last executing test programs: 5m38.625146307s ago: executing program 4 (id=1019): socket$nl_route(0x10, 0x3, 0x0) inotify_init() r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffff4f) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x5) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000000)={0x1, @pix={0x80000000, 0x0, 0x30324c4a, 0x0, 0x800, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x4}}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x10002, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000140)=0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2, 0x4}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001000390400"/20, @ANYRES32=r5, @ANYBLOB="79f54eb6643f5656"], 0x20}}, 0x0) 5m38.275267664s ago: executing program 4 (id=1021): mkdir(&(0x7f0000000440)='./file1\x00', 0x1) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x11, 0x1, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100003000a000200053582c137153e37000c068005000200", 0x2c}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) io_uring_setup(0x175c, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x30, 0x200040c0}, 0x20000000) write$binfmt_script(r3, &(0x7f00000001c0), 0xfec8) recvmmsg(r3, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/88, 0x58}, {&(0x7f0000000400)=""/108, 0x6c}], 0x2}, 0x8}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 5m36.844576252s ago: executing program 4 (id=1025): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed4, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getrlimit(0xd, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x101300, 0x0) r1 = open$dir(&(0x7f0000000080)='./file1\x00', 0x80000, 0x8) openat(r1, &(0x7f0000000040)='./file1\x00', 0x143e42, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', &(0x7f0000000300), 0x1000800, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=rdma']) 5m34.659238762s ago: executing program 4 (id=1032): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x67}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="7fd9927bf51f9d29083f52c544fcf5b99e44a808a345ff2f1ef3f90ee568e8a2c84a665e1c13a156f65ae887"], 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r4, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x24000044}, 0x4000) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) 5m34.383328126s ago: executing program 4 (id=1035): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500000000000000000004740006080002000000000014000600626f6e64300000000000000000000000140003"], 0x4c}, 0x1, 0xffffffff00000003}, 0x0) 5m34.090092112s ago: executing program 4 (id=1036): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d000000000000004a0000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000080", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000300"/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) 5m31.501406669s ago: executing program 32 (id=1036): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d000000000000004a0000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000080", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000300"/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) 2m53.074209889s ago: executing program 1 (id=1485): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000680)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x4300, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffffffffff4e) gettid() r1 = inotify_init1(0x80800) lseek(r1, 0xfffffffffffffff9, 0x4) timer_create(0x2, &(0x7f0000000340)={0x0, 0x2b, 0x800000000004, @thr={&(0x7f00000004c0)="da43e2d7ed2defc2bc63d49cd22feaa8e778ccefaaf0c18cb7ada1d42356975fa3bb6290ab19466d49f3c0a3bf648357aecfdd4a4d0183abb41a7d37ebf5024e5a72b2fda48fe3d054777b7431c18fcd6f2b72788afc015359612d3df5b5bbac7743511ac748", &(0x7f0000000580)="3d1cda0ac8b1fed947a6b0255ec8ec091316f589750f7cf088d2a6825b13e0be5cc50dcb363ea532819ecdcb74d32dab2680772fa68e8e90e572c87c580446585ac134ea3305fdd5a696a2438017b9b5ba741109fdda3cff10befe980076285fd060694a0c3fa230c063a18a0ee8d26af25cfa6e70b59c00f8c163754bd0ae461dbdaecaaa44ecea1ee62692deec52ca66972aefd17a322a3ef58c2c33e2281e914561ae462450b7cbf8da6b28c34056f4493e45e25c54f4b06788267a36b2e377f8bebfd020434f1822776aeb0b20c5e4ea4faa9ad7b160495be495b179882e521da8"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) readv(r2, &(0x7f0000000540)=[{&(0x7f0000000200)=""/64, 0x40}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMCLEAR_L2(r6, 0x80044946, &(0x7f0000000380)=0xfffffff8) sendmsg(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x728f, &(0x7f00000006c0)={0x0, 0xfcd7, 0x4202, 0x3, 0x187}, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x54}, {0x6}]}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2m52.889474061s ago: executing program 1 (id=1486): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e00090504", @ANYRESDEC], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000800)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000280)="8f", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000180), 0x43) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x18, &(0x7f0000000680)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20008000}, {0x85, 0x0, 0x0, 0x72}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="c908000020000000"], 0x0}, 0x0) 2m48.074840891s ago: executing program 1 (id=1498): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmmsg$alg(r0, &(0x7f00000028c0), 0x0, 0x40000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ax25={{0x3, @bcast}, [@netrom, @bcast, @netrom, @remote, @null, @remote, @null, @null]}, 0x0, 0x0) io_uring_setup(0x807f7d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0xf00, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x12000021) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021300011800b000100746172676574"], 0xb4}}, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xe2a98880c93ed02, 0x0, 0x2}, [{{0x254, 0x1, {{0x3, 0x400}, 0xd, 0x2, 0x9, 0x0, 0xd, 'syz1\x00', "38d998f600009dc23647762940cbbb5d4cbc57c1013a0630c3a388dfd4ec544c", "26b300dfd788990e79f068efcdd6e1ad8457b4e2c4f155d90caaeda4309e61fb", [{0x5, 0x2, {0x3, 0x4}}, {0x4, 0x8, {0x1, 0x5}}, {0x800, 0x81}, {0x5, 0x4, {0x1, 0x7}}, {0x7ffe, 0x11, {0x1}}, {0x3, 0x9, {0x1, 0x3ff}}, {0x8, 0x6, {0x1, 0x2}}, {0xffff, 0xfff, {0x3, 0x8}}, {0x13, 0x7f, {0x1, 0x10000}}, {0x6984, 0x2, {0x0, 0x3000000}}, {0xe, 0x6, {0x3, 0x2}}, {0x2, 0xf7d, {0x0, 0x2}}, {0x8, 0xc, {0x0, 0x400}}, {0x800, 0x400, {0x3, 0x678}}, {0x5, 0xf0, {0x0, 0xa614}}, {0x7, 0x71, {0x1, 0x1}}, {0x7, 0x1, {0x0, 0x10000}}, {0xfff7, 0x7, {0x2, 0x5}}, {0x3, 0x3, {0x3, 0x2}}, {0x9, 0x2, {0x3, 0x7d7}}, {0x1e, 0x9, {0x0, 0x800}}, {0x8000, 0x6, {0x2, 0x3}}, {0x1ff, 0x3, {0x1, 0x2}}, {0xfffe, 0x3ff, {0x0, 0x83180000}}, {0x8, 0xcb53, {0x0, 0x9}}, {0xf, 0x0, {0x0, 0x3ff}}, {0x4, 0x5, {0x1, 0xe}}, {0x2, 0x0, {0x2, 0x6}}, {0x3ff, 0x0, {0x1, 0x67984d01}}, {0x3ff, 0x3, {0x3, 0x6}}, {0x4, 0x7f, {0x2, 0x8001}}, {0x81, 0x615b, {0x2}}, {0x3, 0x6, {0x1, 0x7}}, {0x8, 0x2, {0x0, 0x101}}, {0x5, 0x9, {0x2, 0x8}}, {0x7, 0x0, {0x2, 0xffffffff}}, {0x7, 0x4, {0x3, 0x8}}, {0x203, 0x22a, {0x2, 0x7}}, {0x6, 0xb04, {0x1, 0x8}}, {0x8800, 0xfff, {0x1, 0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20}, 0x40) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00014aac1300000000000002000000000000000000000008000f0008"], 0x24}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000280)={0x262, @time={0x5, 0x9}, 0x3, {0x8e, 0xc}, 0xff, 0x2, 0xf}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0xde61, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) 2m45.5165161s ago: executing program 1 (id=1507): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) pread64(r0, &(0x7f0000000600)=""/4079, 0xfef, 0x0) 2m43.735152366s ago: executing program 1 (id=1509): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) write$binfmt_script(r6, &(0x7f0000000cc0)={'#! ', './file0', [{0x20, ',\xeaZu\xad\x8b\x1bo\xb5\xaa\t\x8d\x8f6j\\\xb0i\xd0{\xe8\xbd\x94\xe6\xd4[\xa3\x111\xb3\x93\xc9\x16eRuA{\f\xd4qf\a\xc4,V\x04U\x83hspb\xd5\xfa\xe2\xc9e\xc1\xbd:|\x15\xf4\x91\x13\xb6\x06\xc9\xb5D\a6\x11\xc9\x06\xc7\xcc\xfa\xf8\vBp9DCxf7\xcf\x14\xf9\xafFD\xbaz\xdd\x06(c\xb2\xa4.K.fxd\x1b]\xff\x9e'}, {0x20, '\t\x1b\x1c\x1e\xc3h$\xb0^\xc1\xab/\xb9\xf0\x13\xed\xd2\x05\xdfn{q\xac\xca\'\xef\xb0*\x11j=\xfb\x06$pY\x1cD\xd4\xf3\x98\xc6\xa1\x88\x9c\xe4\r9\xd3\x06L\xbf\x1a\xf1}M79?L\x98e\f\xb5\x0f\xfb\bH\xa8V\xc9ty\xdaJ9E-\xd0Z\xf4\x9b\xa0\xf5\x92\x06\x1b\x81\x03\xb7\xb0\xe3\x88\x85}G\xd9\x05\x85Jn\xf7\xf0\xae\xf7\xe22\x80[\xc62\'\x8e\xafC!b\x12\x9e\xd6\x0fW\x03\xf2c\xa5\x98h\xf9H\xa2\xa8\x83\xcb\x1c\xdd\xdc\xd2}\xfezZ\xc5\xd0ua\xd7\x06\x00\xa8\xf27\x8cU\xc4\x11\x1e\"`\x06Y\xafZ\xefK\xb1\xf0\x99\xd6\x1b\xed\xf5\xb7@/\x9d\x11\x9b\xe5\x9dP\xff\x99w\x81\xca,\x9a\xfc\a\x99\f\b%\x90\xd5\xd8\xb7\xc07#\xb7\xb5\xfc!i/\x05\x865\xeawWV+\xcc\x8c\xd3\xb5\x03\xff\xe0\x00'/233}, {0x20, '\xa6\x01+\x12e\xe9G\x87X\xff\x0e{\xe26\xec\xb1\xb07\xf0\x83\x1f5\xd8+!a<\x17i\xfb\xa9\x0f\xe3\x9c\xf4\x89S\x02\xa7\x93\xaf\xa9\xc8\x17W_\x8d\x7fm\x18\xbc\xb9x\xc2M\xa1\xeb:\xa8Tn;[\xb7\xecR\xdd\xd0\x95l\x00\x92\xff\x19\x1a\xa9\x06\x00\xe7Q\x11\xb83*#[\xe2\xfe0\xd7\xe1\x00\xb0q\xd7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\xad\xbbG\xeb\xcf\xc0\xa2~}@w\xf9\xbc\xe3\xf1\x04\x8e!d\xfa\x83>J\xd6\xc4]\xca\xf1\x8f}|\xf5Z\x9c\xc9\x1f\xd9P'}, {0x20, '\xa4\xdfy\xf5Y\xbf\xd9i@8\\\x87h\xa6\xa0\xa43\x84\xe7\xd5\x98\xe8\x01\xd3\xf0\xc72\xdf\xfb\x00\xfd\xcd\xf2q\x84\xcb-\xf3\x92\x12\xef^~v\x10/X\x1e\xc3\xb1T\xf4\xd0m|\xabr\xc7L\x9b3\xbeCJ\xad!\xb2\xb5g\x7f\xe9W\a\x00\x03=q\x8a\x83|\\w\xe1\xf3\xf1\xe8\x83\xef\xe2\x8bU\xebG4<\x1b\a57<;\xefm:?\x8e\x16\tu\xd5=\xc6P5\xd7\xeci\xcaI\x15\x00]\xc6%\x94&9\xac\xa9\xe9k\x99qc2\xc6V6\x1e\x1c\xeb\x9e\xc78\xb4y+\x85\xc4\xfa.\x15\xe4\x11\xa2\x92\t\xde\xa9\xdc\xe1\xfd\x98\xd2Ja\'r4\xe3sFv\x02\xa6\x8exO\xd0D\x8ea\xc3g\xe5V|@1\x15H4(\xb8E\xa4\xa9\x8bp:\x82k/.:\xf6\x003G(\xd4\xfc\xa0\x01\xe3Q\x805?\br\xc2\x96(y\x8c\x95\xf2Rx\xca\x06\xea\xf43\xf2/8L\xd3u\x87m\x96\xfc\x9cU]\xffiN\x14\xe7-{\xea\x9f\'D\xc0\xeeqA\x1a\xed\x8d\xc8\xad\xcdZS\x1b\xb6{\xfa\xa8\x84\nd=\x0e\x8fc9\xf0\x7fK\xd7\b\x86r\xac\xaf\xd0\xb6^y\xc5\x03c\xc22\xa9R\x90\x9e\xfc\xce\x957O\x06]\xdcZ\x17\xb3\x1bb\xc9Dm\xa2\xd3\x91'}]}, 0x343) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000100850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m42.771862271s ago: executing program 1 (id=1510): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="a1", 0xfdef}], 0x1, 0x8, 0x7, 0x4) 2m27.2076241s ago: executing program 33 (id=1510): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="a1", 0xfdef}], 0x1, 0x8, 0x7, 0x4) 41.283356836s ago: executing program 5 (id=1816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000180)={0xffffff7d, 0x0, 0x0, 0xbcad, 0x1a, "9b056936103000"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0xd) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000280), &(0x7f0000000380)=0x4) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r4) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000004b04e1f5719733c1051dcc1782c5f75362da7312f030f1421e887bdbc38c8005409571851726cd2b5dedf51920419a79c8c377fc370e47acc878e2430719560bed5618528418aa545af7b6e22e685eef59e", @ANYRES16=r5, @ANYBLOB="01000000000000000000030202000900010073797a3200000000"], 0x20}, 0x1, 0x40030000000000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006600), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) setsockopt$inet6_udp_int(r7, 0x11, 0x65, &(0x7f0000000180)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r9}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x9, 0x3, 0x0, 0x0, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) setsockopt$inet6_dccp_int(r7, 0x21, 0x5, &(0x7f00000001c0)=0x8, 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000840)={0x2}, 0x4) fstatfs(r10, &(0x7f0000000000)=""/125) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1b87040000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r11, @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015"], 0x3c}}, 0x0) 40.311306683s ago: executing program 5 (id=1820): r0 = inotify_init() sendfile(r0, 0xffffffffffffffff, 0x0, 0x9) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000300)='./file0\x00', 0xa50003d1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r9, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24008040) r10 = syz_open_procfs(0x0, 0x0) readlinkat(r10, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x2404c854) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 38.834751355s ago: executing program 5 (id=1822): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x620140, 0x0) read$msr(r0, &(0x7f0000000040), 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffe}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1483}}, './file0\x00'}) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000100)="16f5ee78c90a9be5e254381a68a83090db9694daacecbc14eddb1bd4afc791c195b73e68040731a3e870d24b148b4c761e76d965b1eb079ef7203c5bf7007f5a5c6601e44c4263b51f81e888c65761f580d3d938ef9049fa2f0427c95c4d04ed1fb1172f5f39c1d30cabbc4c624ce6004f86371cac163c5a671a86b70bf7d6497360cde655858fde968bac5319", 0x8d}, {&(0x7f00000001c0)="f5c04686c12ea72d67f7da11f0d833ca7abb837ef019bae1e0cc4054c17721629f3fd4730f6dc404e93707722458a61ebceff97ce76766199b202b1b2f8c64279e14667f53eeaff77bd66dc65ec0ecebb429496a7d3bf473748eaa0f4cff38fcd31db3362a94f4792e", 0x69}, {&(0x7f0000000240)="473ce20a7e4b30398029ca3038", 0xd}, {&(0x7f0000000280)="c2a39f9e6b13a3a32ec51bbbca7f7410a0fb1814ebfb0fc226ee96a1989c6a836d46056fa718f1de516d08fe07f09557f599657229a11c6a63a4bd7245b5b757e3a1800e82626cd2d820e38071b868a1d4f0767bffbffadbdef530ac5fe4f525b4be0732472851e1c27478da33c3ae12fb97055a1a22e5a212f02a8f6459b7f7af5779326cb603b09d1d7e1ef19f773bf6f6c967a84ee8e55ee2b8a4", 0x9c}, {&(0x7f0000000340)="b1a4442f03bbec6057af3c23394219260ee236b7218f5c77079e8ad311158e714a0dbc5264ecf704929bb01174b142d6afd359cffab5624be4a57033c868c406c2a7847a6a0cb7687e749fdfa235afe29b56a80d901ec332664099d38b301d3b7a9e22f39edaeb8b2aa10333e3158fe23cbd4ed2a9a2a491b772d94138883f56ebea1cc23940e6b0b11cba2ea03d3f4dad30e9b4127cde47066b0d2fa0a9f57f18966031f984cf04c5a78af0f44b070750d5722f970471da35dc7405c5d4a9d3d14a058052119399a6c89a0a1e877bb9a4ec45809ce9859056e9f417604a050fc29e470d24d0f488968e198e22af", 0xee}, {&(0x7f0000000440)="f82eb2d6986e9b4ff300d39ea0da273d9357ec493a8187d875a8dce7a832d24bffa8324eb5d31cc09070102fe4fe66895bc83707a7c778241edbe43a2b9b467c41e306c5c5bade5a182a8fa7005d95f0a4bfc2c4bbfce80c134c9d9abf43d5f69ada4ef425903558972f80c06f7504a412770baccff23642d4059ebdc2389060d24441af8dd3677391071cce0340ab11c9217570be0824e4a521d0bd0ef505b5abd707766289502ded102da32fe74f", 0xaf}, {&(0x7f0000000500)="e588303014719a5f865dfea202c655796ab045b50884ee72ba2960cca4c9f475109aaaa81408fbf82fd04548ba74cd62196c4e2055bf955f3ca3baf2fe26ebf1b527b5db64e2c3f2f31f51e05d045c03ba37c6ed5eeb3a4b8cd4d766f89851793d353805407370d6", 0x68}, {&(0x7f0000000580)}], 0x8) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000640)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file0\x00'}) bind$inet6(r0, &(0x7f00000006c0)={0xa, 0x4e23, 0xffc, @private0, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000700), 0x4) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r2) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x80, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0x80}, 0x1, 0x0, 0x0, 0x40081}, 0x4040000) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, 0x0, 0x21, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x40040) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000000a00)=0xb9d, 0x4) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x10000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000a80)={0xf0, 0x600, 0x2000, 0x30, 0x6, 0x5, 0x10, 0x2, {0x180, 0x6}, {0x2, 0x3, 0x1}, {0x0, 0x8000}, {0x43da, 0xc}, 0x3, 0x2, 0x10a, 0x1, 0x1, 0xf, 0x22ee, 0xb, 0x4, 0x75, 0x8, 0x9, 0x2, 0x1, 0x0, 0x6}) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xd0, 0x2, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_PROTO={0x4}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_ZONE={0x6}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1470}]}, @CTA_TUPLE_MASTER={0x80, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x200480d0) mkdirat(r0, &(0x7f0000000d00)='./file0\x00', 0x20) write$tun(r1, &(0x7f0000000d40)={@void, @val={0x2, 0x3, 0x4, 0x3, 0x1, 0x2b31}, @arp=@generic={0x325, 0x3, 0x6, 0xb, 0x1d, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, "6190ffaaf01583bac5850b", @local, "a278"}}, 0x2b) syz_open_dev$video(&(0x7f0000000d80), 0x6, 0x408940) setsockopt$inet_tcp_int(r2, 0x6, 0x1, &(0x7f0000000dc0)=0x1a1a57f6, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x5c, r7, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x80000, 0x35}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}, @NL80211_ATTR_PMKID={0x14, 0x55, "a29824bc093b80f3997a65342344dd24"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20}, 0x20060085) r9 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) getsockname$packet(r0, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)=@getchain={0x34, 0x66, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xffef, 0x5}, {0x6, 0xc}, {0xfff2, 0xe}}, [{0x8, 0xb, 0xfffffff9}, {0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000840}, 0x8014) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000001140)={@local, @empty, @empty}, 0xc) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001180), 0xffffffffffffffff) 37.591283234s ago: executing program 5 (id=1827): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r0 = syz_open_dev$vcsa(&(0x7f0000000200), 0x5, 0x40) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xd, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000080)=0xd0) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000080)=0xd0) close(r4) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x3000012}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x2c, r5, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000020c0), 0x8) sendmsg$inet6(r6, &(0x7f0000003940)={&(0x7f00000024c0)={0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}, 0x1c, &(0x7f0000003700)=[{&(0x7f0000002500)="84", 0x1}], 0x1}, 0x4040) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="14010000320001000000000000000000020100800c00fe000000000000000000140001000000000000000008000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823"], 0x114}], 0x1}, 0x0) 36.119048815s ago: executing program 5 (id=1830): connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x1e, 0x1, 0x0) listen(r3, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$packet(r3, 0x0, 0x0, 0x800) 31.518067678s ago: executing program 5 (id=1842): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xc3, &(0x7f0000000000), &(0x7f0000000080)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0xb, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000d82bcc724be595ecfc21e67000000085000000860000001800000000000000000000000000000018200000", @ANYRES32, @ANYBLOB="00b7a6a778d3d92e8a89c7e9ec92bc4f72000000810000009400000000000000706f567a80c53a365d2fdd31e2135f4abf9f3160ad5660557feb804f5f022070c9e124f1ab5b164e1db09e74af7045f94098e3f7dc08030b8fbc387ec2ecd9d9e36a882eba337b3862bb61bca09cf3f75e25d65851bcf92eeeed38f0f6b1914c424f"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000a40)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@i}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents64(r3, &(0x7f00000000c0)=""/56, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getdents64(r3, &(0x7f0000000100)=""/4082, 0xff2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001180)={'syztnl2\x00', &(0x7f0000001100)={'sit0\x00', 0x0, 0x10, 0x8000, 0x7, 0x6, {{0xc, 0x4, 0x1, 0xb, 0x30, 0x68, 0x0, 0x6, 0x2f, 0x0, @multicast2, @private=0xa010100, {[@generic={0x89, 0x2}, @lsrr={0x83, 0x17, 0x93, [@local, @loopback, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x33}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000011c0)={'sit0\x00', &(0x7f0000001300)={'syztnl2\x00', r5, 0x20, 0x10, 0x5, 0x4, {{0x5a, 0x4, 0x3, 0x37, 0x168, 0x66, 0x0, 0x1, 0x2f, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x4c, 0xbb, 0x1, 0xf, [{@multicast2, 0x6}, {@empty, 0x7}, {@local, 0x1}, {@empty, 0x80000000}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x3}, {@remote, 0xa}, {@rand_addr=0x64010100, 0x1}, {@empty, 0xc}]}, @timestamp={0x44, 0x14, 0x15, 0x0, 0x4, [0x1000, 0x0, 0x7fff, 0x45d9]}, @timestamp_prespec={0x44, 0x24, 0x9e, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf6ce}, {@local, 0xd2000000}, {@remote, 0x800}]}, @cipso={0x86, 0x36, 0x3, [{0x7, 0x2}, {0x6, 0x11, "4f9dda02e85001da5ca7b7f224ecff"}, {0x0, 0xc, "6622c0e1b4ef361b78d9"}, {0x2, 0x8, "718ffd5e38b0"}, {0x0, 0x5, "985431"}, {0x0, 0x4, "5218"}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0xf2, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @local, @broadcast, @local, @local]}, @cipso={0x86, 0x4a, 0x3, [{0x6, 0x9, "544a44d49e9498"}, {0x7, 0x9, "8029e4ada2c3ff"}, {0xb044edb71fa363a6, 0xd, "afbdfdfb01638e869a935b"}, {0x2, 0xe, "d44dc9b27caca9334d615ebd"}, {0x5, 0x7, "e972090151"}, {0x6, 0x10, "5bf326ceb4ffbfff1df29c4a8649"}]}, @timestamp_prespec={0x44, 0x2c, 0x7e, 0x3, 0x8, [{@broadcast, 0xffff}, {@remote, 0x2}, {@loopback, 0x10000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xffffffff}]}]}}}}}) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r7, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r7, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r6, 0x1}, 0x20) read$msr(r1, &(0x7f000001b700)=""/102385, 0xffffff71) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x4, @pix={0x7, 0x8, 0x34565559, 0x5, 0x0, 0xfffffff3, 0x5, 0x983e, 0x1, 0x3, 0x2}}, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fec6ffff00000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 15.617374597s ago: executing program 34 (id=1842): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xc3, &(0x7f0000000000), &(0x7f0000000080)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0xb, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000d82bcc724be595ecfc21e67000000085000000860000001800000000000000000000000000000018200000", @ANYRES32, @ANYBLOB="00b7a6a778d3d92e8a89c7e9ec92bc4f72000000810000009400000000000000706f567a80c53a365d2fdd31e2135f4abf9f3160ad5660557feb804f5f022070c9e124f1ab5b164e1db09e74af7045f94098e3f7dc08030b8fbc387ec2ecd9d9e36a882eba337b3862bb61bca09cf3f75e25d65851bcf92eeeed38f0f6b1914c424f"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000a40)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@i}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents64(r3, &(0x7f00000000c0)=""/56, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getdents64(r3, &(0x7f0000000100)=""/4082, 0xff2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001180)={'syztnl2\x00', &(0x7f0000001100)={'sit0\x00', 0x0, 0x10, 0x8000, 0x7, 0x6, {{0xc, 0x4, 0x1, 0xb, 0x30, 0x68, 0x0, 0x6, 0x2f, 0x0, @multicast2, @private=0xa010100, {[@generic={0x89, 0x2}, @lsrr={0x83, 0x17, 0x93, [@local, @loopback, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x33}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000011c0)={'sit0\x00', &(0x7f0000001300)={'syztnl2\x00', r5, 0x20, 0x10, 0x5, 0x4, {{0x5a, 0x4, 0x3, 0x37, 0x168, 0x66, 0x0, 0x1, 0x2f, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x4c, 0xbb, 0x1, 0xf, [{@multicast2, 0x6}, {@empty, 0x7}, {@local, 0x1}, {@empty, 0x80000000}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x3}, {@remote, 0xa}, {@rand_addr=0x64010100, 0x1}, {@empty, 0xc}]}, @timestamp={0x44, 0x14, 0x15, 0x0, 0x4, [0x1000, 0x0, 0x7fff, 0x45d9]}, @timestamp_prespec={0x44, 0x24, 0x9e, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf6ce}, {@local, 0xd2000000}, {@remote, 0x800}]}, @cipso={0x86, 0x36, 0x3, [{0x7, 0x2}, {0x6, 0x11, "4f9dda02e85001da5ca7b7f224ecff"}, {0x0, 0xc, "6622c0e1b4ef361b78d9"}, {0x2, 0x8, "718ffd5e38b0"}, {0x0, 0x5, "985431"}, {0x0, 0x4, "5218"}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0xf2, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @local, @broadcast, @local, @local]}, @cipso={0x86, 0x4a, 0x3, [{0x6, 0x9, "544a44d49e9498"}, {0x7, 0x9, "8029e4ada2c3ff"}, {0xb044edb71fa363a6, 0xd, "afbdfdfb01638e869a935b"}, {0x2, 0xe, "d44dc9b27caca9334d615ebd"}, {0x5, 0x7, "e972090151"}, {0x6, 0x10, "5bf326ceb4ffbfff1df29c4a8649"}]}, @timestamp_prespec={0x44, 0x2c, 0x7e, 0x3, 0x8, [{@broadcast, 0xffff}, {@remote, 0x2}, {@loopback, 0x10000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xffffffff}]}]}}}}}) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r7, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r7, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r6, 0x1}, 0x20) read$msr(r1, &(0x7f000001b700)=""/102385, 0xffffff71) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x4, @pix={0x7, 0x8, 0x34565559, 0x5, 0x0, 0xfffffff3, 0x5, 0x983e, 0x1, 0x3, 0x2}}, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fec6ffff00000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 15.599699596s ago: executing program 2 (id=1876): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r2) r3 = dup(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x3, &(0x7f0000000080)=ANY=[@ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) brk(0x1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r8) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x1f}, {0x8, 0xc}, {0xfff2, 0x8}}}, 0x24}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) sendmmsg$inet6(r7, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x2000485c) 12.50829374s ago: executing program 0 (id=1883): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @remote}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r4, 0x4068aea3, &(0x7f0000000140)) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) 12.233627668s ago: executing program 2 (id=1885): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r5, 0x1ad72f7) 9.487378246s ago: executing program 0 (id=1892): pipe2$9p(0x0, 0x0) r0 = dup(0xffffffffffffffff) close(r0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x19, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 8.64994731s ago: executing program 2 (id=1893): mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x7}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/73, 0x49}], 0x1, 0x2c, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x200080, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 8.171293798s ago: executing program 3 (id=1896): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r2) r3 = dup(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x3, &(0x7f0000000080)=ANY=[@ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) brk(0x1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r8) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x1f}, {0x8, 0xc}, {0xfff2, 0x8}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) sendmmsg$inet6(r7, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x2000485c) 8.029720019s ago: executing program 0 (id=1897): ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e2, &(0x7f0000000080)="284a20b63e066210c8f159bf36da8a332562ae86cbdd83ca18b522564b3579090ee92590d5ff288f9acdf9fcfe8555fd4da848338b74f3ad232a") 7.452938412s ago: executing program 2 (id=1898): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7.227421632s ago: executing program 0 (id=1900): mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x7}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/73, 0x49}], 0x1, 0x2c, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x200080, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 7.158530509s ago: executing program 2 (id=1901): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0x9, 0x5, 0x40, 0x10000, 'syz1\x00', 0x4000000}) setsockopt(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd27, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xa0}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) io_setup(0xb2, &(0x7f0000000200)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) io_submit(r4, 0x0, 0x0) gettid() r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x8, 0x1, 0x0, "6906007722366ccee4ba568ea4f8011fd3454ad23d0000a5ce00000000000002"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001805000020646c2500000000002020207b1af8ff000000007ba100000000000007010000f8ffffffb702000000000000b7030000b90600008500000004000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff1, @void, @value}, 0x94) 5.997783937s ago: executing program 6 (id=1902): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0x9, 0x5, 0x40, 0x10000, 'syz1\x00', 0x4000000}) setsockopt(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd27, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xa0}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) io_setup(0xb2, &(0x7f0000000200)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) io_submit(r4, 0x0, 0x0) r6 = gettid() r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r7, 0x4008550c, 0x0) tkill(r6, 0xb) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x8, 0x1, 0x0, "6906007722366ccee4ba568ea4f8011fd3454ad23d0000a5ce00000000000002"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001805000020646c2500000000002020207b1af8ff000000007ba100000000000007010000f8ffffffb702000000000000b7030000b90600008500000004000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff1, @void, @value}, 0x94) 4.599785446s ago: executing program 0 (id=1903): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r5, 0x1ad72f7) 4.297865474s ago: executing program 2 (id=1904): syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') fchdir(r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@rand_addr=0x64010100, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x0, 0x4e22, 0x1, 0xa, 0x0, 0x0, 0x2f, 0x0, r2}, {0x3, 0x0, 0x2, 0x47ad, 0x7, 0x4, 0x3ff, 0x40}, {0x8, 0x9, 0xc, 0xffffffff}, 0x200, 0x6e6bb0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@local, 0x4d3, 0x3d}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x3500, 0x0, 0x1, 0x4, 0x2, 0x8, 0x849}}, 0xe8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x207641a, 0x8000, 0x20}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)={0xb0, 0x0, 0x48, [{{0x2, 0x0, 0x100000001, 0xffffffffffff70ea, 0x100, 0x7, {0x3, 0x7, 0xfffffffffffffff7, 0xffffffffffbffff9, 0x1, 0x0, 0x7, 0x0, 0x3, 0x2000, 0x3, r7, r8, 0x8, 0x9}}, {0x4, 0x100000000, 0x1, 0xff, '.'}}]}, 0x0, 0x0, 0x0}) write$P9_RSTATu(r1, &(0x7f0000000600)={0x19f, 0x7d, 0x1, {{0x0, 0x188, 0x8000, 0xab, {0x90, 0x4, 0x2}, 0x1000000, 0x0, 0x7, 0x1a4d, 0x3, '9p\x00', 0x1, '^', 0x14e, '\xff\x00l\x1e\xa00xffffffffffffffff}) vmsplice(r11, &(0x7f00000000c0), 0x58, 0x0) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r10}, &(0x7f0000044000)) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18001100"/20, @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000a86fc1660c4ce2b6d59ac3467ab704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x6, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0xfe, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acb"], 0x0) (async) syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x1000, 0x1}, &(0x7f0000000240), &(0x7f0000000280)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18001100"/20, @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000a86fc1660c4ce2b6d59ac3467ab704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r4}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r5}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) (async) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) (async) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async) copy_file_range(r8, 0x0, r7, 0x0, 0x6, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0xfe, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) 3.440241141s ago: executing program 6 (id=1906): pipe2$9p(0x0, 0x0) r0 = dup(0xffffffffffffffff) close(r0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x19, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.387344561s ago: executing program 3 (id=1907): mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x7}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/73, 0x49}], 0x1, 0x2c, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x200080, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 3.152707687s ago: executing program 3 (id=1908): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @broadcast}, @in={0x2, 0x0, @local}, @in6={0xa, 0x4e24, 0x7, @remote, 0x96b}], 0x4c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r2, &(0x7f0000000640)="00a8", 0x2, 0xd1, 0x0, 0x0) (async) recvfrom$unix(r3, 0x0, 0x36, 0x10102, 0x0, 0x0) (async) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200008d4, 0x0, 0x0) (async) recvmsg$unix(r4, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x11ffe) (async, rerun: 32) r5 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$inet_int(r5, 0x0, 0x15, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async) unlink(&(0x7f0000000180)='./file1\x00') (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r8 = fsopen(&(0x7f0000000280)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x18) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x55, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a010100000000000000000000000a140000001100000000000000000000000a"], 0x3c}}, 0x40000) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (rerun: 64) 3.078136698s ago: executing program 6 (id=1909): ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e2, &(0x7f0000000080)="284a20b63e066210c8f159bf36da8a332562ae86cbdd83ca18b522564b3579090ee92590d5ff288f9acdf9fcfe8555fd4da848338b74f3ad232a") 1.839403065s ago: executing program 6 (id=1910): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.839049144s ago: executing program 3 (id=1911): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x31, &(0x7f00000000c0)=0x1, 0x4) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, r7, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r4, 0x5b43, 0x0, 0x20, 0x0, 0x0) 1.595685868s ago: executing program 6 (id=1912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x40c0080) sendmsg$IPSET_CMD_SAVE(r0, 0x0, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000580)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}}}, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$netlink(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x599800, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r6) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c80)={0x14, r7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}}, 0x14}, 0x8, 0x3000000000002, 0x0, 0x44001004}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r7, @ANYRES16=r4, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r9, @ANYBLOB="08002600940900000800b700a5000000"], 0x2c}}, 0x14000841) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 756.95809ms ago: executing program 3 (id=1913): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x25, 0x3, r1, 0x0, &(0x7f000027d000/0x2000)=nil, 0x2000, 0x2}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) r2 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000005e000102000000000000000000000000ee96b583ab"], 0x1c}}, 0x0) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6002000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002004759000000"], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200040d1, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x7, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bca) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0xa}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) (async) get_robust_list(0x0, &(0x7f0000003780)=0x0, &(0x7f00000037c0)) (async) mq_notify(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @broadcast}, 0x10) 577.450462ms ago: executing program 0 (id=1914): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r2) r3 = dup(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0x3, &(0x7f0000000080)=ANY=[@ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) brk(0x1) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r8) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0x1f}, {0x8, 0xc}, {0xfff2, 0x8}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) sendmmsg$inet6(r7, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x2000485c) 0s ago: executing program 6 (id=1915): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x4) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x11, 0xd, 0x0, &(0x7f0000000400)) ioctl$KVM_RUN(r1, 0xae80, 0x0) kernel console output (not intermixed with test programs): 618908][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.671604][T10812] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ¯HcUØîÑË•‚Ž¹+ÕuµŽê!Þ÷œ8¦ [ 630.681414][ T5879] usb 1-1: Product: syz [ 630.685625][ T5879] usb 1-1: Manufacturer: syz [ 630.715629][ T5879] usb 1-1: SerialNumber: syz [ 630.735033][ T5879] usb 1-1: config 0 descriptor?? [ 630.799893][ T5879] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 631.133233][ T978] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 631.652329][T10802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.669398][T10802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.839993][ T978] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 632.147448][ T6486] usb 1-1: Failed to submit usb control message: -110 [ 632.817491][ T6486] usb 1-1: unable to send the bmi data to the device: -110 [ 632.827199][ T6486] usb 1-1: unable to get target info from device [ 632.829303][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.844650][ T6486] usb 1-1: could not get target info (-110) [ 633.194480][ T6486] usb 1-1: could not probe fw (-110) [ 633.456439][ T978] usb 2-1: config 0 descriptor?? [ 633.473102][ T978] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 633.591669][T10842] FAULT_INJECTION: forcing a failure. [ 633.591669][T10842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.605011][T10842] CPU: 0 UID: 0 PID: 10842 Comm: syz.2.1383 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 633.605040][T10842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 633.605057][T10842] Call Trace: [ 633.605065][T10842] [ 633.605074][T10842] dump_stack_lvl+0x241/0x360 [ 633.605104][T10842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.605125][T10842] ? __pfx__printk+0x10/0x10 [ 633.605157][T10842] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 633.605188][T10842] ? __pfx_lock_release+0x10/0x10 [ 633.605225][T10842] should_fail_ex+0x40a/0x550 [ 633.605259][T10842] _copy_from_user+0x2d/0xb0 [ 633.605285][T10842] dev_write+0xb1/0x1050 [ 633.605320][T10842] ? irqentry_exit+0x63/0x90 [ 633.605343][T10842] ? lockdep_hardirqs_on+0x99/0x150 [ 633.605367][T10842] ? __pfx_dev_write+0x10/0x10 [ 633.605412][T10842] ? rw_verify_area+0x1ed/0x630 [ 633.605434][T10842] ? vfs_write+0x1ed/0xd10 [ 633.605457][T10842] ? vfs_write+0x287/0xd10 [ 633.605483][T10842] ? __pfx_dev_write+0x10/0x10 [ 633.605513][T10842] vfs_write+0x29f/0xd10 [ 633.605547][T10842] ? __mutex_unlock_slowpath+0x227/0x800 [ 633.605576][T10842] ? __pfx_vfs_write+0x10/0x10 [ 633.605598][T10842] ? do_sys_openat2+0x17a/0x1d0 [ 633.605621][T10842] ? __fget_files+0x2a/0x410 [ 633.605643][T10842] ? __fget_files+0x395/0x410 [ 633.605662][T10842] ? __fget_files+0x2a/0x410 [ 633.605691][T10842] ksys_write+0x18f/0x2b0 [ 633.605718][T10842] ? __pfx_ksys_write+0x10/0x10 [ 633.605745][T10842] ? do_syscall_64+0x100/0x230 [ 633.605772][T10842] ? do_syscall_64+0xb6/0x230 [ 633.605799][T10842] do_syscall_64+0xf3/0x230 [ 633.605823][T10842] ? clear_bhb_loop+0x35/0x90 [ 633.605856][T10842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.605883][T10842] RIP: 0033:0x7fd60e38cde9 [ 633.605901][T10842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.605918][T10842] RSP: 002b:00007fd60f212038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 633.605940][T10842] RAX: ffffffffffffffda RBX: 00007fd60e5a6160 RCX: 00007fd60e38cde9 [ 633.605956][T10842] RDX: 0000000000000040 RSI: 0000400000000240 RDI: 0000000000000005 [ 633.605968][T10842] RBP: 00007fd60f212090 R08: 0000000000000000 R09: 0000000000000000 [ 633.605981][T10842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.605993][T10842] R13: 0000000000000000 R14: 00007fd60e5a6160 R15: 00007ffc848339b8 [ 633.606022][T10842] [ 633.847854][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.736427][T10843] x_tables: duplicate underflow at hook 3 [ 634.760389][ T978] usb 2-1: USB disconnect, device number 37 [ 635.017378][T10843] 9pnet_virtio: no channels available for device syz [ 635.699194][ T5860] usb 1-1: USB disconnect, device number 40 [ 636.128768][T10860] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1390'. [ 636.150933][T10862] overlayfs: failed to clone upperpath [ 636.152432][T10860] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1390'. [ 636.161013][T10864] overlayfs: failed to clone upperpath [ 636.203565][T10862] 9pnet_fd: Insufficient options for proto=fd [ 636.672918][T10873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 638.226299][T10879] netlink: 'syz.3.1395': attribute type 1 has an invalid length. [ 638.395949][T10879] bond1: entered promiscuous mode [ 638.532359][T10881] team0: Port device team_slave_1 removed [ 638.553309][T10881] bond1: (slave team_slave_1): making interface the new active one [ 638.561735][T10881] team_slave_1: entered promiscuous mode [ 638.569097][T10881] bond1: (slave team_slave_1): Enslaving as an active interface with an up link [ 639.357578][T10889] x_tables: duplicate underflow at hook 3 [ 639.368450][T10889] 9pnet_virtio: no channels available for device syz [ 641.319928][T10906] block nbd2: NBD_DISCONNECT [ 641.327026][T10906] block nbd2: Disconnected due to user request. [ 641.333769][T10906] block nbd2: shutting down sockets [ 641.886012][T10912] bpf: Bad value for 'mode' [ 643.120155][ T29] audit: type=1326 audit(1739764488.309:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10920 comm="syz.3.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 643.148240][T10921] 9pnet_fd: Insufficient options for proto=fd [ 643.225704][ T29] audit: type=1326 audit(1739764488.309:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10920 comm="syz.3.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 643.285883][ T29] audit: type=1326 audit(1739764488.309:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10920 comm="syz.3.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 643.392817][ T29] audit: type=1326 audit(1739764488.309:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10920 comm="syz.3.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 643.460134][ T29] audit: type=1326 audit(1739764488.309:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10920 comm="syz.3.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 643.462983][T10931] x_tables: duplicate underflow at hook 3 [ 643.500187][ T29] audit: type=1326 audit(1739764488.309:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10920 comm="syz.3.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 643.523607][T10931] 9pnet_virtio: no channels available for device syz [ 643.596594][ T29] audit: type=1326 audit(1739764488.349:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10920 comm="syz.3.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 643.669120][ T29] audit: type=1326 audit(1739764488.349:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10920 comm="syz.3.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2aca98b750 code=0x7ffc0000 [ 643.916624][ T29] audit: type=1326 audit(1739764488.349:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10920 comm="syz.3.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 643.944417][ T29] audit: type=1326 audit(1739764488.349:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10920 comm="syz.3.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 645.804830][T10953] bpf: Bad value for 'mode' [ 645.900169][ T5879] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 646.117943][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 646.117984][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 646.118034][ T5879] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 646.118075][ T5879] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 646.118102][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.131458][ T5879] usb 6-1: config 0 descriptor?? [ 646.132076][T10944] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 646.348630][ T5879] usbhid 6-1:0.0: can't add hid device: -71 [ 646.348769][ T5879] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 646.350643][ T5879] usb 6-1: USB disconnect, device number 9 [ 646.436091][T10967] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 646.445108][T10967] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 646.454004][ T978] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 646.716249][T10969] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1424'. [ 646.727115][T10969] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1424'. [ 646.750582][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 646.784041][T10969] x_tables: duplicate underflow at hook 3 [ 646.926832][T10969] 9pnet_virtio: no channels available for device syz [ 647.129299][ T978] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 647.137903][ T978] usb 2-1: config 0 has no interface number 0 [ 647.149156][ T978] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 647.335153][ T978] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 647.438292][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1426'. [ 647.447751][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1426'. [ 647.457257][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1426'. [ 647.466608][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1426'. [ 647.476016][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1426'. [ 647.485387][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1426'. [ 647.504423][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1426'. [ 647.514004][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1426'. [ 648.068263][ T978] usb 2-1: Product: syz [ 648.166658][ T978] usb 2-1: Manufacturer: syz [ 648.171888][ T978] usb 2-1: SerialNumber: syz [ 648.191421][ T978] usb 2-1: config 0 descriptor?? [ 648.194089][ T975] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 648.207912][ T978] smsc95xx v2.0.0 [ 648.266750][ T975] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 648.500385][ T5879] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 648.680582][ T5879] usb 6-1: Using ep0 maxpacket: 16 [ 648.712360][ T978] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 648.718650][ T5879] usb 6-1: config index 0 descriptor too short (expected 224, got 36) [ 648.744789][ T5879] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 648.751088][ T978] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 648.758863][ T5879] usb 6-1: config 1 has no interfaces? [ 648.771596][ T5879] usb 6-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 648.781803][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.104118][T10989] bpf: Bad value for 'mode' [ 649.131703][ T5882] usb 6-1: USB disconnect, device number 10 [ 649.434669][ T978] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 649.704171][T10988] block nbd2: shutting down sockets [ 649.709592][ T978] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 649.754810][ T978] usb 2-1: USB disconnect, device number 38 [ 650.337578][T11007] bpf: Bad value for 'mode' [ 650.887139][T11012] x_tables: duplicate underflow at hook 3 [ 650.961196][T11008] 9pnet_virtio: no channels available for device syz [ 651.225814][T11021] bpf: Bad value for 'mode' [ 651.300750][T11023] 9pnet_fd: Insufficient options for proto=fd [ 651.562055][ T978] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 651.893105][T11020] block nbd0: shutting down sockets [ 652.511666][ T978] usb 2-1: too many configurations: 36, using maximum allowed: 8 [ 652.536852][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.749534][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.801675][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.847770][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.978630][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.008915][ T5882] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 653.107622][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.367902][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.412571][ T5882] usb 3-1: device descriptor read/64, error -71 [ 653.483199][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.510872][ T978] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 653.568093][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.596758][ T978] usb 2-1: config 0 descriptor?? [ 653.614812][ T978] usb 2-1: bad CDC descriptors [ 653.700211][ T5882] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 653.761285][T11051] x_tables: duplicate underflow at hook 3 [ 653.768536][T11051] 9pnet_virtio: no channels available for device syz [ 653.850306][ T5882] usb 3-1: device descriptor read/64, error -71 [ 653.963877][T11057] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 653.971627][ T5882] usb usb3-port1: attempt power cycle [ 654.021837][T11059] __nla_validate_parse: 51 callbacks suppressed [ 654.021862][T11059] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1458'. [ 654.061696][T11059] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1458'. [ 654.096286][T11059] 9pnet_fd: Insufficient options for proto=fd [ 654.116172][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1459'. [ 654.129279][T11062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1459'. [ 654.330258][ T5882] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 654.360003][ T978] usb 2-1: USB disconnect, device number 39 [ 654.380690][ T5882] usb 3-1: device descriptor read/8, error -71 [ 654.469926][T11068] block nbd5: NBD_DISCONNECT [ 654.475176][T11068] block nbd5: Disconnected due to user request. [ 654.481858][T11068] block nbd5: shutting down sockets [ 654.641165][ T5882] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 654.685632][ T5882] usb 3-1: device descriptor read/8, error -71 [ 654.854443][ T5882] usb usb3-port1: unable to enumerate USB device [ 655.129547][T11076] netlink: 'syz.0.1464': attribute type 2 has an invalid length. [ 655.163647][T11078] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1463'. [ 655.171869][T11076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 655.204399][T11079] libceph: resolve '400' (ret=-3): failed [ 655.310436][T11083] x_tables: duplicate underflow at hook 3 [ 655.317959][T11083] 9pnet_virtio: no channels available for device syz [ 655.782062][T11093] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1471'. [ 655.885389][T11093] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1471'. [ 655.956564][T11093] 9pnet_fd: Insufficient options for proto=fd [ 656.350356][ T978] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 656.417212][T11110] vlan0: entered promiscuous mode [ 656.427205][T11110] team0: Port device vlan0 added [ 656.437763][T11110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1476'. [ 656.575184][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 656.719868][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 656.747947][ T978] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 656.754612][T11110] team0 (unregistering): Port device team_slave_0 removed [ 656.774920][T11110] team0 (unregistering): Port device vlan0 removed [ 656.919322][ T978] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 656.935519][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.991817][ T978] usb 3-1: config 0 descriptor?? [ 656.997539][T11099] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 657.210636][ T978] usbhid 3-1:0.0: can't add hid device: -71 [ 657.240863][ T978] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 657.260445][ T978] usb 3-1: USB disconnect, device number 38 [ 657.434938][T11120] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1478'. [ 657.445227][T11120] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1478'. [ 657.500157][T11120] x_tables: duplicate underflow at hook 3 [ 657.523445][T11120] 9pnet_virtio: no channels available for device syz [ 657.966607][ T5845] Bluetooth: hci0: ISO packet for unknown connection handle 201 [ 658.153030][T11130] FAULT_INJECTION: forcing a failure. [ 658.153030][T11130] name failslab, interval 1, probability 0, space 0, times 0 [ 658.170265][T11130] CPU: 0 UID: 0 PID: 11130 Comm: syz.2.1482 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 658.170295][T11130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 658.170308][T11130] Call Trace: [ 658.170315][T11130] [ 658.170324][T11130] dump_stack_lvl+0x241/0x360 [ 658.170355][T11130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 658.170376][T11130] ? __pfx__printk+0x10/0x10 [ 658.170410][T11130] ? fs_reclaim_acquire+0x93/0x130 [ 658.170438][T11130] ? __pfx___might_resched+0x10/0x10 [ 658.170467][T11130] should_fail_ex+0x40a/0x550 [ 658.170500][T11130] should_failslab+0xac/0x100 [ 658.170534][T11130] __kmalloc_noprof+0xdd/0x4c0 [ 658.170553][T11130] ? kstrtouint_from_user+0x128/0x190 [ 658.170584][T11130] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 658.170612][T11130] tomoyo_realpath_from_path+0xcf/0x5e0 [ 658.170647][T11130] tomoyo_path_number_perm+0x239/0x770 [ 658.170676][T11130] ? __lock_acquire+0x1397/0x2100 [ 658.170709][T11130] ? tomoyo_path_number_perm+0x209/0x770 [ 658.170740][T11130] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 658.170813][T11130] ? __fget_files+0x2a/0x410 [ 658.170838][T11130] ? __fget_files+0x2a/0x410 [ 658.170864][T11130] security_file_ioctl+0xc6/0x2a0 [ 658.170897][T11130] __se_sys_ioctl+0x46/0x170 [ 658.170938][T11130] do_syscall_64+0xf3/0x230 [ 658.170963][T11130] ? clear_bhb_loop+0x35/0x90 [ 658.170996][T11130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.171025][T11130] RIP: 0033:0x7fd60e38cde9 [ 658.171043][T11130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.171062][T11130] RSP: 002b:00007fd60f254038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 658.171085][T11130] RAX: ffffffffffffffda RBX: 00007fd60e5a5fa0 RCX: 00007fd60e38cde9 [ 658.171101][T11130] RDX: 0000400000000040 RSI: 0000000000008983 RDI: 0000000000000003 [ 658.171114][T11130] RBP: 00007fd60f254090 R08: 0000000000000000 R09: 0000000000000000 [ 658.171127][T11130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.171139][T11130] R13: 0000000000000000 R14: 00007fd60e5a5fa0 R15: 00007ffc848339b8 [ 658.171170][T11130] [ 658.171192][T11130] ERROR: Out of memory at tomoyo_realpath_from_path. [ 658.543349][ T975] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 658.700178][ T975] usb 1-1: Using ep0 maxpacket: 16 [ 658.731854][ T975] usb 1-1: unable to get BOS descriptor or descriptor too short [ 658.749273][ T975] usb 1-1: config 8 has an invalid interface number: 132 but max is 0 [ 658.766620][ T975] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 658.795208][ T975] usb 1-1: config 8 has no interface number 0 [ 658.819299][ T975] usb 1-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 658.858934][ T975] usb 1-1: config 8 interface 132 has no altsetting 0 [ 658.895987][ T975] usb 1-1: string descriptor 0 read error: -22 [ 658.908761][ T975] usb 1-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 658.940256][ T5882] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 658.956994][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.011381][ T975] usb-storage 1-1:8.132: USB Mass Storage device detected [ 659.046233][ T975] usb-storage 1-1:8.132: Quirks match for vid 07cf pid 1001: a [ 659.112072][ T5882] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 659.124100][ T5882] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 659.134551][ T5882] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 659.152260][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.195802][T11134] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 659.207264][ T5882] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 659.208542][T11128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.249201][T11128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.266218][ T5882] usb 1-1: USB disconnect, device number 41 [ 659.640299][ T978] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 660.530191][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 660.561821][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 660.603936][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 660.649242][ T978] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 660.671780][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.685701][ T978] usb 2-1: Product: syz [ 660.690255][ T978] usb 2-1: Manufacturer: syz [ 660.695221][ T978] usb 2-1: SerialNumber: syz [ 660.707664][ T978] usb 2-1: config 0 descriptor?? [ 660.727925][ T978] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 660.995067][T11142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.005661][T11142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.021724][T10501] usb 2-1: Failed to submit usb control message: -110 [ 662.070571][T10501] usb 2-1: unable to send the bmi data to the device: -110 [ 662.087723][T10501] usb 2-1: unable to get target info from device [ 662.103094][T10501] usb 2-1: could not get target info (-110) [ 662.135689][ T5955] usb 3-1: USB disconnect, device number 39 [ 662.190762][T10501] usb 2-1: could not probe fw (-110) [ 662.842031][T11165] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1491'. [ 662.851599][T11165] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1491'. [ 662.863878][T11165] x_tables: duplicate underflow at hook 3 [ 662.871521][T11165] 9pnet_virtio: no channels available for device syz [ 663.744584][ T5955] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 663.795820][ T25] usb 2-1: USB disconnect, device number 40 [ 663.966587][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 663.995288][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 664.028712][ T5955] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 664.061808][ T5955] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 664.071691][ T5845] Bluetooth: hci2: unexpected event for opcode 0x0c05 [ 664.093107][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.516386][T11186] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1498'. [ 664.534729][ T5955] usb 3-1: config 0 descriptor?? [ 664.551599][T11170] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 664.771744][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 664.771764][ T29] audit: type=1326 audit(1739764509.974:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11187 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 664.828569][ T25] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 664.850613][ T5955] usbhid 3-1:0.0: can't add hid device: -71 [ 664.860680][ T5955] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 664.872404][ T29] audit: type=1326 audit(1739764509.974:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11187 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 664.897076][ T5955] usb 3-1: USB disconnect, device number 40 [ 664.897157][ T5845] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 664.906923][ T29] audit: type=1326 audit(1739764510.004:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11187 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 664.960203][ T29] audit: type=1326 audit(1739764510.004:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11187 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 665.037948][ T29] audit: type=1326 audit(1739764510.004:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11187 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 665.080229][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 665.100112][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 665.124794][ T29] audit: type=1326 audit(1739764510.014:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11187 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 665.146748][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 665.191332][ T25] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 665.215058][ T29] audit: type=1326 audit(1739764510.014:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11187 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 665.239167][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.259938][ T25] usb 2-1: config 0 descriptor?? [ 665.397574][T11186] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 665.420741][ T29] audit: type=1326 audit(1739764510.014:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11187 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 665.443076][ T29] audit: type=1326 audit(1739764510.014:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11187 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 665.472598][ T29] audit: type=1326 audit(1739764510.014:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11187 comm="syz.3.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 665.626026][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 665.647361][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 665.693624][ T25] usb 2-1: USB disconnect, device number 41 [ 665.741238][T11200] FAULT_INJECTION: forcing a failure. [ 665.741238][T11200] name failslab, interval 1, probability 0, space 0, times 0 [ 665.771159][T11201] x_tables: duplicate underflow at hook 3 [ 665.779842][T11201] 9pnet_virtio: no channels available for device syz [ 665.787907][T11200] CPU: 1 UID: 0 PID: 11200 Comm: syz.2.1504 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 665.787939][T11200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 665.787953][T11200] Call Trace: [ 665.787960][T11200] [ 665.787969][T11200] dump_stack_lvl+0x241/0x360 [ 665.787999][T11200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.788020][T11200] ? __pfx__printk+0x10/0x10 [ 665.788055][T11200] ? fs_reclaim_acquire+0x93/0x130 [ 665.788082][T11200] ? __pfx___might_resched+0x10/0x10 [ 665.788120][T11200] should_fail_ex+0x40a/0x550 [ 665.788156][T11200] should_failslab+0xac/0x100 [ 665.788190][T11200] __kmalloc_noprof+0xdd/0x4c0 [ 665.788209][T11200] ? tomoyo_encode+0x26f/0x540 [ 665.788235][T11200] tomoyo_encode+0x26f/0x540 [ 665.788262][T11200] tomoyo_realpath_from_path+0x59e/0x5e0 [ 665.788297][T11200] tomoyo_check_open_permission+0x258/0x4f0 [ 665.788332][T11200] ? tomoyo_check_open_permission+0x207/0x4f0 [ 665.788363][T11200] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 665.788431][T11200] ? mnt_get_write_access+0x68/0x2b0 [ 665.788456][T11200] ? mnt_get_write_access+0x68/0x2b0 [ 665.788480][T11200] ? tomoyo_file_open+0x165/0x220 [ 665.788503][T11200] ? mnt_get_write_access+0x226/0x2b0 [ 665.788531][T11200] security_file_open+0xac/0x250 [ 665.788568][T11200] do_dentry_open+0x320/0x1960 [ 665.788609][T11200] ? vfs_open+0x31/0x370 [ 665.788646][T11200] vfs_open+0x3b/0x370 [ 665.788680][T11200] path_openat+0x2c81/0x3590 [ 665.788739][T11200] ? __pfx_path_openat+0x10/0x10 [ 665.788786][T11200] do_filp_open+0x27f/0x4e0 [ 665.788814][T11200] ? __pfx_do_filp_open+0x10/0x10 [ 665.788838][T11200] ? do_raw_spin_lock+0x14f/0x370 [ 665.788903][T11200] do_sys_openat2+0x13e/0x1d0 [ 665.788923][T11200] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 665.788951][T11200] ? __pfx_do_sys_openat2+0x10/0x10 [ 665.788973][T11200] ? __fget_files+0x2a/0x410 [ 665.789003][T11200] __x64_sys_creat+0x123/0x170 [ 665.789025][T11200] ? __pfx___x64_sys_creat+0x10/0x10 [ 665.789052][T11200] ? do_syscall_64+0x100/0x230 [ 665.789081][T11200] ? do_syscall_64+0xb6/0x230 [ 665.789115][T11200] do_syscall_64+0xf3/0x230 [ 665.789141][T11200] ? clear_bhb_loop+0x35/0x90 [ 665.789175][T11200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.789203][T11200] RIP: 0033:0x7fd60e38cde9 [ 665.789221][T11200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.789239][T11200] RSP: 002b:00007fd60f254038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 665.789262][T11200] RAX: ffffffffffffffda RBX: 00007fd60e5a5fa0 RCX: 00007fd60e38cde9 [ 665.789278][T11200] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000300 [ 665.789291][T11200] RBP: 00007fd60f254090 R08: 0000000000000000 R09: 0000000000000000 [ 665.789305][T11200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.789318][T11200] R13: 0000000000000000 R14: 00007fd60e5a5fa0 R15: 00007ffc848339b8 [ 665.789350][T11200] [ 665.789525][T11200] ERROR: Out of memory at tomoyo_realpath_from_path. [ 670.385093][T11232] openvswitch: netlink: Flow key attr not present in new flow. [ 670.670374][T11239] netlink: 192 bytes leftover after parsing attributes in process `syz.5.1515'. [ 670.680389][T11239] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1515'. [ 670.734303][T11239] x_tables: duplicate underflow at hook 3 [ 670.825552][T11239] 9pnet_virtio: no channels available for device syz [ 671.568782][T11244] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1517'. [ 671.630239][ T5914] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 673.181255][T11247] Unknown options in mask 5 [ 673.240187][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 673.256685][ T5914] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.276650][ T5914] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.310766][ T5955] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 673.312243][ T5914] usb 3-1: config 0 interface 0 has no altsetting 0 [ 673.336647][ T5914] usb 3-1: New USB device found, idVendor=060b, idProduct=430a, bcdDevice= 0.00 [ 673.355719][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.376202][ T5914] usb 3-1: config 0 descriptor?? [ 673.642206][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 673.660339][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 673.671067][ T5955] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 673.683951][ T5955] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 673.693382][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.836918][ T5955] usb 1-1: config 0 descriptor?? [ 674.898403][ T5914] usbhid 3-1:0.0: can't add hid device: -71 [ 674.924409][ T5914] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 674.944148][ T5955] usb 1-1: can't set config #0, error -71 [ 674.975604][ T5955] usb 1-1: USB disconnect, device number 42 [ 674.978181][ T5914] usb 3-1: USB disconnect, device number 41 [ 675.005865][T11265] tipc: Enabling of bearer rejected, failed to enable media [ 675.540234][ T5914] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 675.594255][ T5955] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 675.702603][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 675.729387][ T5914] usb 1-1: config 0 has an invalid interface number: 213 but max is 0 [ 675.770321][ T5955] usb 3-1: Using ep0 maxpacket: 32 [ 675.774415][ T5914] usb 1-1: config 0 has no interface number 0 [ 675.782931][ T5955] usb 3-1: config 0 has an invalid interface number: 37 but max is 0 [ 675.782931][ T5914] usb 1-1: config 0 interface 213 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 675.785215][ T5914] usb 1-1: New USB device found, idVendor=0b95, idProduct=7e2b, bcdDevice=eb.19 [ 675.796659][ T5955] usb 3-1: config 0 has no interface number 0 [ 675.811436][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.827383][ T5914] usb 1-1: Product: syz [ 675.833416][ T5914] usb 1-1: Manufacturer: syz [ 675.838143][ T5914] usb 1-1: SerialNumber: syz [ 675.857405][ T5914] usb 1-1: config 0 descriptor?? [ 675.870296][ T5955] usb 3-1: config 0 interface 37 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 675.881531][T11267] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 675.902830][ T5955] usb 3-1: config 0 interface 37 has no altsetting 0 [ 675.923304][ T5955] usb 3-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=10.8f [ 675.936823][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.945099][ T5955] usb 3-1: Product: syz [ 675.949381][ T5955] usb 3-1: Manufacturer: syz [ 675.958999][ T5955] usb 3-1: SerialNumber: syz [ 675.966095][ T5955] usb 3-1: config 0 descriptor?? [ 675.973249][ T5955] rtl8150 3-1:0.37: couldn't find required endpoints [ 675.981541][ T5955] rtl8150 3-1:0.37: probe with driver rtl8150 failed with error -5 [ 676.125673][ T5914] asix 1-1:0.213 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 676.179418][ T5914] asix 1-1:0.213: probe with driver asix failed with error -71 [ 676.189310][ T5955] usb 3-1: USB disconnect, device number 42 [ 676.197780][ T5914] usb 1-1: USB disconnect, device number 43 [ 676.662835][T11275] block nbd5: NBD_DISCONNECT [ 676.668082][T11275] block nbd5: Disconnected due to user request. [ 676.678023][T11275] block nbd5: shutting down sockets [ 677.431004][T11286] random: crng reseeded on system resumption [ 678.263046][T11283] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1528'. [ 678.280338][T11283] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1528'. [ 678.437142][ T5914] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 678.577232][T11283] x_tables: duplicate underflow at hook 3 [ 678.679485][T11283] 9pnet_virtio: no channels available for device syz [ 678.796694][ T5914] usb 3-1: device descriptor read/64, error -71 [ 679.098612][T11295] Unknown options in mask 5 [ 679.167922][ T5914] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 679.331079][ T5914] usb 3-1: device descriptor read/64, error -71 [ 679.619240][ T5914] usb usb3-port1: attempt power cycle [ 679.649526][T11297] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1534'. [ 679.913454][T11302] FAULT_INJECTION: forcing a failure. [ 679.913454][T11302] name failslab, interval 1, probability 0, space 0, times 0 [ 679.926313][T11302] CPU: 1 UID: 0 PID: 11302 Comm: syz.5.1536 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 679.926339][T11302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 679.926349][T11302] Call Trace: [ 679.926355][T11302] [ 679.926362][T11302] dump_stack_lvl+0x241/0x360 [ 679.926391][T11302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 679.926406][T11302] ? __pfx__printk+0x10/0x10 [ 679.926430][T11302] ? __kmalloc_noprof+0xb5/0x4c0 [ 679.926445][T11302] ? __pfx___might_resched+0x10/0x10 [ 679.926463][T11302] ? __asan_memset+0x23/0x50 [ 679.926483][T11302] should_fail_ex+0x40a/0x550 [ 679.926507][T11302] should_failslab+0xac/0x100 [ 679.926530][T11302] __kmalloc_noprof+0xdd/0x4c0 [ 679.926544][T11302] ? security_key_alloc+0x50/0x390 [ 679.926569][T11302] security_key_alloc+0x50/0x390 [ 679.926594][T11302] key_alloc+0x883/0xff0 [ 679.926617][T11302] keyring_alloc+0x44/0xb0 [ 679.926638][T11302] lookup_user_key+0x54d/0x1500 [ 679.926659][T11302] ? __pfx_lookup_user_key+0x10/0x10 [ 679.926677][T11302] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 679.926700][T11302] ? __might_fault+0xc6/0x120 [ 679.926719][T11302] ? strncpy_from_user+0x146/0x270 [ 679.926741][T11302] __se_sys_add_key+0x2fa/0x490 [ 679.926763][T11302] ? __pfx___se_sys_add_key+0x10/0x10 [ 679.926785][T11302] ? do_syscall_64+0x100/0x230 [ 679.926806][T11302] ? __x64_sys_add_key+0x20/0xc0 [ 679.926827][T11302] do_syscall_64+0xf3/0x230 [ 679.926845][T11302] ? clear_bhb_loop+0x35/0x90 [ 679.926868][T11302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.926888][T11302] RIP: 0033:0x7fe37d18cde9 [ 679.926901][T11302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.926915][T11302] RSP: 002b:00007fe37dff7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 679.926931][T11302] RAX: ffffffffffffffda RBX: 00007fe37d3a5fa0 RCX: 00007fe37d18cde9 [ 679.926943][T11302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000040 [ 679.926953][T11302] RBP: 00007fe37dff7090 R08: fffffffffffffffe R09: 0000000000000000 [ 679.926963][T11302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.926972][T11302] R13: 0000000000000000 R14: 00007fe37d3a5fa0 R15: 00007ffe8bc13db8 [ 679.926992][T11302] [ 680.155501][ C1] vkms_vblank_simulate: vblank timer overrun [ 680.162019][ T5914] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 681.071144][ T5914] usb 3-1: device not accepting address 45, error -71 [ 681.323349][T11322] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 681.333025][T11322] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 682.043000][T11327] FAULT_INJECTION: forcing a failure. [ 682.043000][T11327] name failslab, interval 1, probability 0, space 0, times 0 [ 682.057064][T11327] CPU: 1 UID: 0 PID: 11327 Comm: syz.5.1542 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 682.057098][T11327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 682.057112][T11327] Call Trace: [ 682.057120][T11327] [ 682.057129][T11327] dump_stack_lvl+0x241/0x360 [ 682.057160][T11327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 682.057181][T11327] ? __pfx__printk+0x10/0x10 [ 682.057216][T11327] ? __kmalloc_cache_noprof+0x48/0x390 [ 682.057238][T11327] ? __pfx___might_resched+0x10/0x10 [ 682.057263][T11327] ? arch_stack_walk+0xfd/0x150 [ 682.057300][T11327] should_fail_ex+0x40a/0x550 [ 682.057335][T11327] should_failslab+0xac/0x100 [ 682.057369][T11327] __kmalloc_cache_noprof+0x70/0x390 [ 682.057388][T11327] ? rtnl_newlink+0x147/0x1d30 [ 682.057415][T11327] rtnl_newlink+0x147/0x1d30 [ 682.057443][T11327] ? kasan_save_track+0x51/0x80 [ 682.057470][T11327] ? kasan_save_free_info+0x40/0x50 [ 682.057498][T11327] ? __kasan_slab_free+0x59/0x70 [ 682.057525][T11327] ? kmem_cache_free+0x195/0x410 [ 682.057546][T11327] ? __pfx_rtnl_newlink+0x10/0x10 [ 682.057566][T11327] ? __netlink_deliver_tap+0x561/0x7f0 [ 682.057599][T11327] ? __pfx_validate_chain+0x10/0x10 [ 682.057619][T11327] ? __sock_sendmsg+0x221/0x270 [ 682.057640][T11327] ? ____sys_sendmsg+0x53a/0x860 [ 682.057668][T11327] ? __sys_sendmsg+0x269/0x350 [ 682.057696][T11327] ? do_syscall_64+0xf3/0x230 [ 682.057720][T11327] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.057769][T11327] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 682.057802][T11327] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 682.057840][T11327] ? mark_lock+0x9a/0x360 [ 682.057875][T11327] ? __lock_acquire+0x1397/0x2100 [ 682.057935][T11327] ? __pfx_lock_release+0x10/0x10 [ 682.057966][T11327] ? cap_capable+0x139/0x450 [ 682.058007][T11327] ? __pfx_rtnl_newlink+0x10/0x10 [ 682.058030][T11327] rtnetlink_rcv_msg+0x791/0xcf0 [ 682.058050][T11327] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 682.058076][T11327] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 682.058104][T11327] ? ref_tracker_free+0x643/0x7e0 [ 682.058142][T11327] netlink_rcv_skb+0x206/0x480 [ 682.058175][T11327] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 682.058199][T11327] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 682.058253][T11327] ? netlink_deliver_tap+0x2e/0x1b0 [ 682.058288][T11327] netlink_unicast+0x7f6/0x990 [ 682.058325][T11327] ? __pfx_netlink_unicast+0x10/0x10 [ 682.058352][T11327] ? __virt_addr_valid+0x45f/0x530 [ 682.058384][T11327] ? __phys_addr_symbol+0x2f/0x70 [ 682.058414][T11327] ? __check_object_size+0x47a/0x730 [ 682.058451][T11327] netlink_sendmsg+0x8de/0xcb0 [ 682.058503][T11327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.058549][T11327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.058580][T11327] __sock_sendmsg+0x221/0x270 [ 682.058606][T11327] ____sys_sendmsg+0x53a/0x860 [ 682.058645][T11327] ? __pfx_____sys_sendmsg+0x10/0x10 [ 682.058674][T11327] ? __fget_files+0x2a/0x410 [ 682.058698][T11327] ? __fget_files+0x2a/0x410 [ 682.058727][T11327] __sys_sendmsg+0x269/0x350 [ 682.058764][T11327] ? __pfx___sys_sendmsg+0x10/0x10 [ 682.058808][T11327] ? do_sys_openat2+0x17a/0x1d0 [ 682.058855][T11327] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 682.058887][T11327] ? do_syscall_64+0x100/0x230 [ 682.058915][T11327] ? do_syscall_64+0xb6/0x230 [ 682.058943][T11327] do_syscall_64+0xf3/0x230 [ 682.058968][T11327] ? clear_bhb_loop+0x35/0x90 [ 682.059000][T11327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.059029][T11327] RIP: 0033:0x7fe37d18cde9 [ 682.059048][T11327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.059066][T11327] RSP: 002b:00007fe37dff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.059089][T11327] RAX: ffffffffffffffda RBX: 00007fe37d3a5fa0 RCX: 00007fe37d18cde9 [ 682.059105][T11327] RDX: 0000000000008000 RSI: 0000400000000080 RDI: 0000000000000003 [ 682.059119][T11327] RBP: 00007fe37dff7090 R08: 0000000000000000 R09: 0000000000000000 [ 682.059132][T11327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.059145][T11327] R13: 0000000000000000 R14: 00007fe37d3a5fa0 R15: 00007ffe8bc13db8 [ 682.059175][T11327] [ 682.464523][ C1] vkms_vblank_simulate: vblank timer overrun [ 683.085162][T11331] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1543'. [ 683.095171][T11331] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1543'. [ 683.136628][T11331] x_tables: duplicate underflow at hook 3 [ 683.162308][T11331] 9pnet_virtio: no channels available for device syz [ 683.677421][ T5845] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 683.798954][T11339] Unknown options in mask 5 [ 684.202892][T11340] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1545'. [ 684.961945][T11345] random: crng reseeded on system resumption [ 685.930242][ T978] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 685.954997][T11349] FAULT_INJECTION: forcing a failure. [ 685.954997][T11349] name failslab, interval 1, probability 0, space 0, times 0 [ 685.987350][T11349] CPU: 1 UID: 0 PID: 11349 Comm: syz.5.1549 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 685.987383][T11349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 685.987396][T11349] Call Trace: [ 685.987404][T11349] [ 685.987413][T11349] dump_stack_lvl+0x241/0x360 [ 685.987448][T11349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 685.987469][T11349] ? __pfx__printk+0x10/0x10 [ 685.987504][T11349] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 685.987539][T11349] ? __pfx___might_resched+0x10/0x10 [ 685.987569][T11349] should_fail_ex+0x40a/0x550 [ 685.987603][T11349] should_failslab+0xac/0x100 [ 685.987636][T11349] kmem_cache_alloc_node_noprof+0x77/0x380 [ 685.987670][T11349] ? __alloc_skb+0x1c3/0x440 [ 685.987696][T11349] ? rtnl_bridge_setlink+0x779/0x9d0 [ 685.987722][T11349] __alloc_skb+0x1c3/0x440 [ 685.987749][T11349] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 685.987777][T11349] ? __pfx___alloc_skb+0x10/0x10 [ 685.987810][T11349] ? netlink_ack_tlv_len+0x6e/0x200 [ 685.987845][T11349] netlink_ack+0x145/0xa60 [ 685.987880][T11349] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 685.987909][T11349] ? ref_tracker_free+0x643/0x7e0 [ 685.987947][T11349] netlink_rcv_skb+0x294/0x480 [ 685.987979][T11349] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 685.988002][T11349] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 685.988057][T11349] ? netlink_deliver_tap+0x2e/0x1b0 [ 685.988092][T11349] netlink_unicast+0x7f6/0x990 [ 685.988130][T11349] ? __pfx_netlink_unicast+0x10/0x10 [ 685.988157][T11349] ? __virt_addr_valid+0x45f/0x530 [ 685.988189][T11349] ? __phys_addr_symbol+0x2f/0x70 [ 685.988218][T11349] ? __check_object_size+0x47a/0x730 [ 685.988255][T11349] netlink_sendmsg+0x8de/0xcb0 [ 685.988300][T11349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.988345][T11349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.988376][T11349] __sock_sendmsg+0x221/0x270 [ 685.988403][T11349] ____sys_sendmsg+0x53a/0x860 [ 685.988441][T11349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 685.988470][T11349] ? __fget_files+0x2a/0x410 [ 685.988494][T11349] ? __fget_files+0x2a/0x410 [ 685.988524][T11349] __sys_sendmsg+0x269/0x350 [ 685.988561][T11349] ? __pfx___sys_sendmsg+0x10/0x10 [ 685.988600][T11349] ? do_sys_openat2+0x17a/0x1d0 [ 685.988644][T11349] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 685.988675][T11349] ? do_syscall_64+0x100/0x230 [ 685.988703][T11349] ? do_syscall_64+0xb6/0x230 [ 685.988731][T11349] do_syscall_64+0xf3/0x230 [ 685.988756][T11349] ? clear_bhb_loop+0x35/0x90 [ 685.988788][T11349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.988816][T11349] RIP: 0033:0x7fe37d18cde9 [ 685.988835][T11349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.988860][T11349] RSP: 002b:00007fe37dff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.988884][T11349] RAX: ffffffffffffffda RBX: 00007fe37d3a5fa0 RCX: 00007fe37d18cde9 [ 685.988900][T11349] RDX: 0000000000004050 RSI: 0000400000000100 RDI: 0000000000000004 [ 685.988913][T11349] RBP: 00007fe37dff7090 R08: 0000000000000000 R09: 0000000000000000 [ 685.988926][T11349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.988938][T11349] R13: 0000000000000000 R14: 00007fe37d3a5fa0 R15: 00007ffe8bc13db8 [ 685.988967][T11349] [ 686.309294][ C1] vkms_vblank_simulate: vblank timer overrun [ 686.315505][ T978] usb 3-1: device descriptor read/64, error -71 [ 686.382068][T11354] bpf: Bad value for 'mode' [ 686.420605][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.434269][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.529695][T11356] netlink: 'syz.0.1550': attribute type 1 has an invalid length. [ 686.538063][T11356] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1550'. [ 686.694536][ T978] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 686.981213][ T978] usb 3-1: device descriptor read/64, error -71 [ 687.298313][ T978] usb usb3-port1: attempt power cycle [ 687.819676][ T5137] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 688.578821][ T978] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 688.595881][ T5137] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 688.607194][ T5137] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 688.633180][ T5137] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 688.673484][ T5137] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 688.681003][ T5137] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 688.801033][ T978] usb 3-1: device not accepting address 49, error -71 [ 688.907994][T11374] netlink: 'syz.5.1555': attribute type 1 has an invalid length. [ 688.917824][T11374] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1555'. [ 689.582012][T11377] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1556'. [ 689.591593][T11377] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1556'. [ 689.654038][T11377] x_tables: duplicate underflow at hook 3 [ 689.665735][T11377] 9pnet_virtio: no channels available for device syz [ 690.005938][T11383] block nbd5: NBD_DISCONNECT [ 690.012055][T11383] block nbd5: Disconnected due to user request. [ 690.018457][T11383] block nbd5: shutting down sockets [ 690.662818][T11390] netlink: 'syz.0.1561': attribute type 3 has an invalid length. [ 690.670669][T11390] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1561'. [ 690.750318][ T5845] Bluetooth: hci5: command tx timeout [ 690.964605][T11393] bond_slave_0: entered promiscuous mode [ 690.970841][T11393] bond_slave_1: entered promiscuous mode [ 690.977293][T11393] vlan2: entered promiscuous mode [ 690.988067][T11393] bond0: entered promiscuous mode [ 691.028374][T11393] bond0: left promiscuous mode [ 691.045438][T11393] bond_slave_0: left promiscuous mode [ 691.051133][T11393] bond_slave_1: left promiscuous mode [ 692.245731][T11363] chnl_net:caif_netlink_parms(): no params data found [ 692.535905][T11363] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.561231][T11363] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.586746][T11363] bridge_slave_0: entered allmulticast mode [ 692.614779][T11363] bridge_slave_0: entered promiscuous mode [ 692.637898][T11363] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.647172][T11363] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.657426][T11363] bridge_slave_1: entered allmulticast mode [ 692.664936][T11363] bridge_slave_1: entered promiscuous mode [ 692.715340][T11363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.745668][T11363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.830205][ T5845] Bluetooth: hci5: command tx timeout [ 693.026214][T11363] team0: Port device team_slave_0 added [ 693.037094][T11363] team0: Port device team_slave_1 added [ 693.103117][T11363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.111593][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.149301][T11363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.192284][T11363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.205711][T11363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.280354][T11363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.373733][T11363] hsr_slave_0: entered promiscuous mode [ 693.387517][T11363] hsr_slave_1: entered promiscuous mode [ 693.403167][T11363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 693.419422][T11363] Cannot create hsr debugfs directory [ 693.949997][T11420] netlink: 'syz.2.1568': attribute type 1 has an invalid length. [ 693.960751][T11420] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1568'. [ 694.430590][T11363] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 694.465322][T11429] netlink: 'syz.3.1572': attribute type 3 has an invalid length. [ 694.473248][T11429] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1572'. [ 694.543817][T11363] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 694.598721][T11363] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 694.637001][T11363] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 694.820463][ T25] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 694.888795][T11363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.986163][ T5845] Bluetooth: hci5: command tx timeout [ 695.038778][T11363] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.060175][ T25] usb 3-1: device descriptor read/64, error -71 [ 696.042654][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.049871][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.238696][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.245933][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.370459][ T25] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 697.189123][ T5845] Bluetooth: hci5: command tx timeout [ 697.451304][ T25] usb 3-1: device descriptor read/64, error -71 [ 697.506937][T11452] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1579'. [ 697.593702][ T25] usb usb3-port1: attempt power cycle [ 697.823734][T11461] random: crng reseeded on system resumption [ 698.838084][ T25] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 698.859599][T11363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.880129][ T25] usb 3-1: device descriptor read/8, error -71 [ 699.014826][T11464] netlink: 'syz.5.1580': attribute type 1 has an invalid length. [ 699.022889][T11464] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1580'. [ 699.250950][ T25] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 699.440953][ T25] usb 3-1: device descriptor read/8, error -71 [ 699.560600][ T25] usb usb3-port1: unable to enumerate USB device [ 699.682820][T11469] netlink: 'syz.3.1583': attribute type 3 has an invalid length. [ 699.690724][T11469] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1583'. [ 701.152851][T11363] veth0_vlan: entered promiscuous mode [ 701.210892][T11363] veth1_vlan: entered promiscuous mode [ 701.572338][T11363] veth0_macvtap: entered promiscuous mode [ 701.602229][T11363] veth1_macvtap: entered promiscuous mode [ 701.679810][T11363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.870294][T11363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.906081][T11363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.962845][T11363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.979190][T11363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.030262][ T5914] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 703.200243][T11363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.210349][T11363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.221699][T11363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.231666][T11363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.242180][T11363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.270486][T11363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.535486][T11503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.889087][T11501] netlink: 'syz.5.1591': attribute type 1 has an invalid length. [ 704.896948][T11501] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1591'. [ 704.912976][T11363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 704.960178][T11363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 704.993077][T11363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.014414][ T5914] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 705.037598][ T5914] usb 3-1: can't read configurations, error -71 [ 705.042535][T11363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.111426][T11363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.165156][T11507] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1592'. [ 705.263281][T11363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.338793][T11363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.456522][T11363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.561691][T11363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 705.684466][T11363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.731264][ T5860] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 705.731564][T11363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.786990][T11510] netlink: 'syz.2.1593': attribute type 3 has an invalid length. [ 705.795069][T11510] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1593'. [ 705.862926][T11512] cgroup: fork rejected by pids controller in /syz5 [ 705.873274][T11363] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.980371][T11363] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.989144][T11363] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.047641][T11363] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.133648][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 706.173200][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 706.230377][ T5860] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 706.273088][ T5860] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 706.314495][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.340595][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.367771][ T5860] usb 1-1: config 0 descriptor?? [ 706.373032][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.413224][T11508] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 706.569026][T10501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.584288][T10501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.653748][ T5860] usbhid 1-1:0.0: can't add hid device: -71 [ 706.659826][ T5860] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 706.733306][ T5860] usb 1-1: USB disconnect, device number 44 [ 707.082628][T10501] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.244119][T10501] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.353973][T10501] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.700833][T10501] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.897531][T11529] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1600'. [ 709.180392][T11497] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 710.141937][T11497] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 710.180288][T11497] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 710.204540][T10501] bridge_slave_1: left allmulticast mode [ 710.210108][T11497] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 710.237981][T10501] bridge_slave_1: left promiscuous mode [ 710.243881][T11497] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 710.274862][T11546] netlink: 'syz.3.1604': attribute type 3 has an invalid length. [ 710.282803][T11546] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1604'. [ 710.292804][T10501] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.310307][T11497] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.380827][T11497] usb 1-1: config 0 descriptor?? [ 710.386435][T11529] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 710.406001][T10501] bridge_slave_0: left allmulticast mode [ 710.414021][T11548] vivid-000: disconnect [ 710.428165][T10501] bridge_slave_0: left promiscuous mode [ 710.444024][T10501] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.541330][T11547] vivid-000: reconnect [ 710.593765][ T5137] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 710.606351][ T5137] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 710.614965][ T5137] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 710.623285][ T5137] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 710.631518][ T5137] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 710.638932][ T5137] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 710.672923][T11497] usbhid 1-1:0.0: can't add hid device: -71 [ 710.678994][T11497] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 710.692856][T11497] usb 1-1: USB disconnect, device number 45 [ 711.960362][T11560] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1607'. [ 712.073247][T11567] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1609'. [ 712.753433][ T5845] Bluetooth: hci0: command tx timeout [ 712.780215][ T5914] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 713.175393][ T5914] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 713.210146][ T5914] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 713.964419][ T5914] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 713.977649][ T5914] usb 7-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 713.986851][ T5914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.002242][ T5914] usb 7-1: config 0 descriptor?? [ 714.008002][T11567] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 714.212653][T11581] overlay: Unknown parameter 'func' [ 714.237052][T11583] Unknown options in mask 5 [ 714.282189][ T5914] usbhid 7-1:0.0: can't add hid device: -71 [ 714.301598][ T5914] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 714.321929][ T5914] usb 7-1: USB disconnect, device number 2 [ 714.380881][T11585] netlink: 'syz.3.1616': attribute type 3 has an invalid length. [ 714.388651][T11585] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1616'. [ 714.435702][T10501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.451631][T10501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.474117][T10501] bond0 (unregistering): Released all slaves [ 714.788263][T10501] IPVS: stopping master sync thread 10793 ... [ 714.818079][T11593] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1618'. [ 714.830359][ T5845] Bluetooth: hci0: command tx timeout [ 715.041311][T11589] QAT: Device 6 not found [ 715.130140][ T975] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 715.325435][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 715.518786][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 715.530192][ T975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 715.543610][ T975] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 715.553937][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.578093][ T975] usb 1-1: config 0 descriptor?? [ 715.586296][T11593] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 716.118606][ T975] usbhid 1-1:0.0: can't add hid device: -71 [ 716.125057][ T975] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 716.179485][ T975] usb 1-1: USB disconnect, device number 46 [ 716.385525][T10501] hsr_slave_0: left promiscuous mode [ 716.408751][T10501] hsr_slave_1: left promiscuous mode [ 716.426809][T10501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.454645][T10501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.481843][T10501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.489345][T10501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.577164][T10501] veth1_macvtap: left promiscuous mode [ 716.591135][T10501] veth0_macvtap: left promiscuous mode [ 716.597054][T10501] veth1_vlan: left promiscuous mode [ 717.142234][ T5845] Bluetooth: hci0: command tx timeout [ 717.245514][T10501] veth0_vlan: left promiscuous mode [ 717.595604][T11623] netlink: 'syz.0.1627': attribute type 3 has an invalid length. [ 717.606362][T11623] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1627'. [ 719.230386][ T5845] Bluetooth: hci0: command tx timeout [ 719.429578][T11632] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1630'. [ 719.697343][ T5860] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 720.003005][ T5860] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 720.018560][ T5860] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 720.029696][ T5860] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 720.155515][ T5860] usb 7-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 720.164797][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.176659][ T5860] usb 7-1: config 0 descriptor?? [ 720.192979][T11632] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 720.206111][T10501] team0 (unregistering): Port device team_slave_1 removed [ 720.269183][T10501] team0 (unregistering): Port device team_slave_0 removed [ 720.513501][ T5860] usbhid 7-1:0.0: can't add hid device: -71 [ 720.532408][ T5860] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 720.542608][ T5860] usb 7-1: USB disconnect, device number 3 [ 720.715564][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 720.715611][ T29] audit: type=1326 audit(1739764565.824:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 721.507109][ T29] audit: type=1326 audit(1739764565.824:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 721.529775][ T29] audit: type=1326 audit(1739764565.824:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 721.561838][ T29] audit: type=1326 audit(1739764565.834:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 721.590136][ T29] audit: type=1326 audit(1739764565.834:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 721.629984][ T29] audit: type=1326 audit(1739764565.834:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 721.658766][ T29] audit: type=1326 audit(1739764565.834:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 721.682109][ T29] audit: type=1326 audit(1739764565.834:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 721.704871][ T29] audit: type=1326 audit(1739764565.844:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 721.728316][ T29] audit: type=1326 audit(1739764565.844:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11641 comm="syz.3.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aca98cde9 code=0x7ffc0000 [ 721.998075][T11650] FAULT_INJECTION: forcing a failure. [ 721.998075][T11650] name failslab, interval 1, probability 0, space 0, times 0 [ 722.018608][T11650] CPU: 1 UID: 0 PID: 11650 Comm: syz.6.1636 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 722.018635][T11650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 722.018648][T11650] Call Trace: [ 722.018656][T11650] [ 722.018665][T11650] dump_stack_lvl+0x241/0x360 [ 722.018697][T11650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 722.018718][T11650] ? __pfx__printk+0x10/0x10 [ 722.018753][T11650] should_fail_ex+0x40a/0x550 [ 722.018777][T11650] should_failslab+0xac/0x100 [ 722.018801][T11650] ? skb_clone+0x20c/0x390 [ 722.018822][T11650] kmem_cache_alloc_noprof+0x70/0x380 [ 722.018850][T11650] skb_clone+0x20c/0x390 [ 722.018871][T11650] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 722.018892][T11650] dev_queue_xmit_nit+0x249/0xca0 [ 722.018912][T11650] ? dev_queue_xmit_nit+0x2b/0xca0 [ 722.018931][T11650] ? validate_xmit_skb+0x9b8/0xff0 [ 722.018956][T11650] dev_hard_start_xmit+0x15f/0x7d0 [ 722.018978][T11650] ? __pfx_validate_xmit_skb+0x10/0x10 [ 722.019009][T11650] __dev_queue_xmit+0x1b73/0x3f50 [ 722.019031][T11650] ? kasan_save_track+0x51/0x80 [ 722.019053][T11650] ? ____sys_sendmsg+0x53a/0x860 [ 722.019079][T11650] ? __dev_queue_xmit+0x2f4/0x3f50 [ 722.019103][T11650] ? __pfx___dev_queue_xmit+0x10/0x10 [ 722.019136][T11650] ? __copy_skb_header+0xa7/0x5a0 [ 722.019159][T11650] ? __asan_memcpy+0x40/0x70 [ 722.019189][T11650] ? skb_clone+0x240/0x390 [ 722.019213][T11650] __netlink_deliver_tap+0x561/0x7f0 [ 722.019245][T11650] ? netlink_deliver_tap+0x2e/0x1b0 [ 722.019274][T11650] netlink_deliver_tap+0x19d/0x1b0 [ 722.019298][T11650] netlink_unicast+0x7c4/0x990 [ 722.019324][T11650] ? __pfx_netlink_unicast+0x10/0x10 [ 722.019343][T11650] ? __virt_addr_valid+0x45f/0x530 [ 722.019366][T11650] ? __phys_addr_symbol+0x2f/0x70 [ 722.019387][T11650] ? __check_object_size+0x47a/0x730 [ 722.019413][T11650] netlink_sendmsg+0x8de/0xcb0 [ 722.019444][T11650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.019476][T11650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.019498][T11650] __sock_sendmsg+0x221/0x270 [ 722.019516][T11650] ____sys_sendmsg+0x53a/0x860 [ 722.019544][T11650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 722.019564][T11650] ? __fget_files+0x2a/0x410 [ 722.019581][T11650] ? __fget_files+0x2a/0x410 [ 722.019602][T11650] __sys_sendmsg+0x269/0x350 [ 722.019627][T11650] ? __pfx___sys_sendmsg+0x10/0x10 [ 722.019657][T11650] ? do_sys_openat2+0x17a/0x1d0 [ 722.019691][T11650] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 722.019714][T11650] ? do_syscall_64+0x100/0x230 [ 722.019740][T11650] ? do_syscall_64+0xb6/0x230 [ 722.019769][T11650] do_syscall_64+0xf3/0x230 [ 722.019794][T11650] ? clear_bhb_loop+0x35/0x90 [ 722.019828][T11650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.019855][T11650] RIP: 0033:0x7ffa37b8cde9 [ 722.019869][T11650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 722.019882][T11650] RSP: 002b:00007ffa3895c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 722.019899][T11650] RAX: ffffffffffffffda RBX: 00007ffa37da5fa0 RCX: 00007ffa37b8cde9 [ 722.019910][T11650] RDX: 0000000000000000 RSI: 0000400000000280 RDI: 0000000000000003 [ 722.019919][T11650] RBP: 00007ffa3895c090 R08: 0000000000000000 R09: 0000000000000000 [ 722.019928][T11650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.019937][T11650] R13: 0000000000000000 R14: 00007ffa37da5fa0 R15: 00007fff35bd5328 [ 722.019959][T11650] [ 722.519424][T11611] netlink: 'syz.2.1624': attribute type 5 has an invalid length. [ 722.530280][T11611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1624'. [ 722.553077][T11646] tipc: Started in network mode [ 722.566808][T11646] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 722.589576][T11646] tipc: Enabled bearer , priority 10 [ 722.823039][T11659] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1640'. [ 722.849374][T11659] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1640'. [ 722.876392][T11554] chnl_net:caif_netlink_parms(): no params data found [ 722.981823][T11662] netlink: 'syz.6.1639': attribute type 3 has an invalid length. [ 722.989729][T11662] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1639'. [ 723.060227][ T975] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 723.241786][ T975] usb 1-1: no configurations [ 723.259251][ T975] usb 1-1: can't read configurations, error -22 [ 723.430257][ T975] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 723.583433][ T975] usb 1-1: no configurations [ 723.588142][ T975] usb 1-1: can't read configurations, error -22 [ 723.656463][ T975] usb usb1-port1: attempt power cycle [ 723.700220][ T5914] tipc: Node number set to 10398378 [ 723.947511][T11554] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.955430][T11554] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.982137][T11554] bridge_slave_0: entered allmulticast mode [ 724.226972][ T975] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 724.285234][ T975] usb 1-1: no configurations [ 724.291048][ T975] usb 1-1: can't read configurations, error -22 [ 724.310824][T11554] bridge_slave_0: entered promiscuous mode [ 724.440978][ T975] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 724.561575][ T975] usb 1-1: no configurations [ 724.566247][ T975] usb 1-1: can't read configurations, error -22 [ 724.583263][ T975] usb usb1-port1: unable to enumerate USB device [ 724.613386][T11554] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.670561][T11554] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.702982][T11554] bridge_slave_1: entered allmulticast mode [ 724.711002][T11554] bridge_slave_1: entered promiscuous mode [ 724.847885][T11554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.889613][T11554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.573824][T11685] block nbd6: NBD_DISCONNECT [ 726.384038][T11688] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1646'. [ 726.426549][T11554] team0: Port device team_slave_0 added [ 726.463222][T11554] team0: Port device team_slave_1 added [ 726.555847][T11554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.563980][T11554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.770183][T11554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.595047][ T5914] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 727.622421][T11554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.629455][T11554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.661892][T11554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.873071][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 727.900445][T11554] hsr_slave_0: entered promiscuous mode [ 727.906201][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 727.921304][T11554] hsr_slave_1: entered promiscuous mode [ 727.940925][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 727.954868][T11554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 727.964924][T11554] Cannot create hsr debugfs directory [ 727.980317][ T5914] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 728.009975][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.041170][ T5914] usb 3-1: config 0 descriptor?? [ 728.046824][T11688] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 728.141432][ T5955] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 728.246775][T11711] netlink: 'syz.3.1653': attribute type 3 has an invalid length. [ 728.254844][T11711] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1653'. [ 728.276857][ T5914] usbhid 3-1:0.0: can't add hid device: -71 [ 728.307540][ T5914] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 728.320296][ T5955] usb 1-1: Using ep0 maxpacket: 16 [ 728.333859][ T5914] usb 3-1: USB disconnect, device number 57 [ 728.338186][ T5955] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 728.861411][ T5955] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 728.890379][ T5955] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 728.926839][ T5955] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 728.937223][T11717] 9pnet_fd: Insufficient options for proto=fd [ 728.967179][ T5955] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 728.976559][ T5955] usb 1-1: config 0 has no interface number 0 [ 728.989780][ T5955] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 729.010139][ T5955] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 729.025711][ T5955] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 729.035915][ T5955] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 729.060333][ T5955] usb 1-1: too many endpoints for config 0 interface 125 altsetting 190: 64, using maximum allowed: 30 [ 729.086457][ T5955] usb 1-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 729.139496][ T5955] usb 1-1: config 0 interface 125 has no altsetting 0 [ 729.662720][ T5955] usb 1-1: config 0 interface 125 has no altsetting 2 [ 729.747624][ T5955] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 729.773232][T11554] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 729.790639][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.803125][T11554] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 729.809127][ T5955] usb 1-1: Product: syz [ 729.847055][ T5955] usb 1-1: Manufacturer: syz [ 729.910151][ T5955] usb 1-1: SerialNumber: syz [ 730.004671][ T5955] usb 1-1: config 0 descriptor?? [ 730.013303][ T5955] usb 1-1: selecting invalid altsetting 2 [ 730.061988][T11554] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 730.108789][T11554] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 730.372598][T11554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.391620][T11554] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.413057][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.420376][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.460592][ T975] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 730.540437][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.547679][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.681603][ T975] usb 3-1: no configurations [ 730.687603][ T975] usb 3-1: can't read configurations, error -22 [ 730.691572][T11554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 730.842004][ T975] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 731.020864][ T975] usb 3-1: no configurations [ 731.026272][ T975] usb 3-1: can't read configurations, error -22 [ 731.033330][ T975] usb usb3-port1: attempt power cycle [ 731.070208][ T5955] get_1284_register timeout [ 731.074895][ T5955] uss720 1-1:0.125: probe with driver uss720 failed with error -5 [ 731.074946][ C1] usb 1-1: async_complete: urb error -104 [ 731.075037][ C1] usb 1-1: async_complete: urb error -104 [ 731.075086][ C1] usb 1-1: async_complete: urb error -104 [ 731.075135][ C1] usb 1-1: async_complete: urb error -104 [ 731.141147][T11554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.370235][ T975] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 731.379658][ T5955] usb 1-1: USB disconnect, device number 51 [ 731.437524][ T975] usb 3-1: no configurations [ 731.444156][ T975] usb 3-1: can't read configurations, error -22 [ 731.600275][ T975] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 731.672288][ T975] usb 3-1: no configurations [ 731.676928][ T975] usb 3-1: can't read configurations, error -22 [ 731.697781][T11554] veth0_vlan: entered promiscuous mode [ 731.710668][ T975] usb usb3-port1: unable to enumerate USB device [ 731.751838][T11554] veth1_vlan: entered promiscuous mode [ 731.975000][T11554] veth0_macvtap: entered promiscuous mode [ 732.054907][T11554] veth1_macvtap: entered promiscuous mode [ 732.118654][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.138410][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.148554][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.169886][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.189538][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.217964][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.228143][ T5860] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 732.235981][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.255470][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.268845][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.289540][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.311760][T11554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.331388][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.350566][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.368170][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.395110][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.438928][ T5860] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 732.450628][ T5860] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 732.460691][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.480450][ T5860] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 732.489920][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.499219][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.512187][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.524970][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.535894][T11750] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 732.543447][T11554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.546639][ T5860] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 732.564910][T11554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.586772][T11554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.596272][T11760] netlink: 'syz.3.1665': attribute type 3 has an invalid length. [ 732.604508][T11760] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1665'. [ 732.664665][T11758] block nbd6: NBD_DISCONNECT [ 732.681125][T11554] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.700791][T11554] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.709802][T11554] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.718903][T11554] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.889104][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.910935][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.035646][T11770] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1668'. [ 734.740358][ T5860] usb 3-1: new low-speed USB device number 62 using dummy_hcd [ 734.762948][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.788427][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.904051][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 734.940435][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 735.790238][ T5955] usb 1-1: USB disconnect, device number 52 [ 735.938163][ T5860] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 735.952830][ T5860] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 735.963582][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.118103][ T5860] usb 3-1: config 0 descriptor?? [ 736.143612][T11770] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 737.121358][T11788] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 737.130160][T11788] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 737.208568][ T5860] usbhid 3-1:0.0: can't add hid device: -71 [ 737.352535][ T978] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 737.367417][ T5860] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 737.654266][ T5860] usb 3-1: USB disconnect, device number 62 [ 737.772458][ T978] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 737.800840][ T978] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.835631][ T978] usb 7-1: Product: syz [ 737.839999][ T978] usb 7-1: Manufacturer: syz [ 737.854991][ T978] usb 7-1: SerialNumber: syz [ 737.872614][ T978] usb 7-1: config 0 descriptor?? [ 738.436302][T11803] netlink: 'syz.5.1677': attribute type 3 has an invalid length. [ 738.436358][T11803] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1677'. [ 738.787391][T11806] netem: change failed [ 738.861838][T11806] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1672'. [ 738.970827][T11806] xt_cgroup: invalid path, errno=-2 [ 740.416184][ T978] usb 7-1: f81604_write: reg: 105 data: 0 failed: -ETIMEDOUT [ 740.423867][ T978] f81604 7-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT [ 740.440434][ T978] f81604 7-1:0.0: probe with driver f81604 failed with error -110 [ 741.489787][T11812] block nbd5: NBD_DISCONNECT [ 741.500682][T11812] block nbd5: Disconnected due to user request. [ 741.508367][T11812] block nbd5: shutting down sockets [ 741.926333][ T978] usb 7-1: USB disconnect, device number 4 [ 742.022413][T11830] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 742.031515][T11830] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 742.261029][T11837] block nbd5: NBD_DISCONNECT [ 742.265977][T11837] block nbd5: Disconnected due to user request. [ 742.273342][T11837] block nbd5: shutting down sockets [ 745.504747][T11859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1691'. [ 745.519245][T11862] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 745.530135][T11862] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 747.054699][T11859] fuse: Unknown parameter 'æd' [ 747.633192][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.640695][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.830224][ T5914] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 747.850164][ T5860] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 747.994245][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.015925][ T5860] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.035548][ T5914] usb 1-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 748.054840][ T5860] usb 7-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 748.070169][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.128640][ T5860] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 748.138494][ T5860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.155754][ T5914] usb 1-1: config 0 descriptor?? [ 748.161216][ T5860] usb 7-1: Product: syz [ 748.165800][ T5860] usb 7-1: Manufacturer: syz [ 748.170722][ T5860] usb 7-1: SerialNumber: syz [ 748.246934][T11881] warning: `syz.2.1700' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 748.915530][ T6016] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 748.960306][ T978] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 749.980197][ T6016] usb 3-1: device descriptor read/64, error -71 [ 751.555745][ T5914] usbhid 1-1:0.0: can't add hid device: -71 [ 751.620309][ T6016] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 751.654046][ T5914] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 751.735238][ T5914] usb 1-1: USB disconnect, device number 53 [ 751.780344][ T6016] usb 3-1: device descriptor read/64, error -71 [ 751.933245][ T6016] usb usb3-port1: attempt power cycle [ 751.990461][T11906] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 752.003423][T11906] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 752.531252][ T5860] cdc_ncm 7-1:1.0: bind() failure [ 752.613298][ T5860] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 752.631727][ T5860] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 753.042189][ T5860] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 753.250417][ T5860] usb 7-1: USB disconnect, device number 5 [ 753.575408][T11919] overlayfs: missing 'lowerdir' [ 753.668230][T11920] netdevsim netdevsim3: Direct firmware load for ./bus failed with error -2 [ 753.678861][T11920] netdevsim netdevsim3: Falling back to sysfs fallback for: ./bus [ 754.597466][T11917] netlink: 'syz.0.1710': attribute type 3 has an invalid length. [ 754.605842][T11917] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1710'. [ 755.619159][T11933] overlayfs: failed to clone upperpath [ 757.760358][ T978] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 757.830650][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1719'. [ 757.922285][T11954] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1719'. [ 757.952619][ T978] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.977762][ T978] usb 6-1: config 0 has no interfaces? [ 757.982337][T11958] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1721'. [ 757.990268][ T978] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 758.020231][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.051128][ T978] usb 6-1: config 0 descriptor?? [ 759.701187][T11975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.350900][T11977] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1726'. [ 760.381140][T11977] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1726'. [ 760.562779][T11979] overlayfs: failed to resolve '/ ': -2 [ 762.469731][ T5860] usb 6-1: USB disconnect, device number 12 [ 762.623736][T12001] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 762.970453][T12006] ufs: You didn't specify the type of your ufs filesystem [ 762.970453][T12006] [ 762.970453][T12006] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 762.970453][T12006] [ 762.970453][T12006] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 763.019833][T12006] syz.5.1735: attempt to access beyond end of device [ 763.019833][T12006] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 763.151086][ T5860] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 763.692474][ T5860] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 763.710978][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.719532][ T5860] usb 3-1: Product: syz [ 763.736073][ T5860] usb 3-1: Manufacturer: syz [ 764.650462][ T5860] usb 3-1: SerialNumber: syz [ 764.659689][ T5860] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 764.837352][ T8] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 765.435598][ C0] usb 3-1: ath: unknown panic pattern! [ 766.130473][ T8] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 766.138063][ T8] ath9k_htc: Failed to initialize the device [ 766.225293][ T978] usb 3-1: USB disconnect, device number 66 [ 766.263058][ T978] usb 3-1: ath9k_htc: USB layer deinitialized [ 766.834719][T12030] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 767.670463][T11497] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 767.933990][T11497] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 767.995671][T11497] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 768.052613][T11497] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.252125][T11497] usb 1-1: config 0 descriptor?? [ 768.740176][T12041] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 770.861344][T12062] ufs: You didn't specify the type of your ufs filesystem [ 770.861344][T12062] [ 770.861344][T12062] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 770.861344][T12062] [ 770.861344][T12062] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 770.940158][T12062] ufs: ufstype=old is supported read-only [ 771.280234][T12062] syz.2.1753: attempt to access beyond end of device [ 771.280234][T12062] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 771.371668][T12064] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1755'. [ 771.426888][T12064] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1755'. [ 771.512973][ T8] usb 1-1: USB disconnect, device number 54 [ 771.810353][ T5860] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 771.944394][T12079] FAULT_INJECTION: forcing a failure. [ 771.944394][T12079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.991866][ T5860] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.002469][ T5860] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 772.012356][T12079] CPU: 1 UID: 0 PID: 12079 Comm: syz.2.1760 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 772.012387][T12079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 772.012402][T12079] Call Trace: [ 772.012409][T12079] [ 772.012418][T12079] dump_stack_lvl+0x241/0x360 [ 772.012448][T12079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 772.012471][T12079] ? __pfx__printk+0x10/0x10 [ 772.012509][T12079] ? snprintf+0xda/0x120 [ 772.012544][T12079] should_fail_ex+0x40a/0x550 [ 772.012578][T12079] _copy_to_user+0x31/0xb0 [ 772.012604][T12079] simple_read_from_buffer+0xca/0x150 [ 772.012639][T12079] proc_fail_nth_read+0x1e9/0x250 [ 772.012676][T12079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 772.012712][T12079] ? rw_verify_area+0x243/0x630 [ 772.012737][T12079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 772.012771][T12079] vfs_read+0x1f8/0xb40 [ 772.012797][T12079] ? fdget_pos+0x254/0x320 [ 772.012820][T12079] ? __pfx___mutex_lock+0x10/0x10 [ 772.012846][T12079] ? __pfx_vfs_read+0x10/0x10 [ 772.012876][T12079] ? __fget_files+0x2a/0x410 [ 772.012898][T12079] ? __fget_files+0x395/0x410 [ 772.012919][T12079] ? __fget_files+0x2a/0x410 [ 772.012949][T12079] ksys_read+0x18f/0x2b0 [ 772.012979][T12079] ? __pfx_ksys_read+0x10/0x10 [ 772.013006][T12079] ? do_syscall_64+0x100/0x230 [ 772.013035][T12079] ? do_syscall_64+0xb6/0x230 [ 772.013075][T12079] do_syscall_64+0xf3/0x230 [ 772.013101][T12079] ? clear_bhb_loop+0x35/0x90 [ 772.013135][T12079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.013164][T12079] RIP: 0033:0x7fd60e38b7fc [ 772.013183][T12079] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 772.013201][T12079] RSP: 002b:00007fd60f254030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 772.013224][T12079] RAX: ffffffffffffffda RBX: 00007fd60e5a5fa0 RCX: 00007fd60e38b7fc [ 772.013241][T12079] RDX: 000000000000000f RSI: 00007fd60f2540a0 RDI: 0000000000000007 [ 772.013255][T12079] RBP: 00007fd60f254090 R08: 0000000000000000 R09: 0000000000000000 [ 772.013269][T12079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.013282][T12079] R13: 0000000000000000 R14: 00007fd60e5a5fa0 R15: 00007ffc848339b8 [ 772.013314][T12079] [ 772.018707][ T5860] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 772.256503][ T8] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 772.265739][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.277573][ T5860] usb 6-1: config 0 descriptor?? [ 772.413149][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.425387][ T8] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 772.450238][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 772.459360][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.516339][ T8] usb 1-1: config 0 descriptor?? [ 773.532029][T12102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.736847][T12105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 774.261480][T12109] FAULT_INJECTION: forcing a failure. [ 774.261480][T12109] name failslab, interval 1, probability 0, space 0, times 0 [ 774.279621][T12109] CPU: 1 UID: 0 PID: 12109 Comm: syz.6.1767 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 774.279656][T12109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 774.279670][T12109] Call Trace: [ 774.279683][T12109] [ 774.279693][T12109] dump_stack_lvl+0x241/0x360 [ 774.279724][T12109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 774.279746][T12109] ? __pfx__printk+0x10/0x10 [ 774.279794][T12109] should_fail_ex+0x40a/0x550 [ 774.279830][T12109] should_failslab+0xac/0x100 [ 774.279871][T12109] ? skb_clone+0x20c/0x390 [ 774.279902][T12109] kmem_cache_alloc_noprof+0x70/0x380 [ 774.279943][T12109] skb_clone+0x20c/0x390 [ 774.279978][T12109] __netlink_deliver_tap+0x3c4/0x7f0 [ 774.280020][T12109] ? netlink_deliver_tap+0x2e/0x1b0 [ 774.280051][T12109] netlink_deliver_tap+0x19d/0x1b0 [ 774.280083][T12109] netlink_dump+0x8c6/0xe10 [ 774.280127][T12109] ? __pfx_netlink_dump+0x10/0x10 [ 774.280171][T12109] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 774.280210][T12109] ? netlink_recvmsg+0x5e7/0x11a0 [ 774.280247][T12109] netlink_recvmsg+0x6ec/0x11a0 [ 774.280290][T12109] ? __pfx_netlink_recvmsg+0x10/0x10 [ 774.280336][T12109] ? __pfx___might_resched+0x10/0x10 [ 774.280367][T12109] ? __pfx_lock_release+0x10/0x10 [ 774.280395][T12109] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 774.280418][T12109] ? __pfx_netlink_recvmsg+0x10/0x10 [ 774.280454][T12109] sock_recvmsg+0x22f/0x280 [ 774.280484][T12109] ____sys_recvmsg+0x1c6/0x480 [ 774.280526][T12109] ? __pfx_____sys_recvmsg+0x10/0x10 [ 774.280584][T12109] __sys_recvmsg+0x291/0x390 [ 774.280622][T12109] ? __pfx___sys_recvmsg+0x10/0x10 [ 774.280669][T12109] ? __fget_files+0x2a/0x410 [ 774.280708][T12109] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 774.280740][T12109] ? do_syscall_64+0x100/0x230 [ 774.280770][T12109] ? do_syscall_64+0xb6/0x230 [ 774.280799][T12109] do_syscall_64+0xf3/0x230 [ 774.280826][T12109] ? clear_bhb_loop+0x35/0x90 [ 774.280870][T12109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.280899][T12109] RIP: 0033:0x7ffa37b8cde9 [ 774.280918][T12109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.280936][T12109] RSP: 002b:00007ffa3895c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 774.280960][T12109] RAX: ffffffffffffffda RBX: 00007ffa37da5fa0 RCX: 00007ffa37b8cde9 [ 774.280977][T12109] RDX: 0000000040012022 RSI: 0000400000000080 RDI: 0000000000000003 [ 774.280992][T12109] RBP: 00007ffa3895c090 R08: 0000000000000000 R09: 0000000000000000 [ 774.281006][T12109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.281020][T12109] R13: 0000000000000000 R14: 00007ffa37da5fa0 R15: 00007fff35bd5328 [ 774.281053][T12109] [ 775.473498][ T5955] usb 1-1: USB disconnect, device number 55 [ 775.640450][ T8] usb 6-1: USB disconnect, device number 13 [ 775.712042][T12115] netlink: 'syz.6.1769': attribute type 8 has an invalid length. [ 775.944472][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1772'. [ 776.200839][ T5955] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 776.359138][ T6016] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 776.391991][ T5955] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 776.404219][ T5955] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 777.177809][ T5955] usb 6-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 777.240661][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.267845][T12122] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 777.373889][ T5955] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 777.397996][ T6016] usb 7-1: Using ep0 maxpacket: 8 [ 777.418084][ T6016] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 777.427578][ T6016] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.437763][ T6016] usb 7-1: Product: syz [ 777.446535][ T6016] usb 7-1: Manufacturer: syz [ 777.451846][ T6016] usb 7-1: SerialNumber: syz [ 777.466891][ T6016] usb 7-1: config 0 descriptor?? [ 777.486922][ T6016] gspca_main: se401-2.14.0 probing 047d:5003 [ 777.531050][T12139] netlink: 'syz.3.1776': attribute type 3 has an invalid length. [ 777.539866][T12139] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1776'. [ 777.646193][ T5955] usb 6-1: USB disconnect, device number 14 [ 777.882251][ T6016] gspca_se401: ExtraFeatures: 110 [ 778.123206][ T6016] input: se401 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input13 [ 778.151554][ T6016] usb 7-1: USB disconnect, device number 6 [ 778.578552][T12159] netlink: 'syz.5.1784': attribute type 1 has an invalid length. [ 778.586719][T12159] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1784'. [ 778.674916][ T975] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 779.031911][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1785'. [ 779.031983][ T975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.072604][ T975] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 779.098415][ T975] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 779.135963][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.156439][ T975] usb 3-1: config 0 descriptor?? [ 779.341192][T12170] fuse: Unknown parameter '' [ 779.405691][ T975] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 780.052815][ T975] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 780.067874][ T975] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 780.139112][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.177436][ T975] usb 6-1: config 0 descriptor?? [ 781.434739][T12186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 782.827880][T12198] Bluetooth: MGMT ver 1.23 [ 784.485838][ T5860] usb 6-1: USB disconnect, device number 15 [ 784.679072][ T8] usb 3-1: USB disconnect, device number 67 [ 785.080282][ T5845] Bluetooth: hci0: command 0x0405 tx timeout [ 786.518714][ T5955] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 786.638496][T12230] x_tables: duplicate underflow at hook 3 [ 786.646469][T12230] 9pnet_virtio: no channels available for device syz [ 786.683519][ T5955] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 786.696622][ T5955] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 786.706236][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.714529][ T5955] usb 3-1: Product: syz [ 786.719001][ T5955] usb 3-1: Manufacturer: syz [ 786.728289][ T5955] usb 3-1: SerialNumber: syz [ 786.907798][T12236] bpf: Bad value for 'mode' [ 787.036098][ T5955] comedi comedi0: Wrong number of endpoints [ 787.044137][ T5955] ni6501 3-1:5.0: driver 'ni6501' failed to auto-configure device. [ 787.160998][ T6016] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 787.239707][T12217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.260518][T12217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.337615][ T6016] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 787.364404][ T6016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.416647][ T6016] usb 6-1: config 0 descriptor?? [ 787.448206][ T6016] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 787.478967][ T8] usb 3-1: USB disconnect, device number 68 [ 788.238164][T12261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 790.725287][ T6016] gspca_stv06xx: I2C: Read error writing address: -71 [ 790.786865][ T6016] usb 6-1: USB disconnect, device number 16 [ 791.530216][ T5860] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 791.627242][T12277] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1816'. [ 791.878134][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 793.009930][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 793.036188][ T5860] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 793.260395][ T5914] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 793.268484][ T5860] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 793.278730][T12293] FAULT_INJECTION: forcing a failure. [ 793.278730][T12293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 793.299606][T12293] CPU: 1 UID: 0 PID: 12293 Comm: syz.2.1821 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 793.299641][T12293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 793.299655][T12293] Call Trace: [ 793.299664][T12293] [ 793.299675][T12293] dump_stack_lvl+0x241/0x360 [ 793.299706][T12293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 793.299729][T12293] ? __pfx__printk+0x10/0x10 [ 793.299764][T12293] ? __pfx_lock_release+0x10/0x10 [ 793.299797][T12293] ? rcu_is_watching+0x15/0xb0 [ 793.299832][T12293] should_fail_ex+0x40a/0x550 [ 793.299867][T12293] _copy_from_iter+0x1df/0x1c40 [ 793.299895][T12293] ? __lock_acquire+0x1397/0x2100 [ 793.299931][T12293] ? alloc_pages_mpol+0x4bd/0x660 [ 793.299963][T12293] ? __pfx__copy_from_iter+0x10/0x10 [ 793.299994][T12293] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 793.300029][T12293] ? page_copy_sane+0x46/0x260 [ 793.300053][T12293] copy_page_from_iter+0x7a/0x100 [ 793.300078][T12293] pipe_write+0x7f5/0x1a30 [ 793.300135][T12293] ? __pfx_pipe_write+0x10/0x10 [ 793.300171][T12293] ? bpf_lsm_file_permission+0x9/0x10 [ 793.300207][T12293] vfs_write+0xacf/0xd10 [ 793.300237][T12293] ? __pfx_pipe_write+0x10/0x10 [ 793.300270][T12293] ? __pfx_vfs_write+0x10/0x10 [ 793.300294][T12293] ? do_sys_openat2+0x17a/0x1d0 [ 793.300318][T12293] ? __fget_files+0x2a/0x410 [ 793.300343][T12293] ? __fget_files+0x2a/0x410 [ 793.300372][T12293] ksys_write+0x18f/0x2b0 [ 793.300400][T12293] ? __pfx_ksys_write+0x10/0x10 [ 793.300428][T12293] ? do_syscall_64+0x100/0x230 [ 793.300458][T12293] ? do_syscall_64+0xb6/0x230 [ 793.300484][T12293] do_syscall_64+0xf3/0x230 [ 793.300509][T12293] ? clear_bhb_loop+0x35/0x90 [ 793.300542][T12293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.300569][T12293] RIP: 0033:0x7fd60e38cde9 [ 793.300588][T12293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 793.300605][T12293] RSP: 002b:00007fd60f254038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 793.300627][T12293] RAX: ffffffffffffffda RBX: 00007fd60e5a5fa0 RCX: 00007fd60e38cde9 [ 793.300642][T12293] RDX: 0000000000011000 RSI: 0000400000000040 RDI: 0000000000000004 [ 793.300654][T12293] RBP: 00007fd60f254090 R08: 0000000000000000 R09: 0000000000000000 [ 793.300667][T12293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.300679][T12293] R13: 0000000000000000 R14: 00007fd60e5a5fa0 R15: 00007ffc848339b8 [ 793.300708][T12293] [ 793.302760][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.023670][ T5914] usb 7-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 794.041957][ T5914] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 794.133800][ T5914] usb 7-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 794.156127][ T5914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.173219][ T5914] usb 7-1: rejected 1 configuration due to insufficient available bus power [ 794.195311][ T5914] usb 7-1: no configuration chosen from 1 choice [ 794.224318][ T5860] usb 1-1: config 0 descriptor?? [ 794.418386][ T5860] usb 1-1: can't set config #0, error -71 [ 795.225471][T12312] netlink: 'syz.5.1827': attribute type 1 has an invalid length. [ 795.233771][T12312] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1827'. [ 795.530895][ T5955] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 795.837144][ T5860] usb 1-1: USB disconnect, device number 56 [ 795.880600][ T5914] usb 7-1: USB disconnect, device number 7 [ 796.033016][ T5955] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 796.059142][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.126559][ T5955] usb 3-1: config 0 descriptor?? [ 796.138246][ T5955] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 798.259353][T12337] loop2: detected capacity change from 0 to 7 [ 798.287709][T12337] Dev loop2: unable to read RDB block 7 [ 798.360290][T12337] loop2: unable to read partition table [ 798.371185][T12337] loop2: partition table beyond EOD, truncated [ 798.427780][ T5955] gspca_stv06xx: I2C: Read error writing address: -71 [ 798.435673][T12337] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 798.447409][ T5955] usb 3-1: USB disconnect, device number 69 [ 801.581264][T12359] netlink: 'syz.0.1840': attribute type 1 has an invalid length. [ 801.589114][T12359] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1840'. [ 802.670221][ T6016] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 802.907821][ T6016] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 803.662429][ T6016] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.693454][ T6016] usb 7-1: config 0 descriptor?? [ 803.730840][ T6016] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 804.805965][T12388] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1850'. [ 807.083719][ T6016] gspca_stv06xx: I2C: Read error writing address: -71 [ 807.104597][ T6016] usb 7-1: USB disconnect, device number 8 [ 807.290153][ T5860] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 807.724344][ T5860] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 807.870596][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.878676][ T5860] usb 3-1: Product: syz [ 807.959867][T12414] block nbd6: NBD_DISCONNECT [ 807.965486][T12414] block nbd6: Disconnected due to user request. [ 807.972007][T12414] block nbd6: shutting down sockets [ 808.464689][ T5860] usb 3-1: Manufacturer: syz [ 808.469370][ T5860] usb 3-1: SerialNumber: syz [ 808.485383][ T5860] usb 3-1: config 0 descriptor?? [ 808.908937][ T5860] airspy 3-1:0.0: Board ID: 00 [ 808.919345][ T5860] airspy 3-1:0.0: Firmware version: [ 809.074819][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.081293][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.200663][ T5860] airspy 3-1:0.0: usb_control_msg() failed -110 request 0e [ 810.220792][ T5860] airspy 3-1:0.0: Registered as swradio24 [ 810.226616][ T5860] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 810.385739][ T975] usb 3-1: USB disconnect, device number 70 [ 811.086989][ T6016] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 811.220977][ T5137] Bluetooth: hci5: command 0x0406 tx timeout [ 811.480564][ T5860] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 811.520829][ T6016] usb 1-1: Using ep0 maxpacket: 32 [ 811.720420][ T6016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 811.750184][ T6016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 811.773380][T12449] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 811.782325][T12449] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 811.792740][ T5860] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 811.803906][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.831607][ T6016] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 811.866733][ T5860] usb 7-1: config 0 descriptor?? [ 811.871633][ T6016] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.893672][ T5860] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 811.900997][ T6016] usb 1-1: Product: syz [ 811.910105][ T6016] usb 1-1: Manufacturer: syz [ 811.916542][ T6016] usb 1-1: SerialNumber: syz [ 811.966811][ T6016] usb 1-1: config 0 descriptor?? [ 812.019291][ T6016] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 812.225710][T12434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.240483][T12434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.548790][ T3475] usb 1-1: Failed to submit usb control message: -110 [ 813.575163][ T3475] usb 1-1: unable to send the bmi data to the device: -110 [ 814.141769][ T3475] usb 1-1: unable to get target info from device [ 814.148406][ T3475] usb 1-1: could not get target info (-110) [ 814.183665][ T3475] usb 1-1: could not probe fw (-110) [ 814.727948][ T6016] usb 1-1: USB disconnect, device number 57 [ 814.973902][T12467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1871'. [ 814.986892][T12467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1871'. [ 815.100884][T12467] hsr_slave_1 (unregistering): left promiscuous mode [ 815.610620][T12473] ./file0: Can't lookup blockdev [ 816.329611][ T5860] gspca_stv06xx: I2C: Read error writing address: -71 [ 816.350617][ T5860] usb 7-1: USB disconnect, device number 9 [ 816.843970][T12477] netlink: 'syz.0.1874': attribute type 1 has an invalid length. [ 816.852180][T12477] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1874'. [ 817.369920][T12483] netlink: 'syz.3.1877': attribute type 3 has an invalid length. [ 817.377806][T12483] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1877'. [ 817.679403][T12489] netlink: 'syz.6.1878': attribute type 3 has an invalid length. [ 817.687625][T12489] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1878'. [ 819.660538][ T5137] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 819.680893][ T5137] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 819.690515][ T5137] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 819.728132][ T5137] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 819.742765][ T5137] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 819.751927][ T5137] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 820.280371][ T5955] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 820.500349][ T5955] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 820.522621][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.545996][ T5955] usb 3-1: config 0 descriptor?? [ 820.562746][ T5955] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 821.192357][T12522] netlink: 'syz.3.1889': attribute type 3 has an invalid length. [ 821.200395][T12522] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1889'. [ 821.970258][ T5845] Bluetooth: hci6: command tx timeout [ 822.119172][T12511] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1883'. [ 823.430993][ T5955] gspca_stv06xx: I2C: Read error writing address: -71 [ 823.472081][ T5955] usb 3-1: USB disconnect, device number 71 [ 823.522210][T12498] chnl_net:caif_netlink_parms(): no params data found [ 824.012977][T12544] overlayfs: failed to resolve './file0': -2 [ 824.030549][ T5845] Bluetooth: hci6: command tx timeout [ 824.903795][T12498] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.089907][T12498] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.102482][T12498] bridge_slave_0: entered allmulticast mode [ 825.109746][T12498] bridge_slave_0: entered promiscuous mode [ 825.818433][T12564] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 825.982378][T12498] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.014156][T12498] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.114544][ T5845] Bluetooth: hci6: command tx timeout [ 826.211970][T12498] bridge_slave_1: entered allmulticast mode [ 826.263804][T12568] overlayfs: failed to resolve './file0': -2 [ 826.711103][T12498] bridge_slave_1: entered promiscuous mode [ 828.210244][ T5845] Bluetooth: hci6: command tx timeout [ 828.339342][T12498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.413845][T12590] bridge0: port 4(netdevsim2) entered blocking state [ 828.470422][ T5955] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 828.500983][T12590] bridge0: port 4(netdevsim2) entered disabled state [ 828.654252][T12590] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 828.664474][ T5955] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 828.680608][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.730898][ T5955] usb 1-1: config 0 descriptor?? [ 828.738075][T12590] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 828.743438][ T5955] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 828.770952][T12590] bridge0: port 4(netdevsim2) entered blocking state [ 828.777940][T12590] bridge0: port 4(netdevsim2) entered forwarding state [ 828.863106][T12594] overlayfs: failed to resolve './file0': -2 [ 828.876519][T12498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.350598][T12498] team0: Port device team_slave_0 added [ 831.292032][T12498] team0: Port device team_slave_1 added [ 831.407124][ T5955] gspca_stv06xx: I2C: Read error writing address: -71 [ 831.443821][ T5955] usb 1-1: USB disconnect, device number 58 [ 832.107925][T12498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.120243][ T30] INFO: task kworker/u8:2:35 blocked for more than 143 seconds. [ 832.128219][ T30] Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 832.146669][T12498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.182806][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 832.198758][ T30] task:kworker/u8:2 state:D stack:20696 pid:35 tgid:35 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 832.224779][T12498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.239279][ T30] Workqueue: events_unbound netfs_write_collection_worker [ 832.291657][ T30] Call Trace: [ 832.295024][ T30] [ 832.297994][ T30] __schedule+0x18bc/0x4c40 [ 832.306524][T12498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.367735][ T30] ? __pfx___schedule+0x10/0x10 [ 832.379219][T12498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.410217][ T30] ? __pfx_lock_release+0x10/0x10 [ 832.466117][ T30] ? schedule+0x90/0x320 [ 832.470613][ T30] ? wq_worker_sleeping+0x66/0x240 [ 832.475796][ T30] ? schedule+0x90/0x320 [ 832.482522][ T30] schedule+0x14b/0x320 [ 832.486750][ T30] bit_wait+0x12/0xd0 [ 832.490822][T12498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.501545][ T30] __wait_on_bit+0xb0/0x2f0 [ 832.506136][ T30] ? __pfx_bit_wait+0x10/0x10 [ 832.547026][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 832.570564][ T30] ? __pfx_bit_wait+0x10/0x10 [ 832.600201][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 832.606297][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 832.630180][ T30] netfs_retry_writes+0x16e/0x19b0 [ 832.635362][ T30] ? __pfx_validate_chain+0x10/0x10 [ 832.657451][ T30] ? stack_trace_save+0x118/0x1d0 [ 832.662709][ T30] ? __pfx_netfs_retry_writes+0x10/0x10 [ 832.668321][ T30] ? lockdep_unlock+0x16a/0x300 [ 832.680231][ T30] netfs_write_collection_worker+0x2f90/0x3bb0 [ 832.686488][ T30] ? process_scheduled_works+0x9c6/0x18e0 [ 832.708663][ T30] process_scheduled_works+0xabe/0x18e0 [ 832.714455][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 832.728665][ T30] ? assign_work+0x364/0x3d0 [ 832.745999][ T30] worker_thread+0x870/0xd30 [ 832.751119][ T30] ? __kthread_parkme+0x169/0x1d0 [ 832.756176][ T30] ? __pfx_worker_thread+0x10/0x10 [ 832.770117][ T30] kthread+0x7a9/0x920 [ 832.774266][ T30] ? __pfx_kthread+0x10/0x10 [ 832.778914][ T30] ? __pfx_worker_thread+0x10/0x10 [ 832.817442][ T30] ? __pfx_kthread+0x10/0x10 [ 832.840151][ T30] ? __pfx_kthread+0x10/0x10 [ 832.844810][ T30] ? __pfx_kthread+0x10/0x10 [ 832.849409][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 832.860113][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 832.865381][ T30] ? __pfx_kthread+0x10/0x10 [ 832.870213][ T30] ret_from_fork+0x4b/0x80 [ 832.874680][ T30] ? __pfx_kthread+0x10/0x10 [ 832.879317][ T30] ret_from_fork_asm+0x1a/0x30 [ 832.905223][ T30] [ 832.913004][ T30] [ 832.913004][ T30] Showing all locks held in the system: [ 832.940153][ T30] 3 locks held by kworker/0:0/8: [ 832.980034][ T30] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 833.080057][ T30] #1: ffffc900000d7c60 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 833.120050][ T30] #2: ffffffff8eb3e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 833.140043][ T30] 1 lock held by khungtaskd/30: [ 833.144980][ T30] #0: ffffffff8eb38f60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 833.220045][ T30] 2 locks held by kworker/u8:2/35: [ 833.225238][ T30] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 833.310220][ T30] #1: ffffc90000ab7c60 ((work_completion)(&rreq->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 833.380307][ T30] 2 locks held by getty/5590: [ 833.385073][ T30] #0: ffff888031acb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 833.440061][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 833.478421][ T30] 3 locks held by syz.1.1510/11227: [ 833.490171][ T30] #0: ffff888012352420 (sb_writers#17){.+.+}-{0:0}, at: vfs_writev+0x2d6/0xbc0 [ 833.499376][ T30] #1: ffff88805a14ae58 (&sb->s_type->i_mutex_key#28){++++}-{4:4}, at: netfs_start_io_write+0xd7/0x100 [ 833.554976][ T30] #2: ffff88805a14b210 (&ctx->wb_lock){+.+.}-{4:4}, at: netfs_begin_writethrough+0x68/0x140 [ 833.580207][ T30] 3 locks held by syz.2.1904/12586: [ 833.585453][ T30] #0: ffffffff8feb5890 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 833.619393][ T30] #1: ffffffff8fec2008 (rtnl_mutex){+.+.}-{4:4}, at: setup_net+0x602/0x9e0 [ 833.659475][ T30] #2: ffffffff8eb3e438 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 833.675884][ T30] 2 locks held by syz.0.1914/12622: [ 833.706513][ T30] #0: ffffffff8fec2008 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 833.717986][ T30] #1: ffff8880b863e7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 833.750140][ T30] 3 locks held by syz.6.1915/12624: [ 833.770116][ T30] #0: ffff88805cc0cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 833.804841][ T30] #1: ffff88805cc0c078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60d/0x1260 [ 833.825202][ T30] #2: ffff888059b56b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x71/0x690 [ 833.840350][ T30] [ 833.842981][ T30] ============================================= [ 833.842981][ T30] [ 833.885028][ T30] NMI backtrace for cpu 1 [ 833.885052][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 833.885076][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 833.885090][ T30] Call Trace: [ 833.885098][ T30] [ 833.885107][ T30] dump_stack_lvl+0x241/0x360 [ 833.885137][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 833.885158][ T30] ? __pfx__printk+0x10/0x10 [ 833.885201][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 833.885240][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 833.885270][ T30] ? _printk+0xd5/0x120 [ 833.885300][ T30] ? __pfx__printk+0x10/0x10 [ 833.885331][ T30] ? __wake_up_klogd+0xcc/0x110 [ 833.885356][ T30] ? __pfx__printk+0x10/0x10 [ 833.885388][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 833.885431][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 833.885457][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 833.885494][ T30] watchdog+0x1058/0x10a0 [ 833.885524][ T30] ? watchdog+0x1ea/0x10a0 [ 833.885557][ T30] ? __pfx_watchdog+0x10/0x10 [ 833.885584][ T30] kthread+0x7a9/0x920 [ 833.885612][ T30] ? __pfx_kthread+0x10/0x10 [ 833.885643][ T30] ? __pfx_watchdog+0x10/0x10 [ 833.885740][ T30] ? __pfx_kthread+0x10/0x10 [ 833.885771][ T30] ? __pfx_kthread+0x10/0x10 [ 833.885804][ T30] ? __pfx_kthread+0x10/0x10 [ 833.885833][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 833.885854][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 833.885876][ T30] ? __pfx_kthread+0x10/0x10 [ 833.885908][ T30] ret_from_fork+0x4b/0x80 [ 833.885933][ T30] ? __pfx_kthread+0x10/0x10 [ 833.885963][ T30] ret_from_fork_asm+0x1a/0x30 [ 833.886004][ T30] [ 833.886013][ T30] Sending NMI from CPU 1 to CPUs 0: [ 834.056727][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 [ 834.070317][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 834.077227][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 834.087745][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 834.097810][ T30] Call Trace: [ 834.101103][ T30] [ 834.104040][ T30] dump_stack_lvl+0x241/0x360 [ 834.108724][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 834.113931][ T30] ? __pfx__printk+0x10/0x10 [ 834.118529][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 834.124556][ T30] ? vscnprintf+0x5d/0x90 [ 834.128905][ T30] panic+0x349/0x880 [ 834.132817][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 834.138983][ T30] ? __pfx_panic+0x10/0x10 [ 834.143412][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 834.148796][ T30] ? __irq_work_queue_local+0x137/0x410 [ 834.154358][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 834.159745][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 834.165923][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 834.172101][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 834.178288][ T30] watchdog+0x1097/0x10a0 [ 834.182665][ T30] ? watchdog+0x1ea/0x10a0 [ 834.187098][ T30] ? __pfx_watchdog+0x10/0x10 [ 834.191782][ T30] kthread+0x7a9/0x920 [ 834.195859][ T30] ? __pfx_kthread+0x10/0x10 [ 834.200461][ T30] ? __pfx_watchdog+0x10/0x10 [ 834.205147][ T30] ? __pfx_kthread+0x10/0x10 [ 834.209744][ T30] ? __pfx_kthread+0x10/0x10 [ 834.214353][ T30] ? __pfx_kthread+0x10/0x10 [ 834.218953][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 834.224186][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 834.229394][ T30] ? __pfx_kthread+0x10/0x10 [ 834.233997][ T30] ret_from_fork+0x4b/0x80 [ 834.238423][ T30] ? __pfx_kthread+0x10/0x10 [ 834.243025][ T30] ret_from_fork_asm+0x1a/0x30 [ 834.247813][ T30] [ 834.251209][ T30] Kernel Offset: disabled [ 834.255547][ T30] Rebooting in 86400 seconds..