last executing test programs: 4m38.084506423s ago: executing program 4 (id=912): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r0, @ANYRES16, @ANYBLOB="010000000000000000008200000008000300", @ANYRES64, @ANYBLOB="ad8278eb3d64d3eb9b1b5b036e967d5904cbfc64642ee39e570eb0b40fee4cbbcf98530de805ad7094adbdf3bdeb6d5ab9a83ffbffe56673f4b90ae356afe127c857aa4cbc3068f3fc0f76566312a7d2deca7cb3791a88b09d3cecb2822a5f0710b352d88968c19f01f0d92da2b5badbf8b3be92700ff5f53e97014411ecff702fdec23467056942fe0bb7f42e8a92f9d7b6238a2f1cee404f9c2fe8e29987286d9f18b76df8c1b5c74302206d8de559cf6dc27f684a64ea23258f83e5e768324ab63859"], 0x1c}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002bc0)=@delchain={0x428, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0xffe0, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x3fc, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x3f5}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x3d4, 0x7, [@m_gact={0xb4, 0x8, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1eb, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1e14, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x18f0, 0x8}}]}, {0x62, 0x6, "016e0e8ccce8b438002b9a280a547f6dcc992613bee7e806d9e109449422cbe54423fbdabccd281045d5e6f219d08e9d8413a7e7c05279c68c7feb414ca2bdc1564df509a816a7534774b4ae6f8fa13216cf11f3899d1dc6cff841dda7e7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x90, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x5, 0xffff, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x8, 0x8, 0x8, 0x401}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3a61, 0x5a68ce02, 0x10000000, 0x2eca, 0x5}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xb8, 0x12, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x10000, 0x5, 0x7, 0x6}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x35d}]}, {0x45, 0x6, "3963d4cb11c85fb73e2eb7fa544272241b7979e3bda823f9a46a866d6bafff5c274b84a39f570d37c5a3f259dd5372d13110e3096d23b0940c45747d6b9f6aa211"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0x168, 0x12, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x0, 0x2, 0x7d}}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x7ff}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xc9, 0x6, "e429cc476e5a6b2bfe572c4920d343d428d2d62e337aedf0b81700410284c9b3bf0a511fffa6d416cc3b5ff995d0cd3e4f2656fb972f24e7c94b2df03aaad9835392bca70719cb1aa7cd3abe1c6df10410af14e75e2e761362bf9c813542b1375d5c28f2eb45a767eb9b182d3c67c24285c4482806a7087d1d4021f864e35922a41e9f5db9775b3d88b1058b40237c9a4d9c801ba52bae5aebc90c4cddd7b2c193e3fd550d29bb604246cdd79b7624d92c95813d7639db2837fff30928788aa929c8b28924"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x3c, 0x1a, 0x0, 0x0, {{0x7}, {0x4}, {0x11, 0x6, "3b8dd99ff628f0e136ea03ee3b"}, {0xc, 0x7, {0x1}}, {0x36, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0x30, 0xf, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x428}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r0], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0xff93) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r4, &(0x7f0000000540)="380076183d657f665c4df10300010003fc0ac0f023a26721ed9f479855a2b1b2f4444d376a97df028c39daca4366bfd5548d32b5787ab9fb7beae85aafb9014d2e4190100e40ba2704e6faf00f923d112d2952d1b82c98355dd352c283f09953e2c292ee9b0b049d03dbf11f7223d619e73f33b014604fd40836b22c95dd7a96b3f1a1803d40a1f8da294574bcecfdfb9d4f805c4f76e9e9f1115ca5ee4c4acc5ba26b2ca69fc1cd18f4dcc9927ac177ed92fe6a6ba77c2ac1d0425facdb66ea467659427adf41e7e7bc8e442131e38ef5a26284ab7c18d1fe055eee", 0xdc) read$FUSE(r4, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r5) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r6, 0x731, 0x0, 0x25dfdbfe, {0x38}}, 0x14}, 0x1, 0x2, 0x0, 0x20040895}, 0x64000000) socket$alg(0x26, 0x5, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000240)=0xf) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000001ac0)=0x1) 4m37.909555993s ago: executing program 4 (id=914): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050008001e9c9677f71d57f77328e4f78f0000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="d5"}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}]}, 0x2c}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="202301"], 0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000ffb000/0x4000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="c496c584c95750e3ab4b963f4aeb64a1ba34bd35370703474ba1c83c646b590b73a9683353aeacc6d4c9e56677405f864b0811718f345a30bf96a10acfe8b65eb3a510a9d995f07669cd03e60c7da57ebab3972ac4ef1b7e8b6c6c2a738c9e26b5eecca1", 0x64, 0x0, &(0x7f0000000280)={0xa, 0x4e21, 0x144f6d24, @mcast1, 0xf3}, 0x1c) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x0, 0xfa3368d3278b78c9, 0x70bd2a, 0x2cb, {{}, {@val={0x8, 0x1, 0x72}, @void, @val={0xc, 0x99, {0x800, 0x69}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 4m33.702404243s ago: executing program 4 (id=923): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) read(r0, &(0x7f0000000640)=""/222, 0xde) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0x400]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540), 0x4000, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="7472616e733d7e642c7266646e6f3d172182ae62ad9b9577d2936774243e4967fd81675ce76ff0b77676b23380dfc08b0ebdbe7b8e90780f815dcbc3d0c5c5ed72316bd1f57671e017ee64452a2d9f01cffff732ab11593da91f32950f641515aec47803b7f940bfa8528d6104bc99ab2c12e8d410483422f3ceba1fd902d2c07c52e23b0d72888062a1011e1fdf7d19e2fc602f15e2ffb07ed893ca50f249bfc251a6", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',appraise_type=imasig,smackfshat=/dev/dri/card#\x00,fsmagic=0']) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) 4m32.715339961s ago: executing program 4 (id=927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00", @ANYRESDEC=r2, @ANYRES64=r1, @ANYBLOB="aefa76a7b2ee4140e3555737041c411735abe4460370af122927e47335205428491e933b2302c825df730114a5f6a1352d17247a60c9120c7f31a3390a635748bb53d0d5398bb7b8cb7124bae873dbbfe64e3dd7a85e39f5efdc8dd70798eafa1487bb53e9ddada51eef17265b22ddd923d06eb85d78ed98075c32c9987745aa419750486c18af0555252c615c493463b28e6b2917c817081e7fb0b9ff8d13faf5ad1c3cc61082a7df20baf354be"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb00, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x50009405, &(0x7f0000000180)) ioctl$SNAPSHOT_S2RAM(r4, 0x330b) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0xa3, &(0x7f00000006c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0088a81f00810049000004bcf0ff2487067c60334e88e21530fad73fde781c4c915110c7d566ecd458d44b01706c11cf77cf92a3e93f8228eb54f160b6a97a046ac70f94360c76b94a5c4474731e66ee26af0fc6955de2c14826ec223fd3acd0ad89c7d2cc3b832c6db00630ed06907b9419286acec7bdeedebbb071e0520416f0cb2ee04b9df6d45c168921bdaff0bb850000000000"], 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1}) r5 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000600)) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000001480)) 4m31.712120954s ago: executing program 4 (id=930): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) syz_clone(0x40000000, 0x0, 0x51, 0x0, 0x0, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpid() fcntl$setownex(r4, 0xf, &(0x7f0000000100)={0x2, r5}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r3, 0x8, r6) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x540004}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x40040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="186e00000f000000000000008125aa675a69bf682237dfe0070000000632ff000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000002843f0fff0ffffff"], &(0x7f0000000300)='GPL\x00', 0xa7, 0xa4, &(0x7f0000000480)=""/164, 0x0, 0x33, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[r3], &(0x7f0000000400)=[{0x4, 0x4, 0x1}, {0x1, 0x2, 0xd, 0xb}, {0x5, 0x4, 0xd, 0x5}], 0x10, 0x8, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r7 = socket$inet6(0xa, 0x3, 0x3c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)={[{0x2b, 'cpuset'}]}, 0x8) sendmmsg$inet(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001200)="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", 0x299}, {&(0x7f0000000640)="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", 0x297}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea90001000038d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409d17ff6d5cca97", 0x47}, {&(0x7f0000002e80)="f610e61ac81cc3edc86f05f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3", 0x34}, {&(0x7f0000000040)="2054ce9fa34fbc4a1d8599d1a76a4eed8f72f60371dddce7359a1148790a0c992a07daee0eb1228fb2f9f181950dc0e31e832382fff7f4ddad1cfcd672", 0x3d}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x44804) 4m29.870202893s ago: executing program 4 (id=934): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) io_setup(0x7, &(0x7f0000000280)=0x0) io_pgetevents(r3, 0x4, 0x4, &(0x7f0000000200)=[{}, {}, {}, {}], &(0x7f0000000180), 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000000)={&(0x7f0000000040)=[{0x0, 0xaa01, 0x0, 0x0}, {0x23, 0x0, 0x0, 0x0}], 0x2}) 4m23.585620622s ago: executing program 2 (id=948): socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x2eb0, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000186800000000000090737c73267beee600000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x58}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000001080)='writeback_bdi_register\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000000)={0xfc, {"a2e3ad21ed0d1bf91b29420987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f31096c060890e0878f0e1ac6e7049b096e959b509a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b074b0d36cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130f91850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f4077fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b21052010689af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153fae46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c343f7f140f319539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474b0679dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691951264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d984836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) chmod(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0xb, 0x100008f}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) 4m21.987927313s ago: executing program 2 (id=951): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/udplite6\x00') preadv(r2, &(0x7f0000000100)=[{0x0}], 0x1, 0x4c, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4000, 0x2}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x6c, 0x0, 0x3, 0x1}, 0x8) 4m21.276088982s ago: executing program 2 (id=953): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000004c0)={0xbe, 0x0, 0x1}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r5 = dup(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x40c000, 0x0) syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x101000) ioctl$BLKRRPART(r5, 0x125f, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="000000009dea1e79a30af02f94c23b6e32e469bc45d54943555ece5a45895fee7002beafd57cb5b68f44a4da5a2fb12dee1202ca8ca8cb24e980cf46fcbb0c604666b179ca1347e8516ffb31b2a189421a72af8f7e36b1f0a1f3677b111cd10f0f8a555e47c5da234438e26c8c4be93557efa34e4d9f4f2729478ff9232247b356e37aabc617", @ANYRES16, @ANYBLOB="01002abd7000fcdbdf252100000008000300", @ANYRES8=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000540)={[0x8aba, 0xca26, 0x4, 0xd646, 0x7, 0xf, 0x6, 0x1ff, 0x7ff, 0x8, 0x8000000000000001, 0x2, 0xffff, 0x101, 0x5, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) 4m17.998887517s ago: executing program 2 (id=957): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_complete(r1) recvmsg$unix(r3, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000040), 0x4) syz_clone(0x108000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(r0, 0x47f5, 0x0, 0x0, 0x0, 0x0) 4m15.26831998s ago: executing program 2 (id=963): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000380)=0x3) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @time={0x900}, {0x3}}, {0x0, 0x0, 0x0, 0x0, @time}], 0x38) 4m14.965920012s ago: executing program 2 (id=964): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000ffff667f00000000090000000897010001000000950000000000000085000000ce000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5c02, &(0x7f0000000300)={0x0, 0xb2a9, 0x0, 0x6, 0x2}, 0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x20, 0x0, r0}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) chmod(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0xb, 0x100008f}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000002) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0xffffff00, 0x0, 0xff], 'veth0_virt_wifi\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x87}, 0x0, 0x130, 0x168, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}, {0x100}}}, @common=@inet=@l2tp={{0x30}, {0x4, 0x0, 0x3, 0x1, 0x9}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x6, 0x7}, {0x1, 0x1, 0x3}, {0x1, 0x0, 0x4}, 0x4, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x368) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2, '\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000003c0)={0x600, 0x0, 0x1d}) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r8, 0x0, 0x61, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r0, 0x0, 0xa, 0x0, &(0x7f0000000a40)="070808d6aecb899c9c14", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x32}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) mount(0x0, &(0x7f00000003c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 4m14.868223127s ago: executing program 32 (id=934): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) io_setup(0x7, &(0x7f0000000280)=0x0) io_pgetevents(r3, 0x4, 0x4, &(0x7f0000000200)=[{}, {}, {}, {}], &(0x7f0000000180), 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000000)={&(0x7f0000000040)=[{0x0, 0xaa01, 0x0, 0x0}, {0x23, 0x0, 0x0, 0x0}], 0x2}) 4m8.753660396s ago: executing program 5 (id=966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x2000000b) io_uring_setup(0x1e0e, &(0x7f00000000c0)={0x0, 0x84b2, 0x400, 0x1, 0xfe}) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0x1, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x0, @pix={0x0, 0xcf6, 0x34424752, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd6bfcaa361f2f368}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r7, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r10, 0x4bfa, &(0x7f0000000080)) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000200)=ANY=[]) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15) 4m6.200592983s ago: executing program 5 (id=987): timer_create(0x2, 0x0, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x3, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) userfaultfd(0x0) mkdir(0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 3m59.504326203s ago: executing program 33 (id=964): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000ffff667f00000000090000000897010001000000950000000000000085000000ce000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5c02, &(0x7f0000000300)={0x0, 0xb2a9, 0x0, 0x6, 0x2}, 0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x20, 0x0, r0}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) chmod(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0xb, 0x100008f}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000002) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0xffffff00, 0x0, 0xff], 'veth0_virt_wifi\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x87}, 0x0, 0x130, 0x168, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}, {0x100}}}, @common=@inet=@l2tp={{0x30}, {0x4, 0x0, 0x3, 0x1, 0x9}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x6, 0x7}, {0x1, 0x1, 0x3}, {0x1, 0x0, 0x4}, 0x4, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x368) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2, '\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000003c0)={0x600, 0x0, 0x1d}) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r8, 0x0, 0x61, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r0, 0x0, 0xa, 0x0, &(0x7f0000000a40)="070808d6aecb899c9c14", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x32}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) mount(0x0, &(0x7f00000003c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 3m50.806006589s ago: executing program 34 (id=987): timer_create(0x2, 0x0, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x3, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) userfaultfd(0x0) mkdir(0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 3m0.337241084s ago: executing program 3 (id=1158): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e0048000280080001001000000028000580180004"], 0x80}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @private=0xa010101, 0x2, 0x1, 'ovf\x00', 0x0, 0xc, 0x50}, 0x2c) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000034d564b"]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x4e21, @private=0xa010100}, 'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x24) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x2000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0xfffffffe, 0x3c}, 0x0, @in=@private=0xa010101}]}]}, 0xfc}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r11, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000080)=0xfffffffffffffc53) 2m59.225819903s ago: executing program 3 (id=1162): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000140), 0x80800) socket$netlink(0x10, 0x3, 0x15) syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x400000) epoll_create1(0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x13f}}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r4}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 2m59.031684471s ago: executing program 3 (id=1165): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$FITHAW(r2, 0xc0045878) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000100)=0x8) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f00000000c0)=0x5) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) writev(r4, &(0x7f0000000000), 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000000)=0x7, 0x4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000040)=0x45ce, 0x4) sendto$inet(r6, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvmsg(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) 2m57.778457304s ago: executing program 3 (id=1167): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002700)='./file0/../file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000b80)={0x3, 0x0, [{0x4, 0x73, &(0x7f00000000c0)=""/115}, {0x1000, 0x93, &(0x7f0000000a00)=""/147}, {0x5004, 0x8a, &(0x7f0000000ac0)=""/138}]}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000003a000b0000000000000000000400000004000000100001800c0010"], 0x28}}, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2m57.073864349s ago: executing program 3 (id=1169): r0 = syz_open_procfs(0x0, &(0x7f0000002200)='net/udp\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1, 0x180, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r1, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x21, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x220043a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r2, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) 2m55.242355063s ago: executing program 3 (id=1171): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x1c, 0x31, 0x103, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@typed={0x4, 0x4c}]}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r8, @ANYBLOB="010065bd7000fcdbdf254f00000008000300", @ANYRES32=r7, @ANYBLOB="48007a8014000100c396d979a8f802a09c5d7bfaeb3575f21c0002002c8b2ddcc0a3a020196b852ff1e5776edd2fed6a243a33220c000300b38b3e2d8514cc07080004000500000030007a800800040007000000240001006b367eca9776d5c92ac3b99cce28c8dbdebd62217f9c5f46d4b1a11c682b40d61c007a800c000300e028aa46e44ee6830c0003009cf7debf7cdf5a207c007a80080004003465e91c0c0003004a15"], 0x12c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r5, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x58}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x16}}}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040011}, 0x8814) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000031000701000000000000000001"], 0x20}}, 0x0) 2m54.881495971s ago: executing program 35 (id=1171): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x1c, 0x31, 0x103, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@typed={0x4, 0x4c}]}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r8, @ANYBLOB="010065bd7000fcdbdf254f00000008000300", @ANYRES32=r7, @ANYBLOB="48007a8014000100c396d979a8f802a09c5d7bfaeb3575f21c0002002c8b2ddcc0a3a020196b852ff1e5776edd2fed6a243a33220c000300b38b3e2d8514cc07080004000500000030007a800800040007000000240001006b367eca9776d5c92ac3b99cce28c8dbdebd62217f9c5f46d4b1a11c682b40d61c007a800c000300e028aa46e44ee6830c0003009cf7debf7cdf5a207c007a80080004003465e91c0c0003004a15"], 0x12c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, r5, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x58}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x16}}}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040011}, 0x8814) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000031000701000000000000000001"], 0x20}}, 0x0) 11.311915617s ago: executing program 7 (id=1690): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) syz_open_dev$video4linux(&(0x7f0000000000), 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x12, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb757, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed2, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net\x00') fstat(r6, &(0x7f0000004bc0)) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f00000003c0)={'team_slave_1\x00'}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000240)=0x0) syz_open_procfs$userns(r7, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x48, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000014) ptrace(0x10, 0x1) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @sdr={0x30323953, 0xc}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 8.754938254s ago: executing program 7 (id=1695): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000e500000000200003800800010000000000140002007663612e5504a474dcefe3902020c3c0"], 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000120000000800090000580000080008000742000018000180140002007465616d5f736c6176655f30"], 0x3c}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @loopback}, &(0x7f00000001c0)=0x7) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x10014}, 0x20008058) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000001c0), 0x2, r7}, 0x38) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fcffffff7b8a07ff00000000bfa200000000000000020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00001600060000000000000007010000f8ffffffb7020000080000003703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r11}, 0x10) bpf$MAP_CREATE(0x18000000, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rss_stat\x00', r9}, 0x10) r12 = gettid() process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) 7.799604285s ago: executing program 7 (id=1698): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000e401"], 0x68}}, 0x0) r0 = io_uring_setup(0x1de0, &(0x7f0000000440)) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000440), 0x10) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) name_to_handle_at(r3, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=ANY=[], 0x0, 0x200) accept4$unix(r2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) unshare(0x20000400) r5 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x20200) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, 0x0}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r4, 0x7ac, &(0x7f0000000280)={&(0x7f0000002000)={{@host, 0xd}, {@any, 0x10001}, 0x400, "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"}, 0x418, 0x7}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x1a, &(0x7f0000000300)={0x0}, 0x1) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) syz_io_uring_setup(0x5799, &(0x7f0000000180)={0x0, 0xfe49, 0x20, 0x1, 0x3e8, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000200)) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @mcast2, [0x0, 0x0, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2b}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x5, 0x4}, {0x0, 0x2, 0x2}, {0x2, 0x3, 0x4}, 0xeb, 0xe9}}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, [], [0x0, 0x0, 0xffffffff], 'vxcan1\x00', 'gre0\x00', {0xff}}, 0x0, 0x228, 0x258, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@local, [0xffffffff, 0xffffffff, 0xff000000, 0xffffffff], 0x4d6, 0x3506, 0x2, 0x0, 0x1, 0x14}, {@ipv6=@private0, [0xffffffff, 0xffffff00, 0xff, 0xff000000], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0x253ac0bc1b069d33, 0xffffffff, 0xffffff00], 0x4d4, 0x3500, 0x3b, 0x0, 0x1, 0x2}, {@ipv4=@broadcast, [0xffffff00, 0xffffffff], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0x0, 0xffffffff, 0x0, 0xffffffff], 0x4d3, 0x0, 0x8, 0x0, 0x1}, {@ipv6=@mcast2, [0x0, 0xffffffff, 0xffffff00, 0xff], @ipv4=@multicast1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], 0x4d4, 0x3507, 0x3c, 0x1, 0x18, 0x10}], 0x1, 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x10000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r7, 0x4b4a, &(0x7f0000000440)=""/252) 7.702397086s ago: executing program 6 (id=1700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x400000, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 7.019850303s ago: executing program 6 (id=1703): r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000440)={&(0x7f0000000480)=""/77, 0x328000, 0x1000, 0x0, 0x576c2096e49a19e8}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0) symlinkat(&(0x7f0000000480)='./file0/file0\x00', r3, &(0x7f00000000c0)='./file0\x00') link(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 6.926301893s ago: executing program 7 (id=1704): socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000080)=0xffffffffffffffd9) r3 = socket$vsock_stream(0x28, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r4 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240), 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000002000000040000000200000000000000", @ANYRESDEC=r2, @ANYBLOB="00000000000000000000000000000000000000021b6800", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x163902, 0x0) write$sequencer(r10, &(0x7f0000000200)=ANY=[@ANYBLOB="81010000000000009200b0"], 0x10) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2000000}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0xab00, 0x0, 0xfff, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @empty}}}}) read$sequencer(r10, &(0x7f0000000040)=""/81, 0x51) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r9, &(0x7f0000000240)="402b943c95206d318a5c9debe5c5ad92f57f627f9a0b7395a3a89443ada609c24f4e702eaff15c41586f8c631f1eebea77f500", &(0x7f0000000300)=@tcp6=r6, 0x4}, 0x20) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000183b9220b1134200165801024b010902240001000000000904400005008bb5000905020905"], 0x0) 6.925976695s ago: executing program 0 (id=1705): socket$nl_netfilter(0x10, 0x3, 0xc) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x202002, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xfff3}}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000380)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000200)=0xffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x5, 0x2004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, &(0x7f0000000380)=0xa0000) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000040)) 5.754422059s ago: executing program 6 (id=1708): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8, 0x0, 0x18}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) 5.753981517s ago: executing program 0 (id=1709): r0 = syz_open_dev$midi(&(0x7f0000000740), 0x1, 0x40c0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000007c0)={0x3, &(0x7f0000000780)=[{0x8, 0x9, 0x8, 0x9}, {0x0, 0x1, 0x6, 0x80000000}, {0x1, 0x1, 0x6, 0x3}]}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000800)={0xffffffffffffffff}) (async) r4 = socket$caif_seqpacket(0x25, 0x5, 0x2) (async) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) (async) r6 = gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000980)=0xe8) (async) stat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a80)={{{@in=@multicast1, @in6=@ipv4={""/10, ""/2, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f0000000b80)=0xe8) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, &(0x7f0000000c00)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c40)={0x0}, &(0x7f0000000c80)=0xc) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000cc0)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000dc0)=0xe8) (async) r13 = getegid() (async) r14 = getpgrp(0x0) (async) fstat(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000e80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x0}}, './file0\x00'}) (async) r17 = syz_open_dev$ptys(0xc, 0x3, 0x1) (async) r18 = syz_open_dev$mouse(&(0x7f0000000ec0), 0x2, 0x104202) (async) r19 = bpf$ITER_CREATE(0x21, &(0x7f0000000f00), 0x8) (async) r20 = syz_open_pts(0xffffffffffffffff, 0x2a00) (async) r21 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r22 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000f40), 0x800) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000f80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) (async) r24 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000fc0), 0x2, 0x0) (async) r25 = syz_socket_connect_nvme_tcp() r26 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000001000)) (async) r27 = userfaultfd(0x2) (async) r28 = socket$tipc(0x1e, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001180)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000080)="4a77eb71dd1223f891da548c25b64d68f82097d14bfffd0de8246ec3096fa9f1eafd07d5376129f326cd07003b852c6c2d23efc29535048430ccf86ec21ded76a9a8dc25f82d58d8000d45421b3bc7ff91c9f8f79dc1d9b099bd0d09d053a8bec0423bea74483113bc0897307499d21bd7a0", 0x72}, {&(0x7f0000000100)="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", 0xfb}, {&(0x7f0000000200)="e7b671546ad833e5be833a1051de7c17d69de5ba151d64774f158e438e3831d39aa8ebe90792e00ef378d18f8f7d5429271eff5e786b69615eba12e264b6c4249dcc929d693b3678c3dc02cf3579100ef8c893c0457f292e1f03302fa54c6e87c01855d6d44c451f3d9c046b7210c7fb062b76950b0c15ab974abb025f6d2a850dce7984a03137330abba06673", 0x8d}, {&(0x7f00000002c0)="777e902b8b10f8264f2cd53b8c674980c7b2fafe6f02ec582dbd4daeeb2d795867483f542cb60d5780e79fcc6057b93656636393b7772b", 0x37}, {&(0x7f0000000300)="192ffb5d338fd46b0b9200d598425e53c27c59e1fa583fb2dee00c79306aef121a297983024e07fed652622907c0197e99bca7bdb8847809f1bbd36c0f5852a20b940d13cdbec548e0647b38df342144afa73d75cd3fac0ba16aeae215d33a6c0304ed361557cbc701c3e914d8222a2e3fd12158764bc7e9f8aff735797331b263d0a3a7f1af98e5fda55a72d367ed5daf1ea7d6fccf09cb6ad8e7ef128a68c3906b860f2ff580af04379c940f9770d68e4958547cb8506b9e44fd5cd0568492950669b184309229602a89d2785890a5673a19020e508e79c2102417c9c8b42b5d467f5cc8a9f0bbcf64380a3f8d4e6e6d07a0b0a8", 0xf5}, {&(0x7f0000000400)="19ef7ce87fa7a3f408e83a04dd30cb6f895a6aee2f8f5aec47d4e6dbf0a966387488882d146b1d03d48e43d4c5f002478aac51f264b1428616981294a2bd1c0a242542f76a94b216fb22f41e9b6fd09d08dd4deeb0abb4ce6c1ef160886ee3e0bd850577de31162cd34b16bed57e9652029781f0695c49f09b101bca60010a25974f761d08a16e7ddedcf2d485803f74d4404f8d7facd5d4d479968b34d965093a687d8e5891ea276d01", 0xaa}, {&(0x7f00000004c0)="d26cef857ff64c6662a0f7061ea4b8e2c99d6c990cca7ca3020f42651dc6ac7ea3d74fc917b066bd2f119775f9bc2dd521fd24c6c966bf4b3c3593749db3291106192239078f4d46e9cbe55a0393ede389c24691a4b07d297d2952d9df1868acaeec683f25fc929417f25ff667566589ebff45f4298ba2223a4afa52ba0d55136828f664009880536497f33e60f68c548ca2fc46f9af3d4a916e903501c58ced0a065b5f51db4f4feb7c51e35b79ad54f1d23431bf5579b796a0cefd677c24ef5cd9ee73bd5b9eb93d84d9a82c2d1016153175330f10b25a596e641915941e1968ffe178fa787dde211f073a859a", 0xee}, {&(0x7f00000005c0)="8a3130a8ad5ee6d14ee069e28c6449f921456db5a05cc279d59aceaa77cb639add0e5970610b1fa1cfa4fcf354ba10ad909e2f8221a29fcd304f1487753cf7458dcfffc14d29d9efe1746818a1aedd6e07fbc9213c3a263899e4b11c73b0f81bd184fa21f6a2d8aeac5c51e112c2e36439c67d2d38bf149a53b79b31349420fc1a8bac3c81cde919a987655f19da951c145f6f7dfb03fab2dfb2346bbd1ba6a1e1ea0788176249088ff539bdbcbf36454772607e03eeca98ffdc98d5b16e4ddfb4204adb3a5bf7f2df84391e6056de20615b8e9bae84091182e8a3e3436cce56954e77fbea7009d7405867ec01f201185dbc21850274639ddf84fc2caa37", 0xfe}], 0x8, &(0x7f0000001040)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x20, 0x1, 0x1, [r2, r3, r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x34, 0x1, 0x1, [r17, r18, r19, r20, 0xffffffffffffffff, r21, r22, 0xffffffffffffffff, r23]}}, @rights={{0x34, 0x1, 0x1, [r24, r25, 0xffffffffffffffff, r26, r27, r28, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128, 0x40}}], 0x1, 0x8000) 5.702453285s ago: executing program 6 (id=1710): r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0x0, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x1}, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000340)={r3}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000140)={r3}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x4040) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0) 5.690333192s ago: executing program 0 (id=1711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a4000000000"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x2000000b) io_uring_setup(0x1e0e, &(0x7f00000000c0)={0x0, 0x84b2, 0x400, 0x1, 0xfe}) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0x1, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x0, @pix={0x0, 0xcf6, 0x34424752, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd6bfcaa361f2f368}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r7, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r10, 0x4bfa, &(0x7f0000000080)) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000200)=ANY=[]) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15) 5.410474369s ago: executing program 0 (id=1712): r0 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='.\x00') bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="71756f74612c00ba9fe7f7ffd2477f5543e251a9bbbf53faf28c7e9b4fb0882336b7dc657180b32c519f64645b5a4d537821ad8d5f756d715fe34a4f0b03a5425b61ed9a791e7b4ca90d159d31ce1d36dbe070e311dfb9bfde93e120691fa5f6428ba7811c9f96e0e441d237c4e8d4ea2f627e7cfa00be99134da07454a248ad4c7430dc59c6927bcdcf479e25cbc4e2bfd407b08911bcefcf407c08084c5b4c02038d271eb7651ba585510b949089ea3c5c2f3bc0d945aa839c7ef1c9455243aa4ded03c3d8efee3ab1d677bfc090db33f9"]) close(r0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x1, r0, 0x0, 0x0, 0x0, 0x2020, 0x1, {0x3}}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100802a, &(0x7f00000004c0)={[{@mode}], [{@dont_measure}, {@dont_measure}, {@subj_role={'subj_role', 0x3d, '$),+'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '$$-[\'$\t+\\'}}, {@fsname={'fsname', 0x3d, 'blkio.throttle.io_serviced_recursive\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@obj_type={'obj_type', 0x3d, 'blkio.throttle.io_serviced_recursive\x00'}}]}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) preadv2(r7, &(0x7f0000000340)=[{&(0x7f0000000380)=""/258, 0x102}], 0x1, 0x0, 0x8, 0x31) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c0eb010018000000000000000c0000000c00906802000000000000000000000d000000000000e3435ea91a0000f409eb5ac95a9814f4dad7a07ffb3ecf731158a44b5aa9aee4fa8a02fd010000003481fbf511ef903bd483f85427db25d748e1d1ba83"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000180)={@remote, @loopback, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@deltclass={0x0, 0x29, 0x8, 0x70bd2b, 0x50d2, {0x0, 0x0, 0x0, r11, {0x0, 0xf}, {0xfff3, 0x1}, {0xffea, 0x3}}, [@TCA_RATE={0x0, 0x5, {0x0, 0x7}}, @tclass_kind_options=@c_multiq, @TCA_RATE={0x0, 0x5, {0xf4, 0x4}}, @TCA_RATE={0x0, 0x5, {0x13, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x11) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018086dd1700d1bd", 0x33fe0}], 0x1}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) 5.218351211s ago: executing program 8 (id=1714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x400000, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) readv(r1, &(0x7f0000001900), 0x0) write$input_event(r1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 5.217977029s ago: executing program 0 (id=1715): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x7fffffff, 0x4) 4.52465495s ago: executing program 0 (id=1716): socket(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88ac5fb5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 4.507696285s ago: executing program 6 (id=1717): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000e500000000200003800800010000000000140002007663612e5504a474dcefe3902020c3c0"], 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000680)={0x0, 0xfff0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000120000000800090000580000080008000742000018000180140002007465616d5f736c6176655f30"], 0x3c}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @loopback}, &(0x7f00000001c0)=0x7) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x10014}, 0x20008058) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000001c0), 0x2, r7}, 0x38) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fcffffff7b8a07ff00000000bfa200000000000000020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00001600060000000000000007010000f8ffffffb7020000080000003703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r11}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rss_stat\x00', r9}, 0x10) r12 = gettid() process_vm_writev(r12, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) 4.483715557s ago: executing program 8 (id=1718): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0180000000000000a7ea3163fd3bc518194b120c1e73d5e3fc4ad2841ef4f6a3fd7c59ccb785025f0500eab21a41598b3504ff87cbfd10f3c080b63385a7015d3a32ed6b5217cdbb6f9eb2ea7a28898200c6000000000000400d66293ba1ca0b12fb3fa9932e7da5ab01ff15cc079a6284c7012add3162b98622ed565c8a1d5623d9d8e53d9c"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.310156159s ago: executing program 36 (id=1716): socket(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88ac5fb5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 4.009975714s ago: executing program 7 (id=1720): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newlink={0x40, 0x10, 0x401, 0xfffffffd, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0xe}]}}}]}, 0x40}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x86580000000]}, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES8=r1], 0x21c}}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af21, 0x0) 3.817374016s ago: executing program 6 (id=1722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a4000000000"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x2000000b) io_uring_setup(0x1e0e, &(0x7f00000000c0)={0x0, 0x84b2, 0x400, 0x1, 0xfe}) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0x1, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x0, @pix={0x0, 0xcf6, 0x34424752, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd6bfcaa361f2f368}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r7, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r10, 0x4bfa, &(0x7f0000000080)) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000200)=ANY=[]) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15) 3.534230719s ago: executing program 7 (id=1723): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x3, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) 3.533729361s ago: executing program 1 (id=1724): openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x3fffffffd, 0x28100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000003c0)=[0x0], 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802800018007000100637400001c000280050003000600000008000140000000170800024000000008240001800a000100726564697200000014000280080001400000001708000348000000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYRESOCT=r5, @ANYRES32=r0, @ANYRES8=r7, @ANYRES64=r6, @ANYRESOCT=r1, @ANYRESOCT=r6, @ANYBLOB="f816c58f01c69c4f92038c7462f49104d9319f732ff177c5b737e4c96e1fb46e936422e224d113862d4498061b0de15f213d732ac959143753eab0793ad9a0b918c3d6b2f8e8404c483898c629b3bb30d2e5aaf4c8b84bdc54cc9ab77aa2b8b1565be1cdfe", @ANYRES16=r5, @ANYRES8=r3, @ANYRESDEC], 0xff2e) 2.286028086s ago: executing program 8 (id=1725): r0 = userfaultfd(0x801) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41ff8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c00)={0x1, 0x0, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "18f19185e9e9e293"}}, 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x922, 0x0, {0x0, 0x2710}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socket(0x10, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x2) unshare(0x24020400) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="696e6f646533322c7065726d69745f646972656374696f2c69745f646972656374696f2c7065726d69745f646972656374696f2c7375626a5f747970653d2eb82c6673757569643d64643136663866a32d333600302d66e164362d640032382d36313662313563332c736d61636b6673666c6f6f723d212c646f6e745f686173682c7365636c6162656c2c646f6e745f6d6561737572652c646f6e745f686173682c00"]) 2.187309627s ago: executing program 1 (id=1726): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mincore(&(0x7f00005b2000/0x3000)=nil, 0x3000, 0x0) r1 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) fdatasync(r1) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) r2 = socket(0x200000000000011, 0x2, 0x0) bind$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000004bc0)={0x2020}, 0x2020) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x38, 0x2b, 0x0, @remote, @local, {[@hopopts={0x87}, @routing={0x0, 0x2, 0x2, 0x0, 0x0, [@private2]}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x822b01) dup(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) 2.090073048s ago: executing program 8 (id=1727): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_GET(r2, 0x560f, &(0x7f0000000000)={0x1, 0x1, 0x0, 0xf, 0x0, 0x0}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040), 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000280)="3b2a938de8bb24f5622a1fa7b453a6e0c8476a4040fe23973315b7009987b3f2581e83e361098414e7bcc3", 0x2b, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x20, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x3}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x1, 0x8d43}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000e500000000200003800800010000000000140002007663612e5504a474dcefe3902020c3c0"], 0x34}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000120000000800090000580000080008000742000018000180140002007465616d5f736c6176655f30"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x10014}, 0x20008058) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000001c0), 0x2, r11}, 0x38) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x14, &(0x7f0000000a00)=ANY=[@ANYRES64, @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000fcffffff7b8a07ff00000000bfa200000000000000020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00001600060000000000000007010000f8ffffffb7020000080000003703000000000000850000001000000095", @ANYRESDEC=r4, @ANYRES16=r1, @ANYRES8=r7, @ANYRES8=r10], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.257557219s ago: executing program 1 (id=1728): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x400000, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) readv(r1, &(0x7f0000001900), 0x0) write$input_event(r1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 1.11274219s ago: executing program 8 (id=1729): unshare(0x6020400) r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='reiserfs\x00', 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) write$cgroup_devices(r6, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan4\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r7}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x1d, 0x0, 0xc700}, 0x18, &(0x7f0000000940)={&(0x7f00000008c0)='4', 0x1a000}, 0x2}, 0x0) userfaultfd(0x1) 550.513455ms ago: executing program 1 (id=1730): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/471], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 453.25588ms ago: executing program 1 (id=1731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x210001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/102386, 0x18ff2}, {&(0x7f0000000080)=""/246, 0xf6}, {&(0x7f0000000000)=""/15}], 0x10000000000002ca, 0x0, 0x3) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000600)={0x0, 0x7f390004, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000020605020000200000000000000000001400078008001340040000000800124000060000050001000700000013000300686173683a6e65742c6966616365000005000440000000000900020073797a3100000000050005000a"], 0x60}}, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x109280, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x0) 169.845432ms ago: executing program 1 (id=1732): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18002200000000000000000000000000850000007b0000ebdf5c00000f000000950000000000000066138b196d99bbce10ec9bcbc980a393ea5e3f03c9d5958cd9f8bfa85ceb"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000"/20, @ANYRES32=0x0, @ANYBLOB="000000000000050030f712800c0001006d6163766c616e0020000280080001000000000008000300000000000a000400aaaaaaaaaabb0000"], 0x50}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r8, @ANYBLOB="380030803400018008000100000000002800038008000200030000000c0004000000000000000000060001"], 0x54}}, 0x0) r9 = io_uring_setup(0x70f8, &(0x7f00000005c0)={0x0, 0x58b0, 0x0, 0x0, 0x4}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000002b000305f3000000000000000000000042de7c68bf8f04c6705bb4ffc067272ff87ea4662be59cafd9cb21be3882a6516d618f776c1c680cdd40", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010069703667726500002000028005000800040000001400070000000000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x8658872b93ccdf55}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) write$sndseq(r1, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfd, @time={0x1}, {}, {}, @result}], 0x1c) r11 = accept(r0, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) close(0xffffffffffffffff) r12 = socket$inet(0x2, 0x3, 0x4) r13 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}}}]}, 0x78}}, 0x0) sendmsg$GTP_CMD_GETPDP(r11, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042700fddbdf250200000008000100", @ANYRES32=r14, @ANYBLOB="08000400ac1414aa08000700", @ANYRES32, @ANYBLOB="08000500e0000002080005000a01010114000c00ff01000000000000000000000000000114000c00fc0200000000000000000000000000010800050064010101"], 0x6c}}, 0x20000000) 0s ago: executing program 8 (id=1733): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022400010000000000000921000208012294030905810300000000005d27f761aa34b539f3421800000000000000"], 0x0) syz_usb_connect$uac1(0x1, 0x122, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x110, 0x3, 0x1, 0x8, 0x80, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x4}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x305, 0x4, 0x2, 0x4}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x1, 0x3, [0x7, 0x7, 0x6], 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x204, 0x2, 0x9, 0xcf38, 0xf7, 0x3}, @processing_unit={0x8, 0x24, 0x7, 0x2, 0x5, 0x10, '3'}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x304, 0x4, 0x1, 0x7}, @selector_unit={0x6, 0x24, 0x5, 0x6, 0x2, "ef"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x4}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x2, 0x30ee, 0x1, "f8a9d1dbf9bbdc"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7, 0x7dde, 0xfa, "09709e615342167f8a"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0xff, "b579", "00f5f1"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x3, 0x65, 0x7b, 'S'}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x4, 0x0, {0x7, 0x25, 0x1, 0x83, 0x81, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0x8, 0x3, "b8"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0x40, 0x8, "", 'Y'}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x3, 0x7f}, @as_header={0x7, 0x24, 0x1, 0x3, 0x14, 0x1001}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x3, 0xff, "cc32dd"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x0, 0xfffc, 0x1, ' ('}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x5, 0x6, {0x7, 0x25, 0x1, 0x80, 0x82, 0x7ff}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x130, 0x8, 0x4, 0x7, 0x10}, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="050f13000507100202110200071002043107003f32d4a4f4bda0ee8fd68fe313a90545d26f612559156855f516a0b299f4c4d700f6870c4b114ed47be6b1ee25869763cd381d31c00e5dd27396e61316f46265ec763660142d03f615708238a17148788fcfe526ba463d769fc8af051b23e505c6cb8d4a978d62171c777af80b2836e625b6d552e20b83e5bfa6ff6bbcc7e0027c5021029386f81a30e62a0cd0cd3df8beca633899510866431f7258507f7343af0a9f253103e31bc6c9b08880f073000000"], 0x6, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x44f}}, {0x4d, &(0x7f00000003c0)=@string={0x4d, 0x3, "f0e8483f58b8a8b5daeda537a9065e9509f6d976268b68ff1fcbc9045b6141fe56b2c4016897595f8cb8507df2a2c99ce8b21964bd3d3e67956ff36e54edca3335b9ee1ae797d1764ae060"}}, {0x45, &(0x7f0000000440)=@string={0x45, 0x3, "2ec74ecb257fc242649f6704305348b4d9f8587886271cb02a327c1e2f15dafa77c81028aa7840099a262900573cad628dcc030572c3a193d022fe28a576515c5e5575"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x380a}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x40, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c841}, 0x20004000) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) timer_create(0x0, 0x0, 0xfffffffffffffffe) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f00000000c0)={0x1, 0x100, 0x3, 0x300, 0x9, 0x800}) kernel console output (not intermixed with test programs): point 0x81 has invalid wMaxPacketSize 0 [ 544.434855][ T5881] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 544.438434][ T5883] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 544.459535][ T5883] usb 7-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 544.468659][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.470371][ T5879] usb 8-1: USB disconnect, device number 7 [ 544.484020][ T5883] usb 7-1: config 0 descriptor?? [ 544.596661][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.614640][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.625081][ T5881] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 544.634174][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.650137][ T5881] usb 2-1: config 0 descriptor?? [ 545.124825][ T5883] usbhid 7-1:0.0: can't add hid device: -71 [ 545.131698][ T5883] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 545.154538][ T5883] usb 7-1: USB disconnect, device number 7 [ 546.196366][ T5881] hid (null): bogus close delimiter [ 546.344195][T10494] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 546.455253][ T5879] usb 1-1: USB disconnect, device number 26 [ 546.490526][ T5881] usb 2-1: language id specifier not provided by device, defaulting to English [ 546.737633][T10505] netlink: 'syz.7.1216': attribute type 8 has an invalid length. [ 546.746974][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1216'. [ 546.759917][T10501] xt_bpf: check failed: parse error [ 546.842048][T10507] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1218'. [ 548.276183][T10517] FAULT_INJECTION: forcing a failure. [ 548.276183][T10517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.289758][T10517] CPU: 1 UID: 0 PID: 10517 Comm: syz.7.1220 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 548.300571][T10517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 548.310662][T10517] Call Trace: [ 548.313963][T10517] [ 548.316933][T10517] dump_stack_lvl+0x241/0x360 [ 548.321679][T10517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 548.326925][T10517] ? __pfx__printk+0x10/0x10 [ 548.331572][T10517] ? __pfx_lock_release+0x10/0x10 [ 548.336663][T10517] should_fail_ex+0x3b0/0x4e0 [ 548.341386][T10517] _copy_from_user+0x2f/0xc0 [ 548.346022][T10517] copy_msghdr_from_user+0xae/0x680 [ 548.351272][T10517] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 548.357140][T10517] __sys_sendmmsg+0x36d/0x730 [ 548.361877][T10517] ? __pfx___sys_sendmmsg+0x10/0x10 [ 548.367137][T10517] ? __pfx_lock_release+0x10/0x10 [ 548.372223][T10517] ? kstrtouint_from_user+0x128/0x190 [ 548.377668][T10517] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 548.383605][T10517] ? ksys_write+0x229/0x2b0 [ 548.388152][T10517] ? __pfx_lock_release+0x10/0x10 [ 548.393250][T10517] ? vfs_write+0x730/0xd30 [ 548.397806][T10517] ? __mutex_unlock_slowpath+0x21d/0x750 [ 548.403507][T10517] ? __fget_files+0x3f3/0x470 [ 548.408248][T10517] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 548.414286][T10517] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 548.420664][T10517] ? do_syscall_64+0x100/0x230 [ 548.425566][T10517] __x64_sys_sendmmsg+0xa0/0xb0 [ 548.430463][T10517] do_syscall_64+0xf3/0x230 [ 548.435010][T10517] ? clear_bhb_loop+0x35/0x90 [ 548.439734][T10517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.445660][T10517] RIP: 0033:0x7f76ccb7e719 [ 548.450092][T10517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.469720][T10517] RSP: 002b:00007f76caff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 548.478157][T10517] RAX: ffffffffffffffda RBX: 00007f76ccd36130 RCX: 00007f76ccb7e719 [ 548.486164][T10517] RDX: 04924924924924b9 RSI: 0000000020000400 RDI: 000000000000000b [ 548.494166][T10517] RBP: 00007f76caff6090 R08: 0000000000000000 R09: 0000000000000000 [ 548.502250][T10517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.510258][T10517] R13: 0000000000000000 R14: 00007f76ccd36130 R15: 00007fffdd743be8 [ 548.518262][T10517] [ 548.622875][ T5881] uclogic 0003:256C:006D.0014: failed retrieving string descriptor #200: -71 [ 548.959515][ T5881] uclogic 0003:256C:006D.0014: failed retrieving pen parameters: -71 [ 548.967786][ T5881] uclogic 0003:256C:006D.0014: failed probing pen v2 parameters: -71 [ 548.976264][ T5881] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 548.983790][ T5881] uclogic 0003:256C:006D.0014: probe with driver uclogic failed with error -71 [ 549.006221][ T5881] usb 2-1: USB disconnect, device number 31 [ 549.335011][ T5881] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 550.704538][ T5883] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 550.877165][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 550.930632][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.954539][ T5881] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 550.956380][ T5883] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 550.978507][ T5881] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 550.984585][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 550.998773][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 551.012626][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.015744][ T5883] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 551.037522][ T5881] usb 2-1: config 0 descriptor?? [ 551.053591][ T5883] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 551.063442][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.073028][ T5883] usb 8-1: config 0 descriptor?? [ 551.104591][ T9939] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 551.260348][ T9939] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.271960][ T9939] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.289348][ T5910] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 551.297964][ T9939] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 551.322698][ T9939] usb 9-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 551.331839][ T9939] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.341779][ T9939] usb 9-1: config 0 descriptor?? [ 551.468727][ T5910] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 551.498895][ T5883] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 551.507931][ T5910] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 551.524716][ T5883] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 551.540936][ T5910] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 551.553720][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.562514][ T5910] usb 7-1: Product: syz [ 551.566921][ T5910] usb 7-1: Manufacturer: syz [ 551.571584][ T5910] usb 7-1: SerialNumber: syz [ 551.600207][ T5910] cdc_ncm 7-1:1.0: skipping garbage [ 552.393203][ T9939] usbhid 9-1:0.0: can't add hid device: -71 [ 552.400141][ T9939] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 552.411819][ T9939] usb 9-1: USB disconnect, device number 2 [ 552.653950][ T9939] usb 2-1: USB disconnect, device number 32 [ 553.759107][ T5883] usb 8-1: USB disconnect, device number 8 [ 555.356111][ T5910] cdc_ncm 7-1:1.0: bind() failure [ 555.365568][ T5910] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 555.394588][ T5910] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 555.432582][ T5910] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 555.512854][ T5910] usb 7-1: USB disconnect, device number 8 [ 555.600980][ T5881] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 556.010410][T10578] FAULT_INJECTION: forcing a failure. [ 556.010410][T10578] name failslab, interval 1, probability 0, space 0, times 0 [ 556.065816][T10578] CPU: 1 UID: 0 PID: 10578 Comm: syz.0.1239 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 556.076732][T10578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 556.086806][T10578] Call Trace: [ 556.090102][T10578] [ 556.093044][T10578] dump_stack_lvl+0x241/0x360 [ 556.097756][T10578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.103001][T10578] ? __pfx__printk+0x10/0x10 [ 556.107633][T10578] ? fs_reclaim_acquire+0x93/0x130 [ 556.112762][T10578] ? __pfx___might_resched+0x10/0x10 [ 556.118081][T10578] should_fail_ex+0x3b0/0x4e0 [ 556.122876][T10578] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 556.128639][T10578] should_failslab+0xac/0x100 [ 556.133340][T10578] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 556.139100][T10578] __kmalloc_noprof+0xd8/0x400 [ 556.143878][T10578] tomoyo_realpath_from_path+0xcf/0x5e0 [ 556.149452][T10578] tomoyo_path_number_perm+0x23a/0x880 [ 556.154929][T10578] ? tomoyo_path_number_perm+0x208/0x880 [ 556.160598][T10578] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 556.166647][T10578] ? __fget_files+0x29/0x470 [ 556.171288][T10578] ? __fget_files+0x3f3/0x470 [ 556.176011][T10578] security_file_ioctl+0xc6/0x2a0 [ 556.181056][T10578] __se_sys_ioctl+0x47/0x170 [ 556.185663][T10578] do_syscall_64+0xf3/0x230 [ 556.190182][T10578] ? clear_bhb_loop+0x35/0x90 [ 556.194874][T10578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.200773][T10578] RIP: 0033:0x7ff3ec57e719 [ 556.205206][T10578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.224852][T10578] RSP: 002b:00007ff3ed427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 556.233302][T10578] RAX: ffffffffffffffda RBX: 00007ff3ec735f80 RCX: 00007ff3ec57e719 [ 556.241282][T10578] RDX: 0000000020000040 RSI: 0000000000008b2a RDI: 0000000000000003 [ 556.249269][T10578] RBP: 00007ff3ed427090 R08: 0000000000000000 R09: 0000000000000000 [ 556.257514][T10578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.265503][T10578] R13: 0000000000000000 R14: 00007ff3ec735f80 R15: 00007ffdab672e38 [ 556.266888][ T5881] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.273509][T10578] [ 556.273557][ C1] vkms_vblank_simulate: vblank timer overrun [ 556.307884][T10578] ERROR: Out of memory at tomoyo_realpath_from_path. [ 556.344774][ T5881] usb 9-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 556.354218][ T5881] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.368105][ T5881] usb 9-1: config 0 descriptor?? [ 556.377473][ T5881] rndis_host 9-1:0.0: probe with driver rndis_host failed with error -22 [ 557.617461][ T968] usb 9-1: USB disconnect, device number 3 [ 558.034848][ T5879] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 558.974552][ T5879] usb 7-1: Using ep0 maxpacket: 32 [ 558.981703][ T5879] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.992154][ T5879] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 559.001240][ T5879] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 559.011439][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.018342][T10609] netlink: 'syz.8.1247': attribute type 7 has an invalid length. [ 559.019583][ T968] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 559.038777][ T5879] usb 7-1: config 0 descriptor?? [ 559.050218][T10609] netlink: 'syz.8.1247': attribute type 8 has an invalid length. [ 559.074498][T10609] netlink: 4244 bytes leftover after parsing attributes in process `syz.8.1247'. [ 559.174782][ T5910] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 559.201759][ T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.278402][ T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.305567][ T968] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 559.320831][ T968] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 559.368889][ T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.389152][ T5910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.437286][ T5910] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 559.474240][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.525128][ T968] usb 2-1: config 0 descriptor?? [ 559.730463][ T5910] usb 1-1: config 0 descriptor?? [ 559.778017][ T5910] rndis_host 1-1:0.0: probe with driver rndis_host failed with error -22 [ 560.157029][ T5881] usb 1-1: USB disconnect, device number 27 [ 560.207179][ T968] usbhid 2-1:0.0: can't add hid device: -71 [ 560.213596][ T968] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 560.232314][ T968] usb 2-1: USB disconnect, device number 33 [ 560.374586][ T5910] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 560.537199][ T5910] usb 8-1: config 5 has an invalid interface number: 59 but max is 0 [ 560.545602][ T5910] usb 8-1: config 5 has no interface number 0 [ 560.551936][ T5910] usb 8-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=48.89 [ 560.561427][ T5910] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.805034][ T29] audit: type=1326 audit(1731789254.247:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10632 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ccb7e719 code=0x7ffc0000 [ 560.813161][T10638] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1257'. [ 560.870372][ T5910] usb 8-1: string descriptor 0 read error: -71 [ 560.871710][T10640] x_tables: duplicate underflow at hook 2 [ 560.887984][ T968] usb 7-1: USB disconnect, device number 9 [ 560.889161][ T5910] usb 8-1: USB disconnect, device number 9 [ 560.917990][ T29] audit: type=1326 audit(1731789254.257:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10632 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ccb7e719 code=0x7ffc0000 [ 560.978530][ T29] audit: type=1326 audit(1731789254.257:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10632 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f76ccb7e719 code=0x7ffc0000 [ 561.041825][T10638] Bluetooth: hci5: Frame reassembly failed (-84) [ 561.049952][ T29] audit: type=1326 audit(1731789254.257:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10632 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ccb7e719 code=0x7ffc0000 [ 561.107514][ T977] Bluetooth: hci5: Frame reassembly failed (-84) [ 561.272868][ T29] audit: type=1326 audit(1731789254.257:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10632 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f76ccb7d0b0 code=0x7ffc0000 [ 561.600924][ T29] audit: type=1326 audit(1731789254.257:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10632 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f76ccb7ff47 code=0x7ffc0000 [ 561.623234][ C1] vkms_vblank_simulate: vblank timer overrun [ 562.185421][ T29] audit: type=1326 audit(1731789254.257:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10632 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f76ccb7e719 code=0x7ffc0000 [ 562.216431][ T29] audit: type=1326 audit(1731789254.257:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10632 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f76ccb7ff47 code=0x7ffc0000 [ 562.238456][ T29] audit: type=1326 audit(1731789254.257:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10632 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f76ccb7d3aa code=0x7ffc0000 [ 562.260300][ T29] audit: type=1326 audit(1731789254.257:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10632 comm="syz.7.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ccb7e719 code=0x7ffc0000 [ 563.064187][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.078224][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.134571][ T9571] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 563.454621][ T968] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 563.622870][ T968] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 563.631538][ T968] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.658251][ T968] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 563.670371][ T968] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 563.691056][ T968] usb 7-1: Manufacturer: syz [ 563.758598][ T968] usb 7-1: config 0 descriptor?? [ 563.914595][ T968] rc_core: IR keymap rc-hauppauge not found [ 563.923624][ T968] Registered IR keymap rc-empty [ 563.932496][ T968] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 563.975828][T10663] tmpfs: Bad value for 'mpol' [ 563.990979][T10663] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 563.995530][ T968] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input21 [ 564.119920][ T5879] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 564.284762][ T5879] usb 8-1: Using ep0 maxpacket: 8 [ 564.298090][ T5879] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 564.330504][ T5879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.362368][ T5879] usb 8-1: config 0 descriptor?? [ 564.404490][ T1212] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 564.570438][ T1212] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 564.614641][ T1212] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 564.632782][ T1212] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 564.643168][ T1212] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 564.668049][ T1212] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 564.677643][ T1212] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.692123][ T1212] usb 9-1: config 0 descriptor?? [ 564.734755][ T968] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 564.884716][ T968] usb 1-1: Using ep0 maxpacket: 32 [ 564.893205][ T968] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.904969][ T968] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 564.914260][ T968] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 564.923799][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.935657][ T968] usb 1-1: config 0 descriptor?? [ 565.111986][ T1212] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 565.141712][ T1212] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 565.159747][ T5881] usb 7-1: USB disconnect, device number 10 [ 566.249745][ T1212] usb 9-1: USB disconnect, device number 4 [ 566.320435][T10690] ip6gretap0: entered promiscuous mode [ 566.326233][T10690] vlan2: entered promiscuous mode [ 566.333467][T10690] vlan2: entered allmulticast mode [ 566.351656][T10690] ip6gretap0: entered allmulticast mode [ 566.371201][T10690] ip6gretap0: left allmulticast mode [ 566.379965][T10690] ip6gretap0: left promiscuous mode [ 566.545045][ T5879] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 566.564406][ T5879] asix 8-1:0.0: probe with driver asix failed with error -71 [ 566.593840][ T5879] usb 8-1: USB disconnect, device number 10 [ 567.455392][ T1212] usb 1-1: USB disconnect, device number 28 [ 568.641622][T10704] macvlan2: entered allmulticast mode [ 568.649988][T10704] team_slave_0: entered promiscuous mode [ 568.656244][T10704] team_slave_1: entered promiscuous mode [ 568.687471][T10700] kAFS: No cell specified [ 568.707776][T10704] team0: entered allmulticast mode [ 568.714125][T10704] team_slave_0: entered allmulticast mode [ 568.744642][T10704] team_slave_1: entered allmulticast mode [ 568.751203][T10704] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 568.794794][T10704] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 568.871573][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1275'. [ 568.892144][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1275'. [ 568.935605][T10711] netlink: 'syz.8.1275': attribute type 12 has an invalid length. [ 569.065077][ T5879] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 569.776741][T10728] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1282'. [ 569.924891][T10700] netlink: 580 bytes leftover after parsing attributes in process `syz.8.1275'. [ 570.033059][ T5879] usb 8-1: Using ep0 maxpacket: 32 [ 570.086129][ T5879] usb 8-1: config 0 has an invalid interface number: 83 but max is 0 [ 570.096581][ T5879] usb 8-1: config 0 has no interface number 0 [ 570.104458][ T5879] usb 8-1: config 0 interface 83 altsetting 0 endpoint 0xA has an invalid bInterval 92, changing to 7 [ 570.135378][ T5879] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=ba.af [ 570.404417][ T5879] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.412482][ T5879] usb 8-1: Product: syz [ 570.449539][ T5879] usb 8-1: Manufacturer: syz [ 570.454250][ T5879] usb 8-1: SerialNumber: syz [ 570.485689][ T5879] usb 8-1: config 0 descriptor?? [ 570.505783][ T5879] usb_ehset_test 8-1:0.83: probe with driver usb_ehset_test failed with error -32 [ 570.725018][T10745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1286'. [ 570.764731][ T1212] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 571.316368][ T1212] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.344696][ T1212] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.365538][ T1212] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 571.388657][ T1212] usb 9-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 571.398169][ T1212] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.408738][ T1212] usb 9-1: config 0 descriptor?? [ 572.479052][ T1212] usbhid 9-1:0.0: can't add hid device: -71 [ 572.486632][ T1212] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 572.541077][ T1212] usb 9-1: USB disconnect, device number 5 [ 572.644106][ T5879] usb 8-1: USB disconnect, device number 11 [ 576.636171][ T5880] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 576.866042][T10769] lo speed is unknown, defaulting to 1000 [ 577.017902][ T5880] usb 8-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 577.034617][ T5880] usb 8-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 577.036734][T10794] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1299'. [ 577.046636][ T5880] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 240, setting to 64 [ 577.080112][ T5880] usb 8-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 577.105634][ T5880] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 577.115093][ T5880] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.371055][ T5880] ath6kl: Failed to submit usb control message: -71 [ 577.378865][ T5880] ath6kl: unable to send the bmi data to the device: -71 [ 577.398935][ T5880] ath6kl: Unable to send get target info: -71 [ 577.432638][ T5880] ath6kl: Failed to init ath6kl core: -71 [ 577.450446][ T5880] ath6kl_usb 8-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 577.501090][ T5880] usb 8-1: USB disconnect, device number 12 [ 577.514548][ T5881] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 577.826536][ T5881] usb 7-1: Using ep0 maxpacket: 16 [ 577.921767][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.945108][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.948425][T10819] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1303'. [ 578.014189][ T5881] usb 7-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 578.054773][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.196617][ T5881] usb 7-1: config 0 descriptor?? [ 578.382411][T10824] input: syz1 as /devices/virtual/input/input23 [ 578.841408][ T5910] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 578.854659][ T5880] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 579.030164][ T5880] usb 1-1: Using ep0 maxpacket: 32 [ 579.046399][ T5880] usb 1-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 579.077622][ T5880] usb 1-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=c1.1d [ 579.126607][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.139037][ T5910] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.144535][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.245962][ T5910] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 579.246386][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 579.301314][ T5881] usbhid 7-1:0.0: can't add hid device: -71 [ 579.307442][ T5910] usb 9-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 579.307514][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.317497][ T5910] usb 9-1: config 0 descriptor?? [ 579.446093][ T5880] quatech2 1-1:24.0: Quatech 2nd gen USB to Serial Driver converter detected [ 579.501002][ T5881] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 579.739407][ T5881] usb 7-1: USB disconnect, device number 11 [ 579.915804][T10833] kernel profiling enabled (shift: 7) [ 580.083912][T10833] ªªªªª»: renamed from bridge_slave_0 (while UP) [ 580.322038][ T5910] usbhid 9-1:0.0: can't add hid device: -71 [ 580.329011][ T5910] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 580.339716][ T5910] usb 9-1: USB disconnect, device number 6 [ 580.358760][ T5880] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 580.375182][ T5880] quatech2 1-1:24.0: probe with driver quatech2 failed with error -8 [ 580.625102][T10866] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 581.175404][ T5880] usb 1-1: USB disconnect, device number 29 [ 581.437586][T10872] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 581.454999][ T5882] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 581.804226][ T5882] usb 7-1: Using ep0 maxpacket: 32 [ 581.856474][ T5882] usb 7-1: too many configurations: 15, using maximum allowed: 8 [ 581.866493][ T5882] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 581.874208][ T5882] usb 7-1: can't read configurations, error -61 [ 581.949636][T10880] FAULT_INJECTION: forcing a failure. [ 581.949636][T10880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.963835][T10880] CPU: 1 UID: 0 PID: 10880 Comm: syz.1.1321 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 581.974649][T10880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 581.984711][T10880] Call Trace: [ 581.988011][T10880] [ 581.990964][T10880] dump_stack_lvl+0x241/0x360 [ 581.995668][T10880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 582.000886][T10880] ? __pfx__printk+0x10/0x10 [ 582.005493][T10880] ? __pfx_lock_release+0x10/0x10 [ 582.010536][T10880] should_fail_ex+0x3b0/0x4e0 [ 582.015244][T10880] _copy_from_user+0x2f/0xc0 [ 582.018534][ T5882] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 582.019854][T10880] copy_msghdr_from_user+0xae/0x680 [ 582.032621][T10880] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 582.038451][T10880] __sys_recvmsg+0x24c/0x3d0 [ 582.043061][T10880] ? __pfx___sys_recvmsg+0x10/0x10 [ 582.048192][T10880] ? __mutex_unlock_slowpath+0x21d/0x750 [ 582.053868][T10880] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 582.060232][T10880] ? do_syscall_64+0x100/0x230 [ 582.065024][T10880] ? do_syscall_64+0xb6/0x230 [ 582.069711][T10880] do_syscall_64+0xf3/0x230 [ 582.074220][T10880] ? clear_bhb_loop+0x35/0x90 [ 582.078927][T10880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.084860][T10880] RIP: 0033:0x7fe9bc57e719 [ 582.089280][T10880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.108914][T10880] RSP: 002b:00007fe9bd2ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 582.117342][T10880] RAX: ffffffffffffffda RBX: 00007fe9bc736058 RCX: 00007fe9bc57e719 [ 582.125323][T10880] RDX: 0000000000000038 RSI: 0000000020006740 RDI: 0000000000000004 [ 582.133315][T10880] RBP: 00007fe9bd2ad090 R08: 0000000000000000 R09: 0000000000000000 [ 582.141291][T10880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.149266][T10880] R13: 0000000000000001 R14: 00007fe9bc736058 R15: 00007fff66d5fad8 [ 582.157252][T10880] [ 582.254103][T10884] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1324'. [ 582.325029][ T5882] usb 7-1: Using ep0 maxpacket: 32 [ 582.331025][ T5882] usb 7-1: too many configurations: 15, using maximum allowed: 8 [ 582.340871][ T5882] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 582.354126][ T5882] usb 7-1: can't read configurations, error -61 [ 582.361660][ T5882] usb usb7-port1: attempt power cycle [ 582.435640][ T5880] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 582.815576][ T5882] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 583.045079][ T5882] usb 7-1: Using ep0 maxpacket: 32 [ 583.057054][ T5882] usb 7-1: too many configurations: 15, using maximum allowed: 8 [ 583.065201][ T5880] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 583.074482][ T5880] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.085885][ T5882] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 583.093486][ T5882] usb 7-1: can't read configurations, error -61 [ 583.105575][ T5880] usb 8-1: config 0 descriptor?? [ 583.265672][ T5882] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 583.316944][ T5882] usb 7-1: Using ep0 maxpacket: 32 [ 583.323743][ T5882] usb 7-1: too many configurations: 15, using maximum allowed: 8 [ 583.333696][ T5880] [drm] vendor descriptor length:6 data:06 5f 38 00 00 00 00 00 00 00 00 [ 583.344535][ T5882] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 583.352219][ T5882] usb 7-1: can't read configurations, error -61 [ 583.366306][ T5880] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 583.384852][ T5882] usb usb7-port1: unable to enumerate USB device [ 583.419395][T10905] ip6gretap0: entered promiscuous mode [ 583.427670][T10905] vlan2: entered promiscuous mode [ 583.432931][T10905] vlan2: entered allmulticast mode [ 583.438546][T10905] ip6gretap0: entered allmulticast mode [ 583.449861][T10905] ip6gretap0: left allmulticast mode [ 583.455515][T10905] ip6gretap0: left promiscuous mode [ 583.544406][ T5880] [drm:udl_init] *ERROR* Selecting channel failed [ 583.563824][ T5880] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 583.577096][ T5880] [drm] Initialized udl on minor 2 [ 583.585671][ T5880] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 583.830650][T10912] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 584.373028][ T5880] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 584.382186][ T5879] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 584.390310][ T5879] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 584.402185][ T5880] usb 8-1: USB disconnect, device number 13 [ 584.509101][T10922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1335'. [ 586.181631][T10933] ip6gretap0: entered promiscuous mode [ 586.188186][T10933] vlan2: entered promiscuous mode [ 586.195174][T10933] vlan2: entered allmulticast mode [ 586.200788][T10933] ip6gretap0: entered allmulticast mode [ 586.210271][T10933] ip6gretap0: left allmulticast mode [ 586.216969][T10933] ip6gretap0: left promiscuous mode [ 586.839980][T10947] loop6: detected capacity change from 0 to 524287999 [ 586.881568][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 586.890951][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 586.910876][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 586.920094][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 586.934394][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 586.943599][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 586.952662][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 586.962497][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 586.976646][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 586.985879][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 586.994222][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 587.003396][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 587.054804][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 587.064192][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 587.072519][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 587.081751][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 587.089698][T10947] ldm_validate_partition_table(): Disk read failed. [ 587.098788][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 587.107978][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 587.116104][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 587.125392][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 587.138181][T10947] Dev loop6: unable to read RDB block 0 [ 587.159071][T10947] loop6: unable to read partition table [ 587.168285][T10947] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 587.194629][ T5879] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 587.564667][ T5883] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 587.754901][ T5879] usb 2-1: Using ep0 maxpacket: 8 [ 587.781204][ T5883] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 587.790198][ T5883] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 587.832366][ T5879] usb 2-1: unable to get BOS descriptor or descriptor too short [ 587.832361][ T5883] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 587.832397][ T5883] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 587.874874][ T5880] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 587.882641][ T5883] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 587.896156][ T5883] usb 8-1: config 0 interface 0 has no altsetting 0 [ 587.904541][ T5879] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 37, changing to 9 [ 587.917258][ T5879] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.929741][T10960] netlink: 'syz.0.1346': attribute type 4 has an invalid length. [ 587.938005][ T5883] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 587.941142][ T5879] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 587.947173][ T5883] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 587.963350][ T5879] usb 2-1: New USB device found, idVendor=10cf, idProduct=5500, bcdDevice= 0.40 [ 587.978940][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.136495][ T5879] usb 2-1: Product: syz [ 588.141317][ T5879] usb 2-1: Manufacturer: syz [ 588.147252][ T5879] usb 2-1: SerialNumber: syz [ 588.154473][ T5880] usb 7-1: Using ep0 maxpacket: 32 [ 588.164041][ T5880] usb 7-1: config 0 has an invalid interface number: 9 but max is 0 [ 588.172416][ T5880] usb 7-1: config 0 has no interface number 0 [ 588.182452][ T5880] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 588.188870][ T5883] usb 8-1: Product: syz [ 588.192427][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.203946][ T5880] usb 7-1: Product: syz [ 588.208284][ T5880] usb 7-1: Manufacturer: syz [ 588.212913][ T5880] usb 7-1: SerialNumber: syz [ 588.224311][ T5883] usb 8-1: Manufacturer: syz [ 588.230918][ T5880] usb 7-1: config 0 descriptor?? [ 588.231887][ T5883] usb 8-1: SerialNumber: syz [ 588.250731][ T5880] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 588.252975][ T5883] usb 8-1: config 0 descriptor?? [ 588.275781][T10954] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 588.296812][ T5883] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 588.353993][ T5883] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 588.605758][T10965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.634088][T10965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.672920][T10954] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1344'. [ 588.712728][T10954] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1344'. [ 589.267101][ T5880] gspca_topro: reg_w err -71 [ 589.294764][ T5880] gspca_topro: Sensor soi763a [ 589.312620][ T5880] usb 7-1: USB disconnect, device number 16 [ 589.345524][T10969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1348'. [ 589.380399][ T5879] vmk80xx 2-1:1.0: driver 'vmk80xx' failed to auto-configure device. [ 589.404460][T10969] netlink: 'syz.0.1348': attribute type 6 has an invalid length. [ 589.442990][ T5879] usb 2-1: USB disconnect, device number 34 [ 589.507356][ T5881] usb 8-1: USB disconnect, device number 14 [ 589.515762][ T5881] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 589.629079][T10975] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1349'. [ 590.734807][ T5881] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 590.914503][ T5881] usb 9-1: Using ep0 maxpacket: 32 [ 590.930707][ T5881] usb 9-1: too many configurations: 25, using maximum allowed: 8 [ 590.964206][ T5881] usb 9-1: config 0 interface 0 has no altsetting 0 [ 590.989961][ T5881] usb 9-1: config 0 interface 0 has no altsetting 0 [ 591.004882][ T5881] usb 9-1: config 0 interface 0 has no altsetting 0 [ 591.026022][ T5881] usb 9-1: config 0 interface 0 has no altsetting 0 [ 591.223031][ T5881] usb 9-1: config 0 interface 0 has no altsetting 0 [ 591.260387][ T5881] usb 9-1: config 0 interface 0 has no altsetting 0 [ 591.272773][ T5881] usb 9-1: config 0 interface 0 has no altsetting 0 [ 591.301047][ T5881] usb 9-1: config 0 interface 0 has no altsetting 0 [ 591.311142][ T5881] usb 9-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=20.7a [ 591.335650][ T5881] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.349987][ T5881] usb 9-1: Product: syz [ 591.360840][ T5881] usb 9-1: Manufacturer: syz [ 591.372077][ T5881] usb 9-1: SerialNumber: syz [ 591.413855][ T5881] usb 9-1: config 0 descriptor?? [ 591.663999][ T5881] pwc: Visionite VCS-UC300 USB webcam detected. [ 591.680594][ T5881] pwc: Warning: more than 1 configuration available. [ 591.698958][ T5881] pwc: Failed to set LED on/off time (-71) [ 591.712118][ T5881] pwc: send_video_command error -71 [ 591.718982][ T5881] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 591.727054][ T5881] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 591.740296][ T5881] usb 9-1: USB disconnect, device number 7 [ 591.759243][T10990] syz.6.1352 (10990): drop_caches: 2 [ 591.850464][T11008] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1361'. [ 592.133926][T11015] FAULT_INJECTION: forcing a failure. [ 592.133926][T11015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.148866][T11015] CPU: 0 UID: 0 PID: 11015 Comm: syz.6.1364 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 592.159734][T11015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 592.169831][T11015] Call Trace: [ 592.173141][T11015] [ 592.176101][T11015] dump_stack_lvl+0x241/0x360 [ 592.180832][T11015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.186073][T11015] ? __pfx__printk+0x10/0x10 [ 592.190711][T11015] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 592.196400][T11015] should_fail_ex+0x3b0/0x4e0 [ 592.201122][T11015] _copy_from_user+0x2f/0xc0 [ 592.205747][T11015] copy_folio_from_user+0x164/0x370 [ 592.210990][T11015] hugetlb_mfill_atomic_pte+0xf93/0x19d0 [ 592.216682][T11015] ? __pfx_hugetlb_mfill_atomic_pte+0x10/0x10 [ 592.222789][T11015] ? huge_pte_alloc+0x37b/0x520 [ 592.227680][T11015] ? __pfx_huge_pte_alloc+0x10/0x10 [ 592.232921][T11015] ? hugetlb_vma_lock_read+0x8a/0x140 [ 592.238341][T11015] mfill_atomic_copy+0x15a8/0x1b40 [ 592.243596][T11015] ? __pfx___might_resched+0x10/0x10 [ 592.248924][T11015] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 592.254425][T11015] ? __pfx_lock_release+0x10/0x10 [ 592.259503][T11015] ? preempt_count_add+0x93/0x190 [ 592.264637][T11015] ? __might_fault+0xc6/0x120 [ 592.269364][T11015] userfaultfd_ioctl+0x2906/0x66f0 [ 592.274554][T11015] ? __kernel_text_address+0xd/0x40 [ 592.279823][T11015] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 592.285324][T11015] ? stack_trace_save+0x118/0x1d0 [ 592.290393][T11015] ? __pfx_stack_trace_save+0x10/0x10 [ 592.295807][T11015] ? stack_depot_save_flags+0x29/0x830 [ 592.301398][T11015] ? kasan_save_track+0x51/0x80 [ 592.306287][T11015] ? kasan_save_track+0x3f/0x80 [ 592.311188][T11015] ? kasan_save_free_info+0x40/0x50 [ 592.316434][T11015] ? __kasan_slab_free+0x59/0x70 [ 592.321424][T11015] ? kfree+0x1a0/0x440 [ 592.325529][T11015] ? tomoyo_path_number_perm+0x68d/0x880 [ 592.331215][T11015] ? security_file_ioctl+0xc6/0x2a0 [ 592.336466][T11015] ? __se_sys_ioctl+0x47/0x170 [ 592.341269][T11015] ? do_syscall_64+0xf3/0x230 [ 592.345989][T11015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.352102][T11015] ? do_vfs_ioctl+0xf08/0x2e40 [ 592.356922][T11015] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 592.361997][T11015] ? mark_lock+0x9a/0x360 [ 592.366385][T11015] ? tomoyo_path_number_perm+0x208/0x880 [ 592.372064][T11015] ? __pfx_lock_release+0x10/0x10 [ 592.377138][T11015] ? lockdep_hardirqs_on+0x99/0x150 [ 592.382433][T11015] ? kfree+0x1a0/0x440 [ 592.386566][T11015] ? tomoyo_path_number_perm+0x68d/0x880 [ 592.392253][T11015] ? tomoyo_path_number_perm+0x71a/0x880 [ 592.397944][T11015] ? tomoyo_path_number_perm+0x208/0x880 [ 592.403623][T11015] ? smack_log+0x123/0x540 [ 592.408078][T11015] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 592.414121][T11015] ? __pfx_smack_log+0x10/0x10 [ 592.418932][T11015] ? smk_access+0x4ab/0x4e0 [ 592.423494][T11015] ? smk_tskacc+0x300/0x370 [ 592.428048][T11015] ? smack_file_ioctl+0x2f7/0x3a0 [ 592.433123][T11015] ? __pfx_smack_file_ioctl+0x10/0x10 [ 592.438550][T11015] ? __fget_files+0x3f3/0x470 [ 592.443286][T11015] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 592.448786][T11015] __se_sys_ioctl+0xf9/0x170 [ 592.453424][T11015] do_syscall_64+0xf3/0x230 [ 592.457979][T11015] ? clear_bhb_loop+0x35/0x90 [ 592.462700][T11015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.468635][T11015] RIP: 0033:0x7f1ae397e719 [ 592.473084][T11015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.492732][T11015] RSP: 002b:00007f1ae46ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.501196][T11015] RAX: ffffffffffffffda RBX: 00007f1ae3b35f80 RCX: 00007f1ae397e719 [ 592.509227][T11015] RDX: 0000000020000000 RSI: 00000000c028aa03 RDI: 0000000000000009 [ 592.517249][T11015] RBP: 00007f1ae46ec090 R08: 0000000000000000 R09: 0000000000000000 [ 592.525258][T11015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.533264][T11015] R13: 0000000000000000 R14: 00007f1ae3b35f80 R15: 00007fff560f61c8 [ 592.541315][T11015] [ 592.684510][T11018] 9pnet: Unknown protocol version 9p200 [ 593.342741][T11023] capability: warning: `syz.6.1366' uses 32-bit capabilities (legacy support in use) [ 593.654668][ T5880] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 594.075083][ T5880] usb 8-1: Using ep0 maxpacket: 16 [ 594.092610][ T5880] usb 8-1: config index 0 descriptor too short (expected 4164, got 68) [ 594.118203][ T5880] usb 8-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 594.164511][ T5880] usb 8-1: too many endpoints for config 253 interface 0 altsetting 0: 228, using maximum allowed: 30 [ 594.197700][T11035] FAULT_INJECTION: forcing a failure. [ 594.197700][T11035] name failslab, interval 1, probability 0, space 0, times 0 [ 594.211441][ T5880] usb 8-1: config 253 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 594.230479][T11035] CPU: 1 UID: 0 PID: 11035 Comm: syz.6.1370 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 594.241314][T11035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 594.244452][ T5880] usb 8-1: config 253 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 228 [ 594.251417][T11035] Call Trace: [ 594.251432][T11035] [ 594.251442][T11035] dump_stack_lvl+0x241/0x360 [ 594.251483][T11035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 594.274589][ T5880] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=17.ba [ 594.275491][T11035] ? __pfx__printk+0x10/0x10 [ 594.275528][T11035] ? __kmalloc_node_noprof+0xb7/0x440 [ 594.275553][T11035] ? __pfx___might_resched+0x10/0x10 [ 594.275584][T11035] should_fail_ex+0x3b0/0x4e0 [ 594.275611][T11035] should_failslab+0xac/0x100 [ 594.275632][T11035] __kmalloc_node_noprof+0xdf/0x440 [ 594.275654][T11035] ? alloc_slab_obj_exts+0x3a/0xa0 [ 594.275679][T11035] alloc_slab_obj_exts+0x3a/0xa0 [ 594.275700][T11035] __memcg_slab_post_alloc_hook+0x319/0x7e0 [ 594.275738][T11035] ? __alloc_skb+0x1c3/0x440 [ 594.275765][T11035] kmem_cache_alloc_node_noprof+0x222/0x320 [ 594.275793][T11035] __alloc_skb+0x1c3/0x440 [ 594.275824][T11035] ? __pfx___alloc_skb+0x10/0x10 [ 594.275859][T11035] alloc_skb_with_frags+0xc3/0x820 [ 594.281588][ T5880] usb 8-1: New USB device strings: Mfr=252, Product=60, SerialNumber=1 [ 594.290063][T11035] ? __pfx_validate_chain+0x10/0x10 [ 594.290105][T11035] ? __pfx_lock_release+0x10/0x10 [ 594.290145][T11035] sock_alloc_send_pskb+0x91a/0xa60 [ 594.290180][T11035] ? mark_lock+0x9a/0x360 [ 594.290217][T11035] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 594.290251][T11035] ? _parse_integer_limit+0x1b5/0x200 [ 594.290281][T11035] ? smack_socket_getpeersec_dgram+0x306/0x410 [ 594.290321][T11035] unix_stream_sendmsg+0x51a/0xf80 [ 594.290363][T11035] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 594.290393][T11035] ? __pfx_lock_acquire+0x10/0x10 [ 594.290435][T11035] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 594.290459][T11035] __sock_sendmsg+0x221/0x270 [ 594.290488][T11035] sock_write_iter+0x2d7/0x3f0 [ 594.290526][T11035] ? __pfx_sock_write_iter+0x10/0x10 [ 594.290573][T11035] ? bpf_lsm_file_permission+0x9/0x10 [ 594.290596][T11035] ? security_file_permission+0x74/0x280 [ 594.290636][T11035] vfs_write+0xaeb/0xd30 [ 594.290670][T11035] ? __pfx_sock_write_iter+0x10/0x10 [ 594.290705][T11035] ? __pfx_vfs_write+0x10/0x10 [ 594.290748][T11035] ? fdget_pos+0x19a/0x320 [ 594.290785][T11035] ksys_write+0x183/0x2b0 [ 594.319411][ T5880] usb 8-1: Product: syz [ 594.320604][T11035] ? __pfx_ksys_write+0x10/0x10 [ 594.320644][T11035] ? do_syscall_64+0x100/0x230 [ 594.331918][ T5880] usb 8-1: Manufacturer: syz [ 594.336591][T11035] ? do_syscall_64+0xb6/0x230 [ 594.336632][T11035] do_syscall_64+0xf3/0x230 [ 594.336662][T11035] ? clear_bhb_loop+0x35/0x90 [ 594.336693][T11035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.336719][T11035] RIP: 0033:0x7f1ae397e719 [ 594.336739][T11035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.336759][T11035] RSP: 002b:00007f1ae46ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 594.336784][T11035] RAX: ffffffffffffffda RBX: 00007f1ae3b35f80 RCX: 00007f1ae397e719 [ 594.336802][T11035] RDX: 0000000000010132 RSI: 0000000020000000 RDI: 0000000000000004 [ 594.336817][T11035] RBP: 00007f1ae46ec090 R08: 0000000000000000 R09: 0000000000000000 [ 594.336832][T11035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.336846][T11035] R13: 0000000000000000 R14: 00007f1ae3b35f80 R15: 00007fff560f61c8 [ 594.336878][T11035] [ 594.452129][T11041] FAULT_INJECTION: forcing a failure. [ 594.452129][T11041] name failslab, interval 1, probability 0, space 0, times 0 [ 594.468986][ T5880] usb 8-1: SerialNumber: syz [ 594.525855][T11041] CPU: 1 UID: 0 PID: 11041 Comm: syz.1.1373 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 594.577580][T11028] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 594.584878][T11041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 594.641155][T11041] Call Trace: [ 594.644455][T11041] [ 594.647402][T11041] dump_stack_lvl+0x241/0x360 [ 594.652101][T11041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 594.657330][T11041] ? __pfx__printk+0x10/0x10 [ 594.661938][T11041] ? __kmalloc_node_noprof+0xb7/0x440 [ 594.667323][T11041] ? __pfx___might_resched+0x10/0x10 [ 594.672633][T11041] should_fail_ex+0x3b0/0x4e0 [ 594.677328][T11041] should_failslab+0xac/0x100 [ 594.682023][T11041] __kmalloc_node_noprof+0xdf/0x440 [ 594.687243][T11041] ? qdisc_alloc+0x9a/0xa80 [ 594.691772][T11041] qdisc_alloc+0x9a/0xa80 [ 594.696130][T11041] ? taprio_init+0x2ff/0xc80 [ 594.700741][T11041] ? taprio_init+0x2ff/0xc80 [ 594.705350][T11041] ? rcu_is_watching+0x15/0xb0 [ 594.710141][T11041] qdisc_create_dflt+0x62/0x4b0 [ 594.715025][T11041] taprio_init+0x424/0xc80 [ 594.719461][T11041] ? ____sys_sendmsg+0x52a/0x7e0 [ 594.724414][T11041] ? __sys_sendmsg+0x292/0x380 [ 594.729196][T11041] ? do_syscall_64+0xf3/0x230 [ 594.733904][T11041] ? __pfx_taprio_init+0x10/0x10 [ 594.738857][T11041] ? qdisc_alloc+0x7dd/0xa80 [ 594.743469][T11041] ? __pfx_taprio_init+0x10/0x10 [ 594.748420][T11041] qdisc_create+0x9d4/0x11a0 [ 594.753037][T11041] ? __pfx_qdisc_create+0x10/0x10 [ 594.758100][T11041] ? lockdep_rtnl_is_held+0x26/0x40 [ 594.763329][T11041] tc_modify_qdisc+0xa26/0x1e40 [ 594.768200][T11041] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 594.773521][T11041] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 594.778813][T11041] rtnetlink_rcv_msg+0x73f/0xcf0 [ 594.783760][T11041] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 594.788887][T11041] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 594.794398][T11041] ? ref_tracker_free+0x643/0x7e0 [ 594.799455][T11041] netlink_rcv_skb+0x1e3/0x430 [ 594.804239][T11041] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 594.809710][T11041] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 594.815030][T11041] ? netlink_deliver_tap+0x2e/0x1b0 [ 594.820257][T11041] netlink_unicast+0x7f6/0x990 [ 594.825035][T11041] ? __pfx_netlink_unicast+0x10/0x10 [ 594.830332][T11041] ? __virt_addr_valid+0x183/0x530 [ 594.835486][T11041] ? __check_object_size+0x48e/0x900 [ 594.840790][T11041] netlink_sendmsg+0x8e4/0xcb0 [ 594.845573][T11041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.850879][T11041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.856174][T11041] __sock_sendmsg+0x221/0x270 [ 594.860867][T11041] ____sys_sendmsg+0x52a/0x7e0 [ 594.865671][T11041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 594.870989][T11041] __sys_sendmsg+0x292/0x380 [ 594.875603][T11041] ? __pfx___sys_sendmsg+0x10/0x10 [ 594.880741][T11041] ? __pfx_vfs_write+0x10/0x10 [ 594.885554][T11041] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 594.891903][T11041] ? do_syscall_64+0x100/0x230 [ 594.896691][T11041] ? do_syscall_64+0xb6/0x230 [ 594.901388][T11041] do_syscall_64+0xf3/0x230 [ 594.905912][T11041] ? clear_bhb_loop+0x35/0x90 [ 594.910617][T11041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.916525][T11041] RIP: 0033:0x7fe9bc57e719 [ 594.920950][T11041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.940574][T11041] RSP: 002b:00007fe9bd2ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 594.949051][T11041] RAX: ffffffffffffffda RBX: 00007fe9bc735f80 RCX: 00007fe9bc57e719 [ 594.957041][T11041] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000006 [ 594.965024][T11041] RBP: 00007fe9bd2ce090 R08: 0000000000000000 R09: 0000000000000000 [ 594.973014][T11041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.980994][T11041] R13: 0000000000000000 R14: 00007fe9bc735f80 R15: 00007fff66d5fad8 [ 594.989004][T11041] [ 595.049821][T11045] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1374'. [ 595.082957][ T5880] rndis_host 8-1:253.0: skipping garbage [ 595.095137][ T5880] rndis_host 8-1:253.0: probe with driver rndis_host failed with error -22 [ 595.148162][ T5880] usb 8-1: USB disconnect, device number 15 [ 597.103038][T11072] binder: 11063:11072 ioctl 80045430 7f1ae46a9f9c returned -22 [ 598.862236][T11091] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1386'. [ 599.093612][T11093] 9pnet: Unknown protocol version 9p200 [ 601.004581][ T5910] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 601.034694][ T5879] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 601.181209][ T5910] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.192313][ T5910] usb 7-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 601.201778][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.207570][ T5879] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.215896][ T5910] usb 7-1: config 0 descriptor?? [ 601.230571][ T5879] usb 8-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 601.235974][ T5910] rndis_host 7-1:0.0: probe with driver rndis_host failed with error -22 [ 601.256036][ T5879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.299150][ T5879] usb 8-1: config 0 descriptor?? [ 601.336360][ T5879] rndis_host 8-1:0.0: probe with driver rndis_host failed with error -22 [ 602.671348][ T5880] usb 7-1: USB disconnect, device number 17 [ 602.684098][ T5881] usb 8-1: USB disconnect, device number 16 [ 603.424638][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 603.424687][ T29] audit: type=1326 audit(1731789296.746:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11129 comm="syz.8.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bacb7e719 code=0x7ffc0000 [ 603.878318][ T29] audit: type=1326 audit(1731789296.746:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11129 comm="syz.8.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bacb7e719 code=0x7ffc0000 [ 604.099222][ T29] audit: type=1326 audit(1731789296.766:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11129 comm="syz.8.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f6bacb7e719 code=0x7ffc0000 [ 604.121326][ T29] audit: type=1326 audit(1731789296.766:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11129 comm="syz.8.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bacb7e719 code=0x7ffc0000 [ 604.143580][ T29] audit: type=1326 audit(1731789296.766:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11129 comm="syz.8.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bacb7e719 code=0x7ffc0000 [ 604.318433][ T29] audit: type=1326 audit(1731789296.786:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11129 comm="syz.8.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f6bacb7e719 code=0x7ffc0000 [ 604.367693][T11143] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 604.554259][T11145] 9pnet_fd: Insufficient options for proto=fd [ 604.718865][ T29] audit: type=1326 audit(1731789296.793:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11129 comm="syz.8.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bacb7e719 code=0x7ffc0000 [ 604.831855][ T29] audit: type=1326 audit(1731789296.793:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11129 comm="syz.8.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bacb7e719 code=0x7ffc0000 [ 604.884456][ T29] audit: type=1326 audit(1731789296.793:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11129 comm="syz.8.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6bacb7d0b0 code=0x7ffc0000 [ 604.906722][ T29] audit: type=1326 audit(1731789296.793:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11129 comm="syz.8.1396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bacb7e719 code=0x7ffc0000 [ 605.108647][T11149] input: syz0 as /devices/virtual/input/input25 [ 605.884830][ T5910] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 606.049490][ T5910] usb 9-1: config 0 interface 0 altsetting 63 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.069435][ T5910] usb 9-1: config 0 interface 0 altsetting 63 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.079505][ T5910] usb 9-1: config 0 interface 0 altsetting 63 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 606.092738][ T5910] usb 9-1: config 0 interface 0 has no altsetting 0 [ 606.099774][ T5910] usb 9-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 606.109051][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.127207][ T5910] usb 9-1: config 0 descriptor?? [ 606.346184][T11152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.364810][T11152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.647253][ T5910] aquacomputer_d5next 0003:0C70:F00A.0017: unknown main item tag 0x3 [ 606.672021][ T5910] aquacomputer_d5next 0003:0C70:F00A.0017: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.8-1/input0 [ 607.274682][ T5879] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 607.416972][ T5879] usb 2-1: device descriptor read/64, error -71 [ 607.648332][T11139] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1399'. [ 607.654798][ T5879] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 607.836252][ T5880] usb 9-1: USB disconnect, device number 8 [ 607.944537][ T5879] usb 2-1: device descriptor read/64, error -71 [ 608.656436][T11172] lo speed is unknown, defaulting to 1000 [ 608.760741][ T5879] usb usb2-port1: attempt power cycle [ 608.941559][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 608.941582][ T29] audit: type=1400 audit(1731789302.383:114): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="#!" requested=w pid=11177 comm="syz.7.1411" saddr=fe80::bb src=17 daddr=fe80::aa netif=wpan0 [ 609.104643][ T5879] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 609.125920][ T5879] usb 2-1: device descriptor read/8, error -71 [ 609.166420][T11172] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1409'. [ 609.172741][ T29] audit: type=1804 audit(1731789302.613:115): pid=11172 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.1409" name="/" dev="pidfs" ino=11471 res=1 errno=0 [ 609.364684][ T5879] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 609.385219][ T5879] usb 2-1: device descriptor read/8, error -71 [ 609.495021][ T5879] usb usb2-port1: unable to enumerate USB device [ 609.920409][T11192] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1414'. [ 610.690348][T11204] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 611.221915][ T5879] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 611.398996][ T5879] usb 8-1: config 0 interface 0 altsetting 12 endpoint 0x7 has invalid wMaxPacketSize 0 [ 611.410994][ T5879] usb 8-1: config 0 interface 0 has no altsetting 0 [ 611.566671][ T5879] usb 8-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 611.576438][ T5879] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.586401][ T5879] usb 8-1: Product: syz [ 611.590582][ T5879] usb 8-1: Manufacturer: syz [ 611.595233][ T5879] usb 8-1: SerialNumber: syz [ 611.619032][ T5879] usb 8-1: config 0 descriptor?? [ 612.356972][ T5879] keyspan 8-1:0.0: Keyspan 2 port adapter converter detected [ 612.364908][ T5879] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 87 [ 612.390345][T11217] FAULT_INJECTION: forcing a failure. [ 612.390345][T11217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.439533][ T5879] keyspan 8-1:0.0: unsupported endpoint type 0 [ 612.504240][T11217] CPU: 0 UID: 0 PID: 11217 Comm: syz.6.1423 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 612.515093][T11217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 612.525194][T11217] Call Trace: [ 612.528530][T11217] [ 612.531519][T11217] dump_stack_lvl+0x241/0x360 [ 612.536247][T11217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 612.541526][T11217] ? __pfx__printk+0x10/0x10 [ 612.546221][T11217] ? snprintf+0xda/0x120 [ 612.550514][T11217] should_fail_ex+0x3b0/0x4e0 [ 612.555334][T11217] _copy_to_user+0x31/0xb0 [ 612.559799][T11217] simple_read_from_buffer+0xca/0x150 [ 612.565226][T11217] proc_fail_nth_read+0x1e9/0x250 [ 612.570294][T11217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 612.575890][T11217] ? rw_verify_area+0x55e/0x6f0 [ 612.580876][T11217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 612.586470][T11217] vfs_read+0x1fc/0xb70 [ 612.590675][T11217] ? fdget_pos+0x24e/0x320 [ 612.595155][T11217] ? __pfx_vfs_read+0x10/0x10 [ 612.599875][T11217] ? do_sys_openat2+0x17a/0x1d0 [ 612.604774][T11217] ? __fget_files+0x3f3/0x470 [ 612.609511][T11217] ? fdget_pos+0x24e/0x320 [ 612.613980][T11217] ksys_read+0x183/0x2b0 [ 612.618274][T11217] ? __pfx_ksys_read+0x10/0x10 [ 612.623099][T11217] ? do_syscall_64+0x100/0x230 [ 612.627916][T11217] ? do_syscall_64+0xb6/0x230 [ 612.632735][T11217] do_syscall_64+0xf3/0x230 [ 612.637290][T11217] ? clear_bhb_loop+0x35/0x90 [ 612.642101][T11217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.648040][T11217] RIP: 0033:0x7f1ae397d15c [ 612.652496][T11217] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 612.672231][T11217] RSP: 002b:00007f1ae46ec030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 612.680690][T11217] RAX: ffffffffffffffda RBX: 00007f1ae3b35f80 RCX: 00007f1ae397d15c [ 612.688729][T11217] RDX: 000000000000000f RSI: 00007f1ae46ec0a0 RDI: 0000000000000003 [ 612.696744][T11217] RBP: 00007f1ae46ec090 R08: 0000000000000000 R09: 002364626e2f7665 [ 612.704765][T11217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.712776][T11217] R13: 0000000000000001 R14: 00007f1ae3b35f80 R15: 00007fff560f61c8 [ 612.720818][T11217] [ 612.725433][ T5879] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 81 [ 612.744322][ T5879] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 1 [ 612.757838][ T5879] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 2 [ 612.784289][ T5879] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 85 [ 612.792237][ T5879] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 5 [ 612.811035][ T5879] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 612.820479][ T5879] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 83 [ 612.828435][ T5879] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 3 [ 612.836134][ T5879] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 4 [ 612.844728][ T5879] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 86 [ 612.852442][ T5879] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 6 [ 612.874879][ T5879] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 612.885216][ T5879] usb 8-1: USB disconnect, device number 17 [ 612.893263][ T5879] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 612.908120][ T5879] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 612.919706][ T5879] keyspan 8-1:0.0: device disconnected [ 613.535437][T11237] binder: 11236:11237 ioctl c0306201 20000480 returned -22 [ 613.566151][T11237] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1428'. [ 614.514543][ T5880] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 615.453938][ T5880] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.537831][ T5880] usb 8-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 615.547269][ T5880] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.558659][ T5880] usb 8-1: config 0 descriptor?? [ 615.565361][ T5880] rndis_host 8-1:0.0: probe with driver rndis_host failed with error -22 [ 615.632780][T11264] netlink: 'syz.1.1437': attribute type 8 has an invalid length. [ 615.640822][T11264] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1437'. [ 615.702077][T11267] FAULT_INJECTION: forcing a failure. [ 615.702077][T11267] name failslab, interval 1, probability 0, space 0, times 0 [ 615.716223][T11267] CPU: 0 UID: 0 PID: 11267 Comm: syz.6.1438 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 615.727042][T11267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 615.737137][T11267] Call Trace: [ 615.740441][T11267] [ 615.743398][T11267] dump_stack_lvl+0x241/0x360 [ 615.748123][T11267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 615.753367][T11267] ? __pfx__printk+0x10/0x10 [ 615.757995][T11267] ? __kmalloc_node_noprof+0xb7/0x440 [ 615.763403][T11267] ? __pfx___might_resched+0x10/0x10 [ 615.768737][T11267] should_fail_ex+0x3b0/0x4e0 [ 615.773451][T11267] should_failslab+0xac/0x100 [ 615.778168][T11267] __kmalloc_node_noprof+0xdf/0x440 [ 615.783466][T11267] ? __kvmalloc_node_noprof+0x72/0x190 [ 615.788975][T11267] __kvmalloc_node_noprof+0x72/0x190 [ 615.794304][T11267] xt_alloc_table_info+0x3d/0xa0 [ 615.799283][T11267] do_ip6t_set_ctl+0xba0/0x1270 [ 615.804169][T11267] ? __pfx___might_resched+0x10/0x10 [ 615.809499][T11267] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 615.814903][T11267] ? __pfx_lock_release+0x10/0x10 [ 615.819988][T11267] ? __mutex_unlock_slowpath+0x21d/0x750 [ 615.825662][T11267] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 615.831691][T11267] ? sb_end_write+0xe9/0x1c0 [ 615.836319][T11267] ? vfs_write+0x730/0xd30 [ 615.840781][T11267] nf_setsockopt+0x295/0x2c0 [ 615.845422][T11267] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 615.851355][T11267] do_sock_setsockopt+0x3af/0x720 [ 615.856464][T11267] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 615.862074][T11267] __sys_setsockopt+0x1a2/0x250 [ 615.866983][T11267] __x64_sys_setsockopt+0xb5/0xd0 [ 615.872049][T11267] do_syscall_64+0xf3/0x230 [ 615.876605][T11267] ? clear_bhb_loop+0x35/0x90 [ 615.881301][T11267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.887248][T11267] RIP: 0033:0x7f1ae397e719 [ 615.891677][T11267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.911311][T11267] RSP: 002b:00007f1ae46ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 615.919739][T11267] RAX: ffffffffffffffda RBX: 00007f1ae3b35f80 RCX: 00007f1ae397e719 [ 615.927722][T11267] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000008 [ 615.935719][T11267] RBP: 00007f1ae46ec090 R08: 00000000000006c0 R09: 0000000000000000 [ 615.943698][T11267] R10: 0000000020000a00 R11: 0000000000000246 R12: 0000000000000001 [ 615.951679][T11267] R13: 0000000000000000 R14: 00007f1ae3b35f80 R15: 00007fff560f61c8 [ 615.959675][T11267] [ 616.049824][T11276] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1439'. [ 616.088254][T11279] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 616.163361][T11264] kvm: pic: level sensitive irq not supported [ 616.163891][T11264] kvm: pic: non byte read [ 616.351468][ T5879] usb 8-1: USB disconnect, device number 18 [ 616.614672][ T5880] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 617.507911][ T5880] usb 7-1: Invalid ep0 maxpacket: 32 [ 617.693145][ T5880] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 618.053549][ T5880] usb 7-1: Invalid ep0 maxpacket: 32 [ 618.064867][ T5880] usb usb7-port1: attempt power cycle [ 618.243936][ T9091] Bluetooth: hci5: Frame reassembly failed (-84) [ 618.804784][ T5880] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 618.826536][ T5880] usb 7-1: Invalid ep0 maxpacket: 32 [ 618.885668][ T5882] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 618.964847][ T5880] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 618.985403][ T5880] usb 7-1: Invalid ep0 maxpacket: 32 [ 618.991218][ T5880] usb usb7-port1: unable to enumerate USB device [ 619.052487][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.090660][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.111689][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 619.140981][ T5882] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 619.150320][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.161076][ T5882] usb 2-1: config 0 descriptor?? [ 619.582911][ T5882] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 619.594433][ T5882] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 619.602761][ T5882] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 619.610528][ T5882] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 619.618439][ T5882] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 619.626293][ T5882] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 619.634685][ T5882] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 619.642413][ T5882] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 619.650541][ T5882] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 619.658315][ T5882] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 619.669868][ T5882] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 619.684966][ T5882] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 619.700809][ T5882] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 619.794471][ T5883] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 619.849479][T11306] fuse: Bad value for 'fd' [ 619.867018][ T5879] usb 2-1: USB disconnect, device number 39 [ 619.956450][ T5883] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.972034][ T5883] usb 7-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 619.982089][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.996429][ T5883] usb 7-1: config 0 descriptor?? [ 620.005173][ T5883] rndis_host 7-1:0.0: probe with driver rndis_host failed with error -22 [ 620.255384][ T9571] Bluetooth: hci5: command 0xfc11 tx timeout [ 620.255616][ T5141] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 620.485938][ T5879] usb 7-1: USB disconnect, device number 22 [ 620.933453][T11330] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 621.610058][T11335] FAULT_INJECTION: forcing a failure. [ 621.610058][T11335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.662091][T11335] CPU: 1 UID: 0 PID: 11335 Comm: syz.6.1458 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 621.670254][T11337] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1457'. [ 621.672894][T11335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 621.672914][T11335] Call Trace: [ 621.672925][T11335] [ 621.672935][T11335] dump_stack_lvl+0x241/0x360 [ 621.683914][T11337] 9pnet_fd: Insufficient options for proto=fd [ 621.691913][T11335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.691953][T11335] ? __pfx__printk+0x10/0x10 [ 621.692003][T11335] ? __pfx_lock_release+0x10/0x10 [ 621.723800][T11335] should_fail_ex+0x3b0/0x4e0 [ 621.728514][T11335] _copy_from_user+0x2f/0xc0 [ 621.733109][T11335] restore_sigcontext+0xd8/0x7d0 [ 621.738063][T11335] ? __pfx___might_resched+0x10/0x10 [ 621.743378][T11335] ? __might_fault+0xaa/0x120 [ 621.748068][T11335] ? __pfx_restore_sigcontext+0x10/0x10 [ 621.753643][T11335] ? __task_pid_nr_ns+0x28/0x450 [ 621.758594][T11335] __do_sys_rt_sigreturn+0x1b9/0x280 [ 621.763893][T11335] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 621.769724][T11335] ? do_syscall_64+0x100/0x230 [ 621.774528][T11335] ? do_syscall_64+0xb6/0x230 [ 621.779254][T11335] do_syscall_64+0xf3/0x230 [ 621.783763][T11335] ? clear_bhb_loop+0x35/0x90 [ 621.788447][T11335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.794351][T11335] RIP: 0033:0x7f1ae391a099 [ 621.798774][T11335] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 621.818397][T11335] RSP: 002b:00007f1ae46eba80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 621.826843][T11335] RAX: ffffffffffffffda RBX: 00007f1ae3b35f80 RCX: 00007f1ae391a099 [ 621.834821][T11335] RDX: 00007f1ae46eba80 RSI: 00007f1ae46ebbb0 RDI: 0000000000000021 [ 621.842798][T11335] RBP: 00007f1ae46ec090 R08: 0000000800008ec0 R09: 0000000000000000 [ 621.850772][T11335] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 621.858758][T11335] R13: 0000000000000000 R14: 00007f1ae3b35f80 R15: 00007fff560f61c8 [ 621.866794][T11335] [ 622.250774][T11347] block nbd0: shutting down sockets [ 623.675825][T11353] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1460'. [ 624.508379][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.515055][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.049505][T11376] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 625.597236][ T977] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.911996][ T977] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.981699][T11389] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1470'. [ 626.039130][T11389] 9pnet_fd: Insufficient options for proto=fd [ 626.101086][ T5879] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 627.375702][T11394] 9pnet: Unknown protocol version 9p200 [ 628.314758][ T977] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.325699][ T5879] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 628.541977][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.552457][ T5879] usb 7-1: config 0 descriptor?? [ 628.560560][ T5879] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 628.797072][T11410] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1474'. [ 629.311851][ T5879] usb 7-1: USB disconnect, device number 23 [ 630.156133][ T977] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.641230][T11426] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1483'. [ 630.651974][T11426] 9pnet_fd: Insufficient options for proto=fd [ 630.667812][ T977] bridge_slave_1: left allmulticast mode [ 630.673515][ T977] bridge_slave_1: left promiscuous mode [ 630.679513][ T977] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.852001][ T977] bridge_slave_0: left allmulticast mode [ 630.857818][ T977] bridge_slave_0: left promiscuous mode [ 630.863560][ T977] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.969879][ T5882] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 631.622936][ T5882] usb 8-1: Using ep0 maxpacket: 32 [ 631.754572][ T5882] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.819808][ T5882] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 631.841137][T11471] input: syz0 as /devices/virtual/input/input26 [ 631.922248][ T5882] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 632.041793][ T5882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.270564][T11498] input: syz0 as /devices/virtual/input/input27 [ 632.615052][ T5882] usb 8-1: config 0 descriptor?? [ 633.039100][T11502] 9pnet: Unknown protocol version 9p200 [ 633.464919][T11514] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1490'. [ 634.307910][ T5880] usb 8-1: USB disconnect, device number 19 [ 634.463539][ T977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.479829][ T977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.511357][ T977] bond0 (unregistering): Released all slaves [ 635.256838][T11537] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 635.950605][T11540] input: syz0 as /devices/virtual/input/input28 [ 636.177096][ T977] hsr_slave_0: left promiscuous mode [ 636.183224][ T977] hsr_slave_1: left promiscuous mode [ 636.212916][ T977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.234732][ T977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.253219][ T977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.280998][ T977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.363079][ T977] veth1_macvtap: left promiscuous mode [ 636.375593][ T977] veth0_macvtap: left promiscuous mode [ 636.397139][ T977] veth1_vlan: left promiscuous mode [ 636.402489][ T977] veth0_vlan: left promiscuous mode [ 637.010383][T11550] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 638.023735][ T977] team0 (unregistering): Port device team_slave_1 removed [ 638.084018][ T977] team0 (unregistering): Port device team_slave_0 removed [ 639.157203][T11554] 9pnet: Unknown protocol version 9p200 [ 640.035894][T11556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1502'. [ 640.090785][ T29] audit: type=1804 audit(1731789333.533:116): pid=11556 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1502" name="/" dev="pidfs" ino=11855 res=1 errno=0 [ 640.667049][T11564] input: syz0 as /devices/virtual/input/input29 [ 640.868663][ T5879] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 641.154458][ T5879] usb 7-1: Using ep0 maxpacket: 32 [ 641.161870][ T5879] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.172212][ T5879] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 641.222358][ T5879] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 641.252715][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.278172][ T5879] usb 7-1: config 0 descriptor?? [ 642.094628][ T5883] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 642.199583][T11582] fuse: Unknown parameter 'dont_hash' [ 642.316576][ T5883] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.338988][ T5883] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 642.362341][ T5883] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 642.382513][ T5883] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 643.086835][T11591] FAULT_INJECTION: forcing a failure. [ 643.086835][T11591] name failslab, interval 1, probability 0, space 0, times 0 [ 643.173854][ T5883] usb 9-1: SerialNumber: syz [ 643.185081][T11591] CPU: 1 UID: 0 PID: 11591 Comm: syz.1.1512 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 643.195916][T11591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 643.206005][T11591] Call Trace: [ 643.209312][T11591] [ 643.212274][T11591] dump_stack_lvl+0x241/0x360 [ 643.217009][T11591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 643.222254][T11591] ? __pfx__printk+0x10/0x10 [ 643.226895][T11591] ? ref_tracker_alloc+0x332/0x490 [ 643.232045][T11591] should_fail_ex+0x3b0/0x4e0 [ 643.236764][T11591] ? skb_clone+0x20c/0x390 [ 643.241220][T11591] should_failslab+0xac/0x100 [ 643.245932][T11591] ? skb_clone+0x20c/0x390 [ 643.250399][T11591] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 643.255811][T11591] skb_clone+0x20c/0x390 [ 643.260096][T11591] __netlink_deliver_tap+0x3cc/0x7c0 [ 643.265428][T11591] ? netlink_deliver_tap+0x2e/0x1b0 [ 643.270663][T11591] netlink_deliver_tap+0x19d/0x1b0 [ 643.275818][T11591] netlink_unicast+0x7c4/0x990 [ 643.280624][T11591] ? __pfx_netlink_unicast+0x10/0x10 [ 643.285954][T11591] ? __virt_addr_valid+0x183/0x530 [ 643.291102][T11591] ? __check_object_size+0x48e/0x900 [ 643.296426][T11591] netlink_sendmsg+0x8e4/0xcb0 [ 643.301245][T11591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.306588][T11591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.311927][T11591] __sock_sendmsg+0x221/0x270 [ 643.316647][T11591] ____sys_sendmsg+0x52a/0x7e0 [ 643.321484][T11591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 643.326806][T11591] __sys_sendmsg+0x292/0x380 [ 643.331425][T11591] ? __pfx___sys_sendmsg+0x10/0x10 [ 643.336575][T11591] ? __pfx_vfs_write+0x10/0x10 [ 643.341369][T11591] ? __pfx___schedule+0x10/0x10 [ 643.346242][T11591] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 643.352590][T11591] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 643.358942][T11591] ? do_syscall_64+0xb6/0x230 [ 643.363639][T11591] do_syscall_64+0xf3/0x230 [ 643.368155][T11591] ? clear_bhb_loop+0x35/0x90 [ 643.372850][T11591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.378757][T11591] RIP: 0033:0x7fe9bc57e719 [ 643.383198][T11591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.402827][T11591] RSP: 002b:00007fe9bd2ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.411265][T11591] RAX: ffffffffffffffda RBX: 00007fe9bc735f80 RCX: 00007fe9bc57e719 [ 643.419249][T11591] RDX: 0000000000008190 RSI: 0000000020000300 RDI: 0000000000000003 [ 643.427238][T11591] RBP: 00007fe9bd2ce090 R08: 0000000000000000 R09: 0000000000000000 [ 643.435231][T11591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.443214][T11591] R13: 0000000000000000 R14: 00007fe9bc735f80 R15: 00007fff66d5fad8 [ 643.451224][T11591] [ 643.454338][ C1] vkms_vblank_simulate: vblank timer overrun [ 643.586235][ T25] usb 7-1: USB disconnect, device number 24 [ 643.994121][ T5883] usb 9-1: 0:2 : does not exist [ 644.024201][ T5883] usb 9-1: unit 255 not found! [ 644.060040][ T5883] usb 9-1: unit 11 not found! [ 644.224581][ T5883] usb 9-1: USB disconnect, device number 9 [ 644.329318][T11604] ipt_rpfilter: unknown options [ 644.767045][T11598] FAULT_INJECTION: forcing a failure. [ 644.767045][T11598] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 644.794114][T11598] CPU: 1 UID: 0 PID: 11598 Comm: syz.7.1515 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 644.804939][T11598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 644.815033][T11598] Call Trace: [ 644.818339][T11598] [ 644.821309][T11598] dump_stack_lvl+0x241/0x360 [ 644.826050][T11598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.831296][T11598] ? __pfx__printk+0x10/0x10 [ 644.835933][T11598] ? unwind_next_frame+0x18e6/0x22d0 [ 644.841274][T11598] ? look_up_lock_class+0x77/0x170 [ 644.846434][T11598] should_fail_ex+0x3b0/0x4e0 [ 644.851164][T11598] prepare_alloc_pages+0x1da/0x5b0 [ 644.856342][T11598] __alloc_pages_noprof+0x16f/0x710 [ 644.861593][T11598] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 644.867368][T11598] alloc_pages_mpol_noprof+0x3e8/0x680 [ 644.872863][T11598] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 644.878894][T11598] ? xas_start+0x3cc/0x7b0 [ 644.883329][T11598] ? xas_load+0x58d/0x5c0 [ 644.887679][T11598] folio_alloc_noprof+0x128/0x180 [ 644.892719][T11598] filemap_alloc_folio_noprof+0xdf/0x500 [ 644.898395][T11598] ? filemap_get_entry+0x123/0x3b0 [ 644.903524][T11598] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 644.909781][T11598] ? do_sync_mmap_readahead+0x3d0/0x970 [ 644.915357][T11598] ? __pfx_down_read+0x10/0x10 [ 644.920133][T11598] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 644.926036][T11598] ? count_memcg_event_mm+0x90/0x420 [ 644.931335][T11598] __filemap_get_folio+0x446/0xbd0 [ 644.936474][T11598] filemap_fault+0xd9d/0x1950 [ 644.941168][T11598] ? __pfx_filemap_fault+0x10/0x10 [ 644.946286][T11598] ? __pfx_pte_alloc_one+0x10/0x10 [ 644.951438][T11598] __do_fault+0x135/0x460 [ 644.955785][T11598] handle_pte_fault+0x1105/0x6820 [ 644.960840][T11598] ? mark_lock+0x9a/0x360 [ 644.965196][T11598] ? __pfx_handle_pte_fault+0x10/0x10 [ 644.970616][T11598] ? mt_find+0x2a9/0x920 [ 644.974877][T11598] ? __thp_vma_allowable_orders+0x22c/0x9c0 [ 644.980787][T11598] ? __pfx_lock_release+0x10/0x10 [ 644.985856][T11598] handle_mm_fault+0x1053/0x1ad0 [ 644.990826][T11598] ? __pfx_handle_mm_fault+0x10/0x10 [ 644.996157][T11598] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 645.001456][T11598] exc_page_fault+0x2b9/0x8c0 [ 645.006151][T11598] asm_exc_page_fault+0x26/0x30 [ 645.011016][T11598] RIP: 0010:put_cmsg+0x2c8/0x650 [ 645.015974][T11598] Code: 89 f6 e8 2b c7 0c f8 48 89 df 4c 89 e6 e8 20 c7 0c f8 4c 39 e3 0f 82 6f 02 00 00 4c 39 f3 0f 87 66 02 00 00 0f 01 cb 0f ae e8 <4d> 89 3c 24 8b 44 24 08 41 89 44 24 08 4c 8b 74 24 30 8b 44 24 0c [ 645.035589][T11598] RSP: 0018:ffffc9000c43f7e0 EFLAGS: 00050297 [ 645.041670][T11598] RAX: 0000000000000000 RBX: 0000000020002f58 RCX: ffff88802d26da00 [ 645.049650][T11598] RDX: 0000000000000000 RSI: 0000000020002f40 RDI: 0000000020002f58 [ 645.057652][T11598] RBP: 0000000000000008 R08: ffffffff898824f0 R09: ffffffff820b4f37 [ 645.065636][T11598] R10: 0000000000000003 R11: ffff88802d26da00 R12: 0000000020002f40 [ 645.073619][T11598] R13: 0000000000000018 R14: 00007fffffffefff R15: 0000000000000018 [ 645.081616][T11598] ? __check_object_size+0x77/0x900 [ 645.086829][T11598] ? put_cmsg+0x2b0/0x650 [ 645.091207][T11598] tipc_sk_anc_data_recv+0x3bb/0x990 [ 645.096507][T11598] ? __pfx_tipc_wait_for_rcvmsg+0x10/0x10 [ 645.102244][T11598] ? __pfx_tipc_sk_anc_data_recv+0x10/0x10 [ 645.108074][T11598] tipc_recvmsg+0x72e/0x13c0 [ 645.112694][T11598] ? __pfx_tipc_recvmsg+0x10/0x10 [ 645.117741][T11598] ? lockdep_hardirqs_on+0x99/0x150 [ 645.122979][T11598] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 645.128279][T11598] ? __pfx_tipc_recvmsg+0x10/0x10 [ 645.133324][T11598] sock_recvmsg+0x22f/0x280 [ 645.137848][T11598] ____sys_recvmsg+0x1c6/0x480 [ 645.142643][T11598] ? __pfx_____sys_recvmsg+0x10/0x10 [ 645.147966][T11598] __sys_recvmsg+0x2e6/0x3d0 [ 645.152580][T11598] ? __pfx___sys_recvmsg+0x10/0x10 [ 645.157749][T11598] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 645.164095][T11598] ? do_syscall_64+0x100/0x230 [ 645.168878][T11598] ? do_syscall_64+0xb6/0x230 [ 645.173588][T11598] do_syscall_64+0xf3/0x230 [ 645.178108][T11598] ? clear_bhb_loop+0x35/0x90 [ 645.182800][T11598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.188733][T11598] RIP: 0033:0x7f76ccb7e719 [ 645.193157][T11598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.212787][T11598] RSP: 002b:00007f76cd8c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 645.221220][T11598] RAX: ffffffffffffffda RBX: 00007f76ccd35f80 RCX: 00007f76ccb7e719 [ 645.229200][T11598] RDX: 0000000000000000 RSI: 0000000020000ac0 RDI: 0000000000000003 [ 645.237183][T11598] RBP: 00007f76cd8c8090 R08: 0000000000000000 R09: 0000000000000000 [ 645.245164][T11598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.253146][T11598] R13: 0000000000000000 R14: 00007f76ccd35f80 R15: 00007fffdd743be8 [ 645.261143][T11598] [ 645.264286][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.999563][T11632] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 649.079027][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1523'. [ 649.363211][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1535'. [ 649.373651][T11656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1535'. [ 649.382885][T11656] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1535'. [ 649.431275][T11657] input: syz0 as /devices/virtual/input/input33 [ 649.441611][T11657] input: syz1 as /devices/virtual/input/input32 [ 651.489068][T11687] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1545'. [ 651.512735][T11687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1545'. [ 651.533941][T11687] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.559953][T11687] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.567151][T11687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.614779][ T5880] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 651.992693][T11695] input: syz0 as /devices/virtual/input/input35 [ 652.361714][ T5880] usb 7-1: device descriptor read/64, error -71 [ 652.615913][ T5880] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 652.774762][ T5880] usb 7-1: device descriptor read/64, error -71 [ 652.889013][ T5880] usb usb7-port1: attempt power cycle [ 653.255254][ T5880] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 653.308614][ T5880] usb 7-1: device descriptor read/8, error -71 [ 653.573664][T11707] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1550'. [ 653.637356][ T5880] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 653.681292][ T5880] usb 7-1: device descriptor read/8, error -71 [ 653.780954][T11487] Bluetooth: hci5: Frame reassembly failed (-84) [ 653.816466][ T5880] usb usb7-port1: unable to enumerate USB device [ 653.917314][T11710] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 654.274753][ T5883] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 654.456221][ T5883] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.466845][ T5883] usb 9-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 654.497191][ T5883] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.533514][ T5883] usb 9-1: config 0 descriptor?? [ 654.558045][ T5883] rndis_host 9-1:0.0: probe with driver rndis_host failed with error -22 [ 654.967406][ T5880] usb 9-1: USB disconnect, device number 10 [ 655.407321][T11724] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1556'. [ 655.525365][ T29] audit: type=1804 audit(1731789348.973:117): pid=11724 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.1556" name="/" dev="pidfs" ino=12023 res=1 errno=0 [ 655.854644][ T9571] Bluetooth: hci5: command 0x1003 tx timeout [ 655.855037][ T5141] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 659.554521][T11759] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 659.581531][T11759] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 659.667721][T11759] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 660.745216][T11772] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 660.800625][T11772] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 660.885617][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1571'. [ 660.904495][ T5141] Bluetooth: hci4: command 0x0c1a tx timeout [ 660.931686][T11772] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 662.297899][T11794] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1573'. [ 662.976926][ T5141] Bluetooth: hci4: command 0x0c1a tx timeout [ 664.945837][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1583'. [ 665.066613][ T5141] Bluetooth: hci4: command 0x0c1a tx timeout [ 665.255508][ T5881] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 665.484110][ T5881] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.573058][ T5881] usb 9-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 665.703876][ T5881] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.805594][T11825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1586'. [ 665.829524][ T5881] usb 9-1: config 0 descriptor?? [ 665.906808][ T29] audit: type=1804 audit(1731789359.353:118): pid=11832 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1586" name="/" dev="pidfs" ino=12123 res=1 errno=0 [ 665.929591][ T5881] rndis_host 9-1:0.0: probe with driver rndis_host failed with error -22 [ 665.946831][T11829] RDS: rds_bind could not find a transport for ::a:0:0, load rds_tcp or rds_rdma? [ 666.320561][ T5881] usb 9-1: USB disconnect, device number 11 [ 668.197565][ T29] audit: type=1326 audit(1731789361.643:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11859 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ec57e719 code=0x7ffc0000 [ 668.657358][ T29] audit: type=1326 audit(1731789361.643:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11859 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7ff3ec57e719 code=0x7ffc0000 [ 668.709742][ T29] audit: type=1326 audit(1731789361.643:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11859 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ec57e719 code=0x7ffc0000 [ 668.712034][T11867] netlink: 'syz.0.1596': attribute type 10 has an invalid length. [ 668.732287][ T29] audit: type=1326 audit(1731789361.643:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11859 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3ec57e719 code=0x7ffc0000 [ 668.762412][ T29] audit: type=1326 audit(1731789361.663:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11859 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ec57e719 code=0x7ffc0000 [ 668.784923][ T29] audit: type=1326 audit(1731789361.663:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11859 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ec57e719 code=0x7ffc0000 [ 668.809878][ T29] audit: type=1326 audit(1731789362.073:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11859 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3ec57e719 code=0x7ffc0000 [ 668.832155][ T29] audit: type=1326 audit(1731789362.073:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11859 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ec57e719 code=0x7ffc0000 [ 668.854640][ T29] audit: type=1326 audit(1731789362.073:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11859 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3ec57e719 code=0x7ffc0000 [ 668.881014][ T12] Bluetooth: (null): Invalid header checksum [ 668.895113][ T12] Bluetooth: (null): Invalid header checksum [ 668.939328][ T12] Bluetooth: (null): Invalid header checksum [ 668.996394][T11867] geneve0: entered promiscuous mode [ 669.021135][T11867] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 669.031464][T11463] Bluetooth: (null): Invalid header checksum [ 669.043038][T11874] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1598'. [ 669.057205][T11879] vlan2: entered promiscuous mode [ 669.082417][T11879] bridge0: entered promiscuous mode [ 669.095013][T11879] vlan2: entered allmulticast mode [ 669.102452][T11879] bridge0: entered allmulticast mode [ 671.168403][T11458] wlan0: Trigger new scan to find an IBSS to join [ 671.426295][T11904] input: syz0 as /devices/virtual/input/input36 [ 675.146866][ T11] wlan0: Trigger new scan to find an IBSS to join [ 675.667236][T11913] binder: 11909:11913 ioctl c0306201 0 returned -14 [ 677.579632][T11463] wlan0: Creating new IBSS network, BSSID 62:f5:73:a4:03:b9 [ 677.713534][T11949] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1622'. [ 677.885172][T11954] input: syz0 as /devices/virtual/input/input37 [ 678.836426][T11963] Cannot find add_set index 0 as target [ 679.234264][T11969] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1630'. [ 679.378822][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 679.378842][ T29] audit: type=1804 audit(1731789372.823:139): pid=11969 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.1630" name="/" dev="pidfs" ino=12268 res=1 errno=0 [ 681.360023][T12006] hub 9-0:1.0: USB hub found [ 681.397416][T12006] hub 9-0:1.0: 1 port detected [ 681.643776][T12014] input: syz0 as /devices/virtual/input/input38 [ 681.666584][T12013] FAULT_INJECTION: forcing a failure. [ 681.666584][T12013] name failslab, interval 1, probability 0, space 0, times 0 [ 681.838896][T12013] CPU: 1 UID: 0 PID: 12013 Comm: syz.6.1639 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 681.849729][T12013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 681.859816][T12013] Call Trace: [ 681.863115][T12013] [ 681.866068][T12013] dump_stack_lvl+0x241/0x360 [ 681.870775][T12013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 681.876012][T12013] ? __pfx__printk+0x10/0x10 [ 681.880628][T12013] ? fs_reclaim_acquire+0x93/0x130 [ 681.885751][T12013] ? __pfx___might_resched+0x10/0x10 [ 681.891068][T12013] should_fail_ex+0x3b0/0x4e0 [ 681.895767][T12013] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 681.901544][T12013] should_failslab+0xac/0x100 [ 681.906272][T12013] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 681.912038][T12013] __kmalloc_noprof+0xd8/0x400 [ 681.916840][T12013] tomoyo_realpath_from_path+0xcf/0x5e0 [ 681.922427][T12013] tomoyo_path_number_perm+0x23a/0x880 [ 681.927918][T12013] ? tomoyo_path_number_perm+0x208/0x880 [ 681.933585][T12013] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 681.939620][T12013] ? __se_sys_ioctl+0x30/0x170 [ 681.944413][T12013] ? hook_file_ioctl+0x40/0x2d0 [ 681.949294][T12013] security_file_ioctl+0xc6/0x2a0 [ 681.954370][T12013] __se_sys_ioctl+0x47/0x170 [ 681.958983][T12013] do_syscall_64+0xf3/0x230 [ 681.963499][T12013] ? clear_bhb_loop+0x35/0x90 [ 681.968190][T12013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.974100][T12013] RIP: 0033:0x7f1ae397e719 [ 681.978536][T12013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.998184][T12013] RSP: 002b:00007f1ae46cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 682.006615][T12013] RAX: ffffffffffffffda RBX: 00007f1ae3b36058 RCX: 00007f1ae397e719 [ 682.014598][T12013] RDX: 0000000020000000 RSI: 00000000c0105512 RDI: 0000000000000007 [ 682.022571][T12013] RBP: 00007f1ae46cb090 R08: 0000000000000000 R09: 0000000000000000 [ 682.030546][T12013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.038527][T12013] R13: 0000000000000000 R14: 00007f1ae3b36058 R15: 00007fff560f61c8 [ 682.046516][T12013] [ 682.286180][T11987] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1633'. [ 682.296016][T12013] ERROR: Out of memory at tomoyo_realpath_from_path. [ 682.302871][T12013] hub 9-0:1.0: USB hub found [ 682.310373][T12013] hub 9-0:1.0: 1 port detected [ 682.344919][ T29] audit: type=1804 audit(1731789375.783:140): pid=11987 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.8.1633" name="/" dev="pidfs" ino=12284 res=1 errno=0 [ 682.578577][T12022] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1641'. [ 683.622674][ T5883] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 684.905808][T12018] vivid-000: ================= START STATUS ================= [ 684.913769][T12018] vivid-000: Generate PTS: true [ 684.919019][T12018] vivid-000: Generate SCR: true [ 684.923894][T12018] tpg source WxH: 640x360 (Y'CbCr) [ 684.929069][T12018] tpg field: 1 [ 684.932435][T12018] tpg crop: 640x360@0x0 [ 684.936611][T12018] tpg compose: 640x360@0x0 [ 684.941033][T12018] tpg colorspace: 8 [ 684.944869][T12018] tpg transfer function: 0/2 [ 684.949452][T12018] tpg Y'CbCr encoding: 0/1 [ 684.953858][T12018] tpg quantization: 0/2 [ 684.958074][T12018] tpg RGB range: 0/2 [ 684.961977][T12018] vivid-000: ================== END STATUS ================== [ 684.986080][ T5883] usb 7-1: Using ep0 maxpacket: 16 [ 684.993353][ T5883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.017405][ T5883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.028498][ T5883] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 685.038025][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.048966][ T5883] usb 7-1: config 0 descriptor?? [ 685.355587][T12043] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 685.355587][T12043] program syz.8.1649 not setting count and/or reply_len properly [ 686.486459][ T5883] input: HID 05ac:8241 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:05AC:8241.0019/input/input39 [ 686.504123][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.511225][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.614509][T12055] input: syz0 as /devices/virtual/input/input40 [ 686.674352][ T5883] appleir 0003:05AC:8241.0019: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.6-1/input0 [ 687.073264][ T5881] usb 7-1: USB disconnect, device number 29 [ 687.168470][T12061] input: syz0 as /devices/virtual/input/input42 [ 687.304584][T12066] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1657'. [ 688.328202][T12081] FAULT_INJECTION: forcing a failure. [ 688.328202][T12081] name failslab, interval 1, probability 0, space 0, times 0 [ 688.341315][T12081] CPU: 1 UID: 0 PID: 12081 Comm: syz.0.1660 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 688.352124][T12081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 688.362215][T12081] Call Trace: [ 688.365528][T12081] [ 688.368486][T12081] dump_stack_lvl+0x241/0x360 [ 688.373223][T12081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 688.378472][T12081] ? __pfx__printk+0x10/0x10 [ 688.383124][T12081] should_fail_ex+0x3b0/0x4e0 [ 688.387850][T12081] should_failslab+0xac/0x100 [ 688.392565][T12081] ? __alloc_skb+0x1c3/0x440 [ 688.397204][T12081] kmem_cache_alloc_node_noprof+0x71/0x320 [ 688.403058][T12081] __alloc_skb+0x1c3/0x440 [ 688.407556][T12081] ? __pfx___alloc_skb+0x10/0x10 [ 688.412543][T12081] ? skb_put+0x114/0x1f0 [ 688.416834][T12081] __pfkey_xfrm_state2msg+0x434/0x3cf0 [ 688.422352][T12081] dump_sa+0xaa/0x570 [ 688.426383][T12081] xfrm_state_walk+0x263/0x9e0 [ 688.431189][T12081] ? __pfx_dump_sa+0x10/0x10 [ 688.435828][T12081] pfkey_do_dump+0x5c/0x400 [ 688.440361][T12081] pfkey_sendmsg+0xbcc/0x1050 [ 688.445077][T12081] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 688.450248][T12081] ? __might_fault+0xaa/0x120 [ 688.454951][T12081] ? __pfx_lock_release+0x10/0x10 [ 688.460012][T12081] ? __import_iovec+0x590/0x870 [ 688.464888][T12081] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 688.470025][T12081] __sock_sendmsg+0x221/0x270 [ 688.474773][T12081] ____sys_sendmsg+0x52a/0x7e0 [ 688.479575][T12081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 688.484897][T12081] __sys_sendmsg+0x292/0x380 [ 688.489510][T12081] ? __pfx___sys_sendmsg+0x10/0x10 [ 688.494784][T12081] ? __pfx_vfs_write+0x10/0x10 [ 688.499619][T12081] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 688.505988][T12081] ? do_syscall_64+0x100/0x230 [ 688.510776][T12081] ? do_syscall_64+0xb6/0x230 [ 688.515469][T12081] do_syscall_64+0xf3/0x230 [ 688.519990][T12081] ? clear_bhb_loop+0x35/0x90 [ 688.524690][T12081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.530602][T12081] RIP: 0033:0x7ff3ec57e719 [ 688.535032][T12081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.554653][T12081] RSP: 002b:00007ff3ed427038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.563088][T12081] RAX: ffffffffffffffda RBX: 00007ff3ec735f80 RCX: 00007ff3ec57e719 [ 688.571078][T12081] RDX: 0000000000004040 RSI: 0000000020000200 RDI: 0000000000000003 [ 688.579524][T12081] RBP: 00007ff3ed427090 R08: 0000000000000000 R09: 0000000000000000 [ 688.587503][T12081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.595481][T12081] R13: 0000000000000000 R14: 00007ff3ec735f80 R15: 00007ffdab672e38 [ 688.603474][T12081] [ 688.606516][ C1] vkms_vblank_simulate: vblank timer overrun [ 688.809005][T12092] netlink: 632 bytes leftover after parsing attributes in process `syz.6.1666'. [ 689.333884][T12102] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 690.080774][T12107] input: syz0 as /devices/virtual/input/input44 [ 690.336103][T12120] input: syz1 as /devices/virtual/input/input46 [ 690.358642][T12120] FAULT_INJECTION: forcing a failure. [ 690.358642][T12120] name failslab, interval 1, probability 0, space 0, times 0 [ 690.395979][T12120] CPU: 1 UID: 0 PID: 12120 Comm: syz.7.1673 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 690.406816][T12120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 690.416919][T12120] Call Trace: [ 690.420313][T12120] [ 690.423273][T12120] dump_stack_lvl+0x241/0x360 [ 690.428014][T12120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 690.433259][T12120] ? __pfx__printk+0x10/0x10 [ 690.437908][T12120] ? fs_reclaim_acquire+0x93/0x130 [ 690.443061][T12120] ? __pfx___might_resched+0x10/0x10 [ 690.448390][T12120] ? rcu_is_watching+0x15/0xb0 [ 690.453216][T12120] should_fail_ex+0x3b0/0x4e0 [ 690.458033][T12120] should_failslab+0xac/0x100 [ 690.462737][T12120] ? kobject_uevent_env+0x28b/0x8e0 [ 690.467989][T12120] __kmalloc_cache_noprof+0x6c/0x2c0 [ 690.473313][T12120] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 690.479344][T12120] ? __pfx_dev_uevent_name+0x10/0x10 [ 690.484684][T12120] kobject_uevent_env+0x28b/0x8e0 [ 690.489871][T12120] device_del+0x7db/0x9b0 [ 690.494261][T12120] ? __pfx_device_del+0x10/0x10 [ 690.499168][T12120] cdev_device_del+0x26/0xf0 [ 690.503797][T12120] evdev_disconnect+0x4c/0xb0 [ 690.508536][T12120] __input_unregister_device+0x373/0x620 [ 690.514233][T12120] input_unregister_device+0xa3/0x100 [ 690.519655][T12120] uinput_destroy_device+0x6d1/0x8f0 [ 690.525007][T12120] uinput_ioctl_handler+0xb09/0x1770 [ 690.530367][T12120] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 690.536152][T12120] ? __fget_files+0x3f3/0x470 [ 690.540981][T12120] ? __pfx_uinput_ioctl+0x10/0x10 [ 690.546057][T12120] __se_sys_ioctl+0xf9/0x170 [ 690.550707][T12120] do_syscall_64+0xf3/0x230 [ 690.555350][T12120] ? clear_bhb_loop+0x35/0x90 [ 690.560165][T12120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.566100][T12120] RIP: 0033:0x7f76ccb7e719 [ 690.570558][T12120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.590208][T12120] RSP: 002b:00007f76cd8c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 690.592299][T12121] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1674'. [ 690.598647][T12120] RAX: ffffffffffffffda RBX: 00007f76ccd35f80 RCX: 00007f76ccb7e719 [ 690.598709][T12120] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 690.598727][T12120] RBP: 00007f76cd8c8090 R08: 0000000000000000 R09: 0000000000000000 [ 690.598743][T12120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.598758][T12120] R13: 0000000000000000 R14: 00007f76ccd35f80 R15: 00007fffdd743be8 [ 690.598792][T12120] [ 690.598941][ C1] vkms_vblank_simulate: vblank timer overrun [ 690.661213][T12121] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1674'. [ 690.671341][T12121] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1674'. [ 690.683792][T12121] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1674'. [ 690.694874][T12121] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1674'. [ 690.703877][T12121] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1674'. [ 690.718577][T12121] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1674'. [ 690.727984][T12121] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1674'. [ 690.874417][ T5883] usb 7-1: new low-speed USB device number 30 using dummy_hcd [ 691.025505][ T5883] usb 7-1: Invalid ep0 maxpacket: 32 [ 691.094457][ T5881] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 691.174442][ T5883] usb 7-1: new low-speed USB device number 31 using dummy_hcd [ 691.316146][ T5881] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 691.325594][ T5881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.348603][ T5881] usb 8-1: config 0 descriptor?? [ 691.370623][ T5881] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 691.564583][ T5883] usb 7-1: Invalid ep0 maxpacket: 32 [ 691.583361][ T5883] usb usb7-port1: attempt power cycle [ 691.595358][T12150] FAULT_INJECTION: forcing a failure. [ 691.595358][T12150] name failslab, interval 1, probability 0, space 0, times 0 [ 691.608620][T12150] CPU: 1 UID: 0 PID: 12150 Comm: syz.1.1680 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 691.619422][T12150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 691.629507][T12150] Call Trace: [ 691.632812][T12150] [ 691.635772][T12150] dump_stack_lvl+0x241/0x360 [ 691.640496][T12150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 691.645748][T12150] ? __pfx__printk+0x10/0x10 [ 691.650390][T12150] should_fail_ex+0x3b0/0x4e0 [ 691.655107][T12150] should_failslab+0xac/0x100 [ 691.659832][T12150] ? assoc_array_insert+0xfe/0x33e0 [ 691.665083][T12150] __kmalloc_cache_noprof+0x6c/0x2c0 [ 691.670407][T12150] assoc_array_insert+0xfe/0x33e0 [ 691.675465][T12150] ? trace_contention_end+0x3c/0x120 [ 691.680794][T12150] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 691.687168][T12150] ? key_set_index_key+0x38e/0x570 [ 691.692321][T12150] ? __pfx_assoc_array_insert+0x10/0x10 [ 691.697913][T12150] ? __pfx_down_write+0x10/0x10 [ 691.702809][T12150] ? __pfx_key_set_index_key+0x10/0x10 [ 691.708311][T12150] __key_link_begin+0xe5/0x1f0 [ 691.713120][T12150] __key_create_or_update+0x570/0xc70 [ 691.718545][T12150] ? __pfx___key_create_or_update+0x10/0x10 [ 691.724502][T12150] ? __might_fault+0xc6/0x120 [ 691.729222][T12150] key_create_or_update+0x42/0x60 [ 691.734289][T12150] __se_sys_add_key+0x33f/0x490 [ 691.739187][T12150] ? __pfx___se_sys_add_key+0x10/0x10 [ 691.744621][T12150] ? do_syscall_64+0x100/0x230 [ 691.749426][T12150] ? __x64_sys_add_key+0x20/0xc0 [ 691.754414][T12150] do_syscall_64+0xf3/0x230 [ 691.758967][T12150] ? clear_bhb_loop+0x35/0x90 [ 691.763686][T12150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.769620][T12150] RIP: 0033:0x7fe9bc57e719 [ 691.774061][T12150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.793704][T12150] RSP: 002b:00007fe9ba9f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 691.802160][T12150] RAX: ffffffffffffffda RBX: 00007fe9bc736130 RCX: 00007fe9bc57e719 [ 691.810160][T12150] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000020000180 [ 691.818164][T12150] RBP: 00007fe9ba9f6090 R08: fffffffffffffffd R09: 0000000000000000 [ 691.826165][T12150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.834244][T12150] R13: 0000000000000000 R14: 00007fe9bc736130 R15: 00007fff66d5fad8 [ 691.842265][T12150] [ 691.845320][ C1] vkms_vblank_simulate: vblank timer overrun [ 692.241583][ T5881] gp8psk: usb in 128 operation failed. [ 692.244826][ T5883] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 692.256662][ T5881] gp8psk: usb in 137 operation failed. [ 692.262191][ T5881] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 692.274187][ T5881] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 692.296243][ T5881] usb 8-1: USB disconnect, device number 20 [ 692.318607][ T5883] usb 7-1: Invalid ep0 maxpacket: 32 [ 692.467061][ T5883] usb 7-1: new low-speed USB device number 33 using dummy_hcd [ 692.504880][ T5883] usb 7-1: Invalid ep0 maxpacket: 32 [ 692.519906][ T5883] usb usb7-port1: unable to enumerate USB device [ 693.576655][T12169] __nla_validate_parse: 19 callbacks suppressed [ 693.576679][T12169] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1687'. [ 693.624561][T12169] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1687'. [ 693.642226][T12169] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1687'. [ 693.652167][T12169] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1687'. [ 693.726202][T12169] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1687'. [ 693.767629][T12169] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1687'. [ 693.816594][T12169] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1687'. [ 693.844545][T12169] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1687'. [ 693.854807][T12169] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1687'. [ 693.863802][T12169] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1687'. [ 694.257996][T12179] ptrace attach of "./syz-executor exec"[9785] was attempted by "./syz-executor exec"[12179] [ 696.311501][T12193] kvm: kvm [12188]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x40 [ 696.584515][ T5881] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 696.739770][ T5881] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 696.770415][ T5881] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 696.802405][ T5881] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 696.828456][ T5881] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 696.862010][ T5881] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 696.897698][ T5881] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.922186][ T5881] usb 9-1: config 0 descriptor?? [ 697.293538][T12209] input: syz0 as /devices/virtual/input/input48 [ 697.437919][ T5881] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 697.749798][ T5881] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 697.791661][T12207] Cannot find add_set index 4 as target [ 698.751657][ T5882] usb 9-1: USB disconnect, device number 12 [ 699.134470][ T5883] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 699.212772][T12244] __nla_validate_parse: 17 callbacks suppressed [ 699.212790][T12244] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1711'. [ 699.311052][ T5883] usb 8-1: Using ep0 maxpacket: 32 [ 699.319328][ T5883] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 699.327762][ T5883] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.338580][ T5883] usb 8-1: config 0 has no interface number 0 [ 699.344933][ T5883] usb 8-1: config 0 interface 64 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 699.354871][ T5881] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 699.356209][ T5883] usb 8-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 699.386727][ T5883] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 699.401029][ T5883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=75 [ 699.419620][ T5883] usb 8-1: Product: syz [ 699.423856][ T5883] usb 8-1: Manufacturer: syz [ 699.440260][ T5883] usb 8-1: SerialNumber: syz [ 699.451334][ T5883] usb 8-1: config 0 descriptor?? [ 699.490531][ T5883] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 699.509179][T12249] netlink: 132952 bytes leftover after parsing attributes in process `syz.0.1712'. [ 699.524657][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 699.540871][ T5881] usb 2-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=46.ac [ 699.551519][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.560180][ T5881] usb 2-1: Product: syz [ 699.564792][ T5881] usb 2-1: Manufacturer: syz [ 699.569499][ T5881] usb 2-1: SerialNumber: syz [ 699.577114][ T5881] usb 2-1: config 0 descriptor?? [ 699.585411][ T5881] kl5kusb105 2-1:0.0: KL5KUSB105D / PalmConnect converter detected [ 699.596391][ T5881] usb 2-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 699.868338][ T5883] usb 8-1: USB disconnect, device number 21 [ 699.920934][T11487] usb 8-1: Failed to submit usb control message: -71 [ 699.938530][T11487] usb 8-1: unable to send the bmi data to the device: -71 [ 700.220180][ T5910] usb 2-1: USB disconnect, device number 40 [ 700.231020][ T5910] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 700.241757][ T5910] kl5kusb105 2-1:0.0: device disconnected [ 700.244529][T11487] usb 8-1: unable to get target info from device [ 700.266983][T11487] usb 8-1: could not get target info (-71) [ 700.283262][T11487] usb 8-1: could not probe fw (-71) [ 700.482312][T11483] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.590931][T11483] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.714806][ T5881] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 700.740771][T11483] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.901399][ T5881] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.927995][T11483] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.945721][ T5881] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.977128][ T5881] usb 9-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 700.998434][ T5881] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.026524][ T5881] usb 9-1: config 0 descriptor?? [ 701.167631][ T9571] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 701.178469][ T9571] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 701.187725][ T9571] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 701.202161][ T9571] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 701.212618][ T9571] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 701.220673][ T9571] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 701.263293][T12280] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1722'. [ 701.354086][T11483] ªªªªª»: left allmulticast mode [ 701.359331][T11483] ªªªªª»: left promiscuous mode [ 701.364617][T11483] bridge0: port 1(ªªªªª») entered disabled state [ 701.691262][ T5881] usbhid 9-1:0.0: can't add hid device: -71 [ 701.698572][ T5881] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 701.729727][ T5881] usb 9-1: USB disconnect, device number 13 [ 701.784671][ T5910] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 702.026711][ T5910] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 702.040442][ T5910] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 702.079627][ T5910] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 702.133686][ T5910] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 702.212691][ T5910] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 702.527253][ T5910] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.692227][ T5910] usb 8-1: config 0 descriptor?? [ 702.730066][T11483] erspan0 (unregistering): left promiscuous mode [ 703.148704][T11483] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 703.265475][ T5910] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 703.318168][ T5141] Bluetooth: hci1: command tx timeout [ 703.431310][ T5910] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 704.261217][T12310] syz.8.1729: attempt to access beyond end of device [ 704.261217][T12310] nbd8: rw=0, sector=16, nr_sectors = 8 limit=0 [ 704.276716][T12310] REISERFS warning (device nbd8): sh-2006 read_super_block: bread failed (dev nbd8, block 2, size 4096) [ 704.290699][T12310] syz.8.1729: attempt to access beyond end of device [ 704.290699][T12310] nbd8: rw=0, sector=128, nr_sectors = 8 limit=0 [ 704.304253][T12310] REISERFS warning (device nbd8): sh-2006 read_super_block: bread failed (dev nbd8, block 16, size 4096) [ 704.318236][T12310] REISERFS warning (device nbd8): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd8 [ 704.552729][T11483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.571960][T12314] vcan0: tx drop: invalid da for name 0x000000000000c700 [ 704.572958][T11483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.593342][T11483] bond0 (unregistering): Released all slaves [ 704.834960][T11483] ------------[ cut here ]------------ [ 704.840516][T11483] WARNING: CPU: 1 PID: 11483 at net/l2tp/l2tp_core.c:1877 l2tp_exit_net+0x13b/0x170 [ 704.850090][T11483] Modules linked in: [ 704.854444][T11483] CPU: 1 UID: 0 PID: 11483 Comm: kworker/u8:22 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 704.865655][T11483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 704.876438][T11483] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 704.881592][T11483] RIP: 0010:l2tp_exit_net+0x13b/0x170 [ 704.887214][T11483] Code: e8 0a c4 ad f6 85 db 74 45 e8 c1 bf ad f6 4c 89 ff 5b 41 5c 41 5e 41 5f e9 b2 71 d0 00 e8 ad bf ad f6 eb 05 e8 a6 bf ad f6 90 <0f> 0b 90 e9 3b ff ff ff e8 98 bf ad f6 eb 05 e8 91 bf ad f6 90 0f [ 704.907193][T11483] RSP: 0018:ffffc9000f05fa98 EFLAGS: 00010293 [ 704.913310][T11483] RAX: ffffffff8ae72a03 RBX: ffff8880622b1120 RCX: ffff88802665bc00 [ 704.921642][T11483] RDX: 0000000000000000 RSI: ffffffff8c0adc40 RDI: ffffffff8c6038e0 [ 704.929768][T11483] RBP: ffffc9000f05fbb0 R08: ffffffff901be06f R09: 1ffffffff2037c0d [ 704.938241][T11483] R10: dffffc0000000000 R11: fffffbfff2037c0e R12: dffffc0000000000 [ 704.946581][T11483] R13: 1ffffffff1fd8fcc R14: ffff8880622b10d8 R15: ffff8880622b1000 [ 704.954868][T11483] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 704.964087][T11483] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 704.971078][T11483] CR2: 00000000200002b0 CR3: 00000000671ba000 CR4: 00000000003526f0 [ 704.979467][T11483] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 704.988469][T11483] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 704.996574][T11483] Call Trace: [ 704.999923][T11483] [ 705.002893][T11483] ? __warn+0x168/0x4e0 [ 705.007265][T11483] ? l2tp_exit_net+0x13b/0x170 [ 705.012082][T11483] ? report_bug+0x2b3/0x500 [ 705.016690][T11483] ? l2tp_exit_net+0x13b/0x170 [ 705.021603][T11483] ? handle_bug+0x60/0x90 [ 705.026035][T11483] ? exc_invalid_op+0x1a/0x50 [ 705.030810][T11483] ? asm_exc_invalid_op+0x1a/0x20 [ 705.035967][T11483] ? l2tp_exit_net+0x133/0x170 [ 705.040780][T11483] ? l2tp_exit_net+0x13b/0x170 [ 705.045661][T11483] ? l2tp_exit_net+0x133/0x170 [ 705.050517][T11483] cleanup_net+0x802/0xcc0 [ 705.055162][T11483] ? __pfx_cleanup_net+0x10/0x10 [ 705.060199][T11483] ? process_scheduled_works+0x976/0x1850 [ 705.066046][T11483] process_scheduled_works+0xa63/0x1850 [ 705.071946][T11483] ? __pfx_process_scheduled_works+0x10/0x10 [ 705.078301][T11483] ? assign_work+0x364/0x3d0 [ 705.082991][T11483] worker_thread+0x870/0xd30 [ 705.087726][T11483] ? __kthread_parkme+0x169/0x1d0 [ 705.092814][T11483] ? __pfx_worker_thread+0x10/0x10 [ 705.098099][T11483] kthread+0x2f0/0x390 [ 705.102219][T11483] ? __pfx_worker_thread+0x10/0x10 [ 705.107434][T11483] ? __pfx_kthread+0x10/0x10 [ 705.112083][T11483] ret_from_fork+0x4b/0x80 [ 705.116730][T11483] ? __pfx_kthread+0x10/0x10 [ 705.118640][T12274] chnl_net:caif_netlink_parms(): no params data found [ 705.121377][T11483] ret_from_fork_asm+0x1a/0x30 [ 705.131383][ T968] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 705.133003][T11483] [ 705.143681][T11483] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 705.150989][T11483] CPU: 1 UID: 0 PID: 11483 Comm: kworker/u8:22 Not tainted 6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0 [ 705.162127][T11483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 705.172345][T11483] Workqueue: netns cleanup_net [ 705.177255][T11483] Call Trace: [ 705.180661][T11483] [ 705.183626][T11483] dump_stack_lvl+0x241/0x360 [ 705.188349][T11483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 705.193588][T11483] ? __pfx__printk+0x10/0x10 [ 705.198212][T11483] ? _printk+0xd5/0x120 [ 705.202419][T11483] ? __init_begin+0x41000/0x41000 [ 705.207486][T11483] ? vscnprintf+0x5d/0x90 [ 705.211961][T11483] panic+0x349/0x880 [ 705.215902][T11483] ? __warn+0x177/0x4e0 [ 705.220114][T11483] ? __pfx_panic+0x10/0x10 [ 705.224554][T11483] ? show_trace_log_lvl+0x3b2/0x410 [ 705.229782][T11483] ? ret_from_fork_asm+0x1a/0x30 [ 705.234751][T11483] __warn+0x34b/0x4e0 [ 705.238764][T11483] ? l2tp_exit_net+0x13b/0x170 [ 705.243546][T11483] report_bug+0x2b3/0x500 [ 705.247900][T11483] ? l2tp_exit_net+0x13b/0x170 [ 705.252688][T11483] handle_bug+0x60/0x90 [ 705.256863][T11483] exc_invalid_op+0x1a/0x50 [ 705.261397][T11483] asm_exc_invalid_op+0x1a/0x20 [ 705.266277][T11483] RIP: 0010:l2tp_exit_net+0x13b/0x170 [ 705.271691][T11483] Code: e8 0a c4 ad f6 85 db 74 45 e8 c1 bf ad f6 4c 89 ff 5b 41 5c 41 5e 41 5f e9 b2 71 d0 00 e8 ad bf ad f6 eb 05 e8 a6 bf ad f6 90 <0f> 0b 90 e9 3b ff ff ff e8 98 bf ad f6 eb 05 e8 91 bf ad f6 90 0f [ 705.291317][T11483] RSP: 0018:ffffc9000f05fa98 EFLAGS: 00010293 [ 705.297437][T11483] RAX: ffffffff8ae72a03 RBX: ffff8880622b1120 RCX: ffff88802665bc00 [ 705.305515][T11483] RDX: 0000000000000000 RSI: ffffffff8c0adc40 RDI: ffffffff8c6038e0 [ 705.313506][T11483] RBP: ffffc9000f05fbb0 R08: ffffffff901be06f R09: 1ffffffff2037c0d [ 705.321501][T11483] R10: dffffc0000000000 R11: fffffbfff2037c0e R12: dffffc0000000000 [ 705.329501][T11483] R13: 1ffffffff1fd8fcc R14: ffff8880622b10d8 R15: ffff8880622b1000 [ 705.337512][T11483] ? l2tp_exit_net+0x133/0x170 [ 705.342311][T11483] ? l2tp_exit_net+0x133/0x170 [ 705.347113][T11483] cleanup_net+0x802/0xcc0 [ 705.351549][T11483] ? __pfx_cleanup_net+0x10/0x10 [ 705.356522][T11483] ? process_scheduled_works+0x976/0x1850 [ 705.362270][T11483] process_scheduled_works+0xa63/0x1850 [ 705.367865][T11483] ? __pfx_process_scheduled_works+0x10/0x10 [ 705.373870][T11483] ? assign_work+0x364/0x3d0 [ 705.378574][T11483] worker_thread+0x870/0xd30 [ 705.383197][T11483] ? __kthread_parkme+0x169/0x1d0 [ 705.388253][T11483] ? __pfx_worker_thread+0x10/0x10 [ 705.393397][T11483] kthread+0x2f0/0x390 [ 705.397481][T11483] ? __pfx_worker_thread+0x10/0x10 [ 705.402613][T11483] ? __pfx_kthread+0x10/0x10 [ 705.407223][T11483] ret_from_fork+0x4b/0x80 [ 705.411664][T11483] ? __pfx_kthread+0x10/0x10 [ 705.416265][T11483] ret_from_fork_asm+0x1a/0x30 [ 705.421078][T11483] [ 705.424435][T11483] Kernel Offset: disabled [ 705.428837][T11483] Rebooting in 86400 seconds..