833984][ T9] dvb-usb: error -19 while querying for an remote control event. [ 162.900583][ T29] kauditd_printk_skb: 565 callbacks suppressed [ 162.900601][ T29] audit: type=1326 audit(1733990538.847:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.2.547" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740d579 code=0x0 [ 162.935145][ T8313] trusted_key: encrypted_key: insufficient parameters specified [ 162.979042][ T8315] netlink: 32 bytes leftover after parsing attributes in process `syz.3.548'. [ 162.983423][ T8318] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 163.029331][ T9] m920x_read = error: -19 [ 163.033730][ T9] dvb-usb: error -19 while querying for an remote control event. [ 163.049200][ T8318] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 163.239383][ T119] m920x_read = error: -19 [ 163.243862][ T119] dvb-usb: error -19 while querying for an remote control event. [ 163.349138][ T5882] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 163.379471][ T5889] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 163.442195][ T9] m920x_read = error: -19 [ 163.446562][ T9] dvb-usb: error -19 while querying for an remote control event. [ 163.489106][ T941] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 163.511243][ T5882] usb 7-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 163.520986][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.529155][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 163.536374][ T5882] usb 7-1: config 0 descriptor?? [ 163.543487][ T5889] usb 4-1: config index 0 descriptor too short (expected 1810, got 18) [ 163.554304][ T5889] usb 4-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 163.564378][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.574145][ T5889] usb 4-1: config 0 descriptor?? [ 163.582819][ T5889] gspca_main: etoms-2.14.0 probing 102c:6151 [ 163.609202][ T9] m920x_read = error: -19 [ 163.615781][ T9] dvb-usb: error -19 while querying for an remote control event. [ 163.641284][ T941] usb 6-1: Using ep0 maxpacket: 32 [ 163.648864][ T941] usb 6-1: config 0 has an invalid interface number: 250 but max is 0 [ 163.657386][ T941] usb 6-1: config 0 has no interface number 0 [ 163.666037][ T941] usb 6-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 163.689087][ T941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.697248][ T941] usb 6-1: Product: syz [ 163.702342][ T941] usb 6-1: Manufacturer: syz [ 163.708365][ T941] usb 6-1: SerialNumber: syz [ 163.715679][ T941] usb 6-1: config 0 descriptor?? [ 163.726284][ T941] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 163.755168][ T8336] netlink: 60 bytes leftover after parsing attributes in process `syz.2.554'. [ 163.768124][ T5882] snd-usb-hiface 7-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 163.779255][ T119] m920x_read = error: -19 [ 163.783636][ T119] dvb-usb: error -19 while querying for an remote control event. [ 163.840779][ T5889] usb 4-1: USB disconnect, device number 23 [ 163.852313][ T8338] FAULT_INJECTION: forcing a failure. [ 163.852313][ T8338] name failslab, interval 1, probability 0, space 0, times 0 [ 163.865713][ T8338] CPU: 1 UID: 0 PID: 8338 Comm: syz.2.555 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 163.876333][ T8338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 163.886389][ T8338] Call Trace: [ 163.889666][ T8338] [ 163.892597][ T8338] dump_stack_lvl+0x241/0x360 [ 163.897287][ T8338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.902498][ T8338] ? __pfx__printk+0x10/0x10 [ 163.907108][ T8338] ? __kmalloc_noprof+0xb5/0x4c0 [ 163.912059][ T8338] ? __pfx___might_resched+0x10/0x10 [ 163.917346][ T8338] should_fail_ex+0x3b0/0x4e0 [ 163.922043][ T8338] should_failslab+0xac/0x100 [ 163.926743][ T8338] __kmalloc_noprof+0xdd/0x4c0 [ 163.931517][ T8338] ? fib_nl2rule+0x371/0x1b50 [ 163.936203][ T8338] fib_nl2rule+0x371/0x1b50 [ 163.940705][ T8338] ? __lock_acquire+0x1397/0x2100 [ 163.945736][ T8338] ? __pfx_fib_nl2rule+0x10/0x10 [ 163.950672][ T8338] ? __nla_parse+0x40/0x60 [ 163.955094][ T8338] fib_nl_newrule+0x395/0x1d30 [ 163.959866][ T8338] ? __mutex_trylock_common+0x183/0x2e0 [ 163.965422][ T8338] ? __pfx___might_resched+0x10/0x10 [ 163.970707][ T8338] ? __pfx___mutex_trylock_common+0x10/0x10 [ 163.976610][ T8338] ? __pfx_fib_nl_newrule+0x10/0x10 [ 163.981807][ T8338] ? rcu_is_watching+0x15/0xb0 [ 163.986573][ T8338] ? trace_contention_end+0x3c/0x120 [ 163.991860][ T8338] ? __mutex_lock+0x37f/0xee0 [ 163.996571][ T8338] ? __pfx_fib_nl_newrule+0x10/0x10 [ 164.001773][ T8338] rtnetlink_rcv_msg+0x73f/0xcf0 [ 164.006712][ T8338] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 164.011824][ T8338] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 164.017287][ T8338] ? ref_tracker_free+0x643/0x7e0 [ 164.022326][ T8338] netlink_rcv_skb+0x1e3/0x430 [ 164.027096][ T8338] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 164.032574][ T8338] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 164.037882][ T8338] ? netlink_deliver_tap+0x2e/0x1b0 [ 164.043082][ T8338] netlink_unicast+0x7f6/0x990 [ 164.047855][ T8338] ? __pfx_netlink_unicast+0x10/0x10 [ 164.053144][ T8338] ? __virt_addr_valid+0x45f/0x530 [ 164.058259][ T8338] ? __phys_addr_symbol+0x2f/0x70 [ 164.063282][ T8338] ? __check_object_size+0x47a/0x730 [ 164.068573][ T8338] netlink_sendmsg+0x8e4/0xcb0 [ 164.073346][ T8338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.078632][ T8338] ? __pfx_lock_release+0x10/0x10 [ 164.083652][ T8338] ? aa_sock_msg_perm+0x91/0x160 [ 164.088598][ T8338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.093884][ T8338] __sock_sendmsg+0x221/0x270 [ 164.098566][ T8338] ____sys_sendmsg+0x52a/0x7e0 [ 164.103368][ T8338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.108662][ T8338] __sys_sendmsg+0x269/0x350 [ 164.113252][ T8338] ? __pfx_lock_release+0x10/0x10 [ 164.118275][ T8338] ? __pfx___sys_sendmsg+0x10/0x10 [ 164.123391][ T8338] ? __pfx_vfs_write+0x10/0x10 [ 164.128175][ T8338] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 164.134765][ T8338] ? lockdep_hardirqs_on+0x99/0x150 [ 164.139966][ T8338] __do_fast_syscall_32+0xb4/0x110 [ 164.145080][ T8338] ? exc_page_fault+0x590/0x8b0 [ 164.149933][ T8338] do_fast_syscall_32+0x34/0x80 [ 164.154784][ T8338] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.161123][ T8338] RIP: 0023:0xf740d579 [ 164.165188][ T8338] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 164.184793][ T8338] RSP: 002b:00000000f50e657c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 164.193206][ T8338] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 164.201174][ T8338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.209158][ T8338] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 164.217135][ T8338] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 164.225123][ T8338] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 164.233120][ T8338] [ 164.240748][ T941] gspca_sunplus: reg_w_riv err -110 [ 164.246055][ T941] sunplus 6-1:0.250: probe with driver sunplus failed with error -110 [ 164.248802][ T9] m920x_read = error: -19 [ 164.258758][ T9] dvb-usb: error -19 while querying for an remote control event. [ 164.276719][ T941] usb 7-1: USB disconnect, device number 17 [ 164.287517][ T119] usb 6-1: USB disconnect, device number 14 [ 164.419257][ T9] m920x_read = error: -19 [ 164.423680][ T9] dvb-usb: error -19 while querying for an remote control event. [ 164.591768][ T9] m920x_read = error: -19 [ 164.596243][ T9] dvb-usb: error -19 while querying for an remote control event. [ 164.619099][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 164.619139][ T5883] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 164.631530][ T5883] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 164.760095][ T9] m920x_read = error: -19 [ 164.764490][ T9] dvb-usb: error -19 while querying for an remote control event. [ 164.917018][ T8346] netlink: 24 bytes leftover after parsing attributes in process `syz.3.558'. [ 164.929851][ T8] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 164.956691][ T8348] netlink: 'syz.7.559': attribute type 6 has an invalid length. [ 164.990795][ T8348] netlink: 'syz.7.559': attribute type 7 has an invalid length. [ 165.027011][ T119] m920x_read = error: -19 [ 165.031592][ T119] dvb-usb: error -19 while querying for an remote control event. [ 165.056008][ T8348] netlink: 'syz.7.559': attribute type 8 has an invalid length. [ 165.183409][ T8] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 165.191867][ T8] usb 3-1: config 0 has no interface number 0 [ 165.224603][ T8] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 232, changing to 4 [ 165.236269][ T5883] m920x_read = error: -19 [ 165.249322][ T5889] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 165.254375][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 165.285604][ T8] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 37438, setting to 1023 [ 165.305285][ T8] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 165.314820][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.328883][ T8] usb 3-1: config 0 descriptor?? [ 165.340386][ T8] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input15 [ 165.436751][ T5889] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.469171][ T8] m920x_read = error: -19 [ 165.473565][ T8] dvb-usb: error -19 while querying for an remote control event. [ 165.497457][ T5889] usb 6-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=d4.45 [ 165.562708][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.617870][ T5882] usb 3-1: USB disconnect, device number 22 [ 165.649178][ T8] m920x_read = error: -19 [ 165.653574][ T8] dvb-usb: error -19 while querying for an remote control event. [ 165.655167][ T5889] usb 6-1: Product: syz [ 165.745477][ T5889] usb 6-1: Manufacturer: syz [ 165.765121][ T5889] usb 6-1: SerialNumber: syz [ 165.781644][ T5889] usb 6-1: config 0 descriptor?? [ 165.820744][ T5883] m920x_read = error: -19 [ 165.825252][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 165.872403][ T8366] netlink: 52 bytes leftover after parsing attributes in process `syz.3.565'. [ 165.890626][ T5889] rtsx_usb 6-1:0.0: probe with driver rtsx_usb failed with error -22 [ 165.997249][ T8357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.997256][ T5883] m920x_read = error: -19 [ 165.997277][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 166.011805][ T8357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.045182][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.7.567'. [ 166.179222][ T5883] m920x_read = error: -19 [ 166.189263][ T5882] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 166.193850][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 166.262213][ T8374] FAULT_INJECTION: forcing a failure. [ 166.262213][ T8374] name failslab, interval 1, probability 0, space 0, times 0 [ 166.262287][ T8374] CPU: 0 UID: 0 PID: 8374 Comm: syz.7.568 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 166.262309][ T8374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 166.262321][ T8374] Call Trace: [ 166.262329][ T8374] [ 166.262337][ T8374] dump_stack_lvl+0x241/0x360 [ 166.262369][ T8374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.262394][ T8374] ? __pfx__printk+0x10/0x10 [ 166.262420][ T8374] ? __kmalloc_cache_noprof+0x48/0x390 [ 166.262444][ T8374] ? __pfx___might_resched+0x10/0x10 [ 166.262468][ T8374] should_fail_ex+0x3b0/0x4e0 [ 166.262500][ T8374] should_failslab+0xac/0x100 [ 166.262525][ T8374] __kmalloc_cache_noprof+0x70/0x390 [ 166.262547][ T8374] ? fb_add_videomode+0x6db/0x7e0 [ 166.262573][ T8374] fb_add_videomode+0x6db/0x7e0 [ 166.262606][ T8374] fb_set_var+0x8ef/0xf10 [ 166.262638][ T8374] ? __pfx_fb_set_var+0x10/0x10 [ 166.262666][ T8374] ? __mutex_trylock_common+0x183/0x2e0 [ 166.262707][ T8374] ? trace_contention_end+0x3c/0x120 [ 166.262732][ T8374] ? __mutex_lock+0x37f/0xee0 [ 166.262763][ T8374] ? __pfx_lock_acquire+0x10/0x10 [ 166.262785][ T8374] ? do_fb_ioctl+0x56d/0x7b0 [ 166.262810][ T8374] ? __pfx___mutex_lock+0x10/0x10 [ 166.262835][ T8374] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 166.262861][ T8374] ? is_console_locked+0x9/0x20 [ 166.262888][ T8374] ? fbcon_modechange_possible+0x3fe/0x490 [ 166.262922][ T8374] do_fb_ioctl+0x643/0x7b0 [ 166.262948][ T8374] ? __pfx_do_fb_ioctl+0x10/0x10 [ 166.262990][ T8374] ? tomoyo_path_number_perm+0x206/0x860 [ 166.263016][ T8374] ? __pfx_lock_release+0x10/0x10 [ 166.263042][ T8374] ? tomoyo_path_number_perm+0x679/0x860 [ 166.263071][ T8374] ? tomoyo_path_number_perm+0x679/0x860 [ 166.263105][ T8374] ? tomoyo_path_number_perm+0x206/0x860 [ 166.263137][ T8374] fb_compat_ioctl+0x2be/0xc80 [ 166.263169][ T8374] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 166.263192][ T8374] ? __pfx_lock_acquire+0x10/0x10 [ 166.263233][ T8374] ? __fget_files+0x2a/0x410 [ 166.263260][ T8374] ? __fget_files+0x2a/0x410 [ 166.263292][ T8374] __se_compat_sys_ioctl+0x502/0xc10 [ 166.263319][ T8374] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 166.263340][ T8374] ? __fget_files+0x2a/0x410 [ 166.263369][ T8374] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 166.263394][ T8374] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 166.263422][ T8374] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 166.263447][ T8374] ? lockdep_hardirqs_on+0x99/0x150 [ 166.263473][ T8374] __do_fast_syscall_32+0xb4/0x110 [ 166.263498][ T8374] ? exc_page_fault+0x590/0x8b0 [ 166.263525][ T8374] do_fast_syscall_32+0x34/0x80 [ 166.263550][ T8374] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 166.263577][ T8374] RIP: 0023:0xf7f87579 [ 166.263595][ T8374] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 166.263612][ T8374] RSP: 002b:00000000f50d557c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 166.263637][ T8374] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000004601 [ 166.263657][ T8374] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 166.263671][ T8374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.263683][ T8374] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 166.263696][ T8374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 166.263724][ T8374] [ 166.304071][ T8376] FAULT_INJECTION: forcing a failure. [ 166.304071][ T8376] name failslab, interval 1, probability 0, space 0, times 0 [ 166.360836][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.365957][ T5883] m920x_read = error: -19 [ 166.384177][ T8376] CPU: 1 UID: 0 PID: 8376 Comm: syz.2.569 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 166.398682][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 166.400481][ T8376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 166.400496][ T8376] Call Trace: [ 166.400502][ T8376] [ 166.400510][ T8376] dump_stack_lvl+0x241/0x360 [ 166.400541][ T8376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.695397][ T8376] ? __pfx__printk+0x10/0x10 [ 166.700261][ T8376] ? __kmalloc_cache_noprof+0x48/0x390 [ 166.705722][ T8376] ? __pfx___might_resched+0x10/0x10 [ 166.711014][ T8376] ? arch_stack_walk+0xfd/0x150 [ 166.715870][ T8376] should_fail_ex+0x3b0/0x4e0 [ 166.720555][ T8376] should_failslab+0xac/0x100 [ 166.725230][ T8376] __kmalloc_cache_noprof+0x70/0x390 [ 166.730516][ T8376] ? rtnl_newlink+0x133/0x20e0 [ 166.735286][ T8376] rtnl_newlink+0x133/0x20e0 [ 166.739883][ T8376] ? kasan_save_track+0x51/0x80 [ 166.744732][ T8376] ? __kasan_slab_free+0x59/0x70 [ 166.749671][ T8376] ? kmem_cache_free+0x195/0x410 [ 166.754613][ T8376] ? __pfx_rtnl_newlink+0x10/0x10 [ 166.759636][ T8376] ? __netlink_deliver_tap+0x56b/0x7f0 [ 166.765095][ T8376] ? __pfx_validate_chain+0x10/0x10 [ 166.770295][ T8376] ? __sock_sendmsg+0x221/0x270 [ 166.775145][ T8376] ? ____sys_sendmsg+0x52a/0x7e0 [ 166.780081][ T8376] ? __sys_sendmsg+0x269/0x350 [ 166.784847][ T8376] ? __do_fast_syscall_32+0xb4/0x110 [ 166.790141][ T8376] ? do_fast_syscall_32+0x34/0x80 [ 166.795168][ T8376] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 166.801777][ T8376] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 166.807847][ T8376] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 166.814180][ T8376] ? mark_lock+0x9a/0x360 [ 166.818520][ T8376] ? __lock_acquire+0x1397/0x2100 [ 166.823656][ T8376] ? rcu_read_unlock+0x87/0xa0 [ 166.828597][ T8376] ? __dev_queue_xmit+0x1775/0x3f50 [ 166.833798][ T8376] ? __pfx_lock_release+0x10/0x10 [ 166.838837][ T8376] ? __pfx_rtnl_newlink+0x10/0x10 [ 166.843866][ T8376] rtnetlink_rcv_msg+0x791/0xcf0 [ 166.848814][ T8376] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 166.853942][ T8376] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 166.859415][ T8376] ? ref_tracker_free+0x643/0x7e0 [ 166.864532][ T8376] netlink_rcv_skb+0x1e3/0x430 [ 166.869309][ T8376] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 166.874816][ T8376] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 166.880132][ T8376] ? netlink_deliver_tap+0x2e/0x1b0 [ 166.885334][ T8376] netlink_unicast+0x7f6/0x990 [ 166.890124][ T8376] ? __pfx_netlink_unicast+0x10/0x10 [ 166.895428][ T8376] ? __virt_addr_valid+0x45f/0x530 [ 166.900564][ T8376] ? __phys_addr_symbol+0x2f/0x70 [ 166.905700][ T8376] ? __check_object_size+0x47a/0x730 [ 166.910992][ T8376] netlink_sendmsg+0x8e4/0xcb0 [ 166.915782][ T8376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.921095][ T8376] ? __pfx_lock_release+0x10/0x10 [ 166.926123][ T8376] ? aa_sock_msg_perm+0x91/0x160 [ 166.931070][ T8376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.936349][ T8376] __sock_sendmsg+0x221/0x270 [ 166.941040][ T8376] ____sys_sendmsg+0x52a/0x7e0 [ 166.945817][ T8376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.951223][ T8376] __sys_sendmsg+0x269/0x350 [ 166.955896][ T8376] ? __pfx_lock_release+0x10/0x10 [ 166.960921][ T8376] ? __pfx___sys_sendmsg+0x10/0x10 [ 166.966038][ T8376] ? __pfx_vfs_write+0x10/0x10 [ 166.970831][ T8376] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 166.977423][ T8376] ? lockdep_hardirqs_on+0x99/0x150 [ 166.982626][ T8376] __do_fast_syscall_32+0xb4/0x110 [ 166.987740][ T8376] ? exc_page_fault+0x590/0x8b0 [ 166.992595][ T8376] do_fast_syscall_32+0x34/0x80 [ 166.997447][ T8376] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.003775][ T8376] RIP: 0023:0xf740d579 [ 167.007841][ T8376] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 167.027638][ T8376] RSP: 002b:00000000f50e657c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 167.036066][ T8376] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 167.044042][ T8376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.052011][ T8376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.059977][ T8376] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 167.067942][ T8376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.075922][ T8376] [ 167.079185][ T5883] m920x_read = error: -19 [ 167.085060][ T5883] dvb-usb: error -19 while querying for an remote control event. [ 167.099624][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.119420][ T5882] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 167.136672][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.166565][ T5882] usb 4-1: config 0 descriptor?? [ 167.249061][ T9] m920x_read = error: -19 [ 167.253465][ T9] dvb-usb: error -19 while querying for an remote control event. [ 167.350339][ T8386] FAULT_INJECTION: forcing a failure. [ 167.350339][ T8386] name failslab, interval 1, probability 0, space 0, times 0 [ 167.363371][ T8386] CPU: 0 UID: 0 PID: 8386 Comm: syz.7.572 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 167.373995][ T8386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 167.384082][ T8386] Call Trace: [ 167.387377][ T8386] [ 167.390325][ T8386] dump_stack_lvl+0x241/0x360 [ 167.395038][ T8386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.400269][ T8386] ? __pfx__printk+0x10/0x10 [ 167.404896][ T8386] should_fail_ex+0x3b0/0x4e0 [ 167.409592][ T8386] should_failslab+0xac/0x100 [ 167.414301][ T8386] ? skb_clone+0x20c/0x390 [ 167.418747][ T8386] kmem_cache_alloc_noprof+0x70/0x380 [ 167.424158][ T8386] skb_clone+0x20c/0x390 [ 167.428410][ T8386] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 167.433621][ T8386] dev_queue_xmit_nit+0x249/0xca0 [ 167.438651][ T8386] ? dev_queue_xmit_nit+0x2b/0xca0 [ 167.443768][ T8386] ? validate_xmit_skb+0x9b8/0xff0 [ 167.448885][ T8386] dev_hard_start_xmit+0x15f/0x7d0 [ 167.453994][ T8386] ? __pfx_validate_xmit_skb+0x10/0x10 [ 167.459463][ T8386] __dev_queue_xmit+0x1b73/0x3f50 [ 167.464487][ T8386] ? kasan_save_track+0x51/0x80 [ 167.469348][ T8386] ? ____sys_sendmsg+0x52a/0x7e0 [ 167.474291][ T8386] ? __dev_queue_xmit+0x2f4/0x3f50 [ 167.479403][ T8386] ? __pfx___dev_queue_xmit+0x10/0x10 [ 167.484786][ T8386] ? __copy_skb_header+0x437/0x5b0 [ 167.489898][ T8386] ? __asan_memcpy+0x40/0x70 [ 167.494485][ T8386] ? __copy_skb_header+0x437/0x5b0 [ 167.499607][ T8386] ? __skb_clone+0x454/0x6c0 [ 167.504205][ T8386] ? skb_clone+0x240/0x390 [ 167.508627][ T8386] __netlink_deliver_tap+0x56b/0x7f0 [ 167.513920][ T8386] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.519120][ T8386] netlink_deliver_tap+0x19d/0x1b0 [ 167.524239][ T8386] netlink_unicast+0x7c4/0x990 [ 167.529019][ T8386] ? __pfx_netlink_unicast+0x10/0x10 [ 167.534312][ T8386] ? __virt_addr_valid+0x45f/0x530 [ 167.539425][ T8386] ? __phys_addr_symbol+0x2f/0x70 [ 167.544445][ T8386] ? __check_object_size+0x47a/0x730 [ 167.549734][ T8386] netlink_sendmsg+0x8e4/0xcb0 [ 167.554505][ T8386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.559802][ T8386] ? __pfx_lock_release+0x10/0x10 [ 167.564828][ T8386] ? aa_sock_msg_perm+0x91/0x160 [ 167.569769][ T8386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.575053][ T8386] __sock_sendmsg+0x221/0x270 [ 167.579751][ T8386] ____sys_sendmsg+0x52a/0x7e0 [ 167.584535][ T8386] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.589833][ T8386] __sys_sendmsg+0x269/0x350 [ 167.594429][ T8386] ? __pfx_lock_release+0x10/0x10 [ 167.599461][ T8386] ? __pfx___sys_sendmsg+0x10/0x10 [ 167.604604][ T8386] ? __pfx_vfs_write+0x10/0x10 [ 167.609388][ T8386] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 167.615982][ T8386] ? lockdep_hardirqs_on+0x99/0x150 [ 167.621186][ T8386] __do_fast_syscall_32+0xb4/0x110 [ 167.626305][ T8386] ? exc_page_fault+0x590/0x8b0 [ 167.631170][ T8386] do_fast_syscall_32+0x34/0x80 [ 167.636020][ T8386] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.642356][ T8386] RIP: 0023:0xf7f87579 [ 167.646424][ T8386] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 167.666042][ T8386] RSP: 002b:00000000f50f657c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 167.674463][ T8386] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 167.682443][ T8386] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.690419][ T8386] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.698387][ T8386] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 167.706357][ T8386] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.714338][ T8386] [ 167.721827][ T9] m920x_read = error: -19 [ 167.726220][ T9] dvb-usb: error -19 while querying for an remote control event. [ 167.825871][ T5882] chicony 0003:04F2:1421.0012: unknown main item tag 0x0 [ 167.839489][ T5882] chicony 0003:04F2:1421.0012: unknown main item tag 0x0 [ 167.856878][ T5882] chicony 0003:04F2:1421.0012: unknown main item tag 0x0 [ 167.881664][ T5882] chicony 0003:04F2:1421.0012: unknown main item tag 0x0 [ 167.899545][ T5882] chicony 0003:04F2:1421.0012: unknown main item tag 0x0 [ 167.916219][ T8390] netlink: 'syz.7.574': attribute type 6 has an invalid length. [ 167.934801][ T9] m920x_read = error: -19 [ 167.939229][ T9] dvb-usb: error -19 while querying for an remote control event. [ 167.951559][ T5882] chicony 0003:04F2:1421.0012: hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.3-1/input0 [ 167.997567][ T8390] netlink: 'syz.7.574': attribute type 7 has an invalid length. [ 168.020910][ T8390] netlink: 'syz.7.574': attribute type 8 has an invalid length. [ 168.107356][ T9] m920x_read = error: -19 [ 168.112169][ T9] dvb-usb: error -19 while querying for an remote control event. [ 168.122048][ T8392] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 168.128923][ T8392] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 168.181888][ T8392] vhci_hcd vhci_hcd.0: Device attached [ 168.199035][ T5889] usb 6-1: USB disconnect, device number 15 [ 168.236507][ T8393] vhci_hcd: connection closed [ 168.239732][ T1146] vhci_hcd: stop threads [ 168.245484][ T8397] netlink: 52 bytes leftover after parsing attributes in process `syz.7.576'. [ 168.255449][ T1146] vhci_hcd: release socket [ 168.263633][ T1146] vhci_hcd: disconnect device [ 168.264106][ T8368] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 168.264130][ T8368] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 168.264144][ T8368] CPU: 1 UID: 0 PID: 8368 Comm: syz.3.566 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 168.264167][ T8368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 168.264179][ T8368] RIP: 0010:fb_videomode_to_var+0x2e/0x5f0 [ 168.264207][ T8368] Code: 55 41 57 41 56 41 55 41 54 53 49 89 f6 49 89 fc 49 bd 00 00 00 00 00 fc ff df e8 bd cb 8c fc 4d 8d 7e 0c 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 ca 02 00 00 41 8b 1f 4c 89 e0 48 c1 e8 [ 168.264226][ T8368] RSP: 0018:ffffc900034372c8 EFLAGS: 00010203 [ 168.264246][ T8368] RAX: 0000000000000001 RBX: ffffffff9a6e4550 RCX: 0000000000080000 [ 168.264261][ T8368] RDX: ffffc9000cfe9000 RSI: 00000000000006a9 RDI: 00000000000006aa [ 168.264276][ T8368] RBP: ffffc900034375b0 R08: ffffffff85129f93 R09: ffffffff85147ba5 [ 168.264292][ T8368] R10: 0000000000000002 R11: ffff888026243c00 R12: ffffc90003437480 [ 168.264307][ T8368] R13: dffffc0000000000 R14: 0000000000000000 R15: 000000000000000c [ 168.264321][ T8368] FS: 0000000000000000(0000) GS:ffff8880b8700000(0063) knlGS:00000000f5106b40 [ 168.264340][ T8368] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 168.264355][ T8368] CR2: 000000003040affc CR3: 000000005fcce000 CR4: 00000000003526f0 [ 168.264372][ T8368] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 168.264384][ T8368] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 168.264397][ T8368] Call Trace: [ 168.264403][ T8368] [ 168.264411][ T8368] ? __die_body+0x5f/0xb0 [ 168.264432][ T8368] ? die_addr+0xb0/0xe0 [ 168.264452][ T8368] ? exc_general_protection+0x3dd/0x5d0 [ 168.264478][ T8368] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 168.264502][ T8368] ? asm_exc_general_protection+0x26/0x30 [ 168.264529][ T8368] ? fbcon_resize+0x3b5/0x1940 [ 168.264548][ T8368] ? fb_find_best_mode+0x123/0x300 [ 168.264569][ T8368] ? fb_videomode_to_var+0x2e/0x5f0 [ 168.264589][ T8368] ? fb_videomode_to_var+0x23/0x5f0 [ 168.264610][ T8368] fbcon_resize+0x631/0x1940 [ 168.264628][ T8368] ? kasan_save_track+0x3f/0x80 [ 168.264646][ T8368] ? __kasan_kmalloc+0x98/0xb0 [ 168.264666][ T8368] ? __kmalloc_noprof+0x285/0x4c0 [ 168.264700][ T8368] ? __pfx_fbcon_resize+0x10/0x10 [ 168.264725][ T8368] ? rcu_is_watching+0x15/0xb0 [ 168.264757][ T8368] ? trace_kmalloc+0x1f/0xd0 [ 168.264780][ T8368] ? vc_do_resize+0x31b/0x17f0 [ 168.264803][ T8368] vc_do_resize+0x7b2/0x17f0 [ 168.264834][ T8368] ? __pfx_vc_do_resize+0x10/0x10 [ 168.264856][ T8368] ? is_console_locked+0x9/0x20 [ 168.264880][ T8368] ? fb_match_mode+0x5a6/0x6f0 [ 168.264902][ T8368] fbcon_modechanged+0x765/0x1200 [ 168.264931][ T8368] do_fb_ioctl+0x71b/0x7b0 [ 168.264954][ T8368] ? __pfx_do_fb_ioctl+0x10/0x10 [ 168.264983][ T8368] ? tomoyo_path_number_perm+0x206/0x860 [ 168.265010][ T8368] ? __pfx_lock_release+0x10/0x10 [ 168.265031][ T8368] ? tomoyo_path_number_perm+0x679/0x860 [ 168.265058][ T8368] ? tomoyo_path_number_perm+0x679/0x860 [ 168.265087][ T8368] ? tomoyo_path_number_perm+0x206/0x860 [ 168.265114][ T8368] fb_compat_ioctl+0x2be/0xc80 [ 168.265139][ T8368] ? __pfx_fb_compat_ioctl+0x10/0x10 [ 168.265160][ T8368] ? __pfx_lock_acquire+0x10/0x10 [ 168.265187][ T8368] ? __fget_files+0x2a/0x410 [ 168.265210][ T8368] ? __fget_files+0x2a/0x410 [ 168.265235][ T8368] __se_compat_sys_ioctl+0x502/0xc10 [ 168.265256][ T8368] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 168.265278][ T8368] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 168.265300][ T8368] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 168.265323][ T8368] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 168.265348][ T8368] ? lockdep_hardirqs_on+0x99/0x150 [ 168.265371][ T8368] __do_fast_syscall_32+0xb4/0x110 [ 168.265396][ T8368] ? exc_page_fault+0x590/0x8b0 [ 168.265419][ T8368] do_fast_syscall_32+0x34/0x80 [ 168.265443][ T8368] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 168.265469][ T8368] RIP: 0023:0xf742d579 [ 168.265485][ T8368] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 168.265500][ T8368] RSP: 002b:00000000f510657c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 168.265520][ T8368] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000004601 [ 168.265534][ T8368] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.265547][ T8368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 168.265559][ T8368] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 168.265571][ T8368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.265590][ T8368] [ 168.265597][ T8368] Modules linked in: [ 168.265618][ T8368] ---[ end trace 0000000000000000 ]--- [ 168.265628][ T8368] RIP: 0010:fb_videomode_to_var+0x2e/0x5f0 [ 168.265651][ T8368] Code: 55 41 57 41 56 41 55 41 54 53 49 89 f6 49 89 fc 49 bd 00 00 00 00 00 fc ff df e8 bd cb 8c fc 4d 8d 7e 0c 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 ca 02 00 00 41 8b 1f 4c 89 e0 48 c1 e8 [ 168.265668][ T8368] RSP: 0018:ffffc900034372c8 EFLAGS: 00010203 [ 168.265686][ T8368] RAX: 0000000000000001 RBX: ffffffff9a6e4550 RCX: 0000000000080000 [ 168.265702][ T8368] RDX: ffffc9000cfe9000 RSI: 00000000000006a9 RDI: 00000000000006aa [ 168.265716][ T8368] RBP: ffffc900034375b0 R08: ffffffff85129f93 R09: ffffffff85147ba5 [ 168.265732][ T8368] R10: 0000000000000002 R11: ffff888026243c00 R12: ffffc90003437480 [ 168.265754][ T8368] R13: dffffc0000000000 R14: 0000000000000000 R15: 000000000000000c [ 168.265768][ T8368] FS: 0000000000000000(0000) GS:ffff8880b8700000(0063) knlGS:00000000f5106b40 [ 168.265786][ T8368] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 168.265801][ T8368] CR2: 000000003040affc CR3: 000000005fcce000 CR4: 00000000003526f0 [ 168.265818][ T8368] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 168.265831][ T8368] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 168.265851][ T8368] Kernel panic - not syncing: Fatal exception [ 168.266103][ T8368] Kernel Offset: disabled