last executing test programs: 31m4.016580534s ago: executing program 0 (id=202): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x4, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3ff, 0x7, 0x3ff, 0x8, 0x4}, 0xee8, 0x0, 0x7fff, 0x0, 0x4, 0x1a, 0x19, 0x18, 0x2, 0x81, {0xffffffff, 0x2, 0x4, 0x0, 0xb, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000080)={0x4, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 31m1.838087798s ago: executing program 0 (id=208): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioperm(0x2, 0xf, 0x9e8f) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='gre0\x00'}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80540, 0x188) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000080bf8e9b0000000000000000004800"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r9}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$hiddev(r6, &(0x7f0000000080)=""/39, 0x27) r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$IMADDTIMER(r10, 0x80044940, &(0x7f00000001c0)=0x14) write$cgroup_int(r5, &(0x7f0000000140)=0x7ff, 0x12) syz_io_uring_setup(0x41c8, &(0x7f0000000240)={0x0, 0xeed6, 0x1, 0x2, 0xffffffff}, &(0x7f0000000000), &(0x7f0000000080)) 31m0.524440394s ago: executing program 0 (id=210): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002040)=""/4098, 0x1002}, {&(0x7f0000003080)=""/4106, 0x100a}, {&(0x7f00000006c0)=""/298, 0x12a}, {&(0x7f0000000100)=""/117, 0x75}], 0x4}, 0x101a3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000002c0)={0x7, 0x0, [{0xd, 0x5, 0x2, 0x7, 0x1, 0x587, 0x8}, {0x40000000, 0xffff, 0x1, 0x8bd0, 0x364, 0xfffffffd}, {0xd, 0x2, 0x6, 0x81, 0x8000, 0x58d, 0x401}, {0x0, 0x5, 0x7, 0x1, 0xd, 0x80000001, 0x8}, {0x1, 0x3, 0x4, 0xf8f, 0x5bd0, 0x4, 0xffffffff}, {0x80000019, 0x8, 0x408ad97b9cbf6852, 0x4, 0xc, 0x7, 0x3}, {0x1, 0x8, 0x3, 0xff, 0x7, 0x9, 0x230}]}) 30m59.924384089s ago: executing program 0 (id=211): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x6478}], 0x1, 0x9) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x118, 0x0, 0xa, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x3, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x109, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0x200, r1}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r4 = socket(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x4, r3, 0x18, r4}, 0x10) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(0xffffffffffffffff, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002001000000000000ffff00bfa100000400000007010000f8ffffffb702000008000000b70300000000000085000000700000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0a00fe1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b4090a79507df79f298129da487130d5f24b46001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad379e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488a010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a18159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7962b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac2bba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f407000000000000006d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab669ab377e4c2422a47e9ffe2d4a2d32f7528751313694bf57704400b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6940b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d30902208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c8000000000000003a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f000000000facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f296115d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc05000000000000006c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a4619a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806b90cc39c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d3133319e069f9648a2ff93060ff073b3a113e47e447c030931651dd315003b7a6a47c912853826c4c65433a2bb560ae99ec4b227eda2e63a1cb1a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e5f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec90f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754c68b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8adbd2c2604eab3a62a28611da1dae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412cbbdebae06edb51a134301d2627d4927287daf9dcae6720334862d3a18094f1edd9e350337cbb804004d1755cfe7d7fa01872fb99815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2b63a6038ab5546ba1e5ad6a329f2c627100e0442f865fc6c179ad3edcb6b000000000000000b0000000000000000ac192d48d76e2a8cae83ae850f73fdfbaca81b6b7b1a0d7b517f41fbd46aa24b0f4b8e0202e3a580947f1925ba4de097e8dcb6bd7f686322b45d4a544ca1e83b592d4a6d46d0a0dc39634550bc77d4cabba01b283082e66778de7c61a1a36838d36c2f8e58cef603770ee3d6a9625be0bc21d2be2da69ac9e9c5e88278d39239501b465102ad16d651ea8bb8cee35527c1ad42ac6a565e449929ccb4469bdd6824b64e13579b7188566e735200000000000000000094e05bcda1e96e4c33ccf6d74046e45bafe9d512c43a3e485dedad9a38b34f7fcd00fafcc25dc36716f0e21e0632425b7a1c1a6bc15c3fc07d914c88103411d8d2b77b72a796fd3aaa7ea493c7bc43e63b2b0d05ad5682121682096b224933fa20255d58a680cc2ec200"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 30m59.589777407s ago: executing program 0 (id=215): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x7079, 0x1000, 0x14, 0x28b}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002fc0)=@newtaction={0x16a0, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x5}}, @TCA_CT_ACTION={0x6, 0x7}, @TCA_CT_LABELS_MASK={0x14, 0x8, "193fa665cb68f13b9239a3b09cec760f"}]}, {0x4}, {0xc}, {0xc}}}]}, {0x1628, 0x1, [@m_skbedit={0x1090, 0x15, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0x15}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x10}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x81, 0x2, 0xffffffffffffffff, 0x3, 0x4}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x40b3a7dc}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x101}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_police={0x448, 0xb, 0x0, 0x0, {{0xb}, {0x41c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xf034, 0x0, 0x5800, 0xbc7, 0x9, 0x94e, 0x7f, 0xffff, 0x40, 0xc000000, 0x2, 0x1, 0x1dc, 0x0, 0x0, 0x400, 0x3, 0xc0, 0x10000, 0x5, 0x5, 0x0, 0x2, 0x100, 0x2, 0x4, 0x5, 0xffff, 0x8, 0xeb4, 0x9, 0x40, 0x2, 0x9, 0x2, 0x6, 0xfffffff0, 0x9, 0x5, 0x6, 0x489, 0xf099, 0x2, 0x0, 0x764, 0x7, 0x8, 0x6, 0x7fffffff, 0x1, 0x101, 0x5, 0xce, 0xa4, 0x4, 0x5, 0x1, 0xd, 0x7, 0x41a, 0x8, 0x1, 0x400, 0x9, 0x0, 0x8, 0xc, 0x4, 0x0, 0x38, 0x629b, 0x7, 0x10000, 0x5, 0x1, 0x8, 0x81, 0xffffffff, 0x4, 0x3, 0xfffffff1, 0xf, 0xf, 0x9, 0x7, 0x1, 0x3, 0x4, 0x0, 0x0, 0x9, 0x2, 0x7fff, 0x6, 0x1000, 0x6b, 0x8, 0x7, 0x5, 0xdd3b, 0x0, 0x7e0c, 0x7, 0x0, 0x1, 0x1, 0x77af47, 0xfb, 0xf831, 0x3, 0x3, 0x1, 0x10000, 0x7f, 0x6, 0x2, 0x7, 0xcbc4, 0x7ff0, 0x3, 0x5, 0x3, 0x10001, 0x6, 0x7, 0x6, 0x3, 0x8, 0xf, 0x3, 0x8, 0x7, 0x2, 0xffff, 0x8, 0x6, 0x7, 0x3, 0x9, 0x7, 0x4, 0x6, 0x7, 0x2, 0x9, 0x0, 0x3, 0x3400, 0x3, 0x9, 0xc7, 0x9, 0x9, 0x1, 0x5, 0x6, 0x3ff, 0x7, 0x2, 0x7, 0x3, 0xcb04, 0x5, 0x7ff, 0xfffffff7, 0x7, 0x10001, 0x3, 0x100, 0x3, 0x7ff, 0x6, 0x2, 0x3, 0x80, 0x6, 0x5, 0x81, 0xd5, 0x7, 0x1, 0xb, 0x5, 0xfffffffc, 0x5, 0xb, 0x1, 0x4, 0xc8, 0x4, 0x81, 0x8, 0x1, 0x8, 0xff, 0x20, 0x4, 0x2, 0x700, 0x80000000, 0x0, 0x0, 0x0, 0xa, 0x9, 0x80000001, 0x4, 0x3, 0x80, 0x789, 0x0, 0x5, 0x2, 0xfffffffd, 0x4670000, 0x0, 0x1, 0x6, 0x3ff, 0x7fff, 0x6, 0x5, 0x5, 0x3, 0x0, 0x8001, 0x1, 0x5, 0x1, 0x2e, 0x6, 0x2, 0x5, 0x7, 0x2, 0x0, 0x80000000, 0x6, 0x5c3d0ce8, 0x5, 0xb0a, 0x3, 0x9, 0x2, 0x2, 0xe86b, 0x9, 0x2, 0x80000001, 0x2, 0x664ffdf7, 0x6, 0x40fa, 0x1, 0x40, 0xffffffac]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x14c, 0x16, 0x0, 0x0, {{0x7}, {0xe4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x7f, 0x6, {0x81, 'mangle\x00', 0x5, 0x1, "f88e3b1594f30cafde7ad5a027db9ef16d196b19cc70dd6218ed59b2e849b2733a4faee4512b6ceeb72592b2f9701db23e23926304c5b201e45d3121fae8a5c8b4e52a6db0e3a8cb38c635eef2ff85d14062a4f320"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xffff8000}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x8ac}]}, {0x41, 0x6, "a25b54bdf3ab3d853430d270623e2c9d3799a8ec50820fddb38de6577091f475652cffbd77fa20a05c5b774e8d754018da2ac747ef0e0e69246d27fef3"}, {0xc}, {0xc}}}]}]}, 0x16a0}}, 0x0) 30m58.207518898s ago: executing program 0 (id=217): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=r1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="3b000000010001", 0x7) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) getsockopt$inet_int(r5, 0x29000000, 0xf, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x18, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x45f1, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000080), 0x8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000180)={0x12}) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000400)=""/88, 0x7a000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000380)={0x0, 0x307000, 0x800, 0x10000}, 0x20) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 30m42.984469038s ago: executing program 32 (id=217): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=r1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r2}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="3b000000010001", 0x7) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) getsockopt$inet_int(r5, 0x29000000, 0xf, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x18, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x45f1, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000080), 0x8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000180)={0x12}) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000400)=""/88, 0x7a000, 0x1000}, 0x20) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000380)={0x0, 0x307000, 0x800, 0x10000}, 0x20) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 27m21.820432146s ago: executing program 3 (id=740): r0 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x1000, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x2, 0x3, 0x100000001) syz_emit_ethernet(0x3e, &(0x7f0000001080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00e3000000000800450000300004000000019078ac1e0001e00000010401907803000000450000000000000000000000f1b25fb7e0000002"], 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216", 0xb}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d", 0x2a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 27m20.735095096s ago: executing program 3 (id=742): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904", @ANYRES16], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}, 0x1, 0x620b}, 0x0) r2 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) write$binfmt_register(r2, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xe}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmmsg$inet(r0, &(0x7f0000004780)=[{{&(0x7f0000000300)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000001900)=[{&(0x7f0000000800)="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", 0x1000}, {0x0}, {&(0x7f0000001880)="e97c6fba74ca347a9936adc513130abd773444a4b40c90fa8268ec6065b80f9795273f322ea88d83968316d8e5f32632c14fc9ee38da1cef82e71f514143cf6b0d1fb3e39f512502f32249b4b797", 0x4e}], 0x3, &(0x7f0000001940)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}}, {{&(0x7f0000001980)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001a00)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001a40)}, {&(0x7f0000001a80)="791cedf65d525e1c28a8e6699f70ccbe0c7264e54c8d1a0a31a150438752181f912e25610c0667508e7b2d18934f45a1b237accdd2834347f51fabb79d0b61fa1cc217ac135089ac1efb741ee59ed1cd49005a02e42b5224967539da6a116f42b13bd572d4c4024f8f441f9d2b4022c11328fd0ac4497ea5f687fc9d4d66ea2fd4100b98c4d17fb2f3a7ffa83e97eb5cb04b4e8a99b220cfad1e2ab81a6c905480b80394ade31396a37548a38490df6a403a46fc423e4f2df1a76343c2cb3854715720ed83dddea6dc9e29a874f7a620eb4fafcbd8394459552ed33d0deadfabf9d1194c2a5420355065f0ce9d2ac17afda9e6762a", 0xf5}, {&(0x7f0000001b80)="04c1ccf17e8459607c3044a749f9d352abe7d78fc4a2e2a709711f0553f001c2d9df3e2724b780dbf61ba422aba123204eaab43e47183a8966794bbba05fbe91e135237cd4b08fe68184ff1c0d41d79d463c8b2ba2693901f0a652f33294d5f66e68ee5e36df93ce6203a769655e985d94d83a3622f0a1fe1a1de201797e1e896e3db9b58915b45c26784be9002f152bdfb0342c80a8e0", 0x97}, {&(0x7f0000001c40)="0179b33a32eeffcb592f3704daabaa2a2e68c60353e9b063f8bede06fa66bea906d1cb68f3617f1fe503184ec45a0476e80c10", 0x33}, {&(0x7f0000001c80)="25ec08f8cf5b32d7da4481523cec753c03de5bd71d8429b66f6588b0cb60771aa4f8c176e706cf2ee1f06a8d6e238c436f18d46eee4fc36d1ff39a2ec1d4ecae1935eff5eafccff5eef4b97197cc7a56b37f27774f3917ecba44bf6101ef147a3bfabf728b45bb10f481b76ba5099c34660d58ac236ef65ebcd78aef8cd1d523c4fcc87d08d92e78d98312dc9fc0d2edcb5bceb0ff5fb31ddd9cb04591b1fe9f55d28dcf02", 0xa5}], 0x5}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001e00)="5fea3d63cf4e49aca1931bdb96cdb883a59fbc10443b10d8830281ac568efa3f94a1c33a6ee2fe3043e2730953d2eedf1d3bac1cf3c37a347504faff3bd19a0d95445d122e073c878731759e4ea004c6018b139c644e598ffeb41c35d97defc594125df8ba2d3f6d2715db7896503da818805bf41f1d6f25679c851cf8a65a44424d7907a951363f8d2940ac0b8cda59022535ab836d9d6b9f453202631e23d596f0b57b4dd769565fbd81cd0bb0f26cbac45a1f7193a669243ce3f0a046548bdede7cf64450de94bbe5ea94951aa0b773b32362dbc3c577ac78fb1e4ec672b1e227182afd94b539ec92", 0xea}, {&(0x7f0000001f00)="44e1bd47d6b60a3c71e494a49fb914aa9f3355bad9d2201f60d73526536e92702c76bcc29a206053704c63ca849594", 0x2f}, {&(0x7f0000001f80)}, {&(0x7f0000002040)="a55b9ed3aa8c66a223bd0018fd0f476512d9f575a1dd5ca99c64a479a348749e7529615bc216ac5914dd602a0a95ec58c554750565589b0627864cba74455a25632ad6ab6295b638edf3f01a298cb701da2a791935aef0d28a62d50f8e4c69990ebfc4a724a2f7d367fa002b60879416bb85611e35aeba8938c646a3f8bb74ea01a362e3b45812cef68cd8bd2a90cc60078266b2ba464c3df72b37a895951ce26f20f41aaadcb65ef1f36130bfa8c7b9deb3fd9fe44cc49ad8a5b8cd7420cb0d43a28042c97b2e0befddd0122fa986f5eb4cd49d1c3fdf4640b7ca9918c9eaa8e214f8b9fb522c8f3d23b4596965866509cef532852b5a3e6d9c2d22eb943d", 0xff}, {&(0x7f0000002140)="8cd194e4c116fab0064a3e5531f046f9e77cb12782abf20152bbfee8a4dc80b3906828c440376c61db50f19e67c364e7da4382da40aaedca164cbdf9e84b9ca711bcdc1b62d8780b1bf0592e5904c5977f908435b5d698c529176e981f282d50e63bb3560f4443d6c59f9424e0c34d65e5850778e81eccfe3151fa4c097081755f51e703f39dd8a574abe854e2b770c2910d5a1f3b339b64b137619751cfefc2ced640bc8365666426673698d5232470a5da013908a1879a51681780d552db6848e820ffa28cb038bb00390b4f8091091b2c39a5ae40af370366df54df6e4e08c1bdd72b30", 0xe5}, {&(0x7f0000002240)="1cea17ac9805d6fb32c1d3f5f5c6616f2f40ec4ac64b9d14a1e5fe65d6c08814fa72756287a289a62eac0b80b630c1a5432ab33b9a2380a1c8ae554e160336fef0dbf99b3edd7b3788ade93594c78125850ed4f48812", 0x56}, {&(0x7f00000022c0)="db6bb4779b5f81826c759d0d8d31a92eff60636a2a1debd7d99399dd2727b5fe310122c6881910ffaba8e75068e808c255edaec0a89cb3d2fdfb2c293ce7e6a5cfc4f77bc5aa830a1a24245fe9f0427a45e2466ef4a3115729278c7fdbc419992bfa68db0485318f0dc73c74b4b3a031e3e2e918c97df90d6f9c88c5b2efab9790d73d867d97da88db53f6dbb4bbadf65023f4ecd0844c74a4cd88f52df6acb4e6f0b4bb7c04246927fa2d0ab280348f0726cb15dd9e8a53e7b9c39fefe8b403a4fe9ab48531", 0xc6}, {&(0x7f00000023c0)="6540e16f924170cb440ae9f8273a8ca60e92b773d33930866f543ee4ee349556bb019708a5e34320f274f0840015c4d2ea357fef745a5991e0d933027b7cb1de10afd2e3befa1442c1f8860b7f21987c1c7be84ce3629a74f948e01b519f97c9dae654dc0fcb927ee4928bef4c5a486b0d843741074fcb273dc7f24283dd", 0x7e}, {&(0x7f0000002480)="8cdc08d994637f49c86f20426518d96eced9bffef91c1906378f6e818a786080c7a1c4099d656612b50247efc08010097ec057c5477ba4a8bf8bfb398889cf8c2095414b5657b478cba61716a62cdb810a2bb76fbd06df0c4683d485d44eafe721401a7ae2c201d45f37239ed67b3cde11f896c8b2a77f8e3112150f1e038cb9d8ebafb43de81a1b2536c479f6db254219756b393aa5f7a681be3167513c39f20b214845459c9de9f0a5918c36515a2160a69c877e851a15c1f6356a67a3cec8cac14e774da80d", 0xc7}], 0x9, &(0x7f0000002640)=ANY=[@ANYBLOB="98000000000000000000000007000000891fd1ac1414aae00000010a0101020a010100ffffffffac141423e0000002865b00000000000f2e09700bd3146314059700c0a60602000e920784e347ad81a9a55847ea070473750610510c00d549e27d3a399d919423110703620207af0dafa1a5001032e5f5c130bc70127b48c4d33fef060816397945feba00890b58e000000100000000000014000000000000000000000002000000000400000000000014000000000000000000000001000000260a000000"], 0xc8}}, {{&(0x7f0000002740)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000003c00)}}, {{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003c80)="7f63239bf49b8333b1eca31a371cf98795bbaa2a92e28f5d2451dc5b1771868c97eab4103078f33bbc638ed55229847bb2464b4b6f9d9c50e0c48442cf679cfc09", 0x41}, {&(0x7f0000003d00)="0fede9558a5967bb8b920ab1c9fd3b8d0c389af8a4efaf02ae73a68be9356bc3547c479728d2d72e3d950293fe3610571938b5d99f20661f70bf9b1e5c2b3199aff1fc586eccb9c09cc77d2c1a35bcfc0afbfea0bb596516254848d70c042f07f588aa513bd91a98577660b4c4c06baaed61e081ef950cfa76db2163deebc2835d9a1acfd95705b0e00c4c2034e1fa3805e10c615414cef744f716e92b8fc43714a5c295f2c777e015d46e34f0753f8ca11cb647606cb300", 0xb8}], 0x2}}, {{&(0x7f0000004380)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000004440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xb}}, @ip_retopts={{0x90, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x95, 0x3, 0x2, [{@multicast2, 0x5}, {@empty, 0x10e}, {@private=0xa010102, 0x8f1}]}, @timestamp_addr={0x44, 0x14, 0x83, 0x1, 0x1, [{@local, 0x8}, {@rand_addr=0x64010102, 0x8}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x3, 0x8f}, @timestamp_addr={0x44, 0x14, 0x9f, 0x1, 0x5, [{@rand_addr=0x64010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x9}]}, @timestamp_prespec={0x44, 0x34, 0xf6, 0x3, 0x7, [{@private=0xa010100, 0x1}, {@private=0xa010100, 0x7}, {@rand_addr=0x64010102, 0x6}, {@initdev={0xac, 0x1e, 0xf, 0x0}, 0x1}, {@multicast1, 0x7}, {@multicast1, 0x2ef6afad}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb44}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x34, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x18, 0xeb, 0x0, 0x5, [0x8, 0x9, 0x2, 0x0, 0x3]}, @noop, @noop, @lsrr={0x83, 0x7, 0xa3, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x140}}], 0x7, 0x4080) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f00000002c0)=0x1, 0x4) r6 = syz_open_dev$I2C(&(0x7f0000000100), 0x1, 0x402) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x10a842, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000001a40)=@ccm_128={{}, "bf297cc716fb4efe", "22d8c1ab81acd5128ec566b746628cb4", "b26c1651", "7f44483d871b806d"}, 0x28) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40900) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r7, 0xc00464be, &(0x7f0000000100)) syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x54, &(0x7f0000000080)={0x5, 0xf, 0x54, 0x6, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x1f01, 0xf78f, 0x8, [0xc000, 0xc0, 0x0, 0xc030, 0xff00c0, 0xff000f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x4, 0xef, 0xf}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "f6068afeca6b7a92e0aa4ec00d982f89"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x5, 0x5}]}, 0x1, [{0xcf, &(0x7f0000000140)=ANY=[@ANYBLOB="cf038310b1fb5cf7420794f74d8e3d2399c0006a404e153f930ad15820d634ff6d43a0f3a7d3405fe3219b4b1d59131e23337d440e38b8412de832ab667493a877d0a1326c22bc7e091c081509f6d47c7ee71b5eee809738f0f176b74bb6a6492fbce4855d075f3536ba8c87b8cb084666534b2c83d1c3a400a5c72b748c5ab8506f046a93bafbfcf4a2885a6c3abb2d11cab305f464b52d61630da6f3e98f38102ebc28b9e57d61fbc51d523d385b8c17a42ad706ab490cab9752ceee2e591b0cac49301f776cdbcee639e7708e1e"]}]}) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0xc0286405, &(0x7f0000004a00)={0xfffffffc, 0x7ff, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x3, 0x5}) sendmsg$nl_route(r5, &(0x7f0000004b80)={&(0x7f00000049c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004b40)={&(0x7f0000004a40)=@ipv6_delrule={0xc4, 0x21, 0x100, 0x70bd2a, 0x25dfdbfe, {0xa, 0x20, 0x14, 0x5, 0x2, 0x0, 0x0, 0x3, 0x10}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x10001}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0xffffffffffffffff, r8}}, @FRA_DST={0x14, 0x1, @remote}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'ip6erspan0\x00'}, @FRA_SRC={0x14, 0x2, @mcast2}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xbc}, @FRA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x620080, 0x0) read(r6, 0x0, 0x0) 27m18.986068232s ago: executing program 3 (id=749): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timer_getoverrun(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x81000, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000001f80)={0x10200000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$usbfs(0x0, 0x8000000000000000, 0x200000) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000400)=@usbdevfs_connect={0x80}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x1014a, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x2, 0x200000000000001, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@canfd={0xd, {{0x2, 0x1}, 0x23, 0x2, 0x0, 0x0, "541d4d24288806f9a549e256a1ca1d8f1d6cf0f5f7f139027fa31e4139bf866744fb65fd48781cf3094686f6e14260bdc0a6f220846b84e0542176ef8dfdd4be"}}}}, &(0x7f0000000040)={0x1, 0x1, [0x29c, 0xb75, 0x430, 0x751]}) syz_init_net_socket$ax25(0x3, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/kexec_crash_size', 0xa0042, 0x10) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240), &(0x7f0000000500)={[0x0, &(0x7f00000004c0)='%\x00']}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x34, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000d00000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) write$tcp_mem(r6, &(0x7f0000000280)={0x401, 0x2d, 0x0, 0x3a, 0x2, 0x2c}, 0x48) 27m16.301544648s ago: executing program 3 (id=757): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xffffffff) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x4000045) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x2a8, 0x13, 0x20, 0x70bd26, 0x25dfdbfb, {0x11, 0x5, 0xc, 0x0, {0x4e21, 0x4e23, [0x6, 0xd, 0x6, 0x8], [0x9c, 0x7, 0x20004, 0x6139], 0x0, [0x41, 0x1]}, 0x1, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "51a655b24a5d64b30ce0ae24f71ec7fbd502305c314ab8a68c635ad2785b510f4a334aa982075981e50d249bfdd86563daac32c047d0961b212e3decd2ee9ab85c88fd2604d7398039a89f30489f22464d8232c026db8a7a7a9ccd1948caebfac0e21270240ff70407b642ec3b09cbdb9f2a0541ab48df485c4b59391777269727a544f1111cd99a016b72888e4de60a8baa240fb02f2064a4677d29db930afa77583ce3c2815b54e82cd66ef4f7d5177e54f845c7f79008c5dec187446e140e87c1fd0932d8af370742790d02d25f82bf9bea60d80ca2a27f9eb8050b8fbf"}, @INET_DIAG_REQ_BYTECODE={0xa9, 0x1, "c04c28c3520d9ac9cea92f031d2f54ae01829db4ef4c417516158aa3dd8e8676312486304ca10c376cd7b139c81ad8727ed37cc51cbfa7450f086396faff59899ff2869af00ef95893e256c19a1ce338a125449d6d64b96c9bd08ddc9413eae8f9eade10c4414f4d7414007a77564b626ff7b19db528eec5f98e1c4960199698bca167ebaae3298e34ff396ee9769681df356795f637165a349b2dc9c7108138bbc966271e"}, @INET_DIAG_REQ_BYTECODE={0x68, 0x1, "d344aebbafb6e2ea48730413159aa82fa0ef8e7a87545095be2b2bdbbc23689b4f9cb6ced3e70335959a47e10e05e6ccf80084a3ad1be31b4128bae877bf40f671f5d53c2712d373e9d0d488c6d524cb8befb2de989d352eebe5f33a86a9fa5ab5f106bd"}, @INET_DIAG_REQ_BYTECODE={0x29, 0x1, "a23ef06b6f7e12a3b92d163188810e5c5970a655245c56c802090ce4649b922765e144762d"}, @INET_DIAG_REQ_BYTECODE={0x37, 0x1, "e96392f49694faa46efadd4d7aeec9f6051260ecabd55a8535de2a276c220b3baea116ee9eff8395a57c75b52ad1616a235254"}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x8840}, 0x4) r2 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) preadv(r2, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) close(r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB='1M@'], 0x0) 27m14.170727842s ago: executing program 3 (id=764): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r2) socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x22, 0x2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) rt_sigpending(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffff, 0x88a03) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @raw_data=[0x0, 0xfffffffe, 0x2, 0x0, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2]}) socket$inet_tcp(0x2, 0x1, 0x0) 27m12.479097911s ago: executing program 3 (id=769): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) read(r1, &(0x7f0000000000)=""/89, 0x59) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2200) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x800008, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x10, 0x1, 0x0, 0x6, 0x7ff, 0x0, "5d01000000dbdeffff4d5578848e37ff", 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r7, 0x0, 0x0) setsockopt$RDS_FREE_MR(r7, 0x114, 0x3, &(0x7f0000000480)={{0x7, 0x9}, 0x48}, 0x10) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000380)={r8, r8, r8}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={'sha384-avx\x00'}}) r9 = syz_open_dev$vim2m(&(0x7f0000000200), 0x81, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000000)={0xf0f041}) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) link(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 26m57.380717607s ago: executing program 33 (id=769): r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) read(r1, &(0x7f0000000000)=""/89, 0x59) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2200) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000240)={0x0, 0x7, 0x1, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x800008, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x10, 0x1, 0x0, 0x6, 0x7ff, 0x0, "5d01000000dbdeffff4d5578848e37ff", 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r7, 0x0, 0x0) setsockopt$RDS_FREE_MR(r7, 0x114, 0x3, &(0x7f0000000480)={{0x7, 0x9}, 0x48}, 0x10) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000380)={r8, r8, r8}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={'sha384-avx\x00'}}) r9 = syz_open_dev$vim2m(&(0x7f0000000200), 0x81, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000000)={0xf0f041}) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) link(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 15m51.03230484s ago: executing program 2 (id=2879): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000001040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x400}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="13000000080000000800"/20, @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0904000000000000000002000000580004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc0800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a32"], 0xac}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000080), &(0x7f00000000c0)='%pK \x00'}, 0x20) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) socket$nl_generic(0x10, 0x3, 0x10) 15m49.881524231s ago: executing program 2 (id=2882): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x7fffffff, 0x93, 0x1, 0x1, 0x0, 0x19ef, 0x6, 0x19ef, 0x3, 0x5, 0x27ff, 0x101, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) 15m48.95125711s ago: executing program 2 (id=2885): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x4ff800000, 0x1}}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="180000001800000000000000", @ANYRES32=r6, @ANYBLOB="e6cc1b61a10a1ed13e60a18fb3bf38f9c3e85e076d4bd425b61d400473d54035eaeaaa4143e95d3887cb9b28a3d12fbde4a5639c43afaf8bccb927c1c738ff30b0c19fcc243d3faf614bad676501a2f37362aaadbeff2f47a8cfba370925a5f1813c266478be72ea8775660003ac644bffb5cbc700d25ee18f209c5a66e81b2d45b8bb37a42829f929431605b311ec53a2af93818545a5aa0d3d5c1004a6bd322ec8473c72a786370384265b59", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="270000000460000000000000", @ANYRES32=r0, @ANYBLOB="d861668712d2b00e78983eae86f3a0049333f550298edb749f8c1eed13430000ffff00", @ANYRES64=0x0], 0x20) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='cgroup2\x00', 0x800200, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffd02, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYRESDEC=r3], 0xd4}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000800)="5c00000013006bcd9e3fe3dc4e48aa31086b87030f0000001f030000000100dd3abb100293002f0b611e8c45f06b860f6e83e684f800040014000d000a08000000009ee517d34860bc08eab556a70525", 0x50}, {&(0x7f0000000880)="8d47487e5461ba7b8d2c87fe38df2f1b003ea2ccddbefcfdcc7965de6386b8d6c87fce581ae04cc08834774aff52bf2c32db730a637010f7b33c6e937e12ab55b9ba242f04323b0df29e7febdd8709bbf652df3a840a55878fab239342e0d60db50c80157d4f07bead00ae84d8f5206fd7e7f1340e30717aafbd80e7b24054a9351188a45a0142781f50bb84b34ece5b6e4c454e0799f41ac349e80d36ad85d4", 0xa0}], 0x2, 0x0, 0x0, 0x1f000801}, 0x4000) chdir(&(0x7f0000000140)='./bus\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x111, 0x9}}, 0x20) 15m47.495648921s ago: executing program 2 (id=2891): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) fchdir(r2) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x88708a, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0xc) 15m46.440619411s ago: executing program 2 (id=2895): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000720c0c40ac0553025a65000000010902120001000000000904000000030402"], 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x1, 0x7800, 0x1, 0x4, {{0x18, 0x4, 0x2, 0x0, 0x60, 0x64, 0x0, 0x0, 0x2d, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @private=0xa010101, {[@timestamp_addr={0x44, 0x3c, 0x88, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@broadcast, 0x6}, {@loopback, 0x1}, {@broadcast, 0x2}, {@multicast2, 0xc}, {@rand_addr=0x64010101, 0x7ff}]}, @ssrr={0x89, 0xf, 0x9f, [@rand_addr=0x64010102, @rand_addr=0x64010100, @local]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x88, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x6c}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x7}, @ETHTOOL_A_COALESCE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x80}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0xfffffffa}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x400}]}, 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r2, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4505e529, 0x15}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x7}]}]}, 0x20}}, 0x0) 15m46.302206319s ago: executing program 2 (id=2897): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r1, r0, 0x4, r0}, 0x10) 15m45.630413661s ago: executing program 34 (id=2897): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r1, r0, 0x4, r0}, 0x10) 6m21.403412127s ago: executing program 1 (id=4623): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) r0 = socket(0x3a, 0x3, 0x7) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0xbca) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) sched_setscheduler(0x0, 0x3, &(0x7f0000000300)=0xffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0xf5, 0x200) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000440)=0x4) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000001380)={0x1, &(0x7f0000001300)=[{0x8, 0x50, &(0x7f0000000200)="ebbac7282d07dcbf9c112bd1fe8c0d19bc0738b6125896b0fe034118bcc5326964500cd27082991d31ce8c2adb6a647acef5bba30abff2202e1f37ad57bb248843a2b0292c1521c40653e1b4a49b9e65"}]}) r3 = getpid() ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000002c0)=0x6f) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000001c0)=0xff, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x501002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000340)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x20) open(0x0, 0x60840, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_pidfd_open(r3, 0x0) 6m20.522038082s ago: executing program 1 (id=4628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x100000000, {0x7, 0xe54, 0x0, {0x400000000, 0x0, 0x0, 0x8, 0x200000000, 0x0, 0x2, 0x9, 0x5, 0x8000, 0x400000, 0x0, 0x0, 0x1ff, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000540)=0x2, 0x4) sendmmsg$inet6(r3, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000001040)=ANY=[@ANYBLOB="bbbbbbbbbbbb58a4ab044a92080045f000b000000000fc11907800000000ffffffff04004e20009c907801000000000000004e0ec4d8ec1533548dfb72e1261d7aeb619d49e98f3f4cadcd53ff011dd8241880bdd625ad905ba90d0a6927c37cefe3c4b48ef7ded481883e35fd85afe3254b3e14e3cae48b976715bf29ed4dcc166e7cdfd8ec14c7ce8bac951c90fcfaa4d6679b931ed70bb5b50f5b738dfdeca3693c5b2785e92ce602a669b6ddaf8ff0acae2f2a3d0d0de9d22c2e3cf8"], 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x100000000, {0x7, 0xe54, 0x0, {0x400000000, 0x0, 0x0, 0x8, 0x200000000, 0x0, 0x2, 0x9, 0x5, 0x8000, 0x400000, 0x0, 0x0, 0x1ff, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000540)=0x2, 0x4) sendmmsg$inet6(r3, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000001040)=ANY=[@ANYBLOB="bbbbbbbbbbbb58a4ab044a92080045f000b000000000fc11907800000000ffffffff04004e20009c907801000000000000004e0ec4d8ec1533548dfb72e1261d7aeb619d49e98f3f4cadcd53ff011dd8241880bdd625ad905ba90d0a6927c37cefe3c4b48ef7ded481883e35fd85afe3254b3e14e3cae48b976715bf29ed4dcc166e7cdfd8ec14c7ce8bac951c90fcfaa4d6679b931ed70bb5b50f5b738dfdeca3693c5b2785e92ce602a669b6ddaf8ff0acae2f2a3d0d0de9d22c2e3cf8"], 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 5m42.970386225s ago: executing program 36 (id=4760): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 19.090003126s ago: executing program 4 (id=5773): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf090000000000005509"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="200025bd7000fedbdf256c00000008000300", @ANYRES32=0x0, @ANYBLOB="a9699b0e"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17.432036076s ago: executing program 4 (id=5776): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x7079, 0x1000, 0x14, 0x28b}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r6, 0x4}, 0x38) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r8, 0x100847c0, 0x0, 0x1, 0x0, 0x0) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x280e00, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002fc0)=@newtaction={0x1684, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x5}}, @TCA_CT_ACTION={0x6, 0x7}, @TCA_CT_LABELS_MASK={0x14, 0x8, "193fa665cb68f13b9239a3b09cec760f"}]}, {0x4}, {0xc}, {0xc}}}]}, {0x160c, 0x1, [@m_skbedit={0x1090, 0x15, 0x0, 0x0, {{0xc}, {0x64, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0x15}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x10}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x81, 0x2, 0xffffffffffffffff, 0x3, 0x4}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x40b3a7dc}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x101}]}, {0x1004, 0x6, "01c142ba7d6c86ce3f9b04da5a10bdaf941eff1a30e8f7400a70bc8aad88af9879894805a942ffda2db26e56b484a23794c05521baaaee4df18f07cbd3111550f4caf25aa5f7dccd3847b2d29a1e544282c6401d479b85fb83846eb094cd20aec03f693cb61703725b734717d35dc96db9ae6ba7a275dfd79786ba0ccb8e4bd08df9652c130ab069b32c0ce964c7bc9ad67ec3a42763e56c5c9ed5f5f96a936cd8ce4016bd91dcfa27b82da0ab029b50d90df6146f9fd9650e09b500b2e79b76dd01066138f20027f2d96f8c1dbfd25d5df73a380cd960113c7fd4b7a9c01c35fea03d6d83723bd15d8474ff14472b36c678df8214d17aa86e472ea7c484c81b0a3882b9be298d6adc2f7fc490581332dbfcacac404a5e228314e5a7449488021e1305f95f1e9906f95d97c6f978792d2fa9c2eb051a0386de87e2bbc530e74fe98e54e4eb5f39acd6c1df1216731fbf510e639a27d2281d3b3310ad2cba654f91bcbab3af3561009f2c862b215bc43c9a9c676c38e00e6fb27a62b4da490901c192331122b753fa7231d46df8f44dd9f4ce79538ecbf1dd821da86ec505705f1de665976195e7718516e0dba0a58574808240108e506c7e32384c18bb82b27200d1a4cd9449fd2369b138d41d2f0df0b0b2430f5f1b5898c24a75eae9082789141ceade23c94e4a5121d31431a5920231ad9a1071a677b64aad7580c1c239c0537e6b1055bbf1956444ab04a5bca6903f6ff9848999410882d997395744668e3b90ffda18b52de57392c04d5fdcee39a4e42789263dbea0609f9d771ab58626761186bd5104535af5dd32c59978a168b484218543b15396da9003e6afeafc218093c9e007ada168b83f0e6abde969fa6d90d7eb9ca6766b705bb733b4d0f43dc6e3a210af37bb3c2220d116387c819ec116b4edbc1004448a7afca87f0e4442a4e6281e4a6a982a2435ef438c1947f3255d03ac32e6916af6f3c775a8c05445b4eabef62791c3c8f27a4f207585f06b206c784743732195aa23be036369009aea16df571a0f850cc5ce34dab2a5a2fd08d8c011420935aae92617cd7fc4116bd171c457a14da19f6e774e20825d1312ce4a93dbb02e20ff9e1a445eec4033839146d0317789c034e2f266b4f92aa2c48675c90cb378c6696447496a0e7b11ecd9e252abfc610f1b24d49fb2be45eb4c9e55939a8eccadc1a12385f7496293aca0373edfafd01b2fc55955933fc21cd71e2d3f092b66d0257c9ee752ff46eb880d738a360936ad70c90822b0ac2dfe23e788cea82ab2bd99c305dc96461fcc6a2c15faa04cf6bdda066a8d131b9ecd955107814ff17387d35e35e31cfdf169d8b0df11b2e293e631967c1fe8d06cfcefe21b56f6d735017542542e296a7f86b2fe537e9bfe966e94c67f91b7f7b143f569636a6d220bec07296e3cf9df2305c0e36d6f21a7297bbbc1c902b872043992ed128252a70eccd3d7bb8f09a334cf14e473172825ad5289b1d7ef628efa31e436d4552f4dcf22837f57dd4fbc20b3b7e07154ecd501c3188b385c7a0fa07e439a73f2c351741759c99a556074f8053fcb0a66e9567f6212054d282ab4eff2d21b99bbc778f1d99e095d93add8a55157681d0758bf584b43b73dec462eed7f906c35fdb074c7d60d1066803d65325374356e4520ad7e0cb276f5ca750ee78880ef4e9b3e519f8c976b09503cfd18c04e281ae789fd92db40126c9fa10567ecd76987caad5959ff578d4db0d3b9c4aac3d2852c062e93712496136b66a6eb1d47c8b2403aac03dbf80ec32710c53bf3e7dc9182b5d8ba35113d18b1c91226162a1ee61aa107399471ae893faa78c74aed7cab09aae46ad6be4e26db058e94a0f0805cba5a9b4643fcad70da52cc8e951bfb152c6f3fd2dbe851b3318ff55f1dbc8fa08296f60bacac3ea205dc3f210b50b55eca9411f31386d117bad7be880ad4895fe61717777f012c4aab146be7738318eccb33513925bb906f128cd77a6ad8cd3129bbd085c2b08b00a7fac240d95972bee0fa1283e3fbe2af183f82517ff2cac909d4ed5a3faed6fcec14d8a19328b72e2d4b0e6dcf52f0c19d90ff1af0de7b682412f0ceb758dffabf9ee8f1effa4af4bdd4e306cac860affe5c01b7e8914ba12d57b8ec2c352972a9b18672564a5dc3538d3169dee1629bd643af93d144ee5de17328608d93462135afbb7bffc60a2f98fd35ee6a2beece710f1775b62d08d3a2e1e0e6e018137c50458514469f44fff7b9f10ada097b3e27d2030f83fe7e65824e7b2cda04568eac10b3fa1f012afec22ac071c76d76415a77e078b3f96237b172a2ddc7ea4160205e0c8e9cee47a1870bc46a0131d81bac390e9dcba9586e1c190374bca5136dbecead8b314b49221effbc949d4de8e87bb79b408473cc6582326e2addad9538108d3788914bfd31b25f54506d45fbff26a004ca74afc273f5a63ce70bd8af846e7536517258fc83c0e36b3c126f95cb40ee8c68825c2f48a4319cba14da2fe0ed638f552b1e0090c2dbd5c59ea32af4e8b7990ef34699f902a42cbe004aeab3d8d35b6fe2fa5fd6e7de0604a1a0ffe6c23b16a753694ed5ddf2573446f7799fa22bd4c23889b235d9d074520a762b7ee2f731a25c0f52843aa4bdcc02e8cca34fed0ef7f65f8f011a5a09b13d181d0758bf37c9253de745a0ca6354e276f6b5ebd33f2a6530a46ce195dd789c15111c66aff2ad7e1d4b02fc23510767afa1b36e78c8a3b8c6bf84de5becde5c0e5844fdb32ecb47c1ecccb9140b6841dcf0edc4bbd8a69039d197fa932581b0aec44f0fce16425d1baae348cad7d3519a8fa7149287774e8c9b8da747e062a39c48c11045f0a02a408a253e91692dec9d703dc5022e65c1f51b1042b7b580b5f789481f6fb50f47f6e70964b0351573759f1708c0592d36ab74c6441112fc10f10b8843d8ee4b4d5e6283e8d7adbe5c809abf85ab2c06a19d5d0baac1f822fca6a777fca3e2bd54832ae08c92bca08734e9d52f686a87edbad3a5126b0d9bad6584a2e6fe81e03be5bd707442bb9644843952b7133a37902f6d8042d5b8cd80d14468c50349f5586e03474dc27cbd91af916262ebc4384cc31c43bced2d2b11e3edc98671884ca2372b41d35a88c7e3b29d0455b0ae4dcd72bfaef77985d2d6b71d4b65a5348b9ff37182099d71ed6cf10fe5ae1c5db230a4bc32ee0d34d80429b53ce023305321a7fbb8a7aabb9c07b60a0690bed022eb7462a825fb26067bd586ebf46043b3d98d5b9d42b0e1922d4a2f9ad556f8465b44279969b800a25a6e75c6b70c8bcdddf81e6a6d81f81ed5c07579fd792a60a449e123665313bf2df24bdbad1113af62d1e6023d467b0dfc2b8694db8bf80edb5414edbb61575b44b128d28dc9765dce86b3d5493e290de698185d76426d63da9abba54f7b475c37446bfc8eceba8ea0de054a729a0afec5f970e69499c6817e0aa3dc18c1148634bc2d7359938e20489e4756e779b92f14de863db794687fac3138469cdc0bc6df01baf5c48d7ad38bb4b760785ace6849cd6c091fa4d09abc445f5318e7160e027d0e7695a0c9dccf7ca7b85540159c87a6dd24b5a9c7e819e02cda13938818ab60fa07babf8a18e3d8411bbd316467e36cc34aa7cd07d4edab24553168329141f29a3f68eb98556106286f64408c523de91589583f84d95a7986c6b24de39cba1d8185bfee1a54a02e6f20b4cf81005c9d2f10dddb77d4a47ee128b9f2c631048673a604909b4005c25e799df176cbd1e3c83192e6f7ad08434df8e65c3b39fef1205c36648dbbc23c1ea47dfc3aa3dcd203f0a7bbd45c2cfdeaaf0c6bbc06a56c706c8a77571a05a9eb306fd5629bba1e925ddcc31b7cdb1b4359c1f515679499816d3b3875a4646aa2ad8957734f4a19547208fec40a03f835f93631284f398d36310d689a2809bf8cad1594a5a7bd94df706159d9169febc063a6826c267f757063953df669204522ff349c5b6ccb496450b8680c578aa386389542043a1e01b728efdb59a7c75f2e2ef3a3569e8351d7485bc59ec9fa1e38167d9819917bf326f6ac8892a68055312e706ee9eb52c42412448f1006c802d7951bdad6fcd6e3892471218f5061ff1b24d99a85f47c332149fdfcd7f7852c5cc7329e94d13946a9803e1db3d4a627adba79df7a10fa736b1ed660c53205a36084f890bc679527adb101ba6a372d12ff27f68778b9322c004cf88385326f1996a791c630a64de3f01f275321ea028ff08d98eb03fbffadf6f7afa89c4f3f1f0ff229d0b4aa94b516e240c38d64e90842a894402fed48a974cacbd3ea1933ac9ca46e291bd964ea083904ef7a21b4e742a7dd5fb2800505b227f8febca29a598cbfdc3f623b6d853e28de323c980c4103ff9364ab4d088a0bd7cdc07615ec27b2461509b1581b91c76de925a16d46a1d78d579234a0385917dba07371ac87ad2f45c2f986954b4cccdfd1cea8f3de091e95c77f41ba69992e30f278f57cfb86554d8d0b2cc7e616728935965239fdad9cc008bef0d1bb4fd002bfc2f70d4d2dee5f075d7b342e7cf92a0cf0b4656075c4155479911905c5388b8d788e0eb50f3ab81abdb97c40a6d204dd93c38bf5cd9334980891028a151482051e012a2d4f88d7e9d32501ed1f092d5c3c645e8c5dc38cef6374907d98a6bd9d1420b962d3b84e135046d459b915fe4122eeefc21edd0b79d1c5d6f7f647e4fc206c553cf841039df2c6471a8672ee5f6da3210c3d0715174f8eac55c1f74727a23c3f90413b3930bbb3e4db3ebc184068e87fd478d4c8dbbab16eecfa0229c6c23b405906057d10c3b9b416a8bdad1996dd92f2a9ac63e11d6551deb09d8448de2632976541b4d7cbba60bb21c11e0c4b20bddb29b548f0e3a9af18be5fce4fd45f4c5735c4195921506cc4e1467d8b526978637e5b5ecef148cdf9528e3eba1df77c68380be0f02b7667fc8feaaaad1cc9f00ed1341353a0b135b061efcf01b48a48b75194c5d22cdacb49339652a0b9f2a852db0a02b664e41f75583edf8d216f6902ece2bb1dabcb09b82a49a878074c4ecb62fbaed68c0a79005a050d81c7555d0959c56ed2aa7812bae8156e381e0a6ee52d85d9efa0eec6f4117d2196fbbde3411c2f30e6cbfa23626ba4370bb5072547d3eacf795fa9fc8d4f0888ec2a811b2c711c43f2f7941659f433071941e3f0289baee2ddc244beb9c9cfb5acd63977ec7e6989a24358d3d71dd97bb6847632749a64d4198219c2ebc7f88fde82600ce48e70ca52a13cc441e02b48f4f142a6ee2ec21bab8ec288c5dbbde6f1fdfef02592c31d575486941ac532600d6211d58686cdd25f31e5df002ac0dc22a298c477631ec11e7f67984c23eb256554ee87f554129d84c2fe951b1936551598c640d5403b115f3298129b6f834ad04186cfdec6013735afc4d1cff1b6d6210716015d061b156b90094a1fd35fe2a145524b2a9d8d5e7764ac0228cf6a1b8d394837be6d046fad14a1dbe6fe3eda5efb59494104a91e945a5c77bc0929414c2b6e6af9ff22fe20c03403b5a34e49abda1a443a097c9615b7ce8c0ca1d9302785971fe8699f4bd4a40a5e442cb72f234ff746b5f39480d831f0ad95ce65011ef3c30673afd49490cc67f401a7e038f7c6023584b9564c85031028bf4409f20a30329bacf3acd2df6442d9308288d77dce8ff19ad2f6a53bbda56544b84a7a3f3395a83ac83ba59d1a92a100c248cd27426074ee2cab0ea4c82f7f56abf23bf9c5a146bdba"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_police={0x440, 0xb, 0x0, 0x0, {{0xb}, {0x414, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xf034, 0x0, 0x5800, 0xbc7, 0x9, 0x94e, 0x7f, 0xffff, 0x40, 0xc000000, 0x2, 0x1, 0x1dc, 0x0, 0x0, 0x400, 0x3, 0xc0, 0x10000, 0x5, 0x5, 0x0, 0x2, 0x100, 0x2, 0x4, 0x5, 0xffff, 0x8, 0xeb4, 0x9, 0x40, 0x2, 0x9, 0x2, 0x6, 0xfffffff0, 0x9, 0x5, 0x6, 0x489, 0xf099, 0x2, 0x0, 0x764, 0x7, 0x8, 0x6, 0x7fffffff, 0x1, 0x101, 0x5, 0xce, 0xa4, 0x4, 0x5, 0x1, 0xd, 0x7, 0x41a, 0x8, 0x1, 0x400, 0x9, 0x0, 0x8, 0xc, 0x4, 0x0, 0x38, 0x629b, 0x7, 0x10000, 0x5, 0x1, 0x8, 0x81, 0xffffffff, 0x4, 0x3, 0xfffffff1, 0xf, 0xf, 0x9, 0x7, 0x1, 0x3, 0x4, 0x0, 0x0, 0x9, 0x2, 0x7fff, 0x6, 0x1000, 0x6b, 0x8, 0x7, 0x5, 0xdd3b, 0x0, 0x7e0c, 0x7, 0x0, 0x1, 0x1, 0x77af47, 0xfb, 0xf831, 0x3, 0x3, 0x1, 0x10000, 0x7f, 0x6, 0x2, 0x7, 0xcbc4, 0x7ff0, 0x3, 0x5, 0x3, 0x10001, 0x6, 0x7, 0x6, 0x3, 0x8, 0xf, 0x3, 0x8, 0x7, 0x2, 0xffff, 0x8, 0x6, 0x7, 0x3, 0x9, 0x7, 0x4, 0x6, 0x7, 0x2, 0x9, 0x0, 0x3, 0x3400, 0x3, 0x9, 0xc7, 0x9, 0x9, 0x1, 0x5, 0x6, 0x3ff, 0x7, 0x2, 0x7, 0x3, 0xcb04, 0x5, 0x7ff, 0xfffffff7, 0x7, 0x10001, 0x3, 0x100, 0x3, 0x7ff, 0x6, 0x2, 0x3, 0x80, 0x6, 0x5, 0x81, 0xd5, 0x7, 0x1, 0xb, 0x5, 0xfffffffc, 0x5, 0xb, 0x1, 0x4, 0xc8, 0x4, 0x81, 0x8, 0x1, 0x8, 0xff, 0x20, 0x4, 0x2, 0x700, 0x80000000, 0x0, 0x0, 0x0, 0xa, 0x9, 0x80000001, 0x4, 0x3, 0x80, 0x789, 0x0, 0x5, 0x2, 0xfffffffd, 0x4670000, 0x0, 0x1, 0x6, 0x3ff, 0x7fff, 0x6, 0x5, 0x5, 0x3, 0x0, 0x8001, 0x1, 0x5, 0x1, 0x2e, 0x6, 0x2, 0x5, 0x7, 0x2, 0x0, 0x80000000, 0x6, 0x5c3d0ce8, 0x5, 0xb0a, 0x3, 0x9, 0x2, 0x2, 0xe86b, 0x9, 0x2, 0x80000001, 0x2, 0x664ffdf7, 0x6, 0x40fa, 0x1, 0x40, 0xffffffac]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x138, 0x16, 0x0, 0x0, {{0x7}, {0xd0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x6a, 0x6, {0x81, 'mangle\x00', 0x5, 0x1, "f88e3b1594f30cafde7ad5a027db9ef16d196b19cc70dd6218ed59b2e849b2733a4faee4512b6ceeb72592b2f9701db23e23926304c5b201e45d3121fae8a5c8"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xffff8000}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x8ac}]}, {0x41, 0x6, "a25b54bdf3ab3d853430d270623e2c9d3799a8ec50820fddb38de6577091f475652cffbd77fa20a05c5b774e8d754018da2ac747ef0e0e69246d27fef3"}, {0xc}, {0xc}}}]}]}, 0x1684}}, 0x0) 16.183360724s ago: executing program 4 (id=5781): r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffedd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) io_uring_setup(0x5c44, &(0x7f0000000280)={0x0, 0x58d9, 0x8, 0x0, 0x18d}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x400000, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000380)=0x3c8, 0x8) bind$vsock_stream(r6, &(0x7f0000000940), 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) shutdown(r7, 0x1) 12.179440021s ago: executing program 9 (id=5789): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000002af1028b8885e557ff222100000000000000000000850000006d0000f6a6f858c5f40d967dce24d1f5f80b53d1b7e8732992e4a7dbc1ac1bbeebda5b13997bca25cb78b47bc9b3d6c0720291df220580ded692e20c933fa08edadae260242a00c0c56a6ef4396cab8cc76db930aa97d9f3e12c0f6b3bb6cdba893ab5098255390f04103e05fb4355de1aaa09c0f9ed0de53d2bbc7eefb88b148dc5c537a659fe7b4772e38ea3a165"], &(0x7f0000000180)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x1, 0x4, 0x7, 0xa3, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x2}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="40f6bc76", @ANYRES16=r7, @ANYBLOB="050500000000fddbdf2501000000050002000a000000"], 0x1c}}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) pipe(0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x88000cc, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 10.705767953s ago: executing program 6 (id=5791): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r1) r5 = fcntl$dupfd(r2, 0x406, r3) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x4000}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$kcm(0x2, 0xa, 0x2) read$msr(r4, &(0x7f0000000280)=""/132, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x0, 0xb, 0x2, "f440"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) 10.388313056s ago: executing program 4 (id=5793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x100000000, {0x7, 0xe54, 0x0, {0x400000000, 0x0, 0x0, 0x8, 0x200000000, 0x0, 0x2, 0x9, 0x5, 0x8000, 0x400000, 0x0, 0x0, 0x1ff, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000540)=0x2, 0x4) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000001040)=ANY=[@ANYBLOB="bbbbbbbbbbbb58a4ab044a92080045f000b000000000fc11907800000000ffffffff04004e20009c907801000000000000004e0ec4d8ec1533548dfb72e1261d7aeb619d49e98f3f4cadcd53ff011dd8241880bdd625ad905ba90d0a6927c37cefe3c4b48ef7ded481883e35fd85afe3254b3e14e3cae48b976715bf29ed4dcc166e7cdfd8ec14c7ce8bac951c90fcfaa4d6679b931ed70bb5b50f5b738dfdeca3693c5b2785e92ce602a669b6ddaf8ff0acae2f2a3d0d0de9d22c2e3cf8"], 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff}) syz_emit_ethernet(0x7a, &(0x7f0000000540)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaaa86dd6092c01f00442f00fe8000000000000000000000000000bb000000000000000000000000000000012420080600fb000000000057000086dd080088be0000000010ee17a50400000000000000080022eb00000000200000000200000000000000000000000800"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80082, 0x0) write$vga_arbiter(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='decodes '], 0xc) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz1\x00', {0x3}, 0x49, [0x0, 0x3, 0x403, 0x100000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x4, 0x0, 0x1000000a, 0x0, 0x0, 0x80000007, 0x0, 0xffffdfff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffffffff], [0x0, 0xa82, 0x0, 0x0, 0x2, 0x733, 0x1, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x9, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x28220be6, 0x401, 0x0, 0x2, 0xfffffffc, 0x6, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xcf6, 0x89, 0x0, 0x800, 0x0, 0xfffffffb, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80008003, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0x11, 0x0, 0x0, 0x6492, 0x8], [0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0xd2a, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0xfffffffc, 0x4, 0x0, 0xfd31, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x3ff, 0x200000, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000008, 0x4, 0x1, 0x0, 0x0, 0x100001]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @multicast}) 8.312828287s ago: executing program 5 (id=5795): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0xce, 0x7, 0x22, 0x1, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x7800, 0x9, 0x1}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r2, @ANYBLOB="08000b000000000008000200ac14143f0800"], 0x54}}, 0x0) 7.984870573s ago: executing program 8 (id=5796): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote}, 0x1c) sendmmsg(r0, &(0x7f0000001000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[], 0x10}}], 0x1, 0x10) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="030000000500dd4ec69806923a3a56402c5b9f4db94a7f57029c823f79037427d47873589c6e5227a7b170a7151b2670f985612b0e9ded4a4385e83efd2c410388fd1cc18c000000000000"]) 7.910070796s ago: executing program 5 (id=5797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x100000000, {0x7, 0xe54, 0x0, {0x400000000, 0x0, 0x0, 0x8, 0x200000000, 0x0, 0x2, 0x9, 0x5, 0x8000, 0x400000, 0x0, 0x0, 0x1ff, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000540)=0x2, 0x4) sendmmsg$inet6(r3, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000001040)=ANY=[@ANYBLOB="bbbbbbbbbbbb58a4ab044a92080045f000b000000000fc11907800000000ffffffff04004e20009c907801000000000000004e0ec4d8ec1533548dfb72e1261d7aeb619d49e98f3f4cadcd53ff011dd8241880bdd625ad905ba90d0a6927c37cefe3c4b48ef7ded481883e35fd85afe3254b3e14e3cae48b976715bf29ed4dcc166e7cdfd8ec14c7ce8bac951c90fcfaa4d6679b931ed70bb5b50f5b738dfdeca3693c5b2785e92ce602a669b6ddaf8ff0acae2f2a3d0d0de9d22c2e3cf8"], 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) set_mempolicy(0x3, &(0x7f0000000000)=0x8, 0x8) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b116", 0x66}], 0x1}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r10 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f000014e000/0x1000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x0, &(0x7f0000000040)=[{0x7, 0x0, 0x3}], 0x1, 0xb2, 0x0, 0x0, 0x0, 0x18}) syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="e0380600ffff0100000001000000000000000000000000000000000000000000020d7d5e433f6f79616fe30c55044b485a16439ad6c01b85911e169a377d089e100a2078699ffddcd5e7650566374fb9fffbd8361a8779985ffee97362a4424907a00000"], 0x22) readv(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) 5.226986177s ago: executing program 9 (id=5800): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x4a, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRES16=r1, @ANYBLOB="48d3219dc901000884cda5a9ab922e8d68e65fcd9b0144dc94d8e12cbfa199538070411c68423d65eb5e5d70db58c326020e124cffa29758a261dce1330200952100bddbb367d3105be68cd4c573da76b8f2ecacf4da84b94ac49f09250820ea43add457732f12cee826289d9044fbbf57a67ddc55624be5f8ffffffffffffff914172ce9b96b86f97ee186c34ed51487447860641edcca142aa6a3ec0ea988f8cef81d3b50f6f63947cf131f233caaf2f97c268eef7d427c2e391a47e824954", @ANYRES64=r1], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x2b, 0xfffffffffffffffd, &(0x7f0000000280)) 5.168565714s ago: executing program 8 (id=5801): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x1510, 0x0, 0x0, 0xffffffff, 0x10c8, 0x1288, 0x1478, 0x1478, 0xffffffff, 0x1478, 0x1478, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1570) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) 4.84806931s ago: executing program 6 (id=5802): r0 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='rss_stat\x00', r0, 0x0, 0x4000000000009}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0608262300ba8b0ad775b3", 0xd, 0xfffffffffffffffc) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) syz_open_dev$cec(0x0, 0x0, 0xa41) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r5 = syz_open_dev$video4linux(&(0x7f0000000540), 0xd, 0x28241) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000400)={0x0, 0x0, {0x7ff9, 0x6, 0x100f, 0x2, 0x0, 0x3, 0x2, 0x2}}) r6 = socket(0x11, 0x6, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r7 = socket(0x1e, 0x4, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r7) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010627bd700000000000090000001c0004801300010062726f6164636173742d6c696e6b"], 0x30}}, 0x4000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x201, 0x400002, 0x0, {{}, {}, {0x40, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000844) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setrlimit(0x0, &(0x7f0000000300)={0xe, 0x1}) 4.118352084s ago: executing program 9 (id=5803): syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x0, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x2, 0x3}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x7, '\x00\x00\x00\x00'}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x1ff, 0x4, 0x4}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x7, 0x0, 0x80, {0x7, 0x25, 0x1, 0x0, 0x0, 0xff1d}}}}}}}]}}, 0x0) r0 = memfd_secret(0x80000) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2080, 0x301}) r2 = dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000440)={0x6, 0x80000001, {}, {0x0}, 0x6, 0x8}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000500)={0xffffffffffffffff, 0x6, 0x8, 0x3}) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000540), 0x400000, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0xc) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f0000008d80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f0000004200)={0x50, 0x0, r12, {0x7, 0x24}}, 0x50) syz_fuse_handle_req(r11, &(0x7f0000004300)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x90, 0x0, 0xf000000000000000, {0x5, 0x0, 0x0, 0x81, 0x2, 0x0, {0x0, 0xfffffffffffffffc, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0xc, 0x7, 0x2000, 0x0, r13, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000680)='./file0/file0/file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = socket$pptp(0x18, 0x1, 0x2) r16 = timerfd_create(0x9, 0x80000) sendmmsg$unix(r0, &(0x7f0000000780)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000140)="34cf2841922bd3fdb3af84239bf8e4c1959c8fe092b3720ee83741008d1c9d437afe788e5ad36c9f56d5c3e4be03df22651e1aa1375411a4594886b32032fff6cae031f162f5566cba91bfae29566c905c1f40f9eb7a3fb2a23ce57d70ff592505a8d47717444aeec5e0a9a867e02105c235e5555fe7f4c41cf06404fe75fffc5bb3b2519d782707fd6d0b99e79b717a218c76efccdbd63b4f30c48932b36a72481184cae493a524fdf7b2127040c909b28ef563f28554adaa4a82d316ad6ae76a4b42c1522b8b08c327a78e71b0baac20e6a91d0a30201c7e7566da361f128954becefe310e04", 0xe7}, {&(0x7f0000000240)="1e0667b1ddae6a3c31f1ae761eb2afd64c0a068cc5a913008890e9879a6b91df411c68", 0x23}, {&(0x7f0000000280)='+', 0x1}, {&(0x7f00000002c0)="7e7a969b01676839b96375885d1bf3ed06805030fd98cdc35681028c401a2f29b77c978db61d8bf209743a06b5ac93f1c6f09e58268a907a87efafb98d476120b6bf68bef53937adaa308c0f2a9844c131248df98ef120a87b2fb3ba567a2091af221e49bc5a6d628caa037c7f8a086df739184a73d3c4799634fb0148f83b552d1c02d6d5bbe552322f5aec02eb2c301c72e4d3fb4d6fd38caeddc443da48e6e5804fa1ff6fab2de38aef3461e3b1fe2233a6ba3841581eef9c5022d843c0", 0xbf}], 0x4, &(0x7f00000006c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r5}}}, @rights={{0x20, 0x1, 0x1, [r6, r7, r8, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r13, r14}}}, @rights={{0x18, 0x1, 0x1, [r15, r16]}}], 0xb0, 0x4}}], 0x1, 0x240000c0) 3.600867596s ago: executing program 6 (id=5804): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007c80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000007cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000007dc0)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\a\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf253400000008000300", @ANYRES32=r3, @ANYBLOB="140055000fe4a3c6a6f185f3f48f262c02bc23100a0034"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.461805855s ago: executing program 4 (id=5805): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_dev$ttys(0xc, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) io_uring_setup(0x780c, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x14, r2, 0x65283e1aaa2ddbb1}, 0x14}}, 0x0) 3.396646354s ago: executing program 6 (id=5806): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES32, @ANYRES16, @ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$dri(0x0, 0x8, 0x404000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x80}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc65, 0x5, &(0x7f0000006680)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) writev(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)) 3.070682543s ago: executing program 6 (id=5807): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x7a, &(0x7f0000000540)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaaa86dd6092c01f00442f00fe8000000000000000000000000000bb000000000000000000000000000000012420080600fb000000000057000086dd080088be0000000010ee17a50400000000000000080022eb00000000200000000200000000000000000000000800"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80082, 0x0) write$vga_arbiter(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='decodes '], 0xc) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz1\x00', {0x3}, 0x49, [0x0, 0x3, 0x403, 0x100000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x4, 0x0, 0x1000000a, 0x0, 0x0, 0x80000007, 0x0, 0xffffdfff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffffffff], [0x0, 0xa82, 0x0, 0x0, 0x2, 0x733, 0x1, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x9, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x28220be6, 0x401, 0x0, 0x2, 0xfffffffc, 0x6, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xcf6, 0x89, 0x0, 0x800, 0x0, 0xfffffffb, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80008003, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0x11, 0x0, 0x0, 0x6492, 0x8], [0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0xd2a, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0xfffffffc, 0x4, 0x0, 0xfd31, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x3ff, 0x200000, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000008, 0x4, 0x1, 0x0, 0x0, 0x100001]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @multicast}) 3.013301802s ago: executing program 5 (id=5808): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0xce, 0x7, 0x22, 0x1, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x7800, 0x9, 0x1}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r2, @ANYBLOB="08000b000000000008000200ac14143f0800"], 0x54}}, 0x0) 2.726270775s ago: executing program 6 (id=5809): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r1) r5 = fcntl$dupfd(r2, 0x406, r3) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x4000}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4}) r6 = socket$kcm(0x2, 0xa, 0x2) read$msr(r4, &(0x7f0000000280)=""/132, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x0, 0xb, 0x2, "f440"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000440)={0x0, 0x6, 0x2, "63d2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.63111186s ago: executing program 5 (id=5810): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x2}, {0x3, 0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}}], 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r1}, 0x10) close(r0) 2.510827482s ago: executing program 5 (id=5811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sendmmsg(r2, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000580)="4a403b30fe47aac04ffb39dcab60b965df419fa4512e581ba38240a9fa37e7f066e75b805bccdaa57f481f98103927b0a74c43783148b2350da601b499dc0df9be5aff6db98e9848782e1644f5332b16ff4e25e86158e14537b70ad87788be0092f9f6b2facdcc24ff1c09f86a0c2b2887b61f80ffafea79bd7dc7ebca8529498cd951ed2bd2c556bd9af59b937d2a14afeb8db7c1fb775b298f9ef775cdeb9d92b8ccbed02c2bdb13792fb6353a3e3bc4d607496fa76b83588a148dfb14d510953f97366f1d15da72f1d785fc94a9a9b3973e734c5e140cc17e628cb299741a77570e65601663b37fa59bb1a187fee27b", 0xf1}, {&(0x7f0000000680)="c3ae407923ed5ff730debc10a44cf867e19e71ec757bd60630cf7ceb14099217ab2b456f845772cf751b4215f3cae247e7b42f89ed74eff17d5d523373f26a0295a9746c269363df9bed324349deac27c411e0c42a1bf23bc224ec49aee69c25b1ee1c1bcd67c51177b63994be324b2fb026353cef78992f69c96a3d419928e9302e13292b4b3d73090387c6a32fecee582f09caf9d77bead35b24bd0ff2c53084ca07476c9980e9b35d3b54f829d8b205a0e4553768e522df67fb345c4b44fef2c1054d951b24e76f3ae6850dc10fd09a517f29a45bd857f9a4c286b5c283ac2a41a0fde48c", 0xe6}, {&(0x7f0000000480)="c758d0de3894bcf95d04ad65977746bfb57e111242bf1fae768ce792174347b2fe57791584", 0x25}], 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="a8000000000000001801000000800000925275fe4cbd07000000725bb91910e8a81ae0ec62492a5953dec30b75c4ef576b08a235c72c0ef033a47fb9a436d5612c9f5285a62c98e4ec3165cb97eb654e637f68513c968fa3da79c583535c80cf272d799e9cddda16378aea169a6c5c996c1706437171311b18d509000000000000003022946651bad1259c1a84b60ad3e6a71d370b641670fa8b14c6e0"], 0xa8}}, {{&(0x7f0000000840)=@l2={0x1f, 0x546, @any, 0x7}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000500)="53fe3eccbfe6056a9e138ef39a626d3c2c420e8084cb3ca66b47a2dc23ed4e6006b0af7ef0975e97d92707bc50", 0x2d}, {&(0x7f00000008c0)="6bef56b770b82e3d048fec14aa5211c9df018f4bd9519f61c2cd7882f13a1c501dcd64c3cf9e93c1ede1e3255568815c505194b1a82de7ef24421f56ce1525f3f88c5d46bc27a26ac4d5ddf2c7f93b63842a4f6ecebb21b33b03272e2a7b5f35674c8f452bde7150de5f821a529f4727712d64f1cd6d44a20380ce6b59c62a401c02c2c6b2cc33c38ad6b98cb4470fe2b7a5be508d922f4dae21a0f2b9852dc3909fb02e2a76fa27d62a7f3bdf73fe0dbf0e6c2e17cf8e3263364e", 0xbb}, {&(0x7f0000000980)="04c9b434126ddb37e0e83b95552c5672336dee4dc2604023d694a771aa2615dba927563d2e6ce0e81151", 0x2a}, {&(0x7f00000009c0)="927b61069c281a9a3e894ec41422551afe01e1fd4125363479863704f7", 0x1d}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000000a00)="6323b80edfcb596147c626ec7f0cf22d2bc0a7a33c70ba0d23c8f7cd10e2ecd28386c28353af0ae4d69a633635c1786864abb9490f58b088377be02e37442442179139cf7a4ebc6c2c640707014af47f54b3a80c535494d15da5cf9ab47cef833c6eb494190a6c2e16271f43d5bed3fd04cd15ab3ffe49ba73b544ec861a7debfd4f530a64d2c8dd46a4648f5c6c5d0cccd9e2236b5f58de08e8e087a0e52baf8ca52664703b63981f43b5d343826db546078538923a502b77", 0xb9}, {&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000000ac0)="589d78a15d93400924395e5b916b104a83c107ef74f393d469e94fdbfd807d68f49f690ea3005479c5df162014586a8d3e03e49fa3ce65daaef3c66ecffa73a00d897eabb1335c5d488ef9eb63bea73f418afd30929910dc85a7f61e4f8933daa1e21011798e39dbfef81cbed5f19e64eb5360b13594baef9de90ca49fd64e78cc4ead9ffa6a40306f00fc2fc64d63e968ac65a6446e1b", 0x97}], 0x8}}], 0x2, 0x4) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x800000000000005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000845}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.082342314s ago: executing program 9 (id=5812): write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setaffinity(0x0, 0x39, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='rpc_call_rpcerror\x00'}, 0x18) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x100000f, 0x8010, 0xffffffffffffffff, 0x14c94000) r1 = syz_open_dev$media(&(0x7f0000000040), 0xa, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66667a4, 0x0, &(0x7f0000000fc0)}) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) 1.42343296s ago: executing program 8 (id=5813): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) fchown(r1, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000900, 0x0, 0x0) 1.226648s ago: executing program 5 (id=5814): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x1510, 0x0, 0x0, 0xffffffff, 0x10c8, 0x1288, 0x1478, 0x1478, 0xffffffff, 0x1478, 0x1478, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1570) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) 590.750118ms ago: executing program 9 (id=5815): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f00000004c0)='./bus\x00', 0x40) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000080)=ANY=[], 0xffd7, 0x0) open(&(0x7f0000000280)='./bus\x00', 0x0, 0xe2) 506.957562ms ago: executing program 8 (id=5816): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r1, &(0x7f0000001600)=""/4103, 0x1007, 0x97) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) syz_emit_ethernet(0xdef, &(0x7f0000002640)=ANY=[@ANYBLOB="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"], 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="380100001a00010000f70000fddbdf25fc02580000f4ffffffffffffff0000000000000000000000000000000000000040080006000300030000800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000003300000000000000000000000000ffffe0000002fffffffffffffffffdffffffffffffff000000000000000001040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00010000000000000000004800010073686132353600"/227], 0x138}}, 0x20000000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) pipe2$9p(0x0, 0x4880) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c00000010000104000000000001000000000000", @ANYRES32=r8, @ANYBLOB="00010000ac0000003c0012800b000100697036746e6c00002c00028005000600a40000000400130006000f000100000014000200bf"], 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 0s ago: executing program 4 (id=5817): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xea, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080003000300000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) kernel console output (not intermixed with test programs): fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=25653 comm="syz.6.5322" daddr=ff02::1 [ 1849.536178][ T5875] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1850.126807][T25659] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1850.231930][T10417] Bluetooth: Error in BCSP hdr checksum [ 1850.277174][T10427] Bluetooth: Error in BCSP hdr checksum [ 1850.459813][T23240] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1850.480991][T10427] Bluetooth: Error in BCSP hdr checksum [ 1850.498490][ T5875] usb 9-1: Using ep0 maxpacket: 8 [ 1850.516533][ T5875] usb 9-1: config 0 has an invalid interface number: 109 but max is 0 [ 1850.530611][ T5875] usb 9-1: config 0 has no interface number 0 [ 1850.652083][T17454] libceph: connect (1)[c::]:6789 error -101 [ 1850.658602][T23240] usb 10-1: Using ep0 maxpacket: 16 [ 1850.667754][T17454] libceph: mon0 (1)[c::]:6789 connect error [ 1850.674363][ T30] audit: type=1400 audit(2000004074.145:2236): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=25663 comm="syz.4.5325" daddr=ff02::1 [ 1850.723231][T23240] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 1851.148525][ T5875] usb 9-1: New USB device found, idVendor=04e2, idProduct=1422, bcdDevice=53.53 [ 1851.158555][ T5875] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.166670][T25670] ceph: No mds server is up or the cluster is laggy [ 1851.178453][ T5875] usb 9-1: Product: syz [ 1851.182722][T23240] usb 10-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1851.193708][ T5875] usb 9-1: Manufacturer: syz [ 1851.198926][ T5875] usb 9-1: SerialNumber: syz [ 1851.201988][T10427] Bluetooth: Error in BCSP hdr checksum [ 1851.203940][T23240] usb 10-1: config 0 has no interface number 0 [ 1851.221401][T23240] usb 10-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1851.231661][ T5875] usb 9-1: config 0 descriptor?? [ 1851.237012][T23240] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.245597][T23240] usb 10-1: Product: syz [ 1851.325517][T25282] Bluetooth: hci6: command 0x1003 tx timeout [ 1851.328628][ T5829] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1851.351192][ T5875] xr_serial 9-1:0.109: More than one union descriptor, skipping ... [ 1851.371938][T23240] usb 10-1: Manufacturer: syz [ 1851.376657][T23240] usb 10-1: SerialNumber: syz [ 1851.411625][T23240] usb 10-1: config 0 descriptor?? [ 1851.416945][T23240] usb 10-1: Found UVC 0.00 device syz (046d:08f3) [ 1851.416978][T23240] usb 10-1: No valid video chain found. [ 1851.454773][T23240] usb 9-1: USB disconnect, device number 21 [ 1851.474858][ T30] audit: type=1400 audit(2000004075.075:2237): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=25675 comm="syz.6.5327" dest=2 [ 1851.573847][ T30] audit: type=1400 audit(2000004075.175:2238): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=25679 comm="syz.5.5329" daddr=fe88::106 dest=20001 [ 1852.080420][T14363] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1852.125247][T25682] lo speed is unknown, defaulting to 1000 [ 1852.232075][T25688] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5328'. [ 1852.245718][T14363] usb 7-1: not running at top speed; connect to a high speed hub [ 1852.264666][T14363] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1852.301964][T14363] usb 7-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 1852.377094][T14363] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1852.434840][T14363] usb 7-1: Product: syz [ 1852.452478][T14363] usb 7-1: Manufacturer: syz [ 1852.477207][T14363] usb 7-1: SerialNumber: syz [ 1852.608045][T25691] siw: device registration error -23 [ 1852.696532][T25693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5332'. [ 1852.749070][T14363] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input260 [ 1852.768734][ T5180] bcm5974 7-1:1.0: could not read from device [ 1852.775819][T25696] vlan2: entered promiscuous mode [ 1852.789159][T25697] FAULT_INJECTION: forcing a failure. [ 1852.789159][T25697] name failslab, interval 1, probability 0, space 0, times 0 [ 1852.802081][T25697] CPU: 1 UID: 0 PID: 25697 Comm: syz.8.5333 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 1852.802105][T25697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1852.802117][T25697] Call Trace: [ 1852.802125][T25697] [ 1852.802134][T25697] dump_stack_lvl+0x189/0x250 [ 1852.802166][T25697] ? __pfx____ratelimit+0x10/0x10 [ 1852.802195][T25697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1852.802223][T25697] ? __pfx__printk+0x10/0x10 [ 1852.802245][T25697] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 1852.802284][T25697] should_fail_ex+0x414/0x560 [ 1852.802315][T25697] should_failslab+0xa8/0x100 [ 1852.802340][T25697] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1852.802359][T25697] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1852.802382][T25697] ? dst_alloc+0x105/0x170 [ 1852.802411][T25697] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1852.802431][T25697] dst_alloc+0x105/0x170 [ 1852.802463][T25697] ip6_pol_route+0xa21/0x1180 [ 1852.802484][T25697] ? ip6_pol_route+0x162/0x1180 [ 1852.802510][T25697] ? __pfx_ip6_pol_route+0x10/0x10 [ 1852.802529][T25697] ? nf_nat_decode_session+0x21/0x260 [ 1852.802558][T25697] ? nf_nat_decode_session+0x21d/0x260 [ 1852.802586][T25697] ? __xfrm_policy_check+0x2b1f/0x3510 [ 1852.802622][T25697] fib6_rule_lookup+0x348/0x6f0 [ 1852.802647][T25697] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1852.802670][T25697] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1852.802695][T25697] ? ip6_route_output_flags+0x2e/0x5d0 [ 1852.802740][T25697] ? ip6_route_output_flags+0x2e/0x5d0 [ 1852.802773][T25697] ? __pfx_ipv6_find_hdr+0x10/0x10 [ 1852.802793][T25697] ? __find_rr_leaf+0x54a/0x6d0 [ 1852.802835][T25697] ip6_route_output_flags+0x364/0x5d0 [ 1852.802862][T25697] ? ip6_route_output_flags+0x2e/0x5d0 [ 1852.802893][T25697] ip6_update_pmtu+0x1f9/0x320 [ 1852.802924][T25697] ? __pfx_ip6_update_pmtu+0x10/0x10 [ 1852.802949][T25697] ? seg6_get_srh+0x331/0x630 [ 1852.802998][T25697] icmpv6_err+0x18d/0x360 [ 1852.803030][T25697] icmpv6_notify+0x38e/0x7e0 [ 1852.803055][T25697] ? __pfx_icmpv6_err+0x10/0x10 [ 1852.803086][T25697] ? __pfx_icmpv6_notify+0x10/0x10 [ 1852.803123][T25697] icmpv6_rcv+0x1352/0x1c80 [ 1852.803151][T25697] ? ipv6_chk_mcast_addr+0x77f/0x860 [ 1852.803185][T25697] ? __pfx_icmpv6_rcv+0x10/0x10 [ 1852.803208][T25697] ip6_protocol_deliver_rcu+0xe0b/0x15c0 [ 1852.803275][T25697] ip6_input_finish+0xde/0x190 [ 1852.803314][T25697] NF_HOOK+0x30c/0x3a0 [ 1852.803349][T25697] ? __pfx_ip6_input_finish+0x10/0x10 [ 1852.803381][T25697] ? NF_HOOK+0x9a/0x3a0 [ 1852.803412][T25697] ? __pfx_NF_HOOK+0x10/0x10 [ 1852.803448][T25697] ? __pfx_ip6_input_finish+0x10/0x10 [ 1852.803496][T25697] ip6_input+0x16a/0x270 [ 1852.803527][T25697] ? ip6_input+0x23/0x270 [ 1852.803563][T25697] ip6_mc_input+0x79a/0xbe0 [ 1852.803604][T25697] ? __pfx_ip6_mc_input+0x10/0x10 [ 1852.803651][T25697] ? skb_dst+0x71/0xd0 [ 1852.803685][T25697] ? ip6_rcv_finish+0x29a/0x2d0 [ 1852.803721][T25697] NF_HOOK+0x30c/0x3a0 [ 1852.803751][T25697] ? skb_orphan+0x4f/0xd0 [ 1852.803785][T25697] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1852.803828][T25697] ? NF_HOOK+0x9a/0x3a0 [ 1852.803857][T25697] ? __pfx_NF_HOOK+0x10/0x10 [ 1852.803892][T25697] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1852.803943][T25697] __netif_receive_skb+0xd3/0x380 [ 1852.803968][T25697] ? netif_receive_skb+0x115/0x790 [ 1852.803998][T25697] netif_receive_skb+0x1cb/0x790 [ 1852.804028][T25697] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1852.804057][T25697] ? __pfx_netif_receive_skb+0x10/0x10 [ 1852.804093][T25697] ? tun_rx_batched+0x160/0x730 [ 1852.804113][T25697] tun_rx_batched+0x1b9/0x730 [ 1852.804130][T25697] ? __lock_acquire+0xab9/0xd20 [ 1852.804160][T25697] ? __pfx_tun_rx_batched+0x10/0x10 [ 1852.804182][T25697] ? tun_get_user+0x2549/0x3ce0 [ 1852.804227][T25697] tun_get_user+0x298e/0x3ce0 [ 1852.804259][T25697] ? tun_get_user+0x693/0x3ce0 [ 1852.804286][T25697] ? tun_get_user+0x2549/0x3ce0 [ 1852.804332][T25697] ? __pfx_tun_get_user+0x10/0x10 [ 1852.804370][T25697] ? __lock_acquire+0xab9/0xd20 [ 1852.804402][T25697] ? ref_tracker_alloc+0x318/0x460 [ 1852.804427][T25697] ? __lock_acquire+0xab9/0xd20 [ 1852.804455][T25697] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1852.804488][T25697] ? tun_get+0x1c/0x2f0 [ 1852.804523][T25697] ? tun_get+0x1c/0x2f0 [ 1852.804552][T25697] ? tun_get+0x1c/0x2f0 [ 1852.804586][T25697] tun_chr_write_iter+0x113/0x200 [ 1852.804625][T25697] vfs_write+0x548/0xa90 [ 1852.804654][T25697] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1852.804684][T25697] ? __pfx_vfs_write+0x10/0x10 [ 1852.804719][T25697] ? __fget_files+0x2a/0x420 [ 1852.804756][T25697] ksys_write+0x145/0x250 [ 1852.804782][T25697] ? __pfx_ksys_write+0x10/0x10 [ 1852.804803][T25697] ? rcu_is_watching+0x15/0xb0 [ 1852.804837][T25697] ? do_syscall_64+0xbe/0x3b0 [ 1852.804861][T25697] do_syscall_64+0xfa/0x3b0 [ 1852.804878][T25697] ? lockdep_hardirqs_on+0x9c/0x150 [ 1852.804907][T25697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.804927][T25697] ? clear_bhb_loop+0x60/0xb0 [ 1852.804951][T25697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.804969][T25697] RIP: 0033:0x7f3523b8d3df [ 1852.804987][T25697] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1852.805005][T25697] RSP: 002b:00007f3524a3a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1852.805026][T25697] RAX: ffffffffffffffda RBX: 00007f3523db5fa0 RCX: 00007f3523b8d3df [ 1852.805040][T25697] RDX: 000000000000007a RSI: 0000200000000180 RDI: 00000000000000c8 [ 1852.805052][T25697] RBP: 00007f3524a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1852.805064][T25697] R10: 000000000000007a R11: 0000000000000293 R12: 0000000000000001 [ 1852.805075][T25697] R13: 0000000000000000 R14: 00007f3523db5fa0 R15: 00007ffc8ca23438 [ 1852.805107][T25697] [ 1853.356234][ C1] vkms_vblank_simulate: vblank timer overrun [ 1853.365958][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.400491][T14363] usb 7-1: USB disconnect, device number 19 [ 1853.498189][T17454] usb 10-1: USB disconnect, device number 12 [ 1854.525564][ T30] audit: type=1400 audit(2000004078.075:2239): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=25702 comm="syz.9.5335" daddr=ff02::1 [ 1854.986346][T25707] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1855.475962][T25721] xt_nat: multiple ranges no longer supported [ 1855.838833][T14363] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1855.940432][T25726] siw: device registration error -23 [ 1856.107369][T14363] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1856.287772][T17454] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1856.892569][T14363] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1856.893816][T25729] FAULT_INJECTION: forcing a failure. [ 1856.893816][T25729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1856.916085][T25729] CPU: 0 UID: 0 PID: 25729 Comm: syz.8.5341 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 1856.916110][T25729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1856.916123][T25729] Call Trace: [ 1856.916132][T25729] [ 1856.916140][T25729] dump_stack_lvl+0x189/0x250 [ 1856.916173][T25729] ? irqentry_exit+0x74/0x90 [ 1856.916203][T25729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1856.916251][T25729] should_fail_ex+0x414/0x560 [ 1856.916281][T25729] _copy_from_user+0x2d/0xb0 [ 1856.916302][T25729] ___bpf_copy_key+0xa5/0x110 [ 1856.916333][T25729] map_update_elem+0x200/0x750 [ 1856.916362][T25729] ? bpf_lsm_bpf+0x9/0x20 [ 1856.916393][T25729] __sys_bpf+0x6a9/0x860 [ 1856.916419][T25729] ? __pfx___sys_bpf+0x10/0x10 [ 1856.916456][T25729] ? ksys_write+0x22a/0x250 [ 1856.916481][T25729] ? __pfx_ksys_write+0x10/0x10 [ 1856.916501][T25729] ? rcu_is_watching+0x15/0xb0 [ 1856.916534][T25729] __x64_sys_bpf+0x7c/0x90 [ 1856.916555][T25729] do_syscall_64+0xfa/0x3b0 [ 1856.916580][T25729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.916598][T25729] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1856.916618][T25729] ? clear_bhb_loop+0x60/0xb0 [ 1856.916640][T25729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.916658][T25729] RIP: 0033:0x7f3523b8e929 [ 1856.916675][T25729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1856.916690][T25729] RSP: 002b:00007f3524a19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1856.916710][T25729] RAX: ffffffffffffffda RBX: 00007f3523db6080 RCX: 00007f3523b8e929 [ 1856.916724][T25729] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000002 [ 1856.916736][T25729] RBP: 00007f3524a19090 R08: 0000000000000000 R09: 0000000000000000 [ 1856.916748][T25729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1856.916758][T25729] R13: 0000000000000000 R14: 00007f3523db6080 R15: 00007ffc8ca23438 [ 1856.916787][T25729] [ 1856.928858][T14363] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1857.511109][ T5902] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1857.847633][ T5902] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1857.930950][ T5902] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1858.000366][ T5902] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1858.072865][ T5902] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1858.130838][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.337612][ T5902] usb 7-1: can't set config #27, error -71 [ 1859.345116][ T5902] usb 7-1: USB disconnect, device number 20 [ 1859.365970][T14363] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1859.374981][T14363] usb 5-1: Manufacturer: syz [ 1859.385153][T14363] usb 5-1: config 0 descriptor?? [ 1859.571873][T25741] kvm: pic: non byte write [ 1859.585303][T14363] usb 5-1: can't set config #0, error -71 [ 1859.591893][T25735] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5345'. [ 1859.603185][T14363] usb 5-1: USB disconnect, device number 58 [ 1859.775084][T25749] netlink: 'syz.8.5348': attribute type 11 has an invalid length. [ 1861.808496][T25777] xt_nat: multiple ranges no longer supported [ 1862.437144][T17454] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1862.597055][ T5902] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1862.601677][T17454] usb 5-1: Using ep0 maxpacket: 16 [ 1862.622145][T25782] overlayfs: missing 'lowerdir' [ 1862.631229][T17454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 7 [ 1862.651130][T17454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 9272, setting to 1024 [ 1862.665060][T17454] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1862.683950][T17454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.715523][T17454] usb 5-1: Product: syz [ 1862.736431][T17454] usb 5-1: Manufacturer: syz [ 1862.742633][T17454] usb 5-1: SerialNumber: syz [ 1862.762090][T17454] usb 5-1: config 0 descriptor?? [ 1862.780529][T17454] hub 5-1:0.0: bad descriptor, ignoring hub [ 1862.782268][ T5902] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1862.786448][T17454] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1862.822586][ T5902] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1862.867630][ T5902] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1862.885894][T17454] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input261 [ 1863.031526][ T5902] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1863.042770][ T5902] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1863.074596][T25790] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5360'. [ 1863.077354][T25792] xt_hashlimit: invalid rate [ 1863.126674][ T5902] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1863.254504][ T5902] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1863.269620][ T5902] usb 10-1: Product: syz [ 1863.273924][ T5902] usb 10-1: Manufacturer: syz [ 1863.289955][ T5902] cdc_wdm 10-1:1.0: skipping garbage [ 1863.290231][T25794] netlink: 136 bytes leftover after parsing attributes in process `syz.5.5361'. [ 1863.306580][ T5902] cdc_wdm 10-1:1.0: skipping garbage [ 1863.307692][T25794] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1863.390524][T25796] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5361'. [ 1863.411998][ T5902] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1863.435257][ T5902] cdc_wdm 10-1:1.0: Unknown control protocol [ 1865.324435][ T5902] usb 10-1: USB disconnect, device number 13 [ 1866.237438][ T30] audit: type=1400 audit(2000004089.377:2240): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=25817 comm="syz.4.5368" dest=2 [ 1867.139320][T25831] overlayfs: missing 'lowerdir' [ 1867.378077][ T5180] usb 5-1: reset high-speed USB device number 59 using dummy_hcd [ 1867.541388][T25839] kvm: pic: non byte write [ 1867.558808][T25835] kvm: pic: non byte write [ 1867.575159][ T5180] usb 5-1: device firmware changed [ 1867.583778][T17454] usb 5-1: USB disconnect, device number 59 [ 1867.610108][T25843] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 0, id = 0 [ 1867.662995][ T30] audit: type=1400 audit(2000004091.267:2241): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=25832 comm="syz.9.5373" daddr=fe80:: [ 1867.691418][ T5902] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1867.754384][T17454] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1867.861834][ T5902] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1867.874025][ T5902] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1867.895528][ T5902] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1867.909058][T17454] usb 5-1: Using ep0 maxpacket: 16 [ 1867.921961][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.933898][T17454] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1867.942161][ T5902] usb 7-1: Product: syz [ 1867.942180][ T5902] usb 7-1: Manufacturer: syz [ 1867.942196][ T5902] usb 7-1: SerialNumber: syz [ 1867.954714][ T5902] usb 7-1: config 0 descriptor?? [ 1867.958169][T17454] usb 5-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1867.980701][ T5902] usb 7-1: selecting invalid altsetting 0 [ 1867.987615][T17454] usb 5-1: config 0 has no interface number 0 [ 1868.016618][T17454] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1868.025679][T17454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.165506][ T30] audit: type=1400 audit(2000004092.527:2242): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=25850 comm="syz.5.5380" dest=2 [ 1869.203869][T17454] usb 5-1: Product: syz [ 1869.443240][T17454] usb 5-1: Manufacturer: syz [ 1869.448193][T17454] usb 5-1: SerialNumber: syz [ 1869.455609][T17454] usb 5-1: config 0 descriptor?? [ 1870.661435][ T9622] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 1870.777270][T25868] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5383'. [ 1870.838801][T17454] usb 5-1: can't set config #0, error -71 [ 1870.851701][T17454] usb 5-1: USB disconnect, device number 60 [ 1870.862407][T25868] netlink: 'syz.8.5383': attribute type 1 has an invalid length. [ 1870.902744][T25868] netlink: 'syz.8.5383': attribute type 2 has an invalid length. [ 1871.025890][ T9622] usb 10-1: config 5 has an invalid interface number: 123 but max is 0 [ 1871.097663][T25871] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1871.116092][ T9622] usb 10-1: config 5 has no interface number 0 [ 1871.288966][ T9622] usb 10-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1871.399549][ T9622] usb 10-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1871.419687][ T9622] usb 10-1: config 5 interface 123 has no altsetting 0 [ 1871.430003][ T9622] usb 10-1: string descriptor 0 read error: -71 [ 1871.442150][ T9622] usb 10-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1871.454321][ T9622] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.474497][ T9622] usb 10-1: can't set config #5, error -71 [ 1871.503541][ T9622] usb 10-1: USB disconnect, device number 14 [ 1871.522181][T25876] overlayfs: missing 'lowerdir' [ 1871.744771][T19666] usb 7-1: USB disconnect, device number 21 [ 1872.187352][T25891] kvm: pic: non byte write [ 1872.224939][T25887] kvm: pic: non byte write [ 1872.345977][ T30] audit: type=1400 audit(2000004095.927:2243): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=25880 comm="syz.6.5387" daddr=ff02::1 [ 1872.543601][T25896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1872.599229][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 1872.608733][T25896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1872.626785][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 1872.653228][T25897] ceph: No mds server is up or the cluster is laggy [ 1872.845912][T19666] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1873.108780][ T9622] libceph: connect (1)[c::]:6789 error -101 [ 1873.128818][ T9622] libceph: mon0 (1)[c::]:6789 connect error [ 1873.440238][ T9622] libceph: connect (1)[c::]:6789 error -101 [ 1873.464251][ T9622] libceph: mon0 (1)[c::]:6789 connect error [ 1873.492300][T25908] ceph: No mds server is up or the cluster is laggy [ 1873.608414][T19666] usb 5-1: Using ep0 maxpacket: 8 [ 1873.732714][T19666] usb 5-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1873.871698][T19666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1873.926718][T19666] usb 5-1: config 0 descriptor?? [ 1873.940153][T19666] pwc: Logitech QuickCam Zoom USB webcam detected. [ 1874.159946][T19666] pwc: Warning: more than 1 configuration available. [ 1874.209767][T19666] pwc: Failed to set LED on/off time (-71) [ 1874.219766][T19666] pwc: send_video_command error -71 [ 1874.224990][T19666] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1874.258240][T19666] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1874.276819][T19666] usb 5-1: USB disconnect, device number 61 [ 1874.633860][T25934] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5400'. [ 1875.137813][T25932] netlink: 'syz.9.5399': attribute type 11 has an invalid length. [ 1875.256710][T14363] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1875.265138][ T5902] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1875.415756][T14363] usb 6-1: Using ep0 maxpacket: 32 [ 1875.486525][T14363] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1875.562112][T14363] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1875.589334][ T5902] usb 9-1: Using ep0 maxpacket: 32 [ 1875.643798][ T5902] usb 9-1: config 0 has an invalid interface number: 16 but max is 0 [ 1875.663630][T14363] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1875.700079][ T5902] usb 9-1: config 0 has no interface number 0 [ 1875.726026][T14363] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.740496][ T5902] usb 9-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1875.780849][T14363] usb 6-1: config 0 descriptor?? [ 1875.790619][ T5902] usb 9-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1875.806001][T14363] hub 6-1:0.0: USB hub found [ 1875.815116][ T5902] usb 9-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 1875.824456][ T5902] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.834742][ T5902] usb 9-1: Product: syz [ 1875.838985][ T5902] usb 9-1: Manufacturer: syz [ 1875.843629][ T5902] usb 9-1: SerialNumber: syz [ 1875.994265][ T5902] usb 9-1: config 0 descriptor?? [ 1876.011116][T25926] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1876.021658][T14363] hub 6-1:0.0: 1 port detected [ 1876.106278][T25926] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1876.211830][ T30] audit: type=1400 audit(2000004099.798:2244): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=25938 comm="syz.4.5402" dest=2 [ 1876.584204][ T5902] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1877.064432][T14363] hub 6-1:0.0: activate --> -90 [ 1877.793831][T25948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1877.830309][T25948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1877.898041][ T30] audit: type=1400 audit(2000004100.898:2245): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=25949 comm="syz.4.5404" dest=2 [ 1877.916880][T25948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1877.926478][T25948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1878.120887][T25956] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5398'. [ 1878.349450][T14363] hub 6-1:0.0: hub_ext_port_status failed (err = -32) [ 1878.615930][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1878.753812][T14363] usb 6-1: USB disconnect, device number 23 [ 1879.357626][ T30] audit: type=1400 audit(2000004102.478:2246): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=25962 comm="syz.9.5406" dest=20004 [ 1879.374307][ T30] audit: type=1400 audit(2000004102.478:2247): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=25962 comm="syz.9.5406" daddr=::ffff:172.20.20.0 [ 1881.988026][T25987] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5412'. [ 1883.317553][ T5902] usb 9-1: USB disconnect, device number 22 [ 1884.080469][T26011] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5418'. [ 1886.123069][T26032] FAULT_INJECTION: forcing a failure. [ 1886.123069][T26032] name failslab, interval 1, probability 0, space 0, times 0 [ 1886.156708][T26032] CPU: 0 UID: 0 PID: 26032 Comm: syz.5.5424 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 1886.156734][T26032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1886.156746][T26032] Call Trace: [ 1886.156754][T26032] [ 1886.156763][T26032] dump_stack_lvl+0x189/0x250 [ 1886.156795][T26032] ? __pfx____ratelimit+0x10/0x10 [ 1886.156825][T26032] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1886.156859][T26032] ? __pfx__printk+0x10/0x10 [ 1886.156885][T26032] ? ref_tracker_alloc+0x318/0x460 [ 1886.156914][T26032] should_fail_ex+0x414/0x560 [ 1886.156945][T26032] should_failslab+0xa8/0x100 [ 1886.156972][T26032] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1886.156995][T26032] ? skb_clone+0x212/0x3a0 [ 1886.157026][T26032] skb_clone+0x212/0x3a0 [ 1886.157055][T26032] __netlink_deliver_tap+0x404/0x850 [ 1886.157091][T26032] ? netlink_deliver_tap+0x2e/0x1b0 [ 1886.157116][T26032] netlink_deliver_tap+0x19c/0x1b0 [ 1886.157139][T26032] netlink_unicast+0x72f/0x8d0 [ 1886.157171][T26032] netlink_sendmsg+0x805/0xb30 [ 1886.157203][T26032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1886.157234][T26032] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1886.157257][T26032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1886.157282][T26032] __sock_sendmsg+0x219/0x270 [ 1886.157304][T26032] ____sys_sendmsg+0x505/0x830 [ 1886.157334][T26032] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1886.157368][T26032] ? import_iovec+0x74/0xa0 [ 1886.157392][T26032] ___sys_sendmsg+0x21f/0x2a0 [ 1886.157419][T26032] ? __pfx____sys_sendmsg+0x10/0x10 [ 1886.157478][T26032] ? __fget_files+0x2a/0x420 [ 1886.157503][T26032] ? __fget_files+0x3a0/0x420 [ 1886.157540][T26032] __x64_sys_sendmsg+0x19b/0x260 [ 1886.157567][T26032] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1886.157601][T26032] ? __pfx_ksys_write+0x10/0x10 [ 1886.157781][T26032] ? rcu_is_watching+0x15/0xb0 [ 1886.157822][T26032] ? do_syscall_64+0xbe/0x3b0 [ 1886.157846][T26032] do_syscall_64+0xfa/0x3b0 [ 1886.157865][T26032] ? lockdep_hardirqs_on+0x9c/0x150 [ 1886.157894][T26032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1886.157914][T26032] ? clear_bhb_loop+0x60/0xb0 [ 1886.157938][T26032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1886.157957][T26032] RIP: 0033:0x7f9d1ff8e929 [ 1886.157976][T26032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1886.157994][T26032] RSP: 002b:00007f9d1ddf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1886.158015][T26032] RAX: ffffffffffffffda RBX: 00007f9d201b5fa0 RCX: 00007f9d1ff8e929 [ 1886.158031][T26032] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1886.158043][T26032] RBP: 00007f9d1ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1886.158056][T26032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1886.158068][T26032] R13: 0000000000000000 R14: 00007f9d201b5fa0 R15: 00007ffdc87b04e8 [ 1886.158099][T26032] [ 1886.481080][T26036] FAULT_INJECTION: forcing a failure. [ 1886.481080][T26036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1886.495437][T26036] CPU: 0 UID: 0 PID: 26036 Comm: syz.4.5427 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 1886.495462][T26036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1886.495475][T26036] Call Trace: [ 1886.495483][T26036] [ 1886.495492][T26036] dump_stack_lvl+0x189/0x250 [ 1886.495524][T26036] ? __pfx____ratelimit+0x10/0x10 [ 1886.495553][T26036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1886.495581][T26036] ? __pfx__printk+0x10/0x10 [ 1886.495600][T26036] ? __might_fault+0xb0/0x130 [ 1886.495633][T26036] should_fail_ex+0x414/0x560 [ 1886.495672][T26036] _copy_from_iter+0x1db/0x16f0 [ 1886.495705][T26036] ? rcu_is_watching+0x15/0xb0 [ 1886.495734][T26036] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1886.495760][T26036] ? __pfx__copy_from_iter+0x10/0x10 [ 1886.495791][T26036] ? __build_skb_around+0x257/0x3e0 [ 1886.495818][T26036] ? netlink_sendmsg+0x642/0xb30 [ 1886.495840][T26036] ? skb_put+0x11b/0x210 [ 1886.495867][T26036] netlink_sendmsg+0x6b2/0xb30 [ 1886.495898][T26036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1886.495930][T26036] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1886.495953][T26036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1886.495978][T26036] __sock_sendmsg+0x219/0x270 [ 1886.496003][T26036] ____sys_sendmsg+0x505/0x830 [ 1886.496034][T26036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1886.496068][T26036] ? import_iovec+0x74/0xa0 [ 1886.496091][T26036] ___sys_sendmsg+0x21f/0x2a0 [ 1886.496119][T26036] ? __pfx____sys_sendmsg+0x10/0x10 [ 1886.496177][T26036] ? __fget_files+0x2a/0x420 [ 1886.496203][T26036] ? __fget_files+0x3a0/0x420 [ 1886.496238][T26036] __x64_sys_sendmsg+0x19b/0x260 [ 1886.496265][T26036] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1886.496299][T26036] ? __pfx_ksys_write+0x10/0x10 [ 1886.496320][T26036] ? rcu_is_watching+0x15/0xb0 [ 1886.496352][T26036] ? do_syscall_64+0xbe/0x3b0 [ 1886.496374][T26036] do_syscall_64+0xfa/0x3b0 [ 1886.496390][T26036] ? lockdep_hardirqs_on+0x9c/0x150 [ 1886.496418][T26036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1886.496437][T26036] ? clear_bhb_loop+0x60/0xb0 [ 1886.496460][T26036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1886.496478][T26036] RIP: 0033:0x7f80a4d8e929 [ 1886.496495][T26036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1886.496511][T26036] RSP: 002b:00007f80a5c5b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1886.496531][T26036] RAX: ffffffffffffffda RBX: 00007f80a4fb5fa0 RCX: 00007f80a4d8e929 [ 1886.496546][T26036] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1886.496558][T26036] RBP: 00007f80a5c5b090 R08: 0000000000000000 R09: 0000000000000000 [ 1886.496570][T26036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1886.496581][T26036] R13: 0000000000000000 R14: 00007f80a4fb5fa0 R15: 00007ffde77332f8 [ 1886.496610][T26036] [ 1886.881520][T26041] FAULT_INJECTION: forcing a failure. [ 1886.881520][T26041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1886.903343][T26041] CPU: 0 UID: 0 PID: 26041 Comm: syz.5.5428 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 1886.903365][T26041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1886.903375][T26041] Call Trace: [ 1886.903381][T26041] [ 1886.903388][T26041] dump_stack_lvl+0x189/0x250 [ 1886.903416][T26041] ? __pfx____ratelimit+0x10/0x10 [ 1886.903441][T26041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1886.903464][T26041] ? __pfx__printk+0x10/0x10 [ 1886.903479][T26041] ? __might_fault+0xb0/0x130 [ 1886.903507][T26041] should_fail_ex+0x414/0x560 [ 1886.903532][T26041] _copy_from_iter+0x1db/0x16f0 [ 1886.903559][T26041] ? rcu_is_watching+0x15/0xb0 [ 1886.903584][T26041] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1886.903606][T26041] ? __pfx__copy_from_iter+0x10/0x10 [ 1886.903638][T26041] ? __build_skb_around+0x257/0x3e0 [ 1886.903660][T26041] ? netlink_sendmsg+0x642/0xb30 [ 1886.903678][T26041] ? skb_put+0x11b/0x210 [ 1886.903700][T26041] netlink_sendmsg+0x6b2/0xb30 [ 1886.903726][T26041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1886.903751][T26041] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1886.903771][T26041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1886.903791][T26041] __sock_sendmsg+0x219/0x270 [ 1886.903808][T26041] ____sys_sendmsg+0x505/0x830 [ 1886.903832][T26041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1886.903860][T26041] ? import_iovec+0x74/0xa0 [ 1886.903878][T26041] ___sys_sendmsg+0x21f/0x2a0 [ 1886.903900][T26041] ? __pfx____sys_sendmsg+0x10/0x10 [ 1886.903953][T26041] ? __fget_files+0x2a/0x420 [ 1886.903971][T26041] ? __fget_files+0x3a0/0x420 [ 1886.903996][T26041] __x64_sys_sendmsg+0x19b/0x260 [ 1886.904015][T26041] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1886.904038][T26041] ? __pfx_ksys_write+0x10/0x10 [ 1886.904056][T26041] ? rcu_is_watching+0x15/0xb0 [ 1886.904078][T26041] ? do_syscall_64+0xbe/0x3b0 [ 1886.904093][T26041] do_syscall_64+0xfa/0x3b0 [ 1886.904104][T26041] ? lockdep_hardirqs_on+0x9c/0x150 [ 1886.904136][T26041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1886.904155][T26041] ? clear_bhb_loop+0x60/0xb0 [ 1886.904178][T26041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1886.904196][T26041] RIP: 0033:0x7f9d1ff8e929 [ 1886.904213][T26041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1886.904230][T26041] RSP: 002b:00007f9d1ddf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1886.904249][T26041] RAX: ffffffffffffffda RBX: 00007f9d201b5fa0 RCX: 00007f9d1ff8e929 [ 1886.904264][T26041] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 1886.904279][T26041] RBP: 00007f9d1ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1886.904291][T26041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1886.904303][T26041] R13: 0000000000000000 R14: 00007f9d201b5fa0 R15: 00007ffdc87b04e8 [ 1886.904331][T26041] [ 1887.254408][T26046] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5429'. [ 1887.451447][T26048] syz_tun: entered allmulticast mode [ 1887.593715][T26052] ieee802154 phy1 wpan1: encryption failed: -22 [ 1887.959420][T26038] syz_tun: left allmulticast mode [ 1888.839460][T26067] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5438'. [ 1888.857280][T26069] overlayfs: overlapping lowerdir path [ 1888.916281][T26070] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1888.968503][ T5902] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1889.798271][ T30] audit: type=1400 audit(2000004113.409:2248): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26073 comm="syz.4.5441" daddr=ff02::1 [ 1889.824192][ T5902] usb 9-1: Using ep0 maxpacket: 32 [ 1889.830792][ T5997] libceph: connect (1)[c::]:6789 error -101 [ 1889.836916][ T5997] libceph: mon0 (1)[c::]:6789 connect error [ 1889.846363][ T5902] usb 9-1: config 1 has an invalid interface number: 242 but max is 0 [ 1889.860756][ T5902] usb 9-1: config 1 has no interface number 0 [ 1889.866951][ T5902] usb 9-1: config 1 interface 242 has no altsetting 0 [ 1890.486903][ T5997] libceph: connect (1)[c::]:6789 error -101 [ 1890.493109][ T5997] libceph: mon0 (1)[c::]:6789 connect error [ 1890.504589][T26078] ceph: No mds server is up or the cluster is laggy [ 1890.513025][ T5902] usb 9-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 1890.522465][ T5902] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.530619][ T5902] usb 9-1: Product: syz [ 1890.534340][T23240] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1890.542639][ T5902] usb 9-1: Manufacturer: syz [ 1890.558262][ T5902] usb 9-1: SerialNumber: syz [ 1890.789001][T26092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5444'. [ 1890.803841][T23240] usb 10-1: Using ep0 maxpacket: 16 [ 1890.826855][T23240] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 1890.859851][T23240] usb 10-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1890.860511][ T5902] aqc111 9-1:1.242: probe with driver aqc111 failed with error -71 [ 1890.929470][T23240] usb 10-1: config 0 has no interface number 0 [ 1890.930929][T26097] ieee802154 phy1 wpan1: encryption failed: -22 [ 1890.968425][ T5902] usb 9-1: USB disconnect, device number 23 [ 1890.986520][T23240] usb 10-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1891.030709][T23240] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.075286][T23240] usb 10-1: Product: syz [ 1891.083544][T23240] usb 10-1: Manufacturer: syz [ 1891.094396][T23240] usb 10-1: SerialNumber: syz [ 1891.164896][T23240] usb 10-1: config 0 descriptor?? [ 1891.196736][T23240] usb 10-1: Found UVC 0.00 device syz (046d:08f3) [ 1891.203207][T23240] usb 10-1: No valid video chain found. [ 1892.526380][T26120] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1892.553828][T26120] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1892.580305][T26121] xt_nfacct: accounting object `syz1' does not exists [ 1892.766051][T26123] netlink: 'syz.5.5452': attribute type 12 has an invalid length. [ 1893.644512][T17454] usb 10-1: USB disconnect, device number 15 [ 1893.814675][ T30] audit: type=1400 audit(2000004117.370:2249): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26131 comm="syz.8.5454" daddr=ff02::1 [ 1894.364749][T26135] ceph: No mds server is up or the cluster is laggy [ 1894.372220][ T5902] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1894.530101][T26151] kvm: pic: non byte write [ 1894.568451][T26151] kvm: pic: non byte write [ 1894.674318][ T5902] usb 7-1: no configurations [ 1894.678975][ T5902] usb 7-1: can't read configurations, error -22 [ 1894.827380][T17454] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1895.494012][T26169] netlink: 'syz.8.5463': attribute type 11 has an invalid length. [ 1895.533243][ T5902] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1896.057681][T17454] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1896.068038][ T9622] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1896.075746][T17454] usb 10-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1896.085445][T17454] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.096563][T17454] usb 10-1: config 0 descriptor?? [ 1896.105820][T17454] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1896.163264][ T5903] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1896.174021][ T5902] usb 7-1: no configurations [ 1896.178641][ T5902] usb 7-1: can't read configurations, error -22 [ 1896.185840][ T5902] usb usb7-port1: attempt power cycle [ 1896.243167][ T9622] usb 5-1: Using ep0 maxpacket: 32 [ 1896.252505][ T9622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1896.263733][ T9622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1896.273893][ T9622] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1896.283287][ T9622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.293692][ T9622] usb 5-1: config 0 descriptor?? [ 1896.300648][ T9622] hub 5-1:0.0: USB hub found [ 1896.315131][ T5903] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1896.343501][ T5903] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1896.362191][ T5903] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 1896.377619][ T5903] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1896.388625][ T5903] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1896.409515][ T5903] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1896.419444][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1896.431109][ T5903] usb 6-1: SerialNumber: syz [ 1896.439782][T26168] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1896.447750][T26168] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1896.504291][ T9622] hub 5-1:0.0: 1 port detected [ 1896.543123][ T5902] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1896.577532][ T5902] usb 7-1: no configurations [ 1896.582166][ T5902] usb 7-1: can't read configurations, error -22 [ 1896.613657][T17454] gspca_spca501: reg write: error -110 [ 1896.622388][T17454] spca501 10-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 1896.631300][T17454] spca501 10-1:0.0: probe with driver spca501 failed with error -22 [ 1896.723069][ T5902] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1896.973384][ T5902] usb 7-1: device not accepting address 25, error -71 [ 1897.007772][ T5902] usb usb7-port1: unable to enumerate USB device [ 1897.224546][ T30] audit: type=1400 audit(2000004120.750:2250): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26173 comm="syz.8.5464" dest=2 [ 1897.565119][ T9622] hub 5-1:0.0: activate --> -90 [ 1897.581081][T26181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.590008][T26181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.794193][ T5903] usb 6-1: USB disconnect, device number 24 [ 1898.382902][ T5902] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1898.553141][ T5902] usb 7-1: device descriptor read/64, error -71 [ 1898.558282][T26184] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5462'. [ 1898.887853][ T9622] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 1899.092998][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1899.517899][ T30] audit: type=1400 audit(2000004122.630:2251): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26185 comm="syz.8.5467" dest=2 [ 1899.652767][ T5902] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1899.925505][ T5902] usb 7-1: device descriptor read/64, error -71 [ 1900.076113][ T5902] usb usb7-port1: attempt power cycle [ 1901.079266][T14363] usb 5-1: USB disconnect, device number 62 [ 1901.281090][T26210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1902.302474][T14363] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1902.477447][T14363] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1902.534282][T14363] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1902.562596][T14363] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1902.685139][ T30] audit: type=1400 audit(2000004126.281:2252): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26223 comm="syz.8.5477" dest=2 [ 1903.016061][ T30] audit: type=1400 audit(2000004126.611:2253): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26228 comm="syz.9.5478" daddr=ff02::1 dest=20004 [ 1903.126577][T14363] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1903.139654][T14363] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1903.148759][T14363] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.159123][T14363] usb 7-1: config 0 descriptor?? [ 1903.182326][ T5902] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1903.442308][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 1903.460880][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1903.744776][ T5903] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1903.758753][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1903.861597][T26221] bond0: Unable to set down delay as MII monitoring is disabled [ 1903.870028][ T5902] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1903.884948][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.896292][T26221] overlay: ./bus is not a directory [ 1903.940786][ T5902] usb 5-1: config 0 descriptor?? [ 1903.955110][ T5902] hub 5-1:0.0: USB hub found [ 1903.993627][T14363] usbhid 7-1:0.0: can't add hid device: -71 [ 1903.999744][T14363] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1904.011152][T14363] usb 7-1: USB disconnect, device number 29 [ 1904.018519][ T5903] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1904.027356][ T5903] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1904.041117][ T5903] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1904.052735][ T5903] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1904.064728][ T5903] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1904.069895][ T9622] usb 10-1: USB disconnect, device number 16 [ 1904.078756][ T5903] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1904.097605][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1904.106012][ T5903] usb 6-1: Product: syz [ 1904.110218][ T5903] usb 6-1: Manufacturer: syz [ 1904.121296][ T5903] cdc_wdm 6-1:1.0: skipping garbage [ 1904.126719][ T5903] cdc_wdm 6-1:1.0: skipping garbage [ 1904.140609][ T5903] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1904.147623][ T5903] cdc_wdm 6-1:1.0: Unknown control protocol [ 1904.162556][ T5902] hub 5-1:0.0: 1 port detected [ 1904.837125][ T9622] usb 6-1: USB disconnect, device number 25 [ 1905.262667][T14363] hub 5-1:0.0: activate --> -90 [ 1905.562165][ T5902] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1905.647417][T26229] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5479'. [ 1906.112464][ T5902] usb 7-1: Using ep0 maxpacket: 32 [ 1906.169574][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1906.246198][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1906.259219][ T5875] usb 5-1: USB disconnect, device number 63 [ 1906.261962][T14363] usb 5-1-port1: config error [ 1906.320761][ T5902] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1906.346100][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.366342][ T5902] usb 7-1: config 0 descriptor?? [ 1906.375465][ T5902] hub 7-1:0.0: USB hub found [ 1906.406759][T26261] FAULT_INJECTION: forcing a failure. [ 1906.406759][T26261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1906.429547][T26261] CPU: 1 UID: 0 PID: 26261 Comm: syz.8.5488 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 1906.429573][T26261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1906.429585][T26261] Call Trace: [ 1906.429593][T26261] [ 1906.429605][T26261] dump_stack_lvl+0x189/0x250 [ 1906.429639][T26261] ? __pfx____ratelimit+0x10/0x10 [ 1906.429670][T26261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1906.429698][T26261] ? __pfx__printk+0x10/0x10 [ 1906.429718][T26261] ? __might_fault+0xb0/0x130 [ 1906.429753][T26261] should_fail_ex+0x414/0x560 [ 1906.429783][T26261] _copy_from_user+0x2d/0xb0 [ 1906.429805][T26261] kstrtouint_from_user+0xc4/0x170 [ 1906.429836][T26261] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1906.429880][T26261] proc_fail_nth_write+0x88/0x240 [ 1906.429909][T26261] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1906.429942][T26261] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1906.429971][T26261] vfs_write+0x27b/0xa90 [ 1906.430002][T26261] ? __pfx_vfs_write+0x10/0x10 [ 1906.430027][T26261] ? __fget_files+0x2a/0x420 [ 1906.430057][T26261] ? __fget_files+0x3a0/0x420 [ 1906.430081][T26261] ? __fget_files+0x2a/0x420 [ 1906.430116][T26261] ksys_write+0x145/0x250 [ 1906.430141][T26261] ? __pfx_ksys_write+0x10/0x10 [ 1906.430165][T26261] ? __secure_computing+0xe2/0x2a0 [ 1906.430201][T26261] do_syscall_64+0xfa/0x3b0 [ 1906.430219][T26261] ? lockdep_hardirqs_on+0x9c/0x150 [ 1906.430248][T26261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.430267][T26261] ? clear_bhb_loop+0x60/0xb0 [ 1906.430289][T26261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.430308][T26261] RIP: 0033:0x7f3523b8d3df [ 1906.430325][T26261] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1906.430342][T26261] RSP: 002b:00007f3524a3a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1906.430363][T26261] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3523b8d3df [ 1906.430376][T26261] RDX: 0000000000000001 RSI: 00007f3524a3a0a0 RDI: 0000000000000004 [ 1906.430388][T26261] RBP: 00007f3524a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1906.430400][T26261] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1906.430419][T26261] R13: 0000000000000000 R14: 00007f3523db5fa0 R15: 00007ffc8ca23438 [ 1906.430448][T26261] [ 1906.794606][ T5902] hub 7-1:0.0: 1 port detected [ 1906.827906][T26267] kvm: pic: non byte write [ 1906.835637][T26264] kvm: pic: non byte write [ 1906.952003][ T9622] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1907.511868][ T9622] usb 6-1: Using ep0 maxpacket: 32 [ 1907.694895][ T30] audit: type=1400 audit(2000004131.101:2254): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26271 comm="syz.9.5491" daddr=ff02::1 [ 1907.715212][ T9622] usb 6-1: config 0 has an invalid interface number: 202 but max is 0 [ 1907.717212][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 1907.728856][ T9622] usb 6-1: config 0 has no interface number 0 [ 1907.736075][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 1907.764783][ T9622] usb 6-1: config 0 interface 202 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1907.784663][ T9622] usb 6-1: New USB device found, idVendor=08ca, idProduct=0103, bcdDevice=bf.1b [ 1907.792533][ T5903] hub 7-1:0.0: activate --> -90 [ 1907.811549][ T9622] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.898586][T26275] ceph: No mds server is up or the cluster is laggy [ 1907.924939][ T9622] usb 6-1: Product: syz [ 1907.940532][ T9622] usb 6-1: Manufacturer: syz [ 1907.955861][ T9622] usb 6-1: SerialNumber: syz [ 1908.060179][ T9622] usb 6-1: config 0 descriptor?? [ 1908.470867][ T9622] gspca_main: spca500-2.14.0 probing 08ca:0103 [ 1908.492624][T26293] FAULT_INJECTION: forcing a failure. [ 1908.492624][T26293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1908.509598][ T9622] usb 6-1: USB disconnect, device number 26 [ 1908.515766][T26293] CPU: 0 UID: 0 PID: 26293 Comm: syz.9.5496 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 1908.515792][T26293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1908.515804][T26293] Call Trace: [ 1908.515812][T26293] [ 1908.515821][T26293] dump_stack_lvl+0x189/0x250 [ 1908.515855][T26293] ? __pfx____ratelimit+0x10/0x10 [ 1908.515886][T26293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1908.515915][T26293] ? __pfx__printk+0x10/0x10 [ 1908.515935][T26293] ? __might_fault+0xb0/0x130 [ 1908.515971][T26293] should_fail_ex+0x414/0x560 [ 1908.516002][T26293] _copy_from_iter+0x1db/0x16f0 [ 1908.516043][T26293] ? __pfx__copy_from_iter+0x10/0x10 [ 1908.516073][T26293] ? file_tty_write+0x2a8/0x990 [ 1908.516093][T26293] ? file_tty_write+0x2e8/0x990 [ 1908.516110][T26293] ? rcu_is_watching+0x15/0xb0 [ 1908.516140][T26293] ? kfree+0x4d/0x440 [ 1908.516167][T26293] file_tty_write+0x486/0x990 [ 1908.516194][T26293] vfs_write+0x548/0xa90 [ 1908.516223][T26293] ? __pfx_tty_write+0x10/0x10 [ 1908.516241][T26293] ? __pfx_vfs_write+0x10/0x10 [ 1908.516274][T26293] ? __fget_files+0x2a/0x420 [ 1908.516315][T26293] ksys_write+0x145/0x250 [ 1908.516340][T26293] ? __pfx_ksys_write+0x10/0x10 [ 1908.516360][T26293] ? rcu_is_watching+0x15/0xb0 [ 1908.516393][T26293] ? do_syscall_64+0xbe/0x3b0 [ 1908.516417][T26293] do_syscall_64+0xfa/0x3b0 [ 1908.516433][T26293] ? lockdep_hardirqs_on+0x9c/0x150 [ 1908.516462][T26293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1908.516480][T26293] ? clear_bhb_loop+0x60/0xb0 [ 1908.516504][T26293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1908.516521][T26293] RIP: 0033:0x7fb24478e929 [ 1908.516539][T26293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1908.516556][T26293] RSP: 002b:00007fb2455b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1908.516576][T26293] RAX: ffffffffffffffda RBX: 00007fb2449b5fa0 RCX: 00007fb24478e929 [ 1908.516590][T26293] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000004 [ 1908.516602][T26293] RBP: 00007fb2455b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1908.516614][T26293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1908.516625][T26293] R13: 0000000000000000 R14: 00007fb2449b5fa0 R15: 00007ffe6b88c048 [ 1908.516656][T26293] [ 1908.537749][T26295] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5485'. [ 1908.723877][ T5902] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1908.799800][T26300] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5498'. [ 1908.814041][T26300] syz_tun: entered allmulticast mode [ 1908.884797][ T5902] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1909.100638][ T5903] usb 7-1-port1: config error [ 1909.132842][ T5902] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1909.146404][ T5902] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1909.156404][ T5903] hub 7-1:0.0: hub_ext_port_status failed (err = -32) [ 1909.165822][ T5903] usb 7-1-port1: cannot disable (err = -32) [ 1909.172687][ T5902] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1909.184560][ T5902] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1909.199015][ T5902] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1909.208874][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1909.216924][ T5902] usb 5-1: Product: syz [ 1909.221270][ T5902] usb 5-1: Manufacturer: syz [ 1909.238718][ T5902] cdc_wdm 5-1:1.0: skipping garbage [ 1909.244179][ T5902] cdc_wdm 5-1:1.0: skipping garbage [ 1909.250755][ T5902] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1909.256895][ T5902] cdc_wdm 5-1:1.0: Unknown control protocol [ 1909.341906][ T5903] usb 7-1: USB disconnect, device number 30 [ 1909.529487][T26294] syz_tun: left allmulticast mode [ 1909.771631][ T9622] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1910.248514][T17454] usb 5-1: USB disconnect, device number 64 [ 1910.456592][ T9622] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1910.486238][ T9622] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1910.512110][ T9622] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1910.535774][ T9622] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1910.543223][ T5903] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1910.558411][ T9622] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1910.579566][ T9622] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1911.333144][ T5903] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1911.344566][ T5903] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1911.354360][ T5903] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1911.404357][ T5903] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1911.411245][ T9622] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1911.542479][ T5903] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1911.590509][ T5903] usb 9-1: Product: syz [ 1911.847573][T23855] libceph: connect (1)[c::]:6789 error -101 [ 1911.967914][ T5903] usb 9-1: Manufacturer: syz [ 1912.051349][T23855] libceph: mon0 (1)[c::]:6789 connect error [ 1912.057548][ T30] audit: type=1400 audit(2000004135.422:2255): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26321 comm="syz.4.5505" daddr=ff02::1 [ 1912.247887][ T5903] usb 9-1: SerialNumber: syz [ 1912.290371][T23855] usb 10-1: USB disconnect, device number 17 [ 1912.311569][ T9622] libceph: connect (1)[c::]:6789 error -101 [ 1912.317625][ T9622] libceph: mon0 (1)[c::]:6789 connect error [ 1912.431535][T26326] ceph: No mds server is up or the cluster is laggy [ 1912.561470][ T5903] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1912.826106][T26340] netlink: 'syz.6.5509': attribute type 2 has an invalid length. [ 1912.834167][T26340] netlink: 1184 bytes leftover after parsing attributes in process `syz.6.5509'. [ 1912.857017][T26338] kvm: pic: non byte write [ 1913.514814][T26343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1913.542599][T26343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1913.686782][T26352] FAULT_INJECTION: forcing a failure. [ 1913.686782][T26352] name failslab, interval 1, probability 0, space 0, times 0 [ 1913.702520][T26352] CPU: 1 UID: 0 PID: 26352 Comm: syz.6.5513 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 1913.702547][T26352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1913.702560][T26352] Call Trace: [ 1913.702569][T26352] [ 1913.702578][T26352] dump_stack_lvl+0x189/0x250 [ 1913.702614][T26352] ? __pfx____ratelimit+0x10/0x10 [ 1913.702646][T26352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1913.702676][T26352] ? __pfx__printk+0x10/0x10 [ 1913.702700][T26352] ? __pfx___might_resched+0x10/0x10 [ 1913.702759][T26352] ? fs_reclaim_acquire+0x7d/0x100 [ 1913.702798][T26352] should_fail_ex+0x414/0x560 [ 1913.702834][T26352] should_failslab+0xa8/0x100 [ 1913.702866][T26352] __kmalloc_noprof+0xcb/0x4f0 [ 1913.702894][T26352] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1913.702936][T26352] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1913.702979][T26352] genl_family_rcv_msg_doit+0xb8/0x300 [ 1913.703023][T26352] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1913.703062][T26352] ? rcu_is_watching+0x15/0xb0 [ 1913.703096][T26352] ? cap_capable+0x11f/0x460 [ 1913.703126][T26352] ? safesetid_security_capable+0xa9/0x1a0 [ 1913.703158][T26352] ? bpf_lsm_capable+0x9/0x20 [ 1913.703178][T26352] ? security_capable+0x7e/0x2e0 [ 1913.703220][T26352] genl_rcv_msg+0x60e/0x790 [ 1913.703267][T26352] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1913.703300][T26352] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1913.703331][T26352] ? __pfx_nl80211_set_station+0x10/0x10 [ 1913.703351][T26352] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1913.703399][T26352] netlink_rcv_skb+0x208/0x470 [ 1913.703428][T26352] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1913.703464][T26352] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1913.703511][T26352] ? down_read+0x1ad/0x2e0 [ 1913.703539][T26352] genl_rcv+0x28/0x40 [ 1913.703570][T26352] netlink_unicast+0x75b/0x8d0 [ 1913.703607][T26352] netlink_sendmsg+0x805/0xb30 [ 1913.703646][T26352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1913.703684][T26352] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1913.703711][T26352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1913.703741][T26352] __sock_sendmsg+0x219/0x270 [ 1913.703766][T26352] ____sys_sendmsg+0x505/0x830 [ 1913.703803][T26352] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1913.703855][T26352] ? import_iovec+0x74/0xa0 [ 1913.703882][T26352] ___sys_sendmsg+0x21f/0x2a0 [ 1913.703913][T26352] ? __pfx____sys_sendmsg+0x10/0x10 [ 1913.703999][T26352] ? __fget_files+0x2a/0x420 [ 1913.704026][T26352] ? __fget_files+0x3a0/0x420 [ 1913.704063][T26352] __x64_sys_sendmsg+0x19b/0x260 [ 1913.704091][T26352] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1913.704127][T26352] ? __pfx_ksys_write+0x10/0x10 [ 1913.704147][T26352] ? rcu_is_watching+0x15/0xb0 [ 1913.704180][T26352] ? do_syscall_64+0xbe/0x3b0 [ 1913.704203][T26352] do_syscall_64+0xfa/0x3b0 [ 1913.704220][T26352] ? lockdep_hardirqs_on+0x9c/0x150 [ 1913.704248][T26352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1913.704274][T26352] ? clear_bhb_loop+0x60/0xb0 [ 1913.704297][T26352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1913.704315][T26352] RIP: 0033:0x7f691c98e929 [ 1913.704333][T26352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1913.704350][T26352] RSP: 002b:00007f691d75b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1913.704370][T26352] RAX: ffffffffffffffda RBX: 00007f691cbb5fa0 RCX: 00007f691c98e929 [ 1913.704384][T26352] RDX: 0000000000000000 RSI: 0000200000000c40 RDI: 0000000000000004 [ 1913.704395][T26352] RBP: 00007f691d75b090 R08: 0000000000000000 R09: 0000000000000000 [ 1913.704407][T26352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1913.704419][T26352] R13: 0000000000000000 R14: 00007f691cbb5fa0 R15: 00007ffd4f8d3b28 [ 1913.704448][T26352] [ 1914.460292][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.601148][T26360] netlink: 'syz.6.5515': attribute type 11 has an invalid length. [ 1915.678716][ T5902] usb 9-1: USB disconnect, device number 24 [ 1915.726176][ T5902] usblp0: removed [ 1915.943659][T26368] vlan1: entered promiscuous mode [ 1916.274635][T26371] 9pnet_fd: Insufficient options for proto=fd [ 1916.506452][T26376] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1916.526371][T26380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5522'. [ 1916.730882][ T5875] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 1916.970139][T26389] kvm: pic: non byte write [ 1917.024665][ T5875] usb 6-1: config index 0 descriptor too short (expected 69, got 36) [ 1917.032991][ T5875] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1917.043851][ T5875] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 1917.055613][ T5875] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1917.065458][ T5875] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1917.083826][ T5875] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 1917.093430][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.101672][ T5875] usb 6-1: Product: syz [ 1917.105913][ T5875] usb 6-1: Manufacturer: syz [ 1917.110556][ T5875] usb 6-1: SerialNumber: syz [ 1917.117347][ T5875] usb 6-1: config 0 descriptor?? [ 1917.125120][ T5875] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1917.140731][ T5903] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1917.150763][T17454] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1917.290786][ T5903] usb 10-1: Using ep0 maxpacket: 32 [ 1917.301479][ T5903] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1917.312807][ T5903] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1917.320746][T17454] usb 7-1: Using ep0 maxpacket: 32 [ 1917.322779][ T5903] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1917.339914][T17454] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1917.342001][ T5903] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.351367][T17454] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1917.366486][ T5903] usb 10-1: config 0 descriptor?? [ 1917.368934][T17454] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1917.381799][ T5903] hub 10-1:0.0: USB hub found [ 1917.383232][T17454] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.398819][T17454] usb 7-1: config 0 descriptor?? [ 1917.408309][T17454] hub 7-1:0.0: USB hub found [ 1917.610055][ T5903] hub 10-1:0.0: 1 port detected [ 1917.624590][T17454] hub 7-1:0.0: 1 port detected [ 1917.739289][T26399] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5529'. [ 1917.879751][T26401] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5530'. [ 1917.892179][T26401] netlink: 'syz.8.5530': attribute type 1 has an invalid length. [ 1917.903390][T26401] netlink: 'syz.8.5530': attribute type 2 has an invalid length. [ 1917.967964][ T5875] input: gspca_pac7302 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input262 [ 1918.169340][T14363] usb 6-1: USB disconnect, device number 27 [ 1918.207293][ T5903] hub 10-1:0.0: activate --> -90 [ 1919.185291][T26419] netlink: 'syz.8.5535': attribute type 4 has an invalid length. [ 1919.763897][ T5903] usb 10-1-port1: config error [ 1919.782256][ T5903] hub 10-1:0.0: hub_ext_port_status failed (err = -32) [ 1919.824731][ T5903] usb 10-1-port1: cannot disable (err = -32) [ 1920.178273][T17454] hub 7-1:0.0: activate --> -90 [ 1920.219210][T17454] hub 7-1:0.0: hub_ext_port_status failed (err = -32) [ 1920.335053][T26423] FAULT_INJECTION: forcing a failure. [ 1920.335053][T26423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1920.370408][T26423] CPU: 0 UID: 0 PID: 26423 Comm: syz.8.5538 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 1920.370436][T26423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1920.370448][T26423] Call Trace: [ 1920.370456][T26423] [ 1920.370465][T26423] dump_stack_lvl+0x189/0x250 [ 1920.370498][T26423] ? __pfx____ratelimit+0x10/0x10 [ 1920.370526][T26423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1920.370554][T26423] ? __pfx__printk+0x10/0x10 [ 1920.370584][T26423] should_fail_ex+0x414/0x560 [ 1920.370615][T26423] _copy_to_user+0x31/0xb0 [ 1920.370637][T26423] simple_read_from_buffer+0xe1/0x170 [ 1920.370667][T26423] proc_fail_nth_read+0x1df/0x250 [ 1920.370698][T26423] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1920.370729][T26423] ? rw_verify_area+0x258/0x650 [ 1920.370750][T26423] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1920.370779][T26423] vfs_read+0x1fd/0x980 [ 1920.370806][T26423] ? __pfx___mutex_lock+0x10/0x10 [ 1920.370825][T26423] ? __pfx_vfs_read+0x10/0x10 [ 1920.370855][T26423] ? __fget_files+0x2a/0x420 [ 1920.370885][T26423] ? __fget_files+0x3a0/0x420 [ 1920.370910][T26423] ? __fget_files+0x2a/0x420 [ 1920.370944][T26423] ksys_read+0x145/0x250 [ 1920.370969][T26423] ? __pfx_ksys_read+0x10/0x10 [ 1920.370989][T26423] ? fput+0xa0/0xd0 [ 1920.371010][T26423] ? do_syscall_64+0xbe/0x3b0 [ 1920.371032][T26423] do_syscall_64+0xfa/0x3b0 [ 1920.371049][T26423] ? lockdep_hardirqs_on+0x9c/0x150 [ 1920.371077][T26423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1920.371096][T26423] ? clear_bhb_loop+0x60/0xb0 [ 1920.371119][T26423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1920.371138][T26423] RIP: 0033:0x7f3523b8d33c [ 1920.371155][T26423] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1920.371172][T26423] RSP: 002b:00007f3524a3a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1920.371192][T26423] RAX: ffffffffffffffda RBX: 00007f3523db5fa0 RCX: 00007f3523b8d33c [ 1920.371206][T26423] RDX: 000000000000000f RSI: 00007f3524a3a0a0 RDI: 0000000000000004 [ 1920.371218][T26423] RBP: 00007f3524a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1920.371230][T26423] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1920.371242][T26423] R13: 0000000000000000 R14: 00007f3523db5fa0 R15: 00007ffc8ca23438 [ 1920.371272][T26423] [ 1920.774327][T26416] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5525'. [ 1920.816253][T26418] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5527'. [ 1921.031947][ T5997] usb 10-1: USB disconnect, device number 18 [ 1921.141718][T26429] netlink: 'syz.4.5537': attribute type 11 has an invalid length. [ 1921.203100][T26435] Bluetooth: Error in BCSP hdr checksum [ 1921.222801][T26442] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5540'. [ 1921.251068][T17454] usb 7-1: USB disconnect, device number 31 [ 1922.636367][T26450] openvswitch: netlink: Message has 2 unknown bytes. [ 1922.643381][T26450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1922.679346][T26465] netlink: 'syz.6.5547': attribute type 2 has an invalid length. [ 1922.687201][T26465] netlink: 1184 bytes leftover after parsing attributes in process `syz.6.5547'. [ 1923.250185][T25282] Bluetooth: hci6: command 0x1003 tx timeout [ 1923.330019][ T5875] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1923.366659][ T5829] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1923.519913][ T5875] usb 6-1: Using ep0 maxpacket: 32 [ 1923.530853][ T5875] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1923.540231][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.846398][ T5875] usb 6-1: config 0 descriptor?? [ 1924.144239][ T5875] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1924.206319][T26478] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5551'. [ 1924.220386][ T5902] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1924.380080][ T5902] usb 7-1: Using ep0 maxpacket: 16 [ 1924.413456][T26481] netlink: 'syz.4.5552': attribute type 11 has an invalid length. [ 1924.417422][ T5902] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1924.500366][ T5902] usb 7-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1924.585057][ T5902] usb 7-1: config 0 has no interface number 0 [ 1924.708811][ T5902] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1924.791058][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.807956][ T5902] usb 7-1: Product: syz [ 1924.825687][ T5902] usb 7-1: Manufacturer: syz [ 1924.830510][ T5902] usb 7-1: SerialNumber: syz [ 1924.844658][ T5902] usb 7-1: config 0 descriptor?? [ 1924.990458][ T5875] gspca_sq930x: ucbus_write failed -110 [ 1925.016839][ T5875] sq930x 6-1:0.0: probe with driver sq930x failed with error -110 [ 1925.034271][T26462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5546'. [ 1925.315118][ T5902] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 1925.332035][T26462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5546'. [ 1925.361467][ T5902] usb 7-1: No valid video chain found. [ 1925.373440][T26461] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5546'. [ 1925.439932][T26461] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5546'. [ 1925.808888][T26461] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5546'. [ 1925.859468][ T5902] usb 6-1: USB disconnect, device number 28 [ 1925.920425][T26494] FAULT_INJECTION: forcing a failure. [ 1925.920425][T26494] name failslab, interval 1, probability 0, space 0, times 0 [ 1925.949661][T26494] CPU: 0 UID: 0 PID: 26494 Comm: syz.8.5555 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 1925.949689][T26494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1925.949701][T26494] Call Trace: [ 1925.949709][T26494] [ 1925.949718][T26494] dump_stack_lvl+0x189/0x250 [ 1925.949751][T26494] ? __pfx____ratelimit+0x10/0x10 [ 1925.949780][T26494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1925.949809][T26494] ? __pfx__printk+0x10/0x10 [ 1925.949833][T26494] ? __pfx___might_resched+0x10/0x10 [ 1925.949860][T26494] ? fs_reclaim_acquire+0x7d/0x100 [ 1925.949892][T26494] should_fail_ex+0x414/0x560 [ 1925.949922][T26494] should_failslab+0xa8/0x100 [ 1925.949949][T26494] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1925.949972][T26494] ? __pmd_alloc+0xc6/0x3b0 [ 1925.949998][T26494] __pmd_alloc+0xc6/0x3b0 [ 1925.950025][T26494] __handle_mm_fault+0xa63/0x5620 [ 1925.950054][T26494] ? mt_find+0x46f/0x5f0 [ 1925.950080][T26494] ? __pfx___handle_mm_fault+0x10/0x10 [ 1925.950120][T26494] ? find_vma+0xe7/0x160 [ 1925.950141][T26494] ? __pfx_find_vma+0x10/0x10 [ 1925.950168][T26494] handle_mm_fault+0x2d5/0x7f0 [ 1925.950201][T26494] do_user_addr_fault+0x764/0x1390 [ 1925.950241][T26494] exc_page_fault+0x76/0xf0 [ 1925.950267][T26494] ? __might_fault+0xb0/0x130 [ 1925.950301][T26494] asm_exc_page_fault+0x26/0x30 [ 1925.950319][T26494] RIP: 0010:__put_user_4+0xd/0x20 [ 1925.950336][T26494] Code: 66 89 01 31 c9 0f 01 ca e9 c0 31 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 97 31 03 00 90 90 90 90 90 90 90 90 90 90 [ 1925.950353][T26494] RSP: 0018:ffffc9000db2f860 EFLAGS: 00050206 [ 1925.950370][T26494] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000000c0 [ 1925.950383][T26494] RDX: 0000000000000000 RSI: ffffffff8db59b31 RDI: ffffffff8be1af00 [ 1925.950396][T26494] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff820a30e0 [ 1925.950408][T26494] R10: dffffc0000000000 R11: fffffbfff1f3fd3f R12: ffff8880119f00e8 [ 1925.950423][T26494] R13: dffffc0000000000 R14: ffff8880119f00e8 R15: ffff8880119f0100 [ 1925.950444][T26494] ? __might_fault+0xb0/0x130 [ 1925.950474][T26494] packet_ioctl+0x2ff/0x350 [ 1925.950505][T26494] sock_do_ioctl+0xd9/0x300 [ 1925.950537][T26494] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1925.950574][T26494] ? kasan_save_track+0x4f/0x80 [ 1925.950594][T26494] ? kasan_save_track+0x3e/0x80 [ 1925.950612][T26494] ? kasan_save_free_info+0x46/0x50 [ 1925.950627][T26494] ? __kasan_slab_free+0x62/0x70 [ 1925.950653][T26494] sock_ioctl+0x576/0x790 [ 1925.950682][T26494] ? __pfx_sock_ioctl+0x10/0x10 [ 1925.950724][T26494] ? __pfx_sock_ioctl+0x10/0x10 [ 1925.950750][T26494] do_vfs_ioctl+0x1256/0x1990 [ 1925.950775][T26494] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1925.950803][T26494] ? kasan_quarantine_put+0xdd/0x220 [ 1925.950835][T26494] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1925.950861][T26494] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1925.950886][T26494] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 1925.950909][T26494] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1925.950934][T26494] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1925.950976][T26494] ? __lock_acquire+0xab9/0xd20 [ 1925.951005][T26494] ? __asan_memset+0x22/0x50 [ 1925.951024][T26494] ? smack_file_ioctl+0x24a/0x340 [ 1925.951048][T26494] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1925.951082][T26494] ? __fget_files+0x2a/0x420 [ 1925.951107][T26494] ? __fget_files+0x3a0/0x420 [ 1925.951131][T26494] ? __fget_files+0x2a/0x420 [ 1925.951161][T26494] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1925.951191][T26494] __se_sys_ioctl+0x82/0x170 [ 1925.951215][T26494] do_syscall_64+0xfa/0x3b0 [ 1925.951232][T26494] ? lockdep_hardirqs_on+0x9c/0x150 [ 1925.951259][T26494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1925.951278][T26494] ? clear_bhb_loop+0x60/0xb0 [ 1925.951318][T26494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1925.951336][T26494] RIP: 0033:0x7f3523b8e929 [ 1925.951352][T26494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1925.951369][T26494] RSP: 002b:00007f3524a3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1925.951388][T26494] RAX: ffffffffffffffda RBX: 00007f3523db5fa0 RCX: 00007f3523b8e929 [ 1925.951401][T26494] RDX: 00002000000000c0 RSI: 000000000000541b RDI: 0000000000000004 [ 1925.951414][T26494] RBP: 00007f3524a3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1925.951426][T26494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1925.951438][T26494] R13: 0000000000000000 R14: 00007f3523db5fa0 R15: 00007ffc8ca23438 [ 1925.951468][T26494] [ 1926.490609][T26497] kvm: pic: non byte write [ 1926.533790][ T30] audit: type=1400 audit(2000004150.144:2256): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26482 comm="syz.9.5553" daddr=ff02::1 [ 1926.568991][T14363] libceph: connect (1)[c::]:6789 error -101 [ 1926.575549][T14363] libceph: mon0 (1)[c::]:6789 connect error [ 1926.840462][T14363] libceph: connect (1)[c::]:6789 error -101 [ 1926.864670][T14363] libceph: mon0 (1)[c::]:6789 connect error [ 1926.880377][T26500] ceph: No mds server is up or the cluster is laggy [ 1927.028424][T23855] usb 7-1: USB disconnect, device number 32 [ 1928.260564][T26526] xt_nat: multiple ranges no longer supported [ 1929.511097][ T5997] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1929.691059][ T5997] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1929.719319][ T5997] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1929.749175][ T5997] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1929.768569][ T5997] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1929.809359][ T30] audit: type=1400 audit(2000004153.404:2257): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26534 comm="syz.6.5565" daddr=fe80:: [ 1930.571749][T26546] netlink: 'syz.5.5569': attribute type 11 has an invalid length. [ 1930.649625][ T5997] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1930.674147][ T5997] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1930.693759][ T5997] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1930.714063][ T5997] usb 9-1: Product: syz [ 1930.718327][ T5997] usb 9-1: Manufacturer: syz [ 1930.735354][T26549] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5568'. [ 1930.755438][ T5997] cdc_wdm 9-1:1.0: skipping garbage [ 1930.769699][ T5902] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1930.777372][ T5997] cdc_wdm 9-1:1.0: skipping garbage [ 1930.921705][ T5997] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1930.937904][ T5997] cdc_wdm 9-1:1.0: Unknown control protocol [ 1931.097043][T26553] input: syz1 as /devices/virtual/input/input264 [ 1931.624636][ T5902] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1931.639549][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1931.654420][ T5902] usb 7-1: config 0 descriptor?? [ 1932.015576][T23855] usb 9-1: USB disconnect, device number 25 [ 1933.137182][T26570] netlink: 'syz.4.5574': attribute type 11 has an invalid length. [ 1933.895357][T26577] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5577'. [ 1933.907315][T26577] netlink: 'syz.8.5577': attribute type 1 has an invalid length. [ 1933.915224][T26577] netlink: 'syz.8.5577': attribute type 2 has an invalid length. [ 1934.547917][T26587] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5581'. [ 1934.605582][ T5902] usb 7-1: Cannot set autoneg [ 1934.638005][ T5902] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1934.675847][ T5902] usb 7-1: USB disconnect, device number 33 [ 1934.683444][T26591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5582'. [ 1934.986847][T26599] xt_nat: multiple ranges no longer supported [ 1935.409574][ T5903] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1935.636913][T26605] 9pnet_fd: Insufficient options for proto=fd [ 1935.682412][ T5903] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1935.694450][ T5903] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1935.713122][ T5903] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1935.898649][ T5903] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1935.957887][ T5903] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1936.471253][ T5903] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1936.497705][ T5903] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1936.563424][ T5903] usb 10-1: Product: syz [ 1936.567727][ T5903] usb 10-1: Manufacturer: syz [ 1936.583934][ T5903] cdc_wdm 10-1:1.0: skipping garbage [ 1936.590250][ T5903] cdc_wdm 10-1:1.0: skipping garbage [ 1936.598325][ T5903] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1936.604562][ T5903] cdc_wdm 10-1:1.0: Unknown control protocol [ 1936.872144][T26618] netlink: 'syz.4.5590': attribute type 11 has an invalid length. [ 1937.871458][ T5875] usb 10-1: USB disconnect, device number 19 [ 1938.653059][T26631] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5593'. [ 1938.674565][T26629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5594'. [ 1938.713084][T26629] netlink: 'syz.6.5594': attribute type 1 has an invalid length. [ 1938.744511][T26629] netlink: 'syz.6.5594': attribute type 2 has an invalid length. [ 1938.775698][T26624] netlink: 'syz.8.5592': attribute type 11 has an invalid length. [ 1938.868007][T26635] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5595'. [ 1939.116182][T26648] netlink: 'syz.9.5599': attribute type 11 has an invalid length. [ 1939.298271][T23855] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1939.459489][T23855] usb 6-1: Using ep0 maxpacket: 16 [ 1939.574574][T23855] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1939.633564][T23855] usb 6-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1939.733590][T23855] usb 6-1: config 0 has no interface number 0 [ 1939.784560][T23855] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1939.799705][T23855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.818094][T23855] usb 6-1: Product: syz [ 1939.823047][T23855] usb 6-1: Manufacturer: syz [ 1939.845352][T23855] usb 6-1: SerialNumber: syz [ 1939.875069][T23855] usb 6-1: config 0 descriptor?? [ 1939.904127][T23855] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 1940.047504][T23855] usb 6-1: No valid video chain found. [ 1940.106290][T26656] xt_nat: multiple ranges no longer supported [ 1940.525840][ T30] audit: type=1400 audit(2000004163.995:2258): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26657 comm="syz.8.5604" dest=2 [ 1940.598086][ T9622] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1940.648533][ T5903] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1940.750614][ T9622] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1940.763332][ T9622] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1940.776685][ T9622] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1940.787197][ T9622] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1940.796672][ T9622] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1940.812764][ T9622] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1940.833031][ T5903] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1940.842565][ T5903] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1940.860275][ T5903] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1940.869974][ T5903] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1940.885905][ T5903] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1940.899362][ T5903] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1940.902630][ T9622] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1940.909109][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1940.909132][ T5903] usb 5-1: Product: syz [ 1940.909147][ T5903] usb 5-1: Manufacturer: syz [ 1940.940894][ T5903] cdc_wdm 5-1:1.0: skipping garbage [ 1941.116184][ T5903] cdc_wdm 5-1:1.0: skipping garbage [ 1941.296183][ T5903] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1941.312065][ T9622] usb 7-1: USB disconnect, device number 34 [ 1941.638282][ T5903] cdc_wdm 5-1:1.0: Unknown control protocol [ 1941.928084][ T5903] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1942.112032][ T5903] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1942.162395][ T5903] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1942.173680][ T5902] usb 6-1: USB disconnect, device number 29 [ 1942.183697][ T5903] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1942.197084][ T5903] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1942.205678][ T5903] usb 10-1: Manufacturer: syz [ 1942.214496][ T5903] usb 10-1: config 0 descriptor?? [ 1942.271995][T26677] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5609'. [ 1942.288002][ T5903] rc_core: IR keymap rc-hauppauge not found [ 1942.304383][ T5903] Registered IR keymap rc-empty [ 1942.315726][ T5903] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1942.331971][ T5903] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input265 [ 1942.817182][ T30] audit: type=1400 audit(2000004166.405:2259): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26681 comm="syz.5.5611" dest=2 [ 1943.357174][ T9622] usb 5-1: USB disconnect, device number 65 [ 1943.823004][T26685] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5612'. [ 1943.849298][T26685] netlink: 'syz.8.5612': attribute type 1 has an invalid length. [ 1943.860831][T26685] netlink: 'syz.8.5612': attribute type 2 has an invalid length. [ 1943.873623][T26670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1943.882856][T26670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1943.892883][T26670] netlink: 1068 bytes leftover after parsing attributes in process `syz.9.5606'. [ 1944.357565][ T30] audit: type=1400 audit(2000004167.846:2260): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26694 comm="syz.4.5615" dest=2 [ 1944.386324][T19666] usb 10-1: USB disconnect, device number 20 [ 1944.419881][T26701] netlink: 'syz.5.5614': attribute type 11 has an invalid length. [ 1945.519210][ T9622] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1945.529333][ T30] audit: type=1400 audit(2000004168.966:2261): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26708 comm="syz.6.5618" daddr=ff02::1 [ 1945.548453][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 1945.554582][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 1945.587573][T23855] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1945.710586][T26722] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5622'. [ 1945.717394][ T9622] usb 5-1: Using ep0 maxpacket: 16 [ 1945.733926][ T9622] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1945.743135][ T9622] usb 5-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1945.763078][ T9622] usb 5-1: config 0 has no interface number 0 [ 1945.769442][T23855] usb 10-1: Using ep0 maxpacket: 16 [ 1945.780311][ T9622] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1945.793536][ T9622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.802262][T23855] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 1945.814318][ T9622] usb 5-1: Product: syz [ 1945.879677][ T9622] usb 5-1: Manufacturer: syz [ 1945.885011][T23855] usb 10-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1945.916999][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 1945.923182][ T9622] usb 5-1: SerialNumber: syz [ 1945.928306][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 1945.939206][T23855] usb 10-1: config 0 has no interface number 0 [ 1945.953272][ T9622] usb 5-1: config 0 descriptor?? [ 1945.959545][T26713] ceph: No mds server is up or the cluster is laggy [ 1945.966285][ T9622] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 1945.974095][T23855] usb 10-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1946.085522][ T9622] usb 5-1: No valid video chain found. [ 1946.091642][T23855] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1946.113933][T23855] usb 10-1: Product: syz [ 1946.120128][T23855] usb 10-1: Manufacturer: syz [ 1946.124852][T23855] usb 10-1: SerialNumber: syz [ 1946.146181][T23855] usb 10-1: config 0 descriptor?? [ 1946.166641][T23855] usb 10-1: Found UVC 0.00 device syz (046d:08f3) [ 1946.185126][T23855] usb 10-1: No valid video chain found. [ 1946.669156][T26736] siw: device registration error -23 [ 1947.068797][ T30] audit: type=1400 audit(2000004170.316:2262): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26725 comm="syz.8.5624" daddr=ff02::1 dest=20004 [ 1947.221050][T23855] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1947.777622][T23855] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1947.912821][T23855] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1948.054676][T23855] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1948.140936][T23855] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1948.921474][T19666] usb 5-1: USB disconnect, device number 66 [ 1948.943988][T17454] usb 10-1: USB disconnect, device number 21 [ 1948.959525][T23855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.026628][T23855] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1949.307184][ T30] audit: type=1400 audit(2000004172.906:2263): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26739 comm="syz.4.5627" dest=2 [ 1949.513383][T23855] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1949.526634][T23855] usb 7-1: USB disconnect, device number 35 [ 1949.554932][ T30] audit: type=1400 audit(2000004173.156:2264): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26742 comm="syz.9.5628" daddr=ff02::1 dest=20004 [ 1951.320375][T26757] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5632'. [ 1951.329986][T26757] netlink: 'syz.6.5632': attribute type 1 has an invalid length. [ 1951.347448][T26757] netlink: 'syz.6.5632': attribute type 2 has an invalid length. [ 1952.278801][T26770] netlink: 'syz.4.5636': attribute type 11 has an invalid length. [ 1952.592872][T23855] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 1953.237022][ T30] audit: type=1400 audit(2000004176.827:2265): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26771 comm="syz.9.5635" daddr=ff02::1 [ 1953.278933][T23855] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1953.295486][T23855] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1953.330722][T23855] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 1953.342240][T23855] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1953.356004][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 1953.362353][T23855] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1953.371691][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 1953.400555][T23855] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1953.410456][T23855] usb 9-1: SerialNumber: syz [ 1953.421945][T26765] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1953.430853][T26765] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1953.444092][T26775] ceph: No mds server is up or the cluster is laggy [ 1953.480042][T23855] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 1953.895646][T26787] netlink: 'syz.9.5640': attribute type 11 has an invalid length. [ 1954.406433][T17454] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1954.596391][ T30] audit: type=1400 audit(2000004178.187:2266): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26791 comm="syz.6.5641" dest=2 [ 1954.778175][T17454] usb 6-1: Using ep0 maxpacket: 16 [ 1954.785529][T17454] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1954.795269][T17454] usb 6-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1954.813431][T17454] usb 6-1: config 0 has no interface number 0 [ 1954.822615][T17454] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1954.874391][T23855] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 1954.883527][T17454] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.898945][T23855] usb 9-1: USB disconnect, device number 26 [ 1954.905366][T17454] usb 6-1: Product: syz [ 1954.919346][T17454] usb 6-1: Manufacturer: syz [ 1954.931290][T17454] usb 6-1: SerialNumber: syz [ 1954.943650][T17454] usb 6-1: config 0 descriptor?? [ 1954.965111][T17454] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 1954.988435][T17454] usb 6-1: No valid video chain found. [ 1955.775754][T26806] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5644'. [ 1956.541232][T26815] xt_nat: multiple ranges no longer supported [ 1956.880514][T26820] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5648'. [ 1956.993206][T26823] kvm: pic: non byte write [ 1957.065028][T19666] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1957.571869][T23855] usb 6-1: USB disconnect, device number 30 [ 1957.608347][ T30] audit: type=1400 audit(2000004181.117:2267): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26827 comm="syz.8.5650" daddr=ff02::1 [ 1957.911497][T19666] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1957.920459][T19666] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1957.930972][T19666] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1958.198383][T19666] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1958.307740][T19666] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1958.390242][T26829] ceph: No mds server is up or the cluster is laggy [ 1958.472229][T19666] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1958.518127][T19666] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1958.534142][T19666] usb 5-1: Product: syz [ 1958.561990][T19666] usb 5-1: Manufacturer: syz [ 1958.593017][T19666] cdc_wdm 5-1:1.0: skipping garbage [ 1958.716327][T19666] cdc_wdm 5-1:1.0: skipping garbage [ 1958.723273][T19666] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1958.729394][T19666] cdc_wdm 5-1:1.0: Unknown control protocol [ 1959.656282][ T30] audit: type=1400 audit(2000004182.887:2268): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26840 comm="syz.9.5654" dest=2 [ 1959.887309][T26853] netlink: 'syz.9.5657': attribute type 11 has an invalid length. [ 1959.927288][T26853] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5657'. [ 1959.936379][ T30] audit: type=1400 audit(2000004183.447:2269): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26845 comm="syz.6.5655" daddr=ff02::1 [ 1959.962595][ T5997] libceph: connect (1)[c::]:6789 error -101 [ 1960.058470][T26859] siw: device registration error -23 [ 1960.075971][T26854] ceph: No mds server is up or the cluster is laggy [ 1960.814807][ T5997] libceph: mon0 (1)[c::]:6789 connect error [ 1960.916922][T23240] usb 5-1: USB disconnect, device number 67 [ 1961.067819][T26869] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5662'. [ 1961.608883][ T30] audit: type=1400 audit(2000004185.088:2270): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26874 comm="syz.8.5664" daddr=ff02::1 [ 1962.434386][T26886] ceph: No mds server is up or the cluster is laggy [ 1962.734284][T26897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5668'. [ 1963.118618][T26897] netlink: 'syz.5.5668': attribute type 1 has an invalid length. [ 1963.365136][T26897] netlink: 'syz.5.5668': attribute type 2 has an invalid length. [ 1963.648157][T26907] netlink: 'syz.6.5671': attribute type 11 has an invalid length. [ 1963.775348][ T5997] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1963.946601][ T5997] usb 10-1: Using ep0 maxpacket: 16 [ 1963.964888][ T5997] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1963.999844][ T5997] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1964.018159][ T5997] usb 10-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1964.040051][ T5997] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.052675][ T5997] usb 10-1: Product: syz [ 1964.057261][ T5997] usb 10-1: Manufacturer: syz [ 1964.062192][ T5997] usb 10-1: SerialNumber: syz [ 1964.099847][ T5997] usb 10-1: config 0 descriptor?? [ 1964.132188][ T5997] appledisplay 10-1:0.0: Could not find int-in endpoint [ 1964.150749][ T5997] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1964.612330][T26918] xt_nat: multiple ranges no longer supported [ 1964.876936][T17454] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1965.088494][T17454] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1965.128158][T17454] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1965.174692][T17454] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1965.207899][T26930] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5678'. [ 1965.242016][T17454] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1965.244711][T26930] syz_tun: entered allmulticast mode [ 1965.261131][T17454] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1965.405858][T17454] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1965.444542][T17454] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1965.452863][T17454] usb 6-1: Product: syz [ 1965.457228][T17454] usb 6-1: Manufacturer: syz [ 1965.469963][T17454] cdc_wdm 6-1:1.0: skipping garbage [ 1965.475762][T17454] cdc_wdm 6-1:1.0: skipping garbage [ 1966.020862][T26928] syz_tun: left allmulticast mode [ 1966.026655][T17454] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1966.034429][T17454] cdc_wdm 6-1:1.0: Unknown control protocol [ 1966.347325][ T5997] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1966.515369][ T5997] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1966.530452][ T5997] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1966.544459][ T5997] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1966.565528][ T5997] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.574316][ T5997] usb 9-1: Product: syz [ 1966.579216][ T5997] usb 9-1: Manufacturer: syz [ 1966.584547][ T5997] usb 9-1: SerialNumber: syz [ 1967.056959][T17454] usb 10-1: USB disconnect, device number 22 [ 1967.093600][ T5997] usb 9-1: config 0 descriptor?? [ 1967.310890][T26937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1967.345333][T26937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1967.465785][ T5903] usb 6-1: USB disconnect, device number 31 [ 1967.508670][ T30] audit: type=1400 audit(2000004191.128:2271): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=26947 comm="syz.6.5684" daddr=ff02::1 [ 1967.553558][T17454] libceph: connect (1)[c::]:6789 error -101 [ 1967.570321][T17454] libceph: mon0 (1)[c::]:6789 connect error [ 1967.835945][T17454] libceph: connect (1)[c::]:6789 error -101 [ 1967.842594][T17454] libceph: mon0 (1)[c::]:6789 connect error [ 1967.980627][ T5903] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1968.007164][ T5997] usb 9-1: USB disconnect, device number 27 [ 1968.058174][T26955] ceph: No mds server is up or the cluster is laggy [ 1968.165568][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 1968.185359][ T5903] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1968.201358][T26976] kvm: pic: non byte write [ 1968.215798][ T5903] usb 6-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1968.251867][ T5903] usb 6-1: config 0 has no interface number 0 [ 1968.269844][ T5903] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1968.288035][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.312427][ T5903] usb 6-1: Product: syz [ 1968.323016][T26979] kvm: pic: non byte write [ 1968.334942][ T5903] usb 6-1: Manufacturer: syz [ 1968.344857][ T5903] usb 6-1: SerialNumber: syz [ 1968.358432][ T5903] usb 6-1: config 0 descriptor?? [ 1968.367637][T26975] kvm: pic: non byte write [ 1968.377074][ T5903] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 1968.394157][ T5903] usb 6-1: No valid video chain found. [ 1968.774875][ T5903] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1969.065811][ T5903] usb 10-1: Using ep0 maxpacket: 16 [ 1969.108246][ T5903] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1969.203975][ T5903] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1969.289260][ T5903] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1969.321927][ T5903] usb 10-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1969.331508][ T5903] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.344352][ T5903] usb 10-1: Product: syz [ 1969.348830][ T5903] usb 10-1: Manufacturer: syz [ 1969.353780][ T5903] usb 10-1: SerialNumber: syz [ 1969.383512][ T5903] usb 10-1: config 0 descriptor?? [ 1969.398053][ T5903] appledisplay 10-1:0.0: Could not find int-in endpoint [ 1969.411911][ T5903] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1970.910445][T23240] usb 6-1: USB disconnect, device number 32 [ 1972.093442][ T5903] usb 10-1: USB disconnect, device number 23 [ 1972.115507][T27002] xt_nat: multiple ranges no longer supported [ 1972.212261][T26997] kvm: pic: non byte write [ 1973.054623][T23240] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1973.396063][T23240] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1974.372026][T23240] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1974.391843][T23240] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1974.416159][T23240] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1975.264017][T23240] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1975.328077][T23240] usb 6-1: string descriptor 0 read error: -71 [ 1975.354305][T23240] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1975.426081][T23240] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1975.504179][T23240] usb 6-1: can't set config #1, error -71 [ 1975.511857][T27050] FAULT_INJECTION: forcing a failure. [ 1975.511857][T27050] name failslab, interval 1, probability 0, space 0, times 0 [ 1975.554166][T23240] usb 6-1: USB disconnect, device number 33 [ 1975.562185][ T30] audit: type=1400 audit(2000004199.169:2272): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27046 comm="syz.8.5713" dest=2 [ 1975.610718][T27050] CPU: 0 UID: 0 PID: 27050 Comm: syz.9.5712 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 1975.610747][T27050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1975.610761][T27050] Call Trace: [ 1975.610770][T27050] [ 1975.610780][T27050] dump_stack_lvl+0x189/0x250 [ 1975.610815][T27050] ? __pfx____ratelimit+0x10/0x10 [ 1975.610848][T27050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1975.610878][T27050] ? __pfx__printk+0x10/0x10 [ 1975.610905][T27050] ? __pfx___might_resched+0x10/0x10 [ 1975.610934][T27050] ? fs_reclaim_acquire+0x7d/0x100 [ 1975.610969][T27050] should_fail_ex+0x414/0x560 [ 1975.611001][T27050] should_failslab+0xa8/0x100 [ 1975.611030][T27050] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1975.611054][T27050] ? alloc_empty_file+0x55/0x1d0 [ 1975.611090][T27050] alloc_empty_file+0x55/0x1d0 [ 1975.611122][T27050] alloc_file_pseudo+0x13d/0x210 [ 1975.611156][T27050] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1975.611189][T27050] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1975.611234][T27050] anon_inode_getfile+0xc5/0x1a0 [ 1975.611266][T27050] bpf_link_prime+0xfc/0x220 [ 1975.611294][T27050] bpf_raw_tp_link_attach+0x4a5/0x6b0 [ 1975.611332][T27050] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 1975.611374][T27050] ? __fget_files+0x2a/0x420 [ 1975.611414][T27050] bpf_raw_tracepoint_open+0x19b/0x1f0 [ 1975.611446][T27050] __sys_bpf+0x3cd/0x860 [ 1975.611475][T27050] ? __pfx___sys_bpf+0x10/0x10 [ 1975.611524][T27050] ? rcu_is_watching+0x15/0xb0 [ 1975.611560][T27050] __x64_sys_bpf+0x7c/0x90 [ 1975.611584][T27050] do_syscall_64+0xfa/0x3b0 [ 1975.611603][T27050] ? lockdep_hardirqs_on+0x9c/0x150 [ 1975.611641][T27050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1975.611661][T27050] ? clear_bhb_loop+0x60/0xb0 [ 1975.611686][T27050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1975.611706][T27050] RIP: 0033:0x7fb24478e929 [ 1975.611725][T27050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1975.611743][T27050] RSP: 002b:00007fb2455b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1975.611765][T27050] RAX: ffffffffffffffda RBX: 00007fb2449b5fa0 RCX: 00007fb24478e929 [ 1975.611781][T27050] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000011 [ 1975.611794][T27050] RBP: 00007fb2455b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1975.611808][T27050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1975.611820][T27050] R13: 0000000000000000 R14: 00007fb2449b5fa0 R15: 00007ffe6b88c048 [ 1975.611852][T27050] [ 1975.994383][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.099373][T27057] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5715'. [ 1976.134513][T27060] overlay: filesystem on ./bus is read-only [ 1976.146216][T27057] netlink: 'syz.9.5715': attribute type 1 has an invalid length. [ 1976.155340][T27057] netlink: 'syz.9.5715': attribute type 2 has an invalid length. [ 1977.353148][T27071] xt_nat: multiple ranges no longer supported [ 1978.513657][ T5902] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1978.835485][ T5902] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1978.863821][ T5902] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1979.133804][ T30] audit: type=1400 audit(2000004202.740:2273): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27087 comm="syz.9.5724" dest=2 [ 1979.137742][ T5902] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1979.163443][ T5902] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1979.175672][ T5902] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1979.362187][ T5902] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1979.468524][ T5902] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1979.597721][ T5902] usb 9-1: Product: syz [ 1979.645844][ T5902] usb 9-1: Manufacturer: syz [ 1979.753672][ T5902] cdc_wdm 9-1:1.0: skipping garbage [ 1979.758940][ T5902] cdc_wdm 9-1:1.0: skipping garbage [ 1979.805055][ T5902] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1979.827972][ T5902] cdc_wdm 9-1:1.0: Unknown control protocol [ 1980.216322][ T5902] usb 9-1: USB disconnect, device number 28 [ 1980.384062][T27103] kvm: pic: non byte write [ 1981.675750][T27123] netlink: 'syz.8.5734': attribute type 11 has an invalid length. [ 1982.213436][ T30] audit: type=1804 audit(2000004205.760:2274): pid=27130 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.9.5738" name="/newroot/181/bus/bus" dev="overlay" ino=996 res=1 errno=0 [ 1982.646180][T27141] netlink: 'syz.4.5737': attribute type 11 has an invalid length. [ 1982.991256][ T30] audit: type=1400 audit(2000004206.460:2275): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27142 comm="syz.9.5739" dest=2 [ 1983.462849][T27160] kvm: pic: non byte write [ 1983.469117][T27161] kvm: pic: non byte write [ 1984.235651][T27166] kvm: pic: non byte write [ 1984.540124][T27171] siw: device registration error -23 [ 1985.772811][ T5997] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1985.922833][ T5997] usb 9-1: Using ep0 maxpacket: 8 [ 1985.944453][ T5997] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1985.969994][ T5997] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.987644][ T5997] usb 9-1: Product: syz [ 1986.031215][ T5997] usb 9-1: Manufacturer: syz [ 1986.056663][ T5997] usb 9-1: SerialNumber: syz [ 1986.882019][ T5997] usb 9-1: config 0 descriptor?? [ 1987.100161][ T5997] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1987.835369][T27198] netlink: 'syz.5.5751': attribute type 11 has an invalid length. [ 1988.384849][ T5997] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1988.600139][ T30] audit: type=1400 audit(2000004212.211:2276): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27203 comm="syz.9.5752" dest=2 [ 1988.626933][ T5997] usb 9-1: USB disconnect, device number 29 [ 1989.462456][T17454] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1989.724493][T27222] netlink: 'syz.8.5757': attribute type 2 has an invalid length. [ 1989.752552][T27222] netlink: 1184 bytes leftover after parsing attributes in process `syz.8.5757'. [ 1989.783482][T17454] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1989.812308][T17454] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1989.833332][T17454] usb 7-1: config 0 descriptor?? [ 1989.844238][T17454] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1990.067125][T27228] siw: device registration error -23 [ 1990.530704][T27210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1990.651426][T27210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1991.665499][T27210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1991.674472][T27210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1992.072606][T17454] usb 7-1: USB disconnect, device number 36 [ 1992.344039][T27247] netlink: 'syz.4.5763': attribute type 11 has an invalid length. [ 1993.331488][T19666] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1993.344071][T27256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5768'. [ 1993.901696][T27256] netlink: 'syz.6.5768': attribute type 1 has an invalid length. [ 1993.909796][T27256] netlink: 'syz.6.5768': attribute type 2 has an invalid length. [ 1994.071916][T19666] usb 9-1: Using ep0 maxpacket: 16 [ 1994.148919][T19666] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 1994.161933][T19666] usb 9-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1994.181916][T19666] usb 9-1: config 0 has no interface number 0 [ 1994.198035][T19666] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1994.207794][ T5997] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1994.232067][T19666] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1994.251897][T19666] usb 9-1: Product: syz [ 1994.272335][T19666] usb 9-1: Manufacturer: syz [ 1994.276970][T19666] usb 9-1: SerialNumber: syz [ 1994.296292][T19666] usb 9-1: config 0 descriptor?? [ 1994.360600][T19666] usb 9-1: Found UVC 0.00 device syz (046d:08f3) [ 1994.371837][ T5997] usb 6-1: Using ep0 maxpacket: 8 [ 1994.524189][ T5997] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1994.545931][T19666] usb 9-1: No valid video chain found. [ 1994.577368][ T5997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1994.971813][ T5997] usb 6-1: Product: syz [ 1995.033798][ T5997] usb 6-1: Manufacturer: syz [ 1995.054776][ T5997] usb 6-1: SerialNumber: syz [ 1995.067690][ T30] audit: type=1400 audit(2000004218.681:2277): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27263 comm="syz.9.5769" daddr=fe80::bb dest=20003 [ 1995.073741][ T5997] usb 6-1: config 0 descriptor?? [ 1995.606788][T27268] netlink: 'syz.4.5770': attribute type 2 has an invalid length. [ 1995.618355][T27268] netlink: 1184 bytes leftover after parsing attributes in process `syz.4.5770'. [ 1995.732094][ T5997] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1996.008222][ T30] audit: type=1400 audit(2000004219.622:2278): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27271 comm="syz.9.5772" dest=2 [ 1996.669130][T17454] usb 9-1: USB disconnect, device number 30 [ 1997.126509][ T5997] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1997.434217][ T5997] usb 6-1: USB disconnect, device number 34 [ 1998.749887][T27303] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5780'. [ 1998.771366][T27303] netlink: 17 bytes leftover after parsing attributes in process `syz.8.5780'. [ 1999.091472][T27307] netlink: 'syz.6.5779': attribute type 11 has an invalid length. [ 1999.549758][T27314] netlink: 'syz.9.5782': attribute type 11 has an invalid length. [ 1999.578250][T27314] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5782'. [ 1999.772290][ T9622] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1999.854456][T27319] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5778'. [ 1999.951229][ T9622] usb 9-1: Using ep0 maxpacket: 32 [ 1999.958578][ T9622] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1999.982870][ T24] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 2000.070089][ T9622] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2000.080075][ T9622] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2000.089273][ T9622] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.104536][ T9622] usb 9-1: config 0 descriptor?? [ 2000.122640][ T9622] hub 9-1:0.0: USB hub found [ 2002.533317][ T24] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2002.546968][ T24] usb 10-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 2002.557423][ T9622] hub 9-1:0.0: 1 port detected [ 2002.562526][ T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2002.571668][ T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 2002.583347][ T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 2002.597203][ T24] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2002.606658][ T24] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2002.619762][ T24] usb 10-1: Product: syz [ 2002.624174][ T24] usb 10-1: Manufacturer: syz [ 2002.635042][ T24] cdc_wdm 10-1:1.0: skipping garbage [ 2002.640365][ T24] cdc_wdm 10-1:1.0: skipping garbage [ 2002.666549][ T24] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2002.785337][ T5875] usb 10-1: USB disconnect, device number 24 [ 2002.963153][T27332] kvm: pic: non byte write [ 2003.527164][ T9622] hub 9-1:0.0: activate --> -90 [ 2003.544105][ T5875] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 2004.138234][ T5875] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2004.214391][ T5875] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2004.256889][ T5875] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2004.283293][ T5875] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2004.495773][ T5875] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2004.535803][ T24] usb 9-1: USB disconnect, device number 31 [ 2004.552014][ T9622] hub 9-1:0.0: hub_ext_port_status failed (err = -71) [ 2004.621435][ T5875] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2004.646289][ T5875] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2004.666839][ T5875] usb 10-1: Product: syz [ 2004.730118][ T5875] usb 10-1: Manufacturer: syz [ 2004.937180][ T5875] cdc_wdm 10-1:1.0: skipping garbage [ 2005.002764][ T5875] cdc_wdm 10-1:1.0: skipping garbage [ 2005.269549][ T5875] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 2005.330617][ T30] audit: type=1400 audit(2000004228.873:2279): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27347 comm="syz.6.5791" daddr=fe80:: [ 2005.396485][ T5875] cdc_wdm 10-1:1.0: Unknown control protocol [ 2005.580571][ T9622] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 2006.528976][T23240] usb 10-1: USB disconnect, device number 25 [ 2006.547514][ T9622] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2006.591806][ T30] audit: type=1400 audit(2000004230.213:2280): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27358 comm="syz.4.5793" daddr=ff02::1 [ 2006.628858][ T9622] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.637944][T17454] libceph: connect (1)[c::]:6789 error -101 [ 2006.658475][T17454] libceph: mon0 (1)[c::]:6789 connect error [ 2006.679218][ T9622] usb 7-1: config 0 descriptor?? [ 2006.854718][T27367] input: syz1 as /devices/virtual/input/input271 [ 2006.879950][T27370] netlink: 'syz.5.5795': attribute type 11 has an invalid length. [ 2006.918454][T27370] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5795'. [ 2006.982058][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 2006.988188][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 2007.085841][T27363] ceph: No mds server is up or the cluster is laggy [ 2007.112814][ T30] audit: type=1400 audit(2000004230.713:2281): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27371 comm="syz.8.5796" daddr=fe80::bb dest=20003 [ 2007.511180][T23240] libceph: connect (1)[c::]:6789 error -101 [ 2008.026784][T27380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2008.506976][ T30] audit: type=1400 audit(2000004232.123:2282): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27373 comm="syz.5.5797" daddr=ff02::1 [ 2008.655332][ T9622] usb 7-1: Cannot set autoneg [ 2008.849367][T23240] libceph: mon0 (1)[c::]:6789 connect error [ 2009.671035][ T9622] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2009.770068][ T9622] usb 7-1: USB disconnect, device number 37 [ 2009.931200][T17454] libceph: connect (1)[c::]:6789 error -101 [ 2009.958260][T17454] libceph: mon0 (1)[c::]:6789 connect error [ 2010.194382][T27382] ceph: No mds server is up or the cluster is laggy [ 2010.246728][ T9622] libceph: connect (1)[c::]:6789 error -101 [ 2010.258138][T27393] xt_nat: multiple ranges no longer supported [ 2010.575559][ T9622] libceph: mon0 (1)[c::]:6789 connect error [ 2010.750452][T17454] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 2010.941958][T17454] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2010.979318][T17454] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2011.087175][T17454] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2011.139414][T17454] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2011.211062][T23240] libceph: connect (1)[c::]:6789 error -101 [ 2011.227445][T23240] libceph: mon0 (1)[c::]:6789 connect error [ 2011.244782][T17454] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2011.288029][T17454] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2011.309954][ T9622] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 2011.338381][T17454] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2011.394661][T17454] usb 9-1: Product: syz [ 2011.398862][T17454] usb 9-1: Manufacturer: syz [ 2011.447905][T17454] cdc_wdm 9-1:1.0: skipping garbage [ 2011.466908][T17454] cdc_wdm 9-1:1.0: skipping garbage [ 2011.485077][T17454] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 2011.497208][T17454] cdc_wdm 9-1:1.0: Unknown control protocol [ 2011.506326][ T9622] usb 10-1: Using ep0 maxpacket: 16 [ 2011.524182][ T9622] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2011.548142][ T9622] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2011.557916][ T9622] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2011.581251][ T9622] usb 10-1: Product: syz [ 2011.591619][ T9622] usb 10-1: Manufacturer: syz [ 2011.603351][ T9622] usb 10-1: SerialNumber: syz [ 2012.135922][T27410] input: syz1 as /devices/virtual/input/input272 [ 2012.148237][ T9622] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2012.243477][T27413] netlink: 'syz.5.5808': attribute type 11 has an invalid length. [ 2012.263448][T27413] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5808'. [ 2012.287557][ T9622] usb 10-1: USB disconnect, device number 26 [ 2012.404800][ T30] audit: type=1400 audit(2000004236.023:2283): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=27414 comm="syz.6.5809" daddr=fe80:: [ 2012.669754][T19666] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 2013.548623][ T24] usb 9-1: USB disconnect, device number 32 [ 2013.602382][T19666] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2013.612621][T19666] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2013.743863][T19666] usb 7-1: config 0 descriptor?? [ 2014.560344][T27434] xt_nat: multiple ranges no longer supported [ 2014.779771][T23240] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2015.019632][T10433] ------------[ cut here ]------------ [ 2015.025658][T10433] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 2015.047966][T10433] WARNING: CPU: 1 PID: 10433 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x303/0x350 [ 2015.058983][T10433] Modules linked in: [ 2015.063488][T10433] CPU: 1 UID: 0 PID: 10433 Comm: kworker/u8:33 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 2015.075629][T10433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2015.085996][T10433] Workqueue: bond0 bond_mii_monitor [ 2015.091289][T10433] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 2015.097340][T10433] Code: 7c fe ff ff e8 6e 1d 71 f8 c6 05 97 be 3a 06 01 90 48 c7 c7 80 d8 91 8c 48 c7 c6 33 53 9b 8d ba 48 00 00 00 e8 8e c8 34 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 2015.117028][T10433] RSP: 0018:ffffc90005597670 EFLAGS: 00010246 [ 2015.123192][T10433] RAX: 6d7f8dc8cb236200 RBX: ffff88802c528000 RCX: ffff88807ed78000 [ 2015.131369][T10433] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 2015.139484][T10433] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 2015.145405][T23240] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2015.147488][T10433] R10: dffffc0000000000 R11: fffffbfff1bfaa44 R12: 1ffff110058a505d [ 2015.164177][T10433] R13: dffffc0000000000 R14: ffffffff8c1b67a8 R15: 0000000000000000 [ 2015.166295][ T30] audit: type=1804 audit(2000004238.754:2284): pid=27439 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.9.5815" name="/newroot/198/bus/bus" dev="overlay" ino=1090 res=1 errno=0 [ 2015.172203][T10433] FS: 0000000000000000(0000) GS:ffff888125d84000(0000) knlGS:0000000000000000 [ 2015.172223][T10433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2015.172238][T10433] CR2: 000055556dc0b808 CR3: 0000000022732000 CR4: 00000000003526f0 [ 2015.172257][T10433] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2015.217266][T23240] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2015.225262][T10433] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2015.225283][T10433] Call Trace: [ 2015.225293][T10433] [ 2015.225303][T10433] ? ethtool_op_get_link+0xd/0x70 [ 2015.225341][T10433] ethtool_op_get_link+0x15/0x70 [ 2015.225369][T10433] bond_check_dev_link+0x447/0x6c0 [ 2015.225431][T10433] ? __pfx_bond_check_dev_link+0x10/0x10 [ 2015.225474][T10433] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 2015.225503][T10433] bond_mii_monitor+0x428/0x2e00 [ 2015.225564][T10433] ? bond_mii_monitor+0x153/0x2e00 [ 2015.225607][T10433] ? __pfx_bond_mii_monitor+0x10/0x10 [ 2015.225647][T10433] ? __lock_acquire+0xab9/0xd20 [ 2015.244084][T23240] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2015.247208][T10433] ? process_scheduled_works+0x9ef/0x17b0 [ 2015.258843][T23240] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2015.260286][T10433] ? _raw_spin_unlock_irq+0x23/0x50 [ 2015.260322][T10433] ? process_scheduled_works+0x9ef/0x17b0 [ 2015.260353][T10433] ? process_scheduled_works+0x9ef/0x17b0 [ 2015.260386][T10433] process_scheduled_works+0xade/0x17b0 [ 2015.269165][T23240] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2015.271195][T10433] ? __pfx_process_scheduled_works+0x10/0x10 [ 2015.271253][T10433] worker_thread+0x8a0/0xda0 [ 2015.271321][T10433] kthread+0x70e/0x8a0 [ 2015.285212][T23240] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2015.287863][T10433] ? __pfx_worker_thread+0x10/0x10 [ 2015.307903][T23240] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2015.312850][T10433] ? __pfx_kthread+0x10/0x10 [ 2015.312886][T10433] ? _raw_spin_unlock_irq+0x23/0x50 [ 2015.312920][T10433] ? lockdep_hardirqs_on+0x9c/0x150 [ 2015.312955][T10433] ? __pfx_kthread+0x10/0x10 [ 2015.312983][T10433] ret_from_fork+0x3f9/0x770 [ 2015.329171][T23240] usb 6-1: Product: syz [ 2015.334887][T10433] ? __pfx_ret_from_fork+0x10/0x10 [ 2015.348309][T23240] usb 6-1: Manufacturer: syz [ 2015.355941][T10433] ? __switch_to_asm+0x39/0x70 [ 2015.355966][T10433] ? __switch_to_asm+0x33/0x70 [ 2015.355984][T10433] ? __pfx_kthread+0x10/0x10 [ 2015.356033][T10433] ret_from_fork_asm+0x1a/0x30 [ 2015.356070][T10433] [ 2015.356093][T10433] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2015.356108][T10433] CPU: 1 UID: 0 PID: 10433 Comm: kworker/u8:33 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 2015.356132][T10433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2015.356146][T10433] Workqueue: bond0 bond_mii_monitor [ 2015.356175][T10433] Call Trace: [ 2015.356184][T10433] [ 2015.356193][T10433] dump_stack_lvl+0x99/0x250 [ 2015.356223][T10433] ? __asan_memcpy+0x40/0x70 [ 2015.356246][T10433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2015.356277][T10433] ? __pfx__printk+0x10/0x10 [ 2015.356316][T10433] panic+0x2db/0x790 [ 2015.356354][T10433] ? __pfx_panic+0x10/0x10 [ 2015.356397][T10433] ? ret_from_fork_asm+0x1a/0x30 [ 2015.356427][T10433] __warn+0x31b/0x4b0 [ 2015.356455][T10433] ? __linkwatch_sync_dev+0x303/0x350 [ 2015.356490][T10433] ? __linkwatch_sync_dev+0x303/0x350 [ 2015.356519][T10433] report_bug+0x2be/0x4f0 [ 2015.356551][T10433] ? __linkwatch_sync_dev+0x303/0x350 [ 2015.356582][T10433] ? __linkwatch_sync_dev+0x303/0x350 [ 2015.356612][T10433] ? __linkwatch_sync_dev+0x305/0x350 [ 2015.356641][T10433] handle_bug+0x84/0x160 [ 2015.356667][T10433] exc_invalid_op+0x1a/0x50 [ 2015.356690][T10433] asm_exc_invalid_op+0x1a/0x20 [ 2015.356711][T10433] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 2015.356742][T10433] Code: 7c fe ff ff e8 6e 1d 71 f8 c6 05 97 be 3a 06 01 90 48 c7 c7 80 d8 91 8c 48 c7 c6 33 53 9b 8d ba 48 00 00 00 e8 8e c8 34 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 2015.356761][T10433] RSP: 0018:ffffc90005597670 EFLAGS: 00010246 [ 2015.356782][T10433] RAX: 6d7f8dc8cb236200 RBX: ffff88802c528000 RCX: ffff88807ed78000 [ 2015.356799][T10433] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 2015.356814][T10433] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 2015.356828][T10433] R10: dffffc0000000000 R11: fffffbfff1bfaa44 R12: 1ffff110058a505d [ 2015.356846][T10433] R13: dffffc0000000000 R14: ffffffff8c1b67a8 R15: 0000000000000000 [ 2015.356880][T10433] ? ethtool_op_get_link+0xd/0x70 [ 2015.356939][T10433] ethtool_op_get_link+0x15/0x70 [ 2015.356971][T10433] bond_check_dev_link+0x447/0x6c0 [ 2015.357021][T10433] ? __pfx_bond_check_dev_link+0x10/0x10 [ 2015.357085][T10433] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 2015.357120][T10433] bond_mii_monitor+0x428/0x2e00 [ 2015.357165][T10433] ? bond_mii_monitor+0x153/0x2e00 [ 2015.357215][T10433] ? __pfx_bond_mii_monitor+0x10/0x10 [ 2015.357260][T10433] ? __lock_acquire+0xab9/0xd20 [ 2015.357324][T10433] ? process_scheduled_works+0x9ef/0x17b0 [ 2015.357366][T10433] ? _raw_spin_unlock_irq+0x23/0x50 [ 2015.357398][T10433] ? process_scheduled_works+0x9ef/0x17b0 [ 2015.357431][T10433] ? process_scheduled_works+0x9ef/0x17b0 [ 2015.357467][T10433] process_scheduled_works+0xade/0x17b0 [ 2015.357534][T10433] ? __pfx_process_scheduled_works+0x10/0x10 [ 2015.357587][T10433] worker_thread+0x8a0/0xda0 [ 2015.357653][T10433] kthread+0x70e/0x8a0 [ 2015.357681][T10433] ? __pfx_worker_thread+0x10/0x10 [ 2015.357717][T10433] ? __pfx_kthread+0x10/0x10 [ 2015.357746][T10433] ? _raw_spin_unlock_irq+0x23/0x50 [ 2015.357781][T10433] ? lockdep_hardirqs_on+0x9c/0x150 [ 2015.357814][T10433] ? __pfx_kthread+0x10/0x10 [ 2015.357840][T10433] ret_from_fork+0x3f9/0x770 [ 2015.357875][T10433] ? __pfx_ret_from_fork+0x10/0x10 [ 2015.357914][T10433] ? __switch_to_asm+0x39/0x70 [ 2015.357935][T10433] ? __switch_to_asm+0x33/0x70 [ 2015.357957][T10433] ? __pfx_kthread+0x10/0x10 [ 2015.357984][T10433] ret_from_fork_asm+0x1a/0x30 [ 2015.358030][T10433] [ 2015.362539][T10433] Kernel Offset: disabled