last executing test programs: 28m28.730850085s ago: executing program 0 (id=38): syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0}, 0xfffffe2b) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000140600fe8000000000000000000000000000bb648000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002001190780000"], 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000023c0)={0x4, 0x1d, &(0x7f0000002340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000711e3f000300b702000014000000b7030000090000008500000083000000bf0900000000000055090100000000009500000000000000ac", @ANYRES32=r0, @ANYRES32, @ANYRES8=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r6 = dup3(r4, r5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000080), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r8, 0x0) ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f00000001c0)) 28m26.500442815s ago: executing program 0 (id=44): socket$can_bcm(0x1d, 0x2, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) shutdown(r3, 0x1) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x100000002) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) r4 = memfd_create(&(0x7f00000006c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f\xf8\xd28\xf4\x1c\xc0\xf9\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6\x02\x00\x00\x00A\xc5\xb8_\xd4\x18,\fus\xb2\x99/\xc0\x9a\xf2O\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b0\xc3\x93;\xcc\x14\x02\xc4\xfd{\xbb-\x80\xbf\xab\xbf\xd2\xd3\xe0Cf\xb7\x7f\x93X\'\xf5/\xf9cY\x828\xa2\x00_\xb0#w\xae\xb8L\xeb\xa1\xecF\xbd\xf0\x91$s\xd8\x80\x1a\xc4\xe5=_b\x99\xf9\x84(\xcb,Y\xe6\xf0\x13\x15J\x9f,\xa5\xf2.A\x00\x00S\x94\xe7\x05no\xee\x8b\xb0ciB\x82\t9*\a\x88\xfe\xca\xcb\xe2G\x00\xa9;q\x0f\xb4\xfa\x8e\v\xf7\xc7\x86>wHw]=rW\x01\xe3\xdb\x10G-\xf7\xacD\xd7\xfb\xa0\x96\x85u\xddDv\x9c\x8b\xab\xe3F\x1d\xd2C\xdc\x1f\x80\x005\'y8a\xd3s_\xa6\b\x90\xab\xc9_\xc9\xcb;z\xcc\x9d5\xd2j\x1d\xd9\xe1\xcb\x1c\x156\xc5\xf2d\xfe\x0er\x01\xcdyF\xc1H\r\x94\xa9\x89P|\xcff\x9e\x03\xa4:\x04\v\xfe\x04\x02.\x9e\xf5~\x00\xf2TL\xac\x87<)\x02\xbaq\xae\x87\x1a\xc0\xe5\x90', 0x0) ftruncate(r2, 0x80079a0) keyctl$update(0x2, r1, &(0x7f0000000580)="27bf82180736c06732913774bd74212f081d634bea2baecd614dd8dec3acc862ea0000852bea233d6ddc5e94e04e052beea04115630b32fa7d000000000000000090bd1ee69308bfdc7c1a01026ccaafb3422eca359fe3a14532ce3f3718938a5a1e18502f8b206b55cf83cc28bf91089b2e2916b3948c10ac02c070079b9ac9dfc698cc1b93f3b17d5dcc8ab51030960d6b9347796f3b809e9f3f7f414b42fc6aed595388038e9e3cdc0bdba0bad6c0e5ad20b773ea222b01612bb4cc0e1ca63eced19dadef", 0xa7) mmap(&(0x7f00001c3000/0x3000)=nil, 0x3000, 0x4, 0x2012, r4, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f001a6326fe0e5f7e5b6bec91e22365119ce2d40cc3ff100e11bea1588fb9152fd7481daf7b908aaf5f5efc07273a4f14e8300c6e43f90a5f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000002000001ba157c53089fcb10000000000000000c1cc19e34863e9b15a510ea994e2a82f9eb010a3b6d3783cda8024be48659b5d1c90547e6dcf243d272448b7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xf400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800008, 0x2) add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) read$watch_queue(0xffffffffffffffff, &(0x7f0000000200)=""/88, 0x58) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 28m22.160087187s ago: executing program 0 (id=58): r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r2, 0x1, 0x0, 0xfffffffc, {0x7}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_team\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x200000c4}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="6000e115ef2d6c71b8ae8228749236d5ec676c416d8f68677cc2781939f07927ba0edd6379c2d9f3147481c4a1044e58", @ANYRES16=r2, @ANYBLOB="000229bd7000fcdbdf2501000000050021000000000014001f000000000000000000000000000000000105001200c3000000050005000000000006000e0004000000050013004000000008001900ac1414aa0600010000000000"], 0x60}, 0x1, 0x0, 0x0, 0x8804}, 0x80) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x20000004) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendto(r4, &(0x7f0000000200)="8cb7e4f31b8c5ed9e5706d2f7dac7674cc6f66cb9ff4202c09bff73c7fc30db9a4b9279991c09a75b6e2b828fd96db9333b7680c8ad367df772e5bebb2377779f33edab6b304fc4cc9c2588260b8c79037cc199bebb83037f0d24a83ebf0bc3d880a8a3be039dda5745702e70062069a77cc89ba23e512569db6237b7bdb84bdb44f91ce229612", 0x87, 0x8000, &(0x7f0000000340)=@nfc={0x27, 0x0, 0x1}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000000040)={0x7fffffff, 0x20, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) mknod$loop(0x0, 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='msdos\x00', 0x0, 0x0) 28m19.736608472s ago: executing program 0 (id=64): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) (rerun: 32) read$msr(r0, 0x0, 0x0) (async) r1 = socket(0x25, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) modify_ldt$write(0x1, &(0x7f0000000080), 0x10) r2 = socket(0x2b, 0x2, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff}, 0xdf2090133c5169c2) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x64c980, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async, rerun: 64) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async) rt_tgsigqueueinfo(0x0, 0x0, 0x9, &(0x7f0000000140)={0x39, 0xffffffff, 0x4}) (async) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r7, 0x2285, 0x0) (async) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000100)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000280)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}, {0x0}], 0x3) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 28m19.584221641s ago: executing program 0 (id=65): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000e000000000000000000000085000000170000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000003c0)=0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x8091) r3 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r4 = memfd_create(0x0, 0x6) fcntl$addseals(r4, 0x409, 0xc) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x5}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x884) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) memfd_create(&(0x7f00000000c0)='/dev/cpu/#/msr\x00', 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, r5, 0x25, 0x2, @void}, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 28m18.965819537s ago: executing program 0 (id=68): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000404f045db6040000000001090224000100000000090400000103000000092100000001220500090581030000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000140)='\x8d\x00', 0x0, r1) fcntl$setsig(r3, 0xa, 0x21) mknodat$loop(r3, &(0x7f0000002600)='./bus\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) pipe2$9p(&(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) r6 = dup2(r5, r5) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}}) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x401, 0x82) r7 = syz_usb_connect$uac1(0x1, 0xe7, &(0x7f00000009c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x3, 0x1, 0x80, 0xd0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x10}, [@processing_unit={0xb, 0x24, 0x7, 0x3, 0x0, 0x7, "84201321"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x3, 0xf2, 0x94, "0699a2"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xf8, 0x4, 0x3, 0x8, "3d806e", "d9"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x200, 0x6, 0x4, "c6"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5b, 0x3, 0x5, 0x4, "a793", "fe"}, @as_header={0x7, 0x24, 0x1, 0x6, 0xf9, 0x1}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xb, 0x1, 0x40, 0x7f, "83838cc4c2de"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3b, 0x18, 0xe, {0x7, 0x25, 0x1, 0x2, 0x2, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x71, 0x2, 0x10, "2cf7ea673c35"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2, 0x1, 0x38, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x3, 0xb, 0x9, "48d3", "af02"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x4, 0x2, {0x7, 0x25, 0x1, 0x2, 0x4, 0xff81}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x8, 0xa, 0x59, 0x8, 0x9}, 0xe8, &(0x7f0000000300)={0x5, 0xf, 0xe8, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x9, 0x3, 0x4301}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x8, 0x5, 0xff01}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0xb, 0xf, 0x8, [0x0, 0xff3f0f, 0x30, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0xf2, 0x0, 0x78}, @generic={0x89, 0x10, 0x2, "4f582ba646ec12c4474727f56a67eda8772ff4047518be751ea603742d715503e7077e61d769293dcbc5ec1269111e6f34e5a7c89060e448952c703c8bb45e09335c0eb0f00d14d7194c7fc5cc5abeff78c85ebab45c38471ba040e7ff1f01e4b5ca93515ad9e6af230f2cb6d2e21b048912d408629ca721a140a36e4ae163ad013c06a88a56"}, @ssp_cap={0x20, 0x10, 0xa, 0x2e, 0x5, 0x903, 0x0, 0x7, [0x6619ed6f74b9d62c, 0xf, 0xc000, 0x0, 0xff0000]}]}, 0x2, [{0x46, &(0x7f0000000240)=@string={0x46, 0x3, "80bd82dbd3f33abf85a14916bca6f80a8d8c25c7f0ace7b9f07580ea857b1d284221897d8a19d72db1780111b889073b577dc42dd707425739228bdeb524640085817a53"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x804}}]}) syz_usb_control_io$uac1(r7, &(0x7f0000000680)={0x14, &(0x7f0000000480)={0x0, 0x9, 0xeb, {0xeb, 0x31, "5164389d6bc958d6b81e70e628332ea216906bb163b2df1bc9362c7d29a93bff14e947d2d54550ae5ac3a0deea41db46c170eefa5693b3b2f6d91c3ea4fc4f0382421b85bf4cdb8c95105fa01e81e16e6e264e8455ec7e2efe9dd0339d89e8177588db09a3697c8b3d81239b1f1f8f6d7abdf3dfa382c159182a2de33c6deb55ea5644008db5965bb816c8eefb4a3b95d02c61f56b830cba5a75b64fb601fb7bbb14e677b36825a2951fb4a2cf5d68a0dc5a003e454a88dc7d822bf022f07882e9f7dc714c763e3ce1a1c7977d5f6487b062cca5d5ac4656bd522e62d933f8f4b3a782bdd20f585081"}}, &(0x7f0000000580)={0x0, 0x3, 0xf9, @string={0xf9, 0x3, "4522ab9cf574dfe584f21174aaae6a49b50f51c3b9f427c7fb5fb05955a81a5ac3592ab809f8332f8404a52e92820cd58a17a99eacaf02fe7dd4d99ed96c958d348916769ce405b8029469dbd756a27358bb290edc124ad0e30bdd9d2008506843972a77ac837368c40b809a86785e939f8771e354bfda58d485ad5f74395dda54ad0487f2ed27129e62320511838067b5bcdeb748a83dacb51e68c91a3af8138638d4b0239ebf8d2d5fba73cb24274265dcd6b82b81f64f38d74dacd08f3566240aa871e6c992b7f237779e81504af0ffa9444aa5e2a1f34bc5e2260d8208860bf231b1f320b5d4d5b5517e0de21268e352d1ab823c4e"}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x20, 0xf, 0x7c, "e4df79bb2157e0be52463b51e787bf5e3389f49d6860c605ae6a330b93cbccf8bbc382b3ecc34f5d410f988fdaaddea6d5323a54b9028fbf05c03484d79cd032a5e80680c3aaabe1e030a6b718123f3ada9d6986335512535742951ad5776a9f569409d7613af0d81ffa0012d395fc6315174ccb3e7d29f180afab8d"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000800)={0x20, 0x81, 0x1, "d9"}, &(0x7f0000000840)={0x20, 0x82, 0x2, "c733"}, &(0x7f0000000880)={0x20, 0x83, 0x1, "d3"}, &(0x7f00000008c0)={0x20, 0x84, 0x4, "ad762ccc"}, &(0x7f0000000900)={0x20, 0x85, 0x3, "5eacf8"}}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002205000000030000000083dbc98251fabccb0670e6194314234c6b45a56abf71a34115087cf005b613a84017e0967e1ac394df3f737f5474b4c9657957134468"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) r8 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0xc0000) ioctl$HIDIOCGRDESC(r8, 0x90044802, 0x0) 28m3.011866018s ago: executing program 32 (id=68): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000404f045db6040000000001090224000100000000090400000103000000092100000001220500090581030000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000140)='\x8d\x00', 0x0, r1) fcntl$setsig(r3, 0xa, 0x21) mknodat$loop(r3, &(0x7f0000002600)='./bus\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) pipe2$9p(&(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) r6 = dup2(r5, r5) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}}) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x401, 0x82) r7 = syz_usb_connect$uac1(0x1, 0xe7, &(0x7f00000009c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd5, 0x3, 0x1, 0x80, 0xd0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x10}, [@processing_unit={0xb, 0x24, 0x7, 0x3, 0x0, 0x7, "84201321"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x3, 0xf2, 0x94, "0699a2"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xf8, 0x4, 0x3, 0x8, "3d806e", "d9"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x200, 0x6, 0x4, "c6"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5b, 0x3, 0x5, 0x4, "a793", "fe"}, @as_header={0x7, 0x24, 0x1, 0x6, 0xf9, 0x1}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xb, 0x1, 0x40, 0x7f, "83838cc4c2de"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3b, 0x18, 0xe, {0x7, 0x25, 0x1, 0x2, 0x2, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x71, 0x2, 0x10, "2cf7ea673c35"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2, 0x1, 0x38, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x3, 0xb, 0x9, "48d3", "af02"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x4, 0x2, {0x7, 0x25, 0x1, 0x2, 0x4, 0xff81}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x8, 0xa, 0x59, 0x8, 0x9}, 0xe8, &(0x7f0000000300)={0x5, 0xf, 0xe8, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x9, 0x3, 0x4301}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x8, 0x5, 0xff01}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0xb, 0xf, 0x8, [0x0, 0xff3f0f, 0x30, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0xf2, 0x0, 0x78}, @generic={0x89, 0x10, 0x2, "4f582ba646ec12c4474727f56a67eda8772ff4047518be751ea603742d715503e7077e61d769293dcbc5ec1269111e6f34e5a7c89060e448952c703c8bb45e09335c0eb0f00d14d7194c7fc5cc5abeff78c85ebab45c38471ba040e7ff1f01e4b5ca93515ad9e6af230f2cb6d2e21b048912d408629ca721a140a36e4ae163ad013c06a88a56"}, @ssp_cap={0x20, 0x10, 0xa, 0x2e, 0x5, 0x903, 0x0, 0x7, [0x6619ed6f74b9d62c, 0xf, 0xc000, 0x0, 0xff0000]}]}, 0x2, [{0x46, &(0x7f0000000240)=@string={0x46, 0x3, "80bd82dbd3f33abf85a14916bca6f80a8d8c25c7f0ace7b9f07580ea857b1d284221897d8a19d72db1780111b889073b577dc42dd707425739228bdeb524640085817a53"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x804}}]}) syz_usb_control_io$uac1(r7, &(0x7f0000000680)={0x14, &(0x7f0000000480)={0x0, 0x9, 0xeb, {0xeb, 0x31, "5164389d6bc958d6b81e70e628332ea216906bb163b2df1bc9362c7d29a93bff14e947d2d54550ae5ac3a0deea41db46c170eefa5693b3b2f6d91c3ea4fc4f0382421b85bf4cdb8c95105fa01e81e16e6e264e8455ec7e2efe9dd0339d89e8177588db09a3697c8b3d81239b1f1f8f6d7abdf3dfa382c159182a2de33c6deb55ea5644008db5965bb816c8eefb4a3b95d02c61f56b830cba5a75b64fb601fb7bbb14e677b36825a2951fb4a2cf5d68a0dc5a003e454a88dc7d822bf022f07882e9f7dc714c763e3ce1a1c7977d5f6487b062cca5d5ac4656bd522e62d933f8f4b3a782bdd20f585081"}}, &(0x7f0000000580)={0x0, 0x3, 0xf9, @string={0xf9, 0x3, "4522ab9cf574dfe584f21174aaae6a49b50f51c3b9f427c7fb5fb05955a81a5ac3592ab809f8332f8404a52e92820cd58a17a99eacaf02fe7dd4d99ed96c958d348916769ce405b8029469dbd756a27358bb290edc124ad0e30bdd9d2008506843972a77ac837368c40b809a86785e939f8771e354bfda58d485ad5f74395dda54ad0487f2ed27129e62320511838067b5bcdeb748a83dacb51e68c91a3af8138638d4b0239ebf8d2d5fba73cb24274265dcd6b82b81f64f38d74dacd08f3566240aa871e6c992b7f237779e81504af0ffa9444aa5e2a1f34bc5e2260d8208860bf231b1f320b5d4d5b5517e0de21268e352d1ab823c4e"}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x20, 0xf, 0x7c, "e4df79bb2157e0be52463b51e787bf5e3389f49d6860c605ae6a330b93cbccf8bbc382b3ecc34f5d410f988fdaaddea6d5323a54b9028fbf05c03484d79cd032a5e80680c3aaabe1e030a6b718123f3ada9d6986335512535742951ad5776a9f569409d7613af0d81ffa0012d395fc6315174ccb3e7d29f180afab8d"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000800)={0x20, 0x81, 0x1, "d9"}, &(0x7f0000000840)={0x20, 0x82, 0x2, "c733"}, &(0x7f0000000880)={0x20, 0x83, 0x1, "d3"}, &(0x7f00000008c0)={0x20, 0x84, 0x4, "ad762ccc"}, &(0x7f0000000900)={0x20, 0x85, 0x3, "5eacf8"}}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002205000000030000000083dbc98251fabccb0670e6194314234c6b45a56abf71a34115087cf005b613a84017e0967e1ac394df3f737f5474b4c9657957134468"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) r8 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0xc0000) ioctl$HIDIOCGRDESC(r8, 0x90044802, 0x0) 25m4.642554138s ago: executing program 4 (id=657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000e95600"/20, @ANYRES64=r1, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) close_range(r5, 0xffffffffffffffff, 0x0) 25m3.664790929s ago: executing program 4 (id=658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xe, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0xfce) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="030000000000000000"], 0x9) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000001000000018000180140002006e657464657673428c872ed31284b20000000b0011030b"], 0x34}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b1000f80b", 0x33fe0}], 0x1, 0x0, 0x1b}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(r3, 0x9, 0x0, 0x0) sched_setscheduler(r3, 0x6, &(0x7f0000000080)=0x8000d) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900), 0x0, 0x2, 0x0, 0x0, r8}) 25m2.555501043s ago: executing program 4 (id=661): writev(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = socket(0x28, 0x801, 0x0) getsockopt$bt_BT_SECURITY(r2, 0x28, 0x6, 0x0, 0x20000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000080)=0x5e3f) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0xffffffff}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x20, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffd94, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x40001b6, 0x0) close(r1) 25m1.68945699s ago: executing program 4 (id=662): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r3, 0x303, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) 25m1.313591942s ago: executing program 4 (id=664): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x5c}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000000680)=[{&(0x7f0000000300)=""/100, 0x64}, {&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000000480)=""/86, 0x56}, {&(0x7f0000000500)=""/211, 0xd3}, {&(0x7f0000000600)=""/110, 0x6e}], 0x5, &(0x7f0000000ec0), 0x2f, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r6, 0x3ba0, &(0x7f0000000700)={0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7ff}) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000380)=0x0) ptrace$getregs(0xe, r7, 0x7, &(0x7f00000003c0)=""/175) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x1a, 0x60, 0x4a, 0x20, 0x5c6, 0x9215, 0x2846, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x40, 0x40, 0xc0, 0x3, [{{0x9, 0x4, 0x4, 0x6, 0x0, 0xff, 0x45, 0xa8}}]}}]}}, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x120}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r8, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4080040}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_deladdr={0x8c, 0x15, 0x400, 0x70bd2c, 0x25dfdbfc, {0x2, 0x1, 0xc0, 0x2, r10}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x14}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_RT_PRIORITY={0x8, 0x9, 0xe03}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0xfff, 0x40000003, 0x1}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_LABEL={0x14, 0x3, 'macvtap0\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_CACHEINFO={0x14, 0x6, {0x10, 0x1, 0x423a90a4, 0x9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x801}, 0x4048000) 24m56.792222151s ago: executing program 4 (id=679): close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 24m40.778589947s ago: executing program 33 (id=679): close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 12m37.469325526s ago: executing program 2 (id=2937): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x13) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0xc1, &(0x7f0000000740)=""/193, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f0000000300)=[{0x1, 0x4, 0x5, 0x9}, {0x4, 0x5, 0x9}, {0x1, 0x4, 0xe, 0xa}], 0x10, 0xfffffffe, @void, @value}, 0x94) connect(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x3, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x6d3a, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000400)={0xd7, 0xb687, 0x80, 0x7336, 0x3, 0x0, 0x3, 0x5, 0x0, 0x8, 0x200, 0x37fc, 0x8001, 0x101, 0x1ff, 0x6, 0x10, 0x8000000000000001, 0xa, 0xf, 0x3, 0x1, 0x1, 0x9cf, 0x1}) shutdown(r3, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @empty}}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="740000000301010300000000000000000000000314000180060003400002000006000340000400001400198008000200000300000800010002000000100004800c0002800500020002000000200004801c0003800800024000000004080002400000000505000100d300000008001540df"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x20000804) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRES8=r4], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) 12m33.516119357s ago: executing program 2 (id=2947): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() pipe2$watch_queue(0x0, 0x80) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x1, 0x1000, 0x1, 0x3bb}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r5, &(0x7f00000001c0), 0x2, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 12m32.308196401s ago: executing program 2 (id=2950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0xca, &(0x7f0000000300)=""/202}, &(0x7f00000000c0)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@cswp={0x58, 0x114, 0x7, {{0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffe}, {&(0x7f00000001c0)=""/23, 0x17}, &(0x7f0000000540), 0x0, 0x5, 0x84b8}}, @mask_fadd={0x58, 0x114, 0x8, {{0x6, 0x4}, &(0x7f00000002c0)=0x1, &(0x7f0000000640)=0x8000, 0xa, 0x8, 0xc2, 0x1, 0x10, 0x1}}], 0xf8}, 0x4040) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r5, &(0x7f0000000bc0)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f0000000180)={0x7, 0x0, 0x6001, 0x6, 0x8, {0x2, 0x1}, 0x1}) sendfile(r6, r7, 0x0, 0x20000023892) ioctl$TIOCSERGETLSR(r6, 0x5459, &(0x7f0000000040)) 12m31.149812235s ago: executing program 2 (id=2952): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x0, 0xca, &(0x7f0000000300)=""/202}, &(0x7f00000000c0)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@cswp={0x58, 0x114, 0x7, {{0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffe}, {&(0x7f00000001c0)=""/23, 0x17}, &(0x7f0000000540)=[{&(0x7f0000000400)=""/169, 0xa9}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/78, 0x4e}], 0x4, 0x5, 0x84b8}}, @mask_fadd={0x58, 0x114, 0x8, {{0x6, 0x4}, &(0x7f00000002c0)=0x1, &(0x7f0000000640)=0x8000, 0xa, 0x8, 0xc2, 0x1, 0x10, 0x1}}], 0xf8}, 0x4040) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r5, &(0x7f0000000bc0)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f0000000180)={0x7, 0x0, 0x6001, 0x6, 0x8, {0x2, 0x1}, 0x1}) sendfile(r6, r7, 0x0, 0x20000023892) ioctl$TIOCSERGETLSR(r6, 0x5459, &(0x7f0000000040)) 12m30.129166524s ago: executing program 2 (id=2956): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12m28.471487425s ago: executing program 2 (id=2959): connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x26, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', 0x0, &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x40c0080) r1 = syz_io_uring_setup(0x119, &(0x7f0000000140)={0x0, 0xfad9, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x2004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000300)}, {&(0x7f0000000340)="b5b7e56e17c13c5c3a0bd571bf889b61bc3337db9a96e8942d29ceb91600ff9e74b014a73164637fa984465056cb795702a94d05245110e6d50cda1382fc0f37acd49c9ed52a4b6d7c15915484", 0x4d}], 0x3, 0x12, 0x1, {0x3, r4}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) getdents(r5, &(0x7f0000000080)=""/70, 0x46) r6 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_open_dev$radio(0x0, 0x2, 0x2) r8 = epoll_create(0x1) fcntl$getown(r1, 0x9) r9 = dup3(r7, r8, 0x0) read$FUSE(r9, &(0x7f0000000040)={0x2020}, 0x2020) close_range(r6, 0xffffffffffffffff, 0x0) 12m13.438742719s ago: executing program 34 (id=2959): connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x26, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', 0x0, &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x40c0080) r1 = syz_io_uring_setup(0x119, &(0x7f0000000140)={0x0, 0xfad9, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x2004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000300)}, {&(0x7f0000000340)="b5b7e56e17c13c5c3a0bd571bf889b61bc3337db9a96e8942d29ceb91600ff9e74b014a73164637fa984465056cb795702a94d05245110e6d50cda1382fc0f37acd49c9ed52a4b6d7c15915484", 0x4d}], 0x3, 0x12, 0x1, {0x3, r4}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) getdents(r5, &(0x7f0000000080)=""/70, 0x46) r6 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_open_dev$radio(0x0, 0x2, 0x2) r8 = epoll_create(0x1) fcntl$getown(r1, 0x9) r9 = dup3(r7, r8, 0x0) read$FUSE(r9, &(0x7f0000000040)={0x2020}, 0x2020) close_range(r6, 0xffffffffffffffff, 0x0) 9.155650258s ago: executing program 6 (id=5500): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000080"], 0x48) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r1, 0x0) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0xe210}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101ea0000000904000003fe03010009cd8d1f0002000000090595a61a95fcffff09058b1e"], 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x54c, 0x9cc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x90, 0xd7, [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x80, 0x2, 0x1, {0x22, 0xbb4}}, {{{0x9, 0x5, 0x81, 0x3, 0x7c7, 0x2, 0x4f, 0x7}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x3, 0x2, 0x9, 0x8, 0x8}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0xc5, &(0x7f0000000100)=@string={0xc5, 0x3, "337b22a132851f0639b900c85ea13e9198e9f1b3dda7a05b38c599ba6f331491cab259841f0aba87ab077ebd61d21b545480fa6fd42274031f1477e34e34cf99a6d44e9ec3e0862e5b2854f1948bac520b10a1e0ea9669af328f13f5f79e65d28b39bc6507832633fdea1786623e7b972b07603ab57b3d4831a26c4a8cb49530522643d4b4cf881107c6577bba0f9c2ef00b17146b13c3d4c11e8f7dea917ab787d39948f36652b4f6bbda7e80a0b231f0aefcce00f898a1903bcbc936305712330ded"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x80c}}]}) 8.236255776s ago: executing program 7 (id=5506): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x1, 0x100008b}, 0x0) pipe(&(0x7f0000000140)) getrlimit(0xf, 0x0) syz_io_uring_setup(0x6d0c, 0x0, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x1868, &(0x7f0000000680), &(0x7f0000000300), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes']) creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) io_setup(0x2869b0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cb942a2734589dc4", "7a0b355b59cda27d4e1624972fe26b39", "0c19f7a7", "9d09b08e358c3c67"}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 8.11227672s ago: executing program 7 (id=5507): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="530000000700004600dd40edce68510449b8a5038a127412659c6b4b7a45cb78d042419ac1"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, 0x0, &(0x7f0000000280)) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) syz_open_dev$dri(0x0, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, 0x0, 0x0) r7 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket(0x1, 0x2, 0x994) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x58}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0x0, @loopback}}}, 0x108) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.007693595s ago: executing program 7 (id=5512): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$update(0x2, 0x0, &(0x7f0000000000)='p', 0x1) add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @desc1}, &(0x7f0000000440)={0x0, "3eea055d4f419886699cba25739bee2ce9c241d9401e2372fa76313c0448ed7ee459c8f1dc18b44cd1c2f73ac5b1fb8caf3b3d2e1ebfbb198189f0b1a06c2f51", 0x12}, 0x48, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)) sendmsg$BATADV_CMD_SET_MESH(r5, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) io_setup(0xa4, &(0x7f0000000300)=0x0) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_netfilter(0x10, 0x3, 0xc) 5.911983838s ago: executing program 1 (id=5516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r1) r3 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r3, r2, r3}, &(0x7f0000000240)=""/249, 0xf9, &(0x7f0000000400)={&(0x7f0000000100)={'sha512-generic\x00'}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) (async) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000314010027bd70000000000009000200ffffffff000000000800410073697700140033007465616d30"], 0x38}}, 0x1) 5.911488105s ago: executing program 6 (id=5517): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f0000000240)={0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0) 5.737726934s ago: executing program 6 (id=5519): syz_emit_ethernet(0xa6, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "200210", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xfff5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac35084dbaf736b41e5af1802"}, {0x0, 0x1, "005ff92900ddab4992020900"}]}}}}}}, 0x0) 5.596189027s ago: executing program 3 (id=5520): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$dsp(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0xffffffffffffff7d) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000020000000000000000950000000000000042c54e96cdc7dcd0b36fa3"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000500)=@ethtool_gstrings={0x1b, 0x4, 0x9c, "9eede15966d66c0b005259aec497886df8c064ead768a2fa939bf729df77e09f895240806d8c779c3d2666135d38fee5b93d95b95d1c22b56ff46ac0ba2caec3a716746967371ff29acfb19166ff48e383c2c660cc499ebdf7fe7a78ce38270128e5a0f7f846e825d6699711679a781a510994dc8e8c5d4aedb608ac7460c197b5a0d95bee16a93bf1f13673623e15e30a85a3147a3ae0a2fcf21230"}}) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = open(0x0, 0x14927e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) socket$kcm(0x10, 0x2, 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(r6, 0xfffff000, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x342e, &(0x7f0000000100)={0x0, 0xf459, 0x80, 0x0, 0x375, 0x0, r5}, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@dellink={0x2c, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x0, 0x3810}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1/file2\x00', 0x4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 5.548065963s ago: executing program 6 (id=5521): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002001f0000000d00", @ANYRES64], 0x50}}, 0x0) epoll_create1(0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0)={0x2}, 0x65) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) 5.346748029s ago: executing program 1 (id=5522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2b8a42afae80b423, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r8) fcntl$setown(r5, 0x8, r4) sendmsg$inet(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)='\x00', 0x1}], 0x1}, 0x4044881) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0xdffffffd, 0x2, {0x0, 0x0, 0x0, r9, {}, {0x0, 0xfff3}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f00000dc000/0x3000)=nil, 0x3000, 0x1, 0x10012, r10, 0xfffff000) shmget$private(0x0, 0x4000, 0x780008c0, &(0x7f0000a02000/0x4000)=nil) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x800) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r11, 0x40a85321, &(0x7f0000000880)={{0x9, 0x2}, 'port1\x00', 0x10, 0x140002, 0xfffffffe, 0x52, 0x3b61, 0x9, 0x1, 0x0, 0x4, 0x2}) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 5.203686224s ago: executing program 7 (id=5525): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') pivot_root(&(0x7f0000000300)='.\x00', &(0x7f0000000340)='./file0/../file0\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000001c0)=0x64, 0x0) write$sysctl(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x20000000, 0x4, 0x0, 0x0, {0x1}}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) set_mempolicy(0x0, &(0x7f0000000000), 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a002903ffffffff000000000a00000000000000080005"], 0x20}}, 0x0) 5.072190106s ago: executing program 7 (id=5526): r0 = fanotify_init(0x2, 0x400) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f00000003c0)=@x={0x94, 0x0, "88d4df085b3f"}) ioctl$FIOCLEX(r0, 0x5451) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) 4.433736497s ago: executing program 1 (id=5527): openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000, &(0x7f0000000100)=',/$&(#&&\x00') r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x1) 4.433276144s ago: executing program 7 (id=5528): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x40, 0x0, 0x3, "76af7c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='security.apparmor\x00', &(0x7f0000000240)='/dev/ttyS3\x00', 0xb, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400280, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000900)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') preadv(r6, &(0x7f0000000280)=[{&(0x7f0000000000)=""/142, 0x8e}], 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.223524829s ago: executing program 35 (id=5528): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x40, 0x0, 0x3, "76af7c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='security.apparmor\x00', &(0x7f0000000240)='/dev/ttyS3\x00', 0xb, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400280, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000900)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') preadv(r6, &(0x7f0000000280)=[{&(0x7f0000000000)=""/142, 0x8e}], 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.219959701s ago: executing program 3 (id=5531): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB='\t\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="0bba98171389f65606740002000054ffee6dd7f16a1cf80cc25c2e1a58c7d7fd25ff0115", @ANYRES64=0x0], 0x20) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="12030500d3fc120000004788fcd609102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x23, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb0024000) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) socket$kcm(0x2, 0x3, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f00000001c0)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x100010}}, 0x50) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) dup3(r4, r5, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r8, 0x0, 0x0) 4.219509067s ago: executing program 1 (id=5532): socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006680)={0x2020}, 0x2020) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r4, 0xc0046209, 0xfffffffffffffffe) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000580)=0x14) 4.218800219s ago: executing program 6 (id=5533): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x1, 0x0, 0xc5f, {[@mptcp=@ack={0x1e, 0x3, 0x1}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$incfs(0xffffffffffffffff, 0x0, 0x80000, 0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) fcntl$setpipe(r2, 0x407, 0x6622c486) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000100)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000008c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000cc0)={0x0, r3}) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x24d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xb0, 0x1, [{{0x9, 0x4, 0x0, 0xf5, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x917}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0xf7, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000580)={0x24, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000fc0)={0x44, &(0x7f0000000b40)={0x0, 0x15, 0x8, "b81f551f63cd37c1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, 0x0) sched_setscheduler(0x0, 0x2, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed3) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 3.369051012s ago: executing program 5 (id=5535): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$update(0x2, 0x0, &(0x7f0000000000)='p', 0x1) add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @desc1}, &(0x7f0000000440)={0x0, "3eea055d4f419886699cba25739bee2ce9c241d9401e2372fa76313c0448ed7ee459c8f1dc18b44cd1c2f73ac5b1fb8caf3b3d2e1ebfbb198189f0b1a06c2f51", 0x12}, 0x48, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)) sendmsg$BATADV_CMD_SET_MESH(r5, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) io_setup(0xa4, &(0x7f0000000300)=0x0) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_netfilter(0x10, 0x3, 0xc) 3.2889938s ago: executing program 1 (id=5536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0/file0\x00'}, 0x6e) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x6, 0x2, 0x36314d59, 0x5, 0xe, 0xd, 0x4, 0xf5e4, 0x0, 0x0, 0x1, 0x2}}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r5 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'nicvf0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88", 0x11, 0x0, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) setgroups(0x0, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYRESHEX=r3, @ANYRESDEC=0x0]) syz_fuse_handle_req(r9, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r9, &(0x7f0000000340)={0x50}, 0x50) r10 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r10, 0x2275, &(0x7f0000000040)=0x53) 2.801003472s ago: executing program 3 (id=5537): syz_io_uring_setup(0x8004f1f, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mincore(&(0x7f0000161000/0x2000)=nil, 0x2000, &(0x7f0000000280)=""/175) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000280)={0x0, 0x0, 0x10180, 0x3, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000140)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, 0x0, 0x118) ioctl$PPPIOCATTCHAN(r2, 0x40047438, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x8000000) 2.355530932s ago: executing program 5 (id=5538): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="24001000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000002000000080062000000000008000b0100000000"], 0x24}}, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xc}, @NL80211_ATTR_TDLS_ACTION={0x5}]}, 0x2c}}, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, 0x0) r8 = syz_open_dev$sndpcmc(0x0, 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r8, 0x40044102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r10 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r10, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:10 0', 0x1b) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) write$6lowpan_control(r10, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000040)=0x6646) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES16=r2, @ANYBLOB="b7ca42a12acc44e8c9313c7c0b3f1816c7b78c8877fa052664439c4b4f3fc16984cb886f94598ede10dcce3b71c234174f532093a644e2082a60cf50555685d823bc5241c313c2ee6d5987d6a0df"], 0x28}, 0x1, 0x6c00}, 0x0) 2.300007083s ago: executing program 1 (id=5539): openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0xa0041) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0x40045731, &(0x7f0000000000)={0x1}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES32, @ANYBLOB="8300"], 0x20}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000c7203d8a0870272091776c011a0301090212000100000000090400000091b0e200"], 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setreuid(0xee00, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x5]}, 0x8, 0x0) fchown(r4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) 2.216587359s ago: executing program 3 (id=5540): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x60, {[@mptcp=@synack={0x1e, 0x10, 0x8, 0x2, 0x6, 0xfffffffffffffffd, 0x100}]}}}}}}}}, 0x0) 2.170145242s ago: executing program 5 (id=5541): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x40, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x8000, 0x7b67da7bc4244323, 0x1}}}}]}, 0x40}, 0x1, 0xfff1}, 0x0) 2.103972257s ago: executing program 3 (id=5542): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002001f0000000d00", @ANYRES64], 0x50}}, 0x0) epoll_create1(0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0)={0x2}, 0x65) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) 1.942058539s ago: executing program 5 (id=5543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103383) memfd_create(0x0, 0x3) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3) (async) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r5, 0x705, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x4004000) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x4004000) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000140)={0x1, 0x0, 0x1, 0x0}) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, 0x0, 0x0) (async) bind$inet6(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000080)={0x60, r9, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0x38, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000080)={0x60, r9, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0x38, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.653155447s ago: executing program 5 (id=5544): bind$rds(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x2, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x16}}}}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r6 = landlock_create_ruleset(&(0x7f00000004c0)={0x0, 0x1}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0x6) write(0xffffffffffffffff, &(0x7f0000000580)="42321e1fd0e60ca9ae6077a74ccf3b026d3c838d3917d3afa22ff2acdb5013530a84b9cb12284eeb71d416d3bd90d0cf1005cf9a162255b549640c813774e50de4b18b07d545682a5e6dafb237", 0x4d) shutdown(0xffffffffffffffff, 0x2) 903.75359ms ago: executing program 3 (id=5545): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0xff, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_usb_connect(0x2, 0x24, &(0x7f0000000b40)=ANY=[@ANYBLOB="120100007375d008da0b390199b4010203010902120001000004"], 0x0) syz_fuse_handle_req(r0, &(0x7f0000005380)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x9, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x26, 0x0, 0x11100}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0x0, 0x7, 0x0, 0x0, {0x0, 0x10001, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xee01, 0x80000000, 0xf8}}, {0x0, 0x10}}}, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xc8841, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x7fff, 0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r6 = userfaultfd(0x80001) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 739.928392ms ago: executing program 6 (id=5546): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r2, 0x4068aea3, &(0x7f00000004c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f00000006c0)={{}, "f19493203eb7aed322260b79d64c6a586a015ab663708afb6f2f1a405939c850c3625549166cd02221dbec99d1e6581bbf325e25fd9e1af23f7e58d0969ed100b72a7672db59be0b373cc46efee631b59581c58529a7fe50000fa8bc3b40e76e2c47eab036c0729e74cf992d3587c8948fdf445f386522fa0918a60488979209a625630f2706bac110793d4d3451c986142b0b72c195d7d2a2c71e5648e06d9254e7370f2435caf536f99c465b5a8583a818c5b4350b5fc6e7fb2e1e1e385b631ec6b3ee15c547b0b1e3e55b34e0c06ba45b51ff89eb7b0a299434822964158ad215ec740b8db1f53d042037286979d48de27694c9759b297a625a9f052f8c496f648e0519528df84e624f62ff44f1fdf15acf4aa76e2b047f3fb33c27214d6261971d8d46b5f1df5002f647f57c1a4ddcc788e4902124f7dc5d2565da8915af2681b1387139610a559b1b25e37db9cd4580374c18d276fcf0af0d5f353643417b02a557daca54f5190afbfb56e99db7d3de94b6847f0b7ac633d57e7ab8c3289267515e19beca818d89091ff452951094577d674c9da5b4e15b20c97b4dd9bfe527d35215cff6a945caf2054dbb3ab85de4712a58b129fad19902bab0a61eacc651e61b209695eb2f78a8f46380b8a1a55ba7d1dad9e8d3f962a8781dfd6ae87b23ad0a565349bdad579c6a4a4cd61a36e0cb64bbf76f5f075005d112f3896b99ab9d73eb423f76bbf8034c2edaa0195fe4f050a4af9aff340191d6d8700fc0b4790172692a0c3395f5ff7224ce1ea5b32a16271e91ada14e14a73fb02c1c37fc6c3fe3c90a53d11bf9af032565a8612f5e92af8f53ccbeff65cb18f69d6aaa61d9a17503c6a69823fb28e3ab9f8fae42d5b908c764c6c324344a55341e39601a2928aa2255a12d56b2cca665d3d4825af08c4efc34b00a00e6599fbdc6534c3b0ac958c00aa9ddf1a5ca1eafac026e41abacfdfa1420f6b8ee862e45342966ff4795a7eaca4f9dca6bc63842783aae8b0bb01e8142909f04d67c308bf5895ec6096acfd8959af94c37afddcae7847e1486956fa02d26eb85cbaee54ab7de2a026eeff09986eda658a497612b987731835e60d37e4b092771e9162285893dbedf13d20516eb5f4be31a5dc5b799dcb31b06798b5ee43435c8c97729d63a59f0baa09e22b5d087eaa66f4bcfa92901aa1a730109596534ce337699b533b2af18c5bd64ac011c4b1a204ec7cb5ce89a5b05302348e42ecb26d8d7385005f802f0455f62ffbdb94316c61b7c40d14e6b1527a20db9cc474c7e8a7c18a72f7a82fa040c29fe885e3e06a61c0c3d1d779398cd7257e12b3607998cfe04ff55f2ed7d71e60286c84e093a01b4e9dc17e3ecfc4594fd1a27f64515d19fe940f105a1cc15dd6acadc4cc41e280ef6708320061eb54370b76c7e4a7c546d002a2aa4a669a6e8d9ab3f96d66cb577d0fba085703c0f739847a1c381be3f5b5f480749443e82697a8069143739a01add79a23e2be31a87e4addefebf59ad8b927ac3218157d7c910d0dea7a2e18c6434c175ad5490d186045a1925308f3bab405dc332949a56b8e6ec4c99dbefc737c3c78fd3cc0efcb60d085b9b1b801cb225a03b6ba84fd507a38c73f062601bd8495d1f239db51b5c8781916b5b922a6e5b2c6dee8668826786d7c4201868783a7f3e0dd8dbb15996bcb851541c3d6b713402da8822f4716ee85aa7d2cf2a95b5e2b09fe4a030532aefcaeb8e122e6e4c0a1efb514406256e3f2070c9239cc79e454e14c587fcbda22c66ff8d57c50481aeb437d66d41297f9c30c2155b3b221f8cafd72d13e81553e5d4bf5f8d8f5a3ca51630c9ec7083a51b8312f0604b290694a1c142f8d0493387fbc2fab33b101c4b696f2c9df2ec8556bd4279f80c905d695d6147a096de6c39b1fe049228ac3a497f7954d757fec0769ee106cb8933d30c6bf63b6417f9b68b653855c14dd9dd594851cd92ac21cfbb23f4bbe7ff9a7a77dc39171fc3554f930171a7252a2a9301209778145856ba7e3c5219560102753e05556e99a0db8370df3cf8ef4cdf12efb3f1bcf0a16ebd43bdd59d6f3d8c323c90ea75e4282594b7cc8873f8a701cd05e8a8a1d5e690b62aad842fa4d849eb8cdc6d66666ca833280c67bd47ae18e04575c896c08c08e6a0b4c53d93fde111bfcb2bca6e3bb38060c866c9aee83a261ee1a2c5ab84cf18d9ae23c8998e444418bdf91cc6320580c0427a580532ea134785a6620f0dadb3fe64488718db4a068dce8a754b53365c3cc33b8cf64c799188930108b1467eb8187848d570489f7d35ea04ea90e7cb9708176162c50be4921c14b53b79e7807336f4796f8f6167b757fc877db1ac33067c9a22b315958a2df53bfebb6ff68d662071a91489b28f5e5577cdec08e5de5b14976183a892ad42d30138ea09ef58c170bc7918e8b684a2da7f87bdcaed577cc69f59f11e8cefb1d378fc92c4b92fc8212abdead314804b2b250b4657f1421738bc18dfc2cf46a517f9caf4cfe9d32f0aed2c8026c0e9981e534ea4471922c49ff208e17bfe6f151399544dbee0aa9bda089a36f3439d1dd7bec643f5feaebee3c53c36f708db4f63140e3d22eca044a1300b9ef4cdd030615b4a2e5fccafd91afdf19f4c1d5df8bac4a4f8b774d2d38dfed897c8186b05415fc114f1c699638dd7d8d665cb84459365b4f05a148ce71a1b08c2aeef117834dd57ad0bc21b086ff9ee2dab9f7eb220c729246f9d328ac4bf141ac0a6f3f38b57829e514d63c6181e763c3c36edd9ddcfcca54307a655f9f69e2d0cdc65baaeca3d9c0103a6e427a8123a65c294ddeb2b4d196aecbd139fba5a41f0b906678e0d8f1b561a09c2ca92d2e315fda7816bc29d209eadabc1548bd56ee1c44584aa6d686394ab6d440f47e51bcd05d2d94b100f3f45b5d76682748f781e0831aca5fe0f3875e4746168637b93ddf511a3057f5f9c2986b5d96c67f5e10e40f3672bd17a75a9cb1fc95008ed534c0dae16a629f10aba67b3508ddf3b849c2d2e1cc4e68f13336bf4329bf4c8877f033f8ae7e4246c99c1de7311b09f7265aa109d028c827a225f954c2994730df4980259fedb4066bbb9761a6db7800708f5a50c81ab3d7477a5fa6e4dff4c0b6739377b878c6033e5d0067b3f60f4e784dbb322c3e1b95c8c0f9eaf6d5a586338f16f81ce6405b6848276ddd8a018a19bcd79ebda72a9fec69ef239adc26e70d77ae7fca28cc8fe11e4802a3474a75c95a55cfdf939aea6067d08bf59b50e7e008e071986e3577253ed6ddd00885fced151a8ac58d3cdda2c9c319d05dc66ad040eb90424a290d3f2a5ad968c254e4fa75d403cc811c6b78d6c9eed958447b7b055e60b61f6c54a5e7dfa2ab67d88141336a6cc6af4cd3924dd2c534296c0b6830c4242b618344ef3dd07cf3b362abbcb1d211648ae271a6b4780c1394ee6967a40f973b110caa467c3a4367d353368dbc5c963b448099f336b9291175e56cd2466ed60d125a3f4e84978886d26971523d33f79db48a152f97e339352173659b20821478877d2137118f6b9ca751c07534a69a35f251210799f8be6d7c7cdc34019809ab30397189cf928b6f9c2dd2e16cb6e7253242b1a4c75aa9849aab0e392827e39ccc5def1adacd302b6f7e31a5a6648b5e3c3805975fad2948613c2c590662e94d8a6ed38c6e9afd157601e56670b754811b4bde7eefb6877295f09634d4edfabff66316564382df2796af2287bf6d99178ca595af5cbc10a719c98561ae60ff1dd793413eefb44afc8d20edfbeb4b8e840c650aa32673f6f32b7c908b0ddc02696a84a51a12020ec292e2ff5d76ea824442c857470868cf53e6b88807689db6f8da652c407e6bb207053e3f3fa5383b1466038d65fdd7c147c35ae1618625e275dffb53a13d8f24544f2899b03c2a623d30af2f57306651f4e3e83109f55a3677ea08ccec9f0baf89d57ced6b8e6250145f0770ebe976776b645cd44684e46f6ffb45710ea52f0eaf93d9134bf46a5421b85226a014c5c405c0e5b1b0bcae8171ae87a04dbecd7aa349eb45d920952080781a4b3d6b9235d93c6d0f6d14e0717d4dab3cfcb6e269cebd0bb9e08a94cd9e5ad0c38e36df886a887e9f3b7820f6074cf3cad4862a9c292d16a6aa7c39267c5ab5360af2098498b2e8013ed78b9dc8ad199424fdffecb9580067065f11a88375c5fd8bd3f0eb67070e6e04abe79091a0a77e4f16bb14372c77f9cb61c5646645bdf77a2333afdb7310a66003d953ac97aae2bb467acb84aa6f17a333979a6d5851a208293992b942b8904dcfd3658349eaf59b8173ce25581a75fd669b958b08840bf395c81d256f425f33da646f627e9e45f58371fd59d4d5af018a7c7213fa006518f1ee643012f97443de08d2ebaee999383f70526b57915ae66756d483d2cf9f3a467d2ae720262f47712a4050b9e9a41adfe6f1d1f71f4e6c140c05a3cfff4ff4476076f469bb44d2187e2189ec39fbae5b66fae7e8ba243590038f224f529b2a71af72fd55496fbd0d5576b0eb2e31a4a5ff2f0a9aa84e71e63c1cb9048b9883eb757272a9ee453bf459d19ee69c1c411eb328720639962d6244ff2d474646cafb37522df0a1d9982c50e33bf986ece72e6e202cfc611c81bb826d6001924e193f3d6de6f14aea257f4600f4f20d6bb41a37fc35ac420617284217b84ba121fe0450c7a4ddd011de8b2d947ff034c47a6f47df1253ae82046c1578d575fbf443cd54b9b0b4b64735376cf2521f4db192981642a358acb9b07e3046139ace30c99e9175365398ab5040addebe8c9fac3e45e5f700640d91ada9c14eaf583ac58d815752662edb55c340736bf0f9310df52356000add8d07393c6c9fe9dc12ea00641f6ccbdd9a7ae0e411752da9ef9049e7fc52bce89b2290522de5fecb365b9d36ebc86b67aa05535257a95a5441784f6645443f8e63dedfd0b1e82c6fba2a4320972da0f095650e4e585c4c21022accf597507f44a74c55c152dd3de13f91eef0a306e304fd9fe41d495b1a89a5c74c091be6c5e76841493727c986baff994fa4f59f03340a56b1fec8e3c85fb9f048b92887f42cd7ab73a3ff83ea3de7aef7be0f234232fa0e85ddcfb2108058b73abe88d9642fdc697adcd1da4aa3b155dacc3adf856bf8ea7983d3b39ffe8069c24d6cb6cd40c98601fbd628d732989341f6530b6652b3416c121933bd3dae3058ff8ea1273bddece04fc29766015e59ffd39786230441c0d5420f584ec3654b1970c67ac46d3880d247b89557fd4929e6b712e372e317e293ca927eafd86f413b8438bdcf7aa616195f680b6959a435cfbfdd49bdeac335e74e023bd4565b5875aa2b8f066b24daf501dd8a9b9ebc3cac6c6894b5c8a45459ab4803b85c22e447ee1fad919b437f761029f26fa61229a2c17b9e90b43c9445a318b6b022d730a7f2cd77953cca27c906fde62b1e9684fb800b468896066fc7c4873b7d612adecd55ee2c2fa34f8bba184b3fc3b2de61f6782c7fcaaf09f1e8b0ddc6cc580f756012c8707bd7720012cbab9c0f41208e7e13150194ad52a8112f8056191c0702f289c5755f04d4b7bd718aeea9b931e1fdada93f65ed7313244d3214b6a3c2e0f216264adecfbdf23f159812e30d043ee9aaf5fcde5d0898c170166721f7a9776fdcbe13477074c59c650931c6daadfcd282d69eec9ad079569ccb68f4aa67a96915cfe8173af20c7253edec17e7405bcc8516f75ca0d605bf168"}) r4 = memfd_secret(0x80000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="170000000000000004000000ff000000020e0200", @ANYRES32=0x1, @ANYBLOB="00000000000000000000e0ffffffff0700000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='rpcgss_seqno\x00'}, 0xffffffffffffff6e) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000000)="7615deed89cae50d526cbe1ba10bab0753e5144054d7161db4d457f688754c2bdcd241e15de8e8cff4e571eda540dbd10a4e224ef71ac504fc2e185b4888093e3e9f4b5824b367d6c73c45a9ea309034114872498baf2cd73fecc3a55df1598e0b637d8a9601", &(0x7f0000000280)=""/94, 0x4}, 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$KVM_ARM_VCPU_FINALIZE(r4, 0x4004aec2, &(0x7f0000000440)) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000001440)={'\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="bc150000100085000000006592c58caef5a5fa9d0cb8ae9900ff6122314a000800", @ANYRES32=r10, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x40005}, 0x2004080d) 0s ago: executing program 5 (id=5547): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$update(0x2, 0x0, &(0x7f0000000000)='p', 0x1) add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000400)={'fscrypt:', @desc1}, &(0x7f0000000440)={0x0, "3eea055d4f419886699cba25739bee2ce9c241d9401e2372fa76313c0448ed7ee459c8f1dc18b44cd1c2f73ac5b1fb8caf3b3d2e1ebfbb198189f0b1a06c2f51", 0x12}, 0x48, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)) sendmsg$BATADV_CMD_SET_MESH(r5, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) io_setup(0xa4, &(0x7f0000000300)=0x0) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): [T12946] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 1561.477214][T12946] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1562.038399][T12946] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1562.047637][T12946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.058197][T12946] usb 6-1: config 0 descriptor?? [ 1562.063999][T23922] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1562.127269][T12946] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1562.306773][ T5952] usb 6-1: USB disconnect, device number 10 [ 1562.388817][ T5952] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1563.328764][T23954] xt_CT: No such helper "snmp" [ 1564.311220][T23982] FAULT_INJECTION: forcing a failure. [ 1564.311220][T23982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1564.368520][T23982] CPU: 1 UID: 0 PID: 23982 Comm: syz.3.4732 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 1564.379334][T23982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1564.389407][T23982] Call Trace: [ 1564.392697][T23982] [ 1564.395644][T23982] dump_stack_lvl+0x16c/0x1f0 [ 1564.400344][T23982] should_fail_ex+0x497/0x5b0 [ 1564.405044][T23982] _copy_from_user+0x2e/0xd0 [ 1564.409657][T23982] copy_msghdr_from_user+0x99/0x160 [ 1564.414876][T23982] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1564.420775][T23982] ? __pfx___lock_acquire+0x10/0x10 [ 1564.425967][T23982] ___sys_sendmsg+0xff/0x1e0 [ 1564.430591][T23982] ? __pfx____sys_sendmsg+0x10/0x10 [ 1564.435848][T23982] ? lock_acquire+0x2f/0xb0 [ 1564.440352][T23982] ? __fget_files+0x40/0x3f0 [ 1564.444946][T23982] ? fdget+0x176/0x210 [ 1564.449010][T23982] __sys_sendmsg+0x117/0x1f0 [ 1564.453594][T23982] ? __pfx___sys_sendmsg+0x10/0x10 [ 1564.458704][T23982] ? __fget_files+0x244/0x3f0 [ 1564.463390][T23982] do_syscall_64+0xcd/0x250 [ 1564.467887][T23982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.473773][T23982] RIP: 0033:0x7f0cc0f7e719 [ 1564.478179][T23982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1564.497785][T23982] RSP: 002b:00007f0cc1cf1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1564.506192][T23982] RAX: ffffffffffffffda RBX: 00007f0cc1135f80 RCX: 00007f0cc0f7e719 [ 1564.514155][T23982] RDX: 0000000020000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1564.522114][T23982] RBP: 00007f0cc1cf1090 R08: 0000000000000000 R09: 0000000000000000 [ 1564.530075][T23982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1564.538033][T23982] R13: 0000000000000000 R14: 00007f0cc1135f80 R15: 00007ffd1cdf14c8 [ 1564.546022][T23982] [ 1565.535347][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 1565.535364][ T29] audit: type=1400 audit(1731236032.108:1957): avc: denied { mount } for pid=23997 comm="syz.7.4738" name="/" dev="configfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1565.650375][ T29] audit: type=1400 audit(1731236032.118:1958): avc: denied { search } for pid=23997 comm="syz.7.4738" name="/" dev="configfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1565.678696][T24011] overlay: Unknown parameter 'smackfsfloor' [ 1565.693449][T24011] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1565.701860][T24011] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1565.711089][T24011] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1566.130137][ T29] audit: type=1400 audit(1731236032.118:1959): avc: denied { write } for pid=23997 comm="syz.7.4738" name="/" dev="configfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1566.152822][ T29] audit: type=1400 audit(1731236032.118:1960): avc: denied { add_name } for pid=23997 comm="syz.7.4738" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1566.153016][ T29] audit: type=1400 audit(1731236032.118:1961): avc: denied { create } for pid=23997 comm="syz.7.4738" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1566.458197][ T29] audit: type=1400 audit(1731236032.128:1962): avc: denied { append } for pid=23997 comm="syz.7.4738" name="nbd7" dev="devtmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1566.636730][T24019] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4743'. [ 1566.921579][ T29] audit: type=1400 audit(1731236032.718:1963): avc: denied { unmount } for pid=17313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1567.219938][ T8] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1567.450132][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 1567.457263][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.467534][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1567.478614][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1568.029443][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1568.039812][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1568.058231][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1568.068485][ T8] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1568.091598][ T8] usb 4-1: Manufacturer: syz [ 1568.105532][ T8] usb 4-1: config 0 descriptor?? [ 1568.110989][ T5910] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1568.271393][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1568.284871][ T5910] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1568.302796][ T5910] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1568.312175][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.323232][ T5910] usb 2-1: config 0 descriptor?? [ 1568.380864][ T8] rc_core: IR keymap rc-hauppauge not found [ 1568.387010][ T8] Registered IR keymap rc-empty [ 1568.393106][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1568.403974][T24033] 9pnet: Could not find request transport: fd [ 1568.419966][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1568.441016][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1568.459541][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input106 [ 1568.475162][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1568.499973][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1568.519945][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1568.533779][T24021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1568.550173][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1568.560221][T24021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1568.619872][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1568.682583][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1568.706353][T14523] usb 2-1: USB disconnect, device number 16 [ 1568.710018][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1568.774576][T24042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1568.955209][T24044] dlm: no local IP address has been set [ 1569.018962][T24044] dlm: cannot start dlm midcomms -107 [ 1569.439944][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1569.460115][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1569.499922][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1569.520938][ T8] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1569.540148][ T8] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1569.621992][T24057] futex_wake_op: syz.5.4754 tries to shift op by 144; fix this program [ 1569.651005][T24057] netlink: 'syz.5.4754': attribute type 1 has an invalid length. [ 1569.688608][T24057] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4754'. [ 1570.772176][T14523] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1571.009708][T14523] usb 2-1: Using ep0 maxpacket: 32 [ 1571.040620][T14523] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1571.069915][T14523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.090098][T14523] usb 2-1: config 0 descriptor?? [ 1571.120713][T14523] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1571.218942][ T5910] usb 4-1: USB disconnect, device number 33 [ 1572.444447][T14523] gspca_vc032x: reg_w err -110 [ 1572.456115][T14523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.513297][T14523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.608546][T14523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.792791][T14523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.855391][T14523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.861504][T14523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.866878][T14523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.873022][T14523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.879025][T14523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.884551][T14523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.890066][T14523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.895426][T14523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.900815][T14523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.906192][T14523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.911634][T14523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.916984][T14523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.922643][T14523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.928202][T14523] gspca_vc032x: I2c Bus Busy Wait 00 [ 1572.933726][T14523] gspca_vc032x: Unknown sensor... [ 1572.938872][T14523] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 1573.410036][ T5937] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1573.551792][ T29] audit: type=1326 audit(1731236040.148:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24129 comm="syz.3.4775" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0cc0f7e719 code=0x0 [ 1573.574662][ C1] vkms_vblank_simulate: vblank timer overrun [ 1573.600168][ T5937] usb 6-1: Using ep0 maxpacket: 8 [ 1573.617936][ T5937] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.632358][ T5937] usb 6-1: config 0 has no interfaces? [ 1573.638277][ T5937] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1573.651803][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.679166][ T5937] usb 6-1: config 0 descriptor?? [ 1573.978067][ T5910] usb 2-1: USB disconnect, device number 17 [ 1574.595146][ T29] audit: type=1400 audit(1731236041.188:1965): avc: denied { accept } for pid=24154 comm="syz.3.4781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1574.744051][T24159] kernel read not supported for file / (pid: 24159 comm: syz.3.4782) [ 1574.801528][ T29] audit: type=1800 audit(1731236041.398:1966): pid=24159 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.4782" name=08 dev="mqueue" ino=83382 res=0 errno=0 [ 1575.457238][T24167] input: syz0 as /devices/virtual/input/input107 [ 1576.169336][T12515] Bluetooth: hci4: sending frame failed (-49) [ 1576.176958][T16378] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 1576.181576][T24116] ALSA: mixer_oss: invalid OSS volume '' [ 1576.266632][ T5952] usb 6-1: USB disconnect, device number 11 [ 1576.575741][T17246] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1576.855004][ T29] audit: type=1400 audit(1731236043.438:1967): avc: denied { setopt } for pid=24189 comm="syz.3.4793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1576.927393][T24191] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 1577.110645][T16378] Bluetooth: hci5: sending frame failed (-49) [ 1577.120215][T12515] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 1577.147157][ T7912] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1577.189935][ T5910] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1577.342427][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1577.355780][ T5910] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1577.370086][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1577.389657][ T5910] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1577.410031][ T8] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 1577.419361][ T5910] usb 2-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 1577.430435][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.438545][ T5910] usb 2-1: Product: syz [ 1577.445103][ T5910] usb 2-1: Manufacturer: syz [ 1577.450475][ T5910] usb 2-1: SerialNumber: syz [ 1577.456823][ T5910] usb 2-1: config 0 descriptor?? [ 1577.467251][ T5910] ti_usb_3410_5052 2-1:0.0: TI USB 3410 1 port adapter converter detected [ 1577.477676][ T5910] usb 2-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 1577.612049][ T8] usb 6-1: string descriptor 0 read error: -22 [ 1577.619314][ T8] usb 6-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1577.629148][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.640600][ T8] usb 6-1: config 0 descriptor?? [ 1577.655456][ T8] usbtest 6-1:0.0: FX2 device [ 1577.707903][ T8] usbtest 6-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 1578.005698][T24197] vivid-003: disconnect [ 1578.011889][T24197] vivid-003: reconnect [ 1578.747133][ T8] usb 6-1: USB disconnect, device number 12 [ 1580.132419][ T8] usb 2-1: USB disconnect, device number 18 [ 1580.172523][ T8] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 1580.242667][ T8] ti_usb_3410_5052 2-1:0.0: device disconnected [ 1580.484651][ T5910] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1580.770044][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1580.860361][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 1580.876367][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.902677][ T5910] usb 4-1: config 0 has no interfaces? [ 1580.908201][ T5910] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1580.924875][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.938218][ T5910] usb 4-1: config 0 descriptor?? [ 1580.945361][ T8] usb 2-1: config 0 has too many interfaces: 138, using maximum allowed: 32 [ 1580.956811][ T8] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 138 [ 1580.972506][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=a9.c8 [ 1580.981685][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.989689][ T8] usb 2-1: Product: syz [ 1580.994029][ T8] usb 2-1: Manufacturer: syz [ 1580.998634][ T8] usb 2-1: SerialNumber: syz [ 1581.005119][ T8] usb 2-1: config 0 descriptor?? [ 1581.063587][T24228] FAULT_INJECTION: forcing a failure. [ 1581.063587][T24228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1581.078935][T24228] CPU: 1 UID: 0 PID: 24228 Comm: syz.5.4805 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 1581.089697][T24228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1581.099743][T24228] Call Trace: [ 1581.103037][T24228] [ 1581.105967][T24228] dump_stack_lvl+0x16c/0x1f0 [ 1581.110642][T24228] should_fail_ex+0x497/0x5b0 [ 1581.115323][T24228] _copy_from_user+0x2e/0xd0 [ 1581.119905][T24228] copy_msghdr_from_user+0x99/0x160 [ 1581.125103][T24228] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1581.130910][T24228] ? __pfx___lock_acquire+0x10/0x10 [ 1581.136098][T24228] ___sys_sendmsg+0xff/0x1e0 [ 1581.140682][T24228] ? __pfx____sys_sendmsg+0x10/0x10 [ 1581.145877][T24228] ? lock_acquire+0x2f/0xb0 [ 1581.150366][T24228] ? __fget_files+0x40/0x3f0 [ 1581.154960][T24228] ? fdget+0x176/0x210 [ 1581.159025][T24228] __sys_sendmsg+0x117/0x1f0 [ 1581.163606][T24228] ? __pfx___sys_sendmsg+0x10/0x10 [ 1581.168709][T24228] ? __fget_files+0x244/0x3f0 [ 1581.173397][T24228] do_syscall_64+0xcd/0x250 [ 1581.177892][T24228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.183779][T24228] RIP: 0033:0x7fd416f7e719 [ 1581.188182][T24228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1581.207775][T24228] RSP: 002b:00007fd4153f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1581.216179][T24228] RAX: ffffffffffffffda RBX: 00007fd417135f80 RCX: 00007fd416f7e719 [ 1581.224139][T24228] RDX: 0000000000000000 RSI: 00000000200035c0 RDI: 0000000000000003 [ 1581.232096][T24228] RBP: 00007fd4153f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1581.240054][T24228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1581.248014][T24228] R13: 0000000000000000 R14: 00007fd417135f80 R15: 00007ffd4df99988 [ 1581.256074][T24228] [ 1581.273097][ T8] usb 2-1: USB disconnect, device number 19 [ 1582.893368][T24250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4810'. [ 1582.910419][T24250] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1582.918862][T24250] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1582.927433][T24250] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1583.022504][ T29] audit: type=1400 audit(1731236049.608:1968): avc: denied { ioctl } for pid=24247 comm="syz.7.4811" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1583.392170][T24233] ALSA: mixer_oss: invalid OSS volume '' [ 1583.398702][ T8] usb 4-1: USB disconnect, device number 34 [ 1586.360094][T24284] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1588.141533][T24329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=24329 comm=syz.1.4828 [ 1588.176738][T24329] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1589.191158][T24339] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1589.416818][T24343] futex_wake_op: syz.6.4832 tries to shift op by 36; fix this program [ 1591.166539][ T29] audit: type=1326 audit(1731236057.758:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24362 comm="syz.7.4838" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23cef7e719 code=0x0 [ 1591.643550][T24366] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 1591.652606][T24366] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 1591.661414][T24366] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 1591.670228][T24366] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 1591.894457][ T29] audit: type=1400 audit(1731236058.398:1970): avc: denied { mounton } for pid=24371 comm="syz.3.4839" path="/427/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1591.920953][ T29] audit: type=1400 audit(1731236058.488:1971): avc: denied { mounton } for pid=24370 comm="syz.5.4840" path="/319/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1591.976682][ T5878] kworker/1:5 (5878) used greatest stack depth: 16768 bytes left [ 1592.017022][T24372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4839'. [ 1592.167284][T24383] x_tables: ip_tables: udp match: only valid for protocol 17 [ 1592.204041][T24386] openvswitch: netlink: Actions may not be safe on all matching packets [ 1592.346289][T24383] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4844'. [ 1592.355459][T24383] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1592.373400][T24383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4844'. [ 1592.382437][T24383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4844'. [ 1592.530006][T14523] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1592.711334][T14523] usb 6-1: too many endpoints for config 0 interface 0 altsetting 4: 131, using maximum allowed: 30 [ 1592.729066][T14523] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1592.741518][T14523] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1592.752134][T14523] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 131 [ 1592.765415][T14523] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1592.773116][T14523] usb 6-1: New USB device found, idVendor=0eef, idProduct=480d, bcdDevice= 0.00 [ 1592.782645][T14523] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.799900][T14523] usb 6-1: config 0 descriptor?? [ 1593.261837][T24380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1593.355784][T24380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1593.407469][ T29] audit: type=1400 audit(1731236059.948:1972): avc: denied { execute } for pid=24390 comm="syz.7.4847" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=83826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1593.433724][ C1] vkms_vblank_simulate: vblank timer overrun [ 1593.440248][T14523] usbhid 6-1:0.0: can't add hid device: -71 [ 1593.446255][T14523] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1593.457902][T14523] usb 6-1: USB disconnect, device number 13 [ 1594.254497][T24404] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4849'. [ 1594.357820][T24405] FAULT_INJECTION: forcing a failure. [ 1594.357820][T24405] name failslab, interval 1, probability 0, space 0, times 0 [ 1594.563326][T24405] CPU: 0 UID: 0 PID: 24405 Comm: syz.7.4849 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 1594.574131][T24405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1594.584179][T24405] Call Trace: [ 1594.587452][T24405] [ 1594.590374][T24405] dump_stack_lvl+0x16c/0x1f0 [ 1594.595045][T24405] should_fail_ex+0x497/0x5b0 [ 1594.599715][T24405] ? fs_reclaim_acquire+0xae/0x150 [ 1594.604824][T24405] should_failslab+0xc2/0x120 [ 1594.609494][T24405] __kmalloc_cache_noprof+0x6b/0x300 [ 1594.614779][T24405] ? garp_init_applicant+0xbb/0x500 [ 1594.619971][T24405] garp_init_applicant+0xbb/0x500 [ 1594.624986][T24405] register_vlan_dev+0x197/0x940 [ 1594.629912][T24405] ? vlan_changelink+0x2c3/0x5e0 [ 1594.634848][T24405] vlan_newlink+0x40e/0x6a0 [ 1594.639363][T24405] ? __pfx_vlan_newlink+0x10/0x10 [ 1594.644398][T24405] __rtnl_newlink+0x1197/0x1920 [ 1594.649265][T24405] ? __pfx___rtnl_newlink+0x10/0x10 [ 1594.654486][T24405] rtnl_newlink+0x67/0xa0 [ 1594.658818][T24405] ? __pfx_rtnl_newlink+0x10/0x10 [ 1594.663846][T24405] rtnetlink_rcv_msg+0x3c7/0xea0 [ 1594.668787][T24405] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1594.674235][T24405] ? __pfx___schedule+0x10/0x10 [ 1594.679092][T24405] netlink_rcv_skb+0x16b/0x440 [ 1594.683856][T24405] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1594.689315][T24405] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1594.694608][T24405] ? rcu_is_watching+0x12/0xc0 [ 1594.699371][T24405] netlink_unicast+0x53c/0x7f0 [ 1594.704135][T24405] ? __pfx_netlink_unicast+0x10/0x10 [ 1594.709421][T24405] netlink_sendmsg+0x8b8/0xd70 [ 1594.714178][T24405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1594.719460][T24405] ____sys_sendmsg+0xaaf/0xc90 [ 1594.724221][T24405] ? copy_msghdr_from_user+0x10b/0x160 [ 1594.729671][T24405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1594.734954][T24405] ? __pfx___lock_acquire+0x10/0x10 [ 1594.740143][T24405] ? __pfx___lock_acquire+0x10/0x10 [ 1594.745334][T24405] ___sys_sendmsg+0x135/0x1e0 [ 1594.750020][T24405] ? __pfx____sys_sendmsg+0x10/0x10 [ 1594.755240][T24405] ? lock_acquire+0x2f/0xb0 [ 1594.759739][T24405] ? __fget_files+0x40/0x3f0 [ 1594.764346][T24405] ? fdget+0x176/0x210 [ 1594.768423][T24405] __sys_sendmsg+0x117/0x1f0 [ 1594.773013][T24405] ? __pfx___sys_sendmsg+0x10/0x10 [ 1594.778118][T24405] ? __pfx___schedule+0x10/0x10 [ 1594.782981][T24405] do_syscall_64+0xcd/0x250 [ 1594.787486][T24405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.793383][T24405] RIP: 0033:0x7f23cef7e719 [ 1594.797788][T24405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1594.817403][T24405] RSP: 002b:00007f23cfcb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1594.825815][T24405] RAX: ffffffffffffffda RBX: 00007f23cf136058 RCX: 00007f23cef7e719 [ 1594.833786][T24405] RDX: 0000000000000002 RSI: 0000000020000280 RDI: 0000000000000005 [ 1594.841744][T24405] RBP: 00007f23cfcb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1594.849711][T24405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1594.857677][T24405] R13: 0000000000000000 R14: 00007f23cf136058 R15: 00007fff975e40f8 [ 1594.865651][T24405] [ 1595.063984][T24407] can: request_module (can-proto-3) failed. [ 1595.359868][T12946] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1595.716097][T12946] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1595.783482][T12946] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1595.896973][T12946] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1595.923444][T12946] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1595.942222][T12946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.988901][T24414] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1597.384589][T12946] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 1597.406745][T12946] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input108 [ 1598.145358][T24440] FAULT_INJECTION: forcing a failure. [ 1598.145358][T24440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1598.171635][T24440] CPU: 1 UID: 0 PID: 24440 Comm: syz.6.4860 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 1598.182436][T24440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1598.192501][T24440] Call Trace: [ 1598.195799][T24440] [ 1598.198738][T24440] dump_stack_lvl+0x16c/0x1f0 [ 1598.203437][T24440] should_fail_ex+0x497/0x5b0 [ 1598.208127][T24440] _copy_to_user+0x32/0xd0 [ 1598.212564][T24440] simple_read_from_buffer+0xd0/0x160 [ 1598.217959][T24440] proc_fail_nth_read+0x198/0x270 [ 1598.222986][T24440] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1598.228528][T24440] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1598.234084][T24440] vfs_read+0x1df/0xbe0 [ 1598.238245][T24440] ? __fget_files+0x23a/0x3f0 [ 1598.242922][T24440] ? fdget_pos+0x24c/0x360 [ 1598.247335][T24440] ? __pfx_lock_release+0x10/0x10 [ 1598.252357][T24440] ? trace_lock_acquire+0x14a/0x1d0 [ 1598.257555][T24440] ? __pfx_vfs_read+0x10/0x10 [ 1598.262238][T24440] ? __pfx___mutex_lock+0x10/0x10 [ 1598.267284][T24440] ? __fget_files+0x244/0x3f0 [ 1598.271979][T24440] ksys_read+0x12f/0x260 [ 1598.276217][T24440] ? __pfx_ksys_read+0x10/0x10 [ 1598.281010][T24440] do_syscall_64+0xcd/0x250 [ 1598.285514][T24440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.291412][T24440] RIP: 0033:0x7fac3237d15c [ 1598.295816][T24440] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1598.315422][T24440] RSP: 002b:00007fac307f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1598.323847][T24440] RAX: ffffffffffffffda RBX: 00007fac32535f80 RCX: 00007fac3237d15c [ 1598.331823][T24440] RDX: 000000000000000f RSI: 00007fac307f60a0 RDI: 0000000000000003 [ 1598.339802][T24440] RBP: 00007fac307f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1598.347780][T24440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1598.355759][T24440] R13: 0000000000000000 R14: 00007fac32535f80 R15: 00007fff33a3ab78 [ 1598.363753][T24440] [ 1598.497254][T12946] usb 2-1: USB disconnect, device number 20 [ 1598.503324][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1600.372585][T24474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4868'. [ 1600.376358][T24474] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1600.376516][T24474] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1600.376590][T24474] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1600.908124][ T29] audit: type=1400 audit(1731236067.498:1973): avc: denied { mount } for pid=24467 comm="syz.3.4869" name="/" dev="rpc_pipefs" ino=84207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1601.170203][T17488] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1601.326337][T17488] usb 4-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=74.82 [ 1601.351183][T17488] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.367495][T17488] usb 4-1: Product: syz [ 1601.382287][T17488] usb 4-1: Manufacturer: syz [ 1601.393335][T17488] usb 4-1: SerialNumber: syz [ 1601.409414][T17488] usb 4-1: config 0 descriptor?? [ 1601.421546][T17488] smsc75xx v1.0.0 [ 1601.431770][T17488] smsc75xx 4-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1601.444269][T17488] smsc75xx 4-1:0.0: probe with driver smsc75xx failed with error -22 [ 1601.755551][ T5910] usb 4-1: USB disconnect, device number 35 [ 1605.047716][T24512] 9pnet_fd: Insufficient options for proto=fd [ 1605.182648][ T5910] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1605.442839][ T5910] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1605.470043][ T5910] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1605.509663][ T5910] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1605.578217][ T5910] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1605.654755][ T29] audit: type=1400 audit(1731236072.248:1974): avc: denied { getopt } for pid=24545 comm="syz.3.4889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1605.674239][ C1] vkms_vblank_simulate: vblank timer overrun [ 1605.744761][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.790708][T24532] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1605.920029][ T5952] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1606.007144][ T5910] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 1606.020966][ T5910] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input109 [ 1606.050524][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1606.062810][ T5910] usb 6-1: USB disconnect, device number 14 [ 1606.081566][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1606.109869][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1606.130211][ T5952] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1606.146109][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.171661][ T5952] usb 4-1: config 0 descriptor?? [ 1606.597782][ T5952] petalynx 0003:18B1:0037.0039: unknown main item tag 0x0 [ 1606.605362][ T5952] petalynx 0003:18B1:0037.0039: unknown main item tag 0x0 [ 1606.621167][ T5952] petalynx 0003:18B1:0037.0039: unknown main item tag 0x0 [ 1606.628412][ T5952] petalynx 0003:18B1:0037.0039: unknown main item tag 0x0 [ 1606.639829][ T5952] petalynx 0003:18B1:0037.0039: unknown main item tag 0x0 [ 1606.659946][ T5952] petalynx 0003:18B1:0037.0039: hidraw1: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.3-1/input0 [ 1606.699974][T24561] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4893'. [ 1606.826270][ T29] audit: type=1400 audit(1731236073.398:1975): avc: denied { write } for pid=24562 comm="syz.1.4894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1607.453168][T24573] netlink: 4104 bytes leftover after parsing attributes in process `syz.1.4896'. [ 1607.470824][T24573] openvswitch: netlink: Missing key (keys=400040, expected=200000) [ 1607.958394][T24585] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4898'. [ 1607.987823][T24588] netlink: 'syz.1.4899': attribute type 1 has an invalid length. [ 1607.999071][T24588] netlink: 9372 bytes leftover after parsing attributes in process `syz.1.4899'. [ 1608.008732][T24588] netlink: 'syz.1.4899': attribute type 1 has an invalid length. [ 1608.275183][T24604] binder: 24603:24604 ioctl c018937b 20000580 returned -22 [ 1608.500367][ T29] audit: type=1326 audit(1731236075.068:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24605 comm="syz.7.4906" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23cef7e719 code=0x0 [ 1608.675240][T17488] usb 4-1: USB disconnect, device number 36 [ 1608.871770][ T5952] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1609.137400][ T5952] usb 2-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=b4.99 [ 1609.147878][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.162079][ T5952] usb 2-1: Product: syz [ 1609.166279][ T5952] usb 2-1: Manufacturer: syz [ 1609.188475][ T5952] usb 2-1: SerialNumber: syz [ 1609.205892][ T5952] usb 2-1: config 0 descriptor?? [ 1609.340119][ T5952] rtsx_usb 2-1:0.0: probe with driver rtsx_usb failed with error -22 [ 1610.225451][T24638] netlink: 'syz.7.4916': attribute type 10 has an invalid length. [ 1610.258941][T24638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.266265][T24638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.298609][T24638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1610.305810][T24638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1610.313240][T24638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1610.320388][T24638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1610.386735][T24638] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1610.519891][ T5910] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1610.941311][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1610.952870][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1611.103763][T24650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24650 comm=syz.6.4918 [ 1611.288266][ T5910] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1611.298140][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.352604][ T5910] usb 4-1: config 0 descriptor?? [ 1611.577247][T24636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1611.586963][T24636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1612.025584][T24662] syz.5.4920 (24662): drop_caches: 2 [ 1612.037421][T24662] syz.5.4920 (24662): drop_caches: 2 [ 1612.055034][ T5952] usb 2-1: USB disconnect, device number 21 [ 1612.079227][ T5910] pyra 0003:1E7D:2CF6.003A: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1612.113934][ T5910] pyra 0003:1E7D:2CF6.003A: couldn't init struct pyra_device [ 1612.121480][ T5910] pyra 0003:1E7D:2CF6.003A: couldn't install mouse [ 1612.132743][ T5910] pyra 0003:1E7D:2CF6.003A: probe with driver pyra failed with error -5 [ 1612.343850][T24664] syz.5.4920 (24664): drop_caches: 2 [ 1613.560654][T24677] batadv_slave_0: entered promiscuous mode [ 1615.299874][ T29] audit: type=1400 audit(1731236081.878:1977): avc: denied { append } for pid=24683 comm="syz.1.4925" name="event3" dev="devtmpfs" ino=1001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1615.324712][ T5937] usb 4-1: USB disconnect, device number 37 [ 1616.302313][T24326] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1616.344436][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 1616.529937][T17488] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 1616.576688][T16378] Bluetooth: hci5: sending frame failed (-49) [ 1616.584290][T20489] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 1616.633261][T24326] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1616.702013][T17488] usb 4-1: string descriptor 0 read error: -22 [ 1616.718275][T17488] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1616.729906][T17488] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.740015][T17488] usb 4-1: config 0 descriptor?? [ 1616.754701][T17488] usbtest 4-1:0.0: FX2 device [ 1616.759418][T17488] usbtest 4-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 1617.665373][T24712] block nbd1: NBD_DISCONNECT [ 1617.720714][ T29] audit: type=1326 audit(1731236084.238:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24710 comm="syz.1.4932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ba17e719 code=0x7ffc0000 [ 1617.998262][ T29] audit: type=1326 audit(1731236084.248:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24710 comm="syz.1.4932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ba17e719 code=0x7ffc0000 [ 1618.020039][T24715] fuse: Unknown parameter 'fd0x0000000000000003' [ 1618.021746][ C1] vkms_vblank_simulate: vblank timer overrun [ 1618.036011][ T29] audit: type=1326 audit(1731236084.248:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24710 comm="syz.1.4932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f44ba17e719 code=0x7ffc0000 [ 1618.059660][ T29] audit: type=1326 audit(1731236084.248:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24710 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ba17e719 code=0x7ffc0000 [ 1618.084986][ T29] audit: type=1326 audit(1731236084.248:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24710 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f44ba17e719 code=0x7ffc0000 [ 1618.109999][ C1] vkms_vblank_simulate: vblank timer overrun [ 1618.117318][ T29] audit: type=1326 audit(1731236084.258:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24710 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ba17e719 code=0x7ffc0000 [ 1618.142342][ C1] vkms_vblank_simulate: vblank timer overrun [ 1618.148892][ T29] audit: type=1326 audit(1731236084.258:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24710 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f44ba17e719 code=0x7ffc0000 [ 1618.173845][ C1] vkms_vblank_simulate: vblank timer overrun [ 1618.180436][ T29] audit: type=1326 audit(1731236084.388:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24710 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ba17e719 code=0x7ffc0000 [ 1618.205448][ C1] vkms_vblank_simulate: vblank timer overrun [ 1618.211683][ T29] audit: type=1326 audit(1731236084.388:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24710 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ba17e719 code=0x7ffc0000 [ 1618.236689][ C1] vkms_vblank_simulate: vblank timer overrun [ 1618.371790][T12515] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1620.104651][T24746] fuse: Unknown parameter 'fd0x0000000000000003' [ 1621.746269][T24761] xt_CT: No such helper "snmp" [ 1622.115557][T24757] FAULT_INJECTION: forcing a failure. [ 1622.115557][T24757] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.172117][T24757] CPU: 0 UID: 0 PID: 24757 Comm: syz.1.4947 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 1622.182911][T24757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1622.192970][T24757] Call Trace: [ 1622.196227][T24757] [ 1622.199136][T24757] dump_stack_lvl+0x16c/0x1f0 [ 1622.203797][T24757] should_fail_ex+0x497/0x5b0 [ 1622.208452][T24757] ? fs_reclaim_acquire+0xae/0x150 [ 1622.213542][T24757] should_failslab+0xc2/0x120 [ 1622.218197][T24757] __kmalloc_noprof+0xcb/0x400 [ 1622.222939][T24757] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1622.228559][T24757] tomoyo_realpath_from_path+0xb9/0x720 [ 1622.234111][T24757] ? tomoyo_path_number_perm+0x232/0x590 [ 1622.239730][T24757] tomoyo_path_number_perm+0x245/0x590 [ 1622.245183][T24757] ? tomoyo_path_number_perm+0x232/0x590 [ 1622.250794][T24757] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1622.256782][T24757] ? trace_lock_acquire+0x14a/0x1d0 [ 1622.261964][T24757] ? lock_acquire+0x2f/0xb0 [ 1622.266443][T24757] ? __fget_files+0x40/0x3f0 [ 1622.271015][T24757] ? __fget_files+0x244/0x3f0 [ 1622.275675][T24757] security_file_ioctl+0x9b/0x240 [ 1622.280680][T24757] __x64_sys_ioctl+0xbb/0x220 [ 1622.285338][T24757] do_syscall_64+0xcd/0x250 [ 1622.289821][T24757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.295698][T24757] RIP: 0033:0x7f44ba17e719 [ 1622.300094][T24757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1622.319676][T24757] RSP: 002b:00007f44bb015038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1622.328064][T24757] RAX: ffffffffffffffda RBX: 00007f44ba335f80 RCX: 00007f44ba17e719 [ 1622.336024][T24757] RDX: 0000000020000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 1622.343976][T24757] RBP: 00007f44bb015090 R08: 0000000000000000 R09: 0000000000000000 [ 1622.351923][T24757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1622.359871][T24757] R13: 0000000000000000 R14: 00007f44ba335f80 R15: 00007ffc41cf5548 [ 1622.367833][T24757] [ 1622.495306][T24757] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1622.548046][ T5952] usb 4-1: USB disconnect, device number 38 [ 1623.026326][T24779] FAULT_INJECTION: forcing a failure. [ 1623.026326][T24779] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.269942][T24779] CPU: 0 UID: 0 PID: 24779 Comm: syz.3.4951 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 1623.280739][T24779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1623.290781][T24779] Call Trace: [ 1623.294045][T24779] [ 1623.296959][T24779] dump_stack_lvl+0x16c/0x1f0 [ 1623.301627][T24779] should_fail_ex+0x497/0x5b0 [ 1623.306293][T24779] ? fs_reclaim_acquire+0xae/0x150 [ 1623.311404][T24779] should_failslab+0xc2/0x120 [ 1623.316081][T24779] __kmalloc_cache_noprof+0x6b/0x300 [ 1623.321361][T24779] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1623.327252][T24779] ? snd_pcm_lib_malloc_pages+0x2aa/0x980 [ 1623.332982][T24779] snd_pcm_lib_malloc_pages+0x2aa/0x980 [ 1623.338514][T24779] ? fixup_unreferenced_params+0x4b3/0xed0 [ 1623.344305][T24779] snd_pcm_hw_params+0x152b/0x1a30 [ 1623.349417][T24779] ? snd_pcm_hw_param_near.constprop.0+0x73e/0x8f0 [ 1623.355911][T24779] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1623.361354][T24779] ? snd_pcm_hw_param_near.constprop.0+0x743/0x8f0 [ 1623.367857][T24779] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1623.374733][T24779] snd_pcm_kernel_ioctl+0x147/0x2d0 [ 1623.379944][T24779] snd_pcm_oss_change_params_locked+0x1406/0x3a60 [ 1623.386353][T24779] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1623.393098][T24779] ? __mutex_lock+0x2cc/0x9c0 [ 1623.397755][T24779] ? __pfx___mutex_lock+0x10/0x10 [ 1623.402760][T24779] ? __schedule+0xe5d/0x5740 [ 1623.407351][T24779] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1623.413228][T24779] snd_pcm_oss_write+0x4a3/0xa00 [ 1623.418149][T24779] ? security_file_permission+0x71/0x210 [ 1623.423783][T24779] ? rw_verify_area+0xd0/0x700 [ 1623.428579][T24779] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1623.434058][T24779] vfs_write+0x24c/0x1150 [ 1623.438411][T24779] ? __fget_files+0x23a/0x3f0 [ 1623.443103][T24779] ? __pfx_vfs_write+0x10/0x10 [ 1623.447881][T24779] ? irqentry_exit+0x3b/0x90 [ 1623.452484][T24779] ? lockdep_hardirqs_on+0x7c/0x110 [ 1623.457705][T24779] ? ksys_write+0xd2/0x260 [ 1623.462143][T24779] ksys_write+0x12f/0x260 [ 1623.466489][T24779] ? __pfx_ksys_write+0x10/0x10 [ 1623.471363][T24779] do_syscall_64+0xcd/0x250 [ 1623.475888][T24779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.481797][T24779] RIP: 0033:0x7f0cc0f7e719 [ 1623.486223][T24779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1623.505848][T24779] RSP: 002b:00007f0cc1cd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1623.514272][T24779] RAX: ffffffffffffffda RBX: 00007f0cc1136058 RCX: 00007f0cc0f7e719 [ 1623.522247][T24779] RDX: 0000000000004000 RSI: 00000000200012c0 RDI: 0000000000000003 [ 1623.530221][T24779] RBP: 00007f0cc1cd0090 R08: 0000000000000000 R09: 0000000000000000 [ 1623.538196][T24779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1623.546171][T24779] R13: 0000000000000001 R14: 00007f0cc1136058 R15: 00007ffd1cdf14c8 [ 1623.554159][T24779] [ 1624.336121][T24792] overlay: Unknown parameter 'smackfsfloor' [ 1624.350842][T24792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4955'. [ 1624.363076][T24792] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1624.371308][T24792] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1624.380062][T24792] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1624.465431][T24796] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4957'. [ 1624.475029][ T5952] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1624.524563][T24799] mmap: syz.7.4958 (24799): VmData 37728256 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 1624.630332][ T5952] usb 2-1: Using ep0 maxpacket: 16 [ 1624.636947][ T5952] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1624.661969][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1624.682719][T24803] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4959'. [ 1624.693986][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1624.710393][ T5952] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1624.720527][ T5952] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1624.737881][ T5952] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1624.752932][ T5952] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1624.772646][ T5952] usb 2-1: Manufacturer: syz [ 1624.784126][ T5952] usb 2-1: config 0 descriptor?? [ 1625.893470][ T5952] rc_core: IR keymap rc-hauppauge not found [ 1625.899492][ T5952] Registered IR keymap rc-empty [ 1625.905176][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1626.031361][T24789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1626.043639][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1626.070326][T24789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1626.088969][ T5952] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1626.089594][T24821] netlink: 'syz.5.4963': attribute type 1 has an invalid length. [ 1626.101514][ T5952] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input110 [ 1626.129477][T24821] bond1: entered promiscuous mode [ 1626.135151][T24822] netlink: 'syz.5.4963': attribute type 1 has an invalid length. [ 1626.172802][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1626.199996][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1626.225599][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1626.251629][T24827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4962'. [ 1626.266058][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1626.340483][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1626.365424][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1626.401915][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1626.432502][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1626.469874][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1626.490042][ T5952] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1626.519846][T14523] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1626.538024][ T5952] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1626.569937][ T5952] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1626.741657][ T5952] usb 2-1: USB disconnect, device number 22 [ 1627.311554][T14523] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1627.320339][T14523] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1627.346869][T14523] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1627.364874][T14523] usb 4-1: config 1 has no interface number 1 [ 1627.373838][T14523] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1627.394439][T14523] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1627.553080][T14523] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1627.598429][T14523] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.649490][T14523] usb 4-1: Product: syz [ 1627.657954][T14523] usb 4-1: Manufacturer: syz [ 1627.678221][T14523] usb 4-1: SerialNumber: syz [ 1627.702469][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 1627.702480][ T29] audit: type=1326 audit(1731236094.298:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24843 comm="syz.6.4969" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac3237e719 code=0x0 [ 1628.520176][ T5910] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1628.684856][ T5910] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1628.710199][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1628.740065][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1628.754977][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1628.767157][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 1628.898309][T20370] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1628.910581][ T5910] usb 2-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 1628.952696][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.469973][ T5910] usb 2-1: config 0 descriptor?? [ 1629.536620][T24867] overlay: Unknown parameter 'smackfsfloor' [ 1629.543837][T24867] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4975'. [ 1629.554107][T24867] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1629.562551][T24867] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1629.571849][T24867] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1629.573058][T20370] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 1629.597535][T20370] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.710988][T20370] usb 6-1: config 0 descriptor?? [ 1629.895816][ T5910] hid (null): invalid report_size 1620802691 [ 1629.926479][ T5910] hid-u2fzero 0003:20A0:4287.003B: invalid report_size 1620802691 [ 1629.938578][ T5910] hid-u2fzero 0003:20A0:4287.003B: item 0 4 1 7 parsing failed [ 1629.955387][ T5910] hid-u2fzero 0003:20A0:4287.003B: probe with driver hid-u2fzero failed with error -22 [ 1630.067840][T14523] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1630.084908][T14523] usb 4-1: MIDIStreaming interface descriptor not found [ 1630.106034][ T5937] usb 2-1: USB disconnect, device number 23 [ 1630.150016][T20370] playstation 0003:054C:0DF2.003C: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 1630.177127][T14523] usb 4-1: USB disconnect, device number 39 [ 1630.329530][T24860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1630.340240][T24860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1630.358660][T24860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1630.369049][T24860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1630.382558][T24860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1630.392476][T24860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1630.603713][T20370] playstation 0003:054C:0DF2.003C: Failed to retrieve feature with reportID 32: -71 [ 1630.619928][T20370] playstation 0003:054C:0DF2.003C: Failed to retrieve DualSense firmware info: -71 [ 1630.643811][T20370] playstation 0003:054C:0DF2.003C: Failed to get firmware info from DualSense [ 1630.658943][T20370] playstation 0003:054C:0DF2.003C: Failed to create dualsense. [ 1630.675508][T20370] playstation 0003:054C:0DF2.003C: probe with driver playstation failed with error -71 [ 1630.690918][T14523] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1630.708449][T20370] usb 6-1: USB disconnect, device number 15 [ 1630.869934][T14523] usb 4-1: Using ep0 maxpacket: 8 [ 1630.882653][T14523] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1630.897162][T14523] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1630.907288][T14523] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1630.918554][T14523] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1630.938705][T14523] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1630.947889][T14523] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.159524][T14523] usb 4-1: GET_CAPABILITIES returned 0 [ 1631.168761][T14523] usbtmc 4-1:16.0: can't read capabilities [ 1631.659924][ T5910] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1631.819946][ T5910] usb 6-1: Using ep0 maxpacket: 8 [ 1631.833842][ T5910] usb 6-1: config 217 has too many interfaces: 193, using maximum allowed: 32 [ 1631.843317][ T5910] usb 6-1: config 217 has an invalid descriptor of length 205, skipping remainder of the config [ 1631.855839][ T5910] usb 6-1: config 217 has 0 interfaces, different from the descriptor's value: 193 [ 1631.875294][ T5910] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1631.887994][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.897219][ T5910] usb 6-1: Product: syz [ 1631.903859][ T5910] usb 6-1: Manufacturer: syz [ 1631.918660][ T5910] usb 6-1: SerialNumber: syz [ 1632.099924][T24904] IPv6: NLM_F_CREATE should be specified when creating new route [ 1632.108294][T24904] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4986'. [ 1632.868095][ T5910] usb 6-1: USB disconnect, device number 16 [ 1633.215281][T20370] usb 4-1: USB disconnect, device number 40 [ 1633.978868][T24927] Bluetooth: MGMT ver 1.23 [ 1634.060215][ T8] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1634.211093][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 1634.217863][ T8] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 1634.226801][ T8] usb 6-1: config 0 has no interface number 0 [ 1634.233095][ T8] usb 6-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1634.245225][ T8] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1634.270137][T20370] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1634.302099][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.431951][T20370] usb 4-1: device descriptor read/64, error -71 [ 1634.695124][T20370] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1634.861495][ T8] usb 6-1: Product: syz [ 1634.867815][ T8] usb 6-1: Manufacturer: syz [ 1634.872596][ T8] usb 6-1: SerialNumber: syz [ 1634.879094][ T8] usb 6-1: config 0 descriptor?? [ 1634.879933][T20370] usb 4-1: device descriptor read/64, error -71 [ 1634.884918][T24923] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1634.900388][ T8] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1634.910324][ T8] em28xx 6-1:0.132: Video interface 132 found: bulk [ 1635.067685][T20370] usb usb4-port1: attempt power cycle [ 1635.397387][ T8] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 1635.500164][T20370] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1635.530578][T20370] usb 4-1: device descriptor read/8, error -71 [ 1635.769929][T20370] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1635.790804][T20370] usb 4-1: device descriptor read/8, error -71 [ 1635.916900][T24948] netlink: 'syz.1.5002': attribute type 3 has an invalid length. [ 1635.925091][T24948] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.5002'. [ 1635.940217][T20370] usb usb4-port1: unable to enumerate USB device [ 1636.020192][ T8] em28xx 6-1:0.132: failed to read eeprom (err=-110) [ 1636.026933][ T8] em28xx 6-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1636.208862][T24923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1636.217514][T24923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1636.242341][ T5910] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1636.309887][ T8] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1636.317726][ T8] em28xx 6-1:0.132: analog set to bulk mode. [ 1636.328697][T17488] em28xx 6-1:0.132: Registering V4L2 extension [ 1636.399913][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 1636.407610][ T5910] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1636.415980][ T5910] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1636.425939][ T5910] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1636.455898][ T8] usb 6-1: USB disconnect, device number 17 [ 1636.463590][ T8] em28xx 6-1:0.132: Disconnecting em28xx [ 1636.469606][T17488] em28xx 6-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1636.491878][ T5910] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 216 [ 1636.510545][ T5910] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1636.544728][ T5910] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1636.554830][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.599223][T17488] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 1636.607447][T17488] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 1636.615541][T17488] em28xx 6-1:0.132: No AC97 audio processor [ 1636.630140][T17488] usb 6-1: Decoder not found [ 1636.634990][T17488] em28xx 6-1:0.132: failed to create media graph [ 1636.641621][T17488] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 1636.663899][T17488] em28xx 6-1:0.132: Remote control support is not available for this card. [ 1636.677087][ T8] em28xx 6-1:0.132: Closing input extension [ 1636.695662][ T8] em28xx 6-1:0.132: Freeing device [ 1637.483750][ T5937] usb 2-1: USB disconnect, device number 24 [ 1637.532875][ T29] audit: type=1400 audit(1731236104.128:2024): avc: denied { getopt } for pid=24974 comm="syz.5.5009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1637.599904][ T5910] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1637.775701][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1637.826094][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1637.861793][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1637.874372][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1637.887555][ T5910] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1637.899899][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.916736][ T5910] usb 4-1: config 0 descriptor?? [ 1638.345982][ T29] audit: type=1400 audit(1731236104.938:2025): avc: denied { lock } for pid=24985 comm="syz.6.5013" path="socket:[87369]" dev="sockfs" ino=87369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1638.351562][ T5910] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1638.444065][ T5910] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1638.454176][T24988] UBIFS error (pid: 24988): cannot open "./file0", error -22 [ 1638.536225][T24989] syz.1.5014: attempt to access beyond end of device [ 1638.536225][T24989] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1638.545455][T24967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1638.570287][T24989] vxfs: unable to read disk superblock at 1 [ 1638.624928][T24989] syz.1.5014: attempt to access beyond end of device [ 1638.624928][T24989] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1638.638515][T24989] vxfs: unable to read disk superblock at 8 [ 1638.644879][T24989] vxfs: can't find superblock. [ 1638.874677][T24967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1638.883070][ T5910] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1638.898159][ T5910] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1638.921177][ T5910] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 1638.929456][ T5910] plantronics 0003:047F:FFFF.003D: No inputs registered, leaving [ 1638.955998][ T5910] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1639.610926][T24995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1639.622031][T24995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1640.819902][T14523] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1640.974241][T14523] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1640.997334][T14523] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1641.030286][T14523] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1641.078261][T14523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.101422][T14523] usb 2-1: config 0 descriptor?? [ 1641.116276][T25013] openvswitch: netlink: Actions may not be safe on all matching packets [ 1641.728289][T14523] usb 2-1: language id specifier not provided by device, defaulting to English [ 1641.925158][T25006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1641.984167][T25006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1642.026764][T14523] uclogic 0003:256C:006D.003E: failed retrieving Huion firmware version: -71 [ 1642.036143][T14523] uclogic 0003:256C:006D.003E: failed probing parameters: -71 [ 1642.047110][ T5910] usb 4-1: USB disconnect, device number 45 [ 1642.047996][T14523] uclogic 0003:256C:006D.003E: probe with driver uclogic failed with error -71 [ 1642.101300][T14523] usb 2-1: USB disconnect, device number 25 [ 1642.561148][ T5910] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1642.690124][ T8] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1642.731481][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1642.753592][ T5910] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1642.774875][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1642.796828][ T5910] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1642.832303][ T5910] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1642.843047][ T8] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1642.863493][ T8] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1642.876424][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.888662][ T5910] usb 4-1: Product: syz [ 1642.893233][ T8] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1642.902643][ T5910] usb 4-1: Manufacturer: syz [ 1642.907304][ T5910] usb 4-1: SerialNumber: syz [ 1642.912342][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.927714][ T5910] usb 4-1: config 0 descriptor?? [ 1642.938089][T25038] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1642.939543][ T5910] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 1642.971428][ T8] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1643.312392][ T11] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1643.331938][ T5910] ums-isd200 4-1:0.0: probe with driver ums-isd200 failed with error -22 [ 1643.355987][ T5910] usb 4-1: USB disconnect, device number 46 [ 1643.386451][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 1643.407878][ T29] audit: type=1326 audit(1731236109.998:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25030 comm="syz.5.5026" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd416f7e719 code=0x0 [ 1643.517595][T25060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1643.543826][T25060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1643.576175][T25060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1643.597647][T25060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1644.289974][T16378] Bluetooth: hci1: command 0x0406 tx timeout [ 1644.362884][T25074] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1644.370594][T25074] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1644.420527][T25078] openvswitch: netlink: Actions may not be safe on all matching packets [ 1644.767563][ T29] audit: type=1400 audit(1731240206.361:2027): avc: denied { setattr } for pid=25080 comm="syz.6.5040" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1645.523400][T12515] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1646.035571][T25105] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5046'. [ 1646.319894][ T5910] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 1646.536841][ T5910] usb 4-1: string descriptor 0 read error: -22 [ 1646.548971][ T5910] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1646.570846][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.615322][T17488] usb 6-1: USB disconnect, device number 18 [ 1646.674740][ T5910] usb 4-1: config 0 descriptor?? [ 1646.768710][ T5910] usbtest 4-1:0.0: FX2 device [ 1646.801497][ T5910] usbtest 4-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 1647.184032][T25129] openvswitch: netlink: Actions may not be safe on all matching packets [ 1647.321698][ T29] audit: type=1400 audit(1731240208.801:2028): avc: denied { map } for pid=25127 comm="syz.5.5052" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1647.978975][T25135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25135 comm=syz.1.5054 [ 1649.558336][T25138] bridge_slave_0: left allmulticast mode [ 1649.565290][T25145] netlink: 'syz.7.5057': attribute type 1 has an invalid length. [ 1649.577672][T25138] bridge_slave_0: left promiscuous mode [ 1649.587429][T25138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.714426][T25138] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1649.991511][T25155] overlay: Unknown parameter 'smackfsfloor' [ 1650.069152][T25157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5058'. [ 1650.146843][T25157] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1650.156358][T25157] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1650.165033][T25157] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1650.751341][ T5952] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1650.821758][T25162] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5063'. [ 1650.869932][T25164] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1650.886316][T25165] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1650.911120][T25164] 9pnet_fd: Insufficient options for proto=fd [ 1650.929853][ T5952] usb 6-1: Using ep0 maxpacket: 32 [ 1650.980360][ T5952] usb 6-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.c6 [ 1651.004913][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.017253][ T5952] usb 6-1: Product: syz [ 1651.189455][T25179] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5066'. [ 1651.204285][ T5952] usb 6-1: Manufacturer: syz [ 1651.209803][ T5952] usb 6-1: SerialNumber: syz [ 1651.216760][ T5952] usb 6-1: config 0 descriptor?? [ 1651.643037][T25151] netlink: 'syz.5.5060': attribute type 2 has an invalid length. [ 1651.659361][T17488] usb 6-1: USB disconnect, device number 19 [ 1652.055617][ T5910] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1652.078644][T25189] openvswitch: netlink: Missing valid actions attribute. [ 1652.086233][T25189] openvswitch: netlink: Actions may not be safe on all matching packets [ 1652.258355][ T5937] usb 4-1: USB disconnect, device number 47 [ 1652.399835][ T5910] usb 2-1: Using ep0 maxpacket: 32 [ 1652.409572][ T5910] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=7c.49 [ 1652.425521][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.439855][ T5910] usb 2-1: Product: syz [ 1652.467267][ T5910] usb 2-1: Manufacturer: syz [ 1652.476779][ T5910] usb 2-1: SerialNumber: syz [ 1652.491621][ T5910] usb 2-1: config 0 descriptor?? [ 1652.512062][ T5910] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1653.319148][ T5910] gspca_topro: reg_w err -71 [ 1653.396502][ T5910] gspca_topro: Sensor soi763a [ 1653.479885][ T5910] usb 2-1: USB disconnect, device number 26 [ 1654.883366][T25247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25247 comm=syz.3.5087 [ 1656.159279][T25257] xt_CT: No such helper "snmp" [ 1656.174613][T25266] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.5092'. [ 1656.958273][ T29] audit: type=1400 audit(1731240218.551:2029): avc: denied { transfer } for pid=25285 comm="syz.1.5098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1656.958524][T25286] binder: 25285:25286 ioctl c0306201 20000680 returned -22 [ 1657.350115][T12946] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1657.530667][T12946] usb 2-1: Using ep0 maxpacket: 32 [ 1657.549367][T12946] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1657.893023][T25294] binder: 25291:25294 ioctl 5415 20000240 returned -22 [ 1657.905075][T25294] openvswitch: netlink: Missing valid actions attribute. [ 1657.912705][T25294] openvswitch: netlink: Actions may not be safe on all matching packets [ 1658.258102][T12946] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1658.297772][T12946] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1658.308253][T12946] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1658.333116][T12946] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1658.349457][T12946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.357916][T12946] usb 2-1: Product: syz [ 1658.362402][T12946] usb 2-1: Manufacturer: syz [ 1658.367017][T12946] usb 2-1: SerialNumber: syz [ 1659.540573][T12946] usb 2-1: 0:2 : does not exist [ 1659.695450][T12946] usb 2-1: USB disconnect, device number 27 [ 1660.399785][T25330] overlay: Unknown parameter 'smackfsfloor' [ 1660.457441][T25331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5111'. [ 1660.476862][T25331] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1660.485242][T25331] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1660.493794][T25331] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1661.927819][T25344] sch_fq: defrate 0 ignored. [ 1661.975640][ T29] audit: type=1326 audit(1731240223.571:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25339 comm="syz.3.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc0f7e719 code=0x7ffc0000 [ 1662.018098][ T29] audit: type=1326 audit(1731240223.571:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25339 comm="syz.3.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f0cc0f7e719 code=0x7ffc0000 [ 1662.061225][ T29] audit: type=1326 audit(1731240223.571:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25339 comm="syz.3.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc0f7e719 code=0x7ffc0000 [ 1662.090640][ T29] audit: type=1326 audit(1731240223.571:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25339 comm="syz.3.5115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc0f7e719 code=0x7ffc0000 [ 1662.677459][ T29] audit: type=1400 audit(1731240224.271:2034): avc: denied { connect } for pid=25363 comm="syz.6.5123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1662.866855][T25366] block nbd5: NBD_DISCONNECT [ 1665.447428][T14523] IPVS: starting estimator thread 0... [ 1665.736681][T25400] xt_CT: No such helper "snmp" [ 1665.804287][T25405] overlay: Unknown parameter 'smackfsfloor' [ 1665.811903][T25398] IPVS: using max 39 ests per chain, 93600 per kthread [ 1665.825109][T25405] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5133'. [ 1665.838685][T25405] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1665.846946][T25405] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1665.856889][T25405] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1666.019925][ T5952] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1666.438333][ T5952] usb 6-1: config 5 has an invalid interface number: 123 but max is 0 [ 1666.840534][ T5952] usb 6-1: config 5 has no interface number 0 [ 1666.846776][ T5952] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 16325, setting to 64 [ 1666.858159][ T5952] usb 6-1: config 5 interface 123 has no altsetting 0 [ 1666.868472][ T5952] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1666.899875][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.907969][ T5952] usb 6-1: Product: syz [ 1666.914811][ T5952] usb 6-1: Manufacturer: syz [ 1666.919651][ T5952] usb 6-1: SerialNumber: syz [ 1666.981620][T25409] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1667.972262][ T5952] ni6501 6-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1667.983592][ T5952] usb 6-1: USB disconnect, device number 20 [ 1668.330169][T25444] 9pnet_fd: Insufficient options for proto=fd [ 1669.521793][ T29] audit: type=1400 audit(1731240231.111:2035): avc: denied { map } for pid=25465 comm="syz.5.5152" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1669.827461][T25473] syz.1.5151: attempt to access beyond end of device [ 1669.827461][T25473] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1669.842058][T25473] XFS (nbd1): SB validate failed with error -5. [ 1670.959675][T25503] netlink: 'syz.5.5158': attribute type 1 has an invalid length. [ 1670.978858][T25503] openvswitch: netlink: Actions may not be safe on all matching packets [ 1671.110653][T25507] netlink: 'syz.3.5160': attribute type 29 has an invalid length. [ 1671.118534][T25507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5160'. [ 1672.462146][T25524] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5165'. [ 1675.072019][T25552] No such timeout policy "syz0" [ 1676.953416][T25580] IPv6: NLM_F_CREATE should be specified when creating new route [ 1676.961783][T25580] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5178'. [ 1678.322339][ T29] audit: type=1400 audit(1731240239.921:2036): avc: denied { name_bind 0x1000000 } for pid=25576 comm="syz.1.5180" path="socket:[89692]" dev="sockfs" ino=89692 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1678.595231][T25597] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1678.664024][T25602] netlink: 'syz.3.5184': attribute type 10 has an invalid length. [ 1678.690160][T25602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1678.718886][T25602] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1678.742837][T25605] netlink: 'syz.3.5184': attribute type 10 has an invalid length. [ 1678.789871][T25605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1679.275554][T25605] team0: Port device bond0 added [ 1679.378625][T25618] IPv6: NLM_F_CREATE should be specified when creating new route [ 1679.414221][T25618] netlink: 1 bytes leftover after parsing attributes in process `syz.7.5188'. [ 1679.480092][T17488] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1679.660492][T17488] usb 2-1: Using ep0 maxpacket: 32 [ 1679.713601][T17488] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1679.741759][T17488] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1679.784262][T17488] usb 2-1: can't read configurations, error -71 [ 1681.510931][T14523] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1682.988697][T14523] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1683.000416][T14523] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1683.011447][T14523] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1683.020632][T14523] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.048823][T14523] usb 4-1: config 0 descriptor?? [ 1683.150532][T12515] Bluetooth: hci4: sending frame failed (-49) [ 1683.160589][T24705] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 1683.186584][ T11] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1683.269999][ T5910] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1683.285223][T14523] ath6kl: Failed to submit usb control message: -71 [ 1683.292284][T14523] ath6kl: unable to send the bmi data to the device: -71 [ 1683.299345][T14523] ath6kl: Unable to send get target info: -71 [ 1683.322736][T14523] ath6kl: Failed to init ath6kl core: -71 [ 1683.350305][T14523] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1683.378728][T14523] usb 4-1: USB disconnect, device number 48 [ 1683.400406][ T5910] usb 2-1: device descriptor read/64, error -71 [ 1683.459877][ T8] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 1683.627399][ T8] usb 6-1: string descriptor 0 read error: -22 [ 1683.638125][ T8] usb 6-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1683.675590][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.683914][ T5910] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1683.698862][ T8] usb 6-1: config 0 descriptor?? [ 1683.707288][ T8] usbtest 6-1:0.0: FX2 device [ 1684.274620][ T8] usbtest 6-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 1684.462433][ T5910] usb 2-1: device descriptor read/64, error -71 [ 1685.029851][ T5910] usb usb2-port1: attempt power cycle [ 1685.412512][ T5910] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1685.502540][ T5910] usb 2-1: device descriptor read/8, error -71 [ 1685.820193][ T5910] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1685.906777][ T5910] usb 2-1: device descriptor read/8, error -71 [ 1686.046898][ T5910] usb usb2-port1: unable to enumerate USB device [ 1686.968782][ T5952] usb 6-1: USB disconnect, device number 21 [ 1687.162140][ T29] audit: type=1400 audit(1731240248.761:2037): avc: denied { ioctl } for pid=25752 comm="syz.5.5217" path="socket:[90149]" dev="sockfs" ino=90149 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1687.186897][ C1] vkms_vblank_simulate: vblank timer overrun [ 1688.834909][T25771] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5221'. [ 1689.645597][ T29] audit: type=1326 audit(1731240251.241:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25781 comm="syz.7.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cef7e719 code=0x7ffc0000 [ 1689.676292][ T29] audit: type=1326 audit(1731240251.241:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25781 comm="syz.7.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23cef7e719 code=0x7ffc0000 [ 1689.700244][ T29] audit: type=1326 audit(1731240251.271:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25781 comm="syz.7.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23cef7d0b0 code=0x7ffc0000 [ 1689.725194][ T29] audit: type=1326 audit(1731240251.271:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25781 comm="syz.7.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23cef7e31b code=0x7ffc0000 [ 1689.749264][ T29] audit: type=1326 audit(1731240251.271:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25781 comm="syz.7.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23cef7e31b code=0x7ffc0000 [ 1689.824148][ T29] audit: type=1326 audit(1731240251.271:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25781 comm="syz.7.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23cef7e31b code=0x7ffc0000 [ 1689.859986][T20370] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1690.080215][ T29] audit: type=1326 audit(1731240251.271:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25781 comm="syz.7.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23cef7e31b code=0x7ffc0000 [ 1690.301885][T20370] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1690.399250][T20370] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1690.409319][T20370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.429353][T20370] usb 4-1: Product: syz [ 1690.447515][T20370] usb 4-1: Manufacturer: syz [ 1690.454961][T20370] usb 4-1: SerialNumber: syz [ 1691.589575][T25817] overlayfs: failed to resolve './file1': -2 [ 1693.408250][T25791] input: syz0 as /devices/virtual/input/input113 [ 1693.449849][T20370] cdc_ncm 4-1:1.0: failed to get mac address [ 1693.463448][T20370] cdc_ncm 4-1:1.0: bind() failure [ 1693.496411][T20370] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1693.533789][T17488] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1693.540204][T20370] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1693.558777][T20370] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 1693.823137][T25826] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5237'. [ 1693.832112][T25826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1693.845489][T25826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1693.853055][T25826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1693.880766][ T29] audit: type=1400 audit(1731240255.461:2045): avc: denied { read } for pid=25825 comm="syz.7.5237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1693.907134][T20370] usb 4-1: USB disconnect, device number 49 [ 1693.920062][T17488] usb 6-1: Using ep0 maxpacket: 16 [ 1693.926763][T17488] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1693.946144][T17488] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 1693.967828][T17488] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1693.990971][T17488] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1694.036768][T17488] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.066543][T17488] usb 6-1: Product: syz [ 1694.076345][T17488] usb 6-1: Manufacturer: syz [ 1694.086688][T17488] usb 6-1: SerialNumber: syz [ 1694.098569][T17488] usb 6-1: config 0 descriptor?? [ 1694.111009][T17488] appledisplay 6-1:0.0: Could not find int-in endpoint [ 1694.126853][T17488] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1694.711344][T25844] IPv6: NLM_F_CREATE should be specified when creating new route [ 1694.719181][T25844] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5239'. [ 1695.332549][ T8] usb 6-1: USB disconnect, device number 22 [ 1698.230901][T25890] futex_wake_op: syz.3.5242 tries to shift op by -1; fix this program [ 1698.324939][T25893] IPv6: NLM_F_CREATE should be specified when creating new route [ 1698.333316][T25893] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5251'. [ 1699.382513][T25898] netlink: 'syz.6.5253': attribute type 1 has an invalid length. [ 1699.390422][T25898] netlink: 'syz.6.5253': attribute type 2 has an invalid length. [ 1699.398864][T25895] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5242'. [ 1699.412495][T24326] Bluetooth: hci4: Frame reassembly failed (-84) [ 1699.538242][T25902] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5253'. [ 1699.682540][T25903] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 1699.689185][T25903] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1699.767236][T25903] vhci_hcd vhci_hcd.0: Device attached [ 1699.799830][ T29] audit: type=1400 audit(1731240261.391:2046): avc: denied { read } for pid=25897 comm="syz.6.5253" path="socket:[91339]" dev="sockfs" ino=91339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1699.949845][T20370] vhci_hcd: vhci_device speed not set [ 1700.021428][T20370] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 1700.399888][T14523] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1700.590367][T14523] usb 6-1: Using ep0 maxpacket: 8 [ 1700.601760][T14523] usb 6-1: config 0 has no interfaces? [ 1700.608984][T14523] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1700.634934][T14523] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.664153][T14523] usb 6-1: config 0 descriptor?? [ 1700.840240][T25922] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5260'. [ 1701.411385][T24705] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1701.524905][T25906] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 1701.579937][ T52] vhci_hcd: stop threads [ 1701.584232][ T52] vhci_hcd: release socket [ 1701.629847][ T52] vhci_hcd: disconnect device [ 1701.644431][T25930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1701.688867][ T5952] usb 6-1: USB disconnect, device number 23 [ 1702.031034][T25938] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5264'. [ 1702.048610][ T8] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1702.606261][ T8] usb 2-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 1702.720245][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.750133][ T8] usb 2-1: Product: syz [ 1702.763195][ T8] usb 2-1: Manufacturer: syz [ 1702.777805][ T8] usb 2-1: SerialNumber: syz [ 1702.803278][ T8] usb 2-1: config 0 descriptor?? [ 1702.811043][ T8] gspca_main: kinect-2.14.0 probing 045e:02bf [ 1703.055451][ T8] usb 2-1: USB disconnect, device number 34 [ 1703.225967][T25952] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5270'. [ 1704.800167][T25973] 9pnet_fd: Insufficient options for proto=fd [ 1705.368634][T14523] libceph: connect (1)[c::]:6789 error -101 [ 1705.375603][T14523] libceph: mon0 (1)[c::]:6789 connect error [ 1705.580330][T20370] vhci_hcd: vhci_device speed not set [ 1705.640286][ T5952] libceph: connect (1)[c::]:6789 error -101 [ 1705.646361][ T5952] libceph: mon0 (1)[c::]:6789 connect error [ 1705.897053][T25973] ceph: No mds server is up or the cluster is laggy [ 1706.329965][T17488] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1706.512387][T17488] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1706.529004][T17488] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1706.569634][T17488] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1706.589087][T17488] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.605844][T17488] usb 4-1: config 0 descriptor?? [ 1706.744299][T26002] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5281'. [ 1707.310970][T26009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1707.338724][T26009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1707.644036][ T29] audit: type=1400 audit(1731240268.941:2047): avc: denied { read } for pid=26000 comm="syz.6.5281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1707.806282][T17488] hid (null): report_id 64478 is invalid [ 1707.812603][T17488] hid (null): global environment stack underflow [ 1707.831802][T17488] redragon 0003:0C45:760B.003F: report_id 64478 is invalid [ 1707.840389][T17488] redragon 0003:0C45:760B.003F: item 0 2 1 8 parsing failed [ 1707.850821][T17488] redragon 0003:0C45:760B.003F: probe with driver redragon failed with error -22 [ 1708.373098][T26020] batadv0: entered promiscuous mode [ 1708.560993][T26020] batadv_slave_0: entered promiscuous mode [ 1708.637107][T26020] batadv_slave_0: left promiscuous mode [ 1708.697218][T26020] batadv0: left promiscuous mode [ 1709.377471][ T8] usb 4-1: USB disconnect, device number 50 [ 1709.651309][T17488] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1710.132419][T17488] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1710.150626][T17488] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.166936][T17488] usb 6-1: Product: syz [ 1710.172000][T17488] usb 6-1: Manufacturer: syz [ 1710.176979][T17488] usb 6-1: SerialNumber: syz [ 1710.185178][T17488] usb 6-1: config 0 descriptor?? [ 1710.220956][T17488] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1710.370601][T12515] Bluetooth: hci1: command 0x0406 tx timeout [ 1711.322182][T26057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5294'. [ 1711.324075][T26028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1711.331286][T26057] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1711.360338][T26028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1712.018400][T26067] futex_wake_op: syz.7.5298 tries to shift op by 36; fix this program [ 1712.309898][T17488] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1712.771357][T17488] usb 2-1: Using ep0 maxpacket: 32 [ 1712.783234][T17488] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1712.795439][T17488] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1712.808793][T17488] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1712.820400][T17488] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.830258][T17488] usb 2-1: Product: syz [ 1712.834592][T17488] usb 2-1: Manufacturer: syz [ 1713.201640][ T8] usb 6-1: USB disconnect, device number 24 [ 1713.255002][T17488] usb 2-1: SerialNumber: syz [ 1713.526333][T17488] cdc_ncm 2-1:1.0: bind() failure [ 1713.615831][T17488] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1713.638315][T17488] cdc_ncm 2-1:1.1: bind() failure [ 1713.647126][T17488] usb 2-1: USB disconnect, device number 35 [ 1713.713115][T26091] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5306'. [ 1713.723383][T26091] openvswitch: netlink: EtherType 0 is less than min 600 [ 1714.594692][T12515] Bluetooth: hci4: sending frame failed (-49) [ 1714.603378][T24705] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 1714.609930][T17488] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 1714.644356][T24321] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1715.053409][T17488] usb 2-1: device descriptor read/64, error -71 [ 1715.179939][T12946] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 1715.319899][T17488] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 1715.364728][T12946] usb 4-1: string descriptor 0 read error: -22 [ 1715.374132][T12946] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1715.387120][T12946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.404195][T12946] usb 4-1: config 0 descriptor?? [ 1715.422869][T12946] usbtest 4-1:0.0: FX2 device [ 1715.427586][T12946] usbtest 4-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 1715.477163][T26116] veth0_macvtap: left promiscuous mode [ 1715.498767][T17488] usb 2-1: device descriptor read/64, error -71 [ 1715.523598][T26116] macvtap0: entered allmulticast mode [ 1715.614709][T17488] usb usb2-port1: attempt power cycle [ 1716.469236][T17488] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 1716.491153][T17488] usb 2-1: device descriptor read/8, error -71 [ 1716.740994][T17488] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1717.068682][T12946] usb 4-1: USB disconnect, device number 51 [ 1717.110218][T17488] usb 2-1: device descriptor read/8, error -71 [ 1717.220193][T17488] usb usb2-port1: unable to enumerate USB device [ 1717.947100][T26148] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5324'. [ 1719.435680][T26164] netlink: 1 bytes leftover after parsing attributes in process `syz.7.5328'. [ 1719.498526][T26166] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5329'. [ 1719.507787][T26166] netlink: 'syz.3.5329': attribute type 1 has an invalid length. [ 1720.739031][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 1720.748893][ T11] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1721.102698][T26184] overlay: Unknown parameter '/' [ 1721.108194][T20370] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1721.679837][T20370] usb 4-1: device descriptor read/64, error -71 [ 1721.789844][ T5952] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1722.761130][T20370] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1722.769973][T24705] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1722.785003][ T5952] usb 2-1: New USB device found, idVendor=0458, idProduct=7029, bcdDevice=8b.92 [ 1722.807965][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.818690][ T5952] usb 2-1: Product: syz [ 1722.933688][ T5952] usb 2-1: Manufacturer: syz [ 1722.938799][ T5952] usb 2-1: SerialNumber: syz [ 1722.965222][ T5952] usb 2-1: config 0 descriptor?? [ 1722.977455][ T5952] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:7029 [ 1723.037223][T20370] usb 4-1: device descriptor read/64, error -71 [ 1723.460158][T20370] usb usb4-port1: attempt power cycle [ 1723.578945][ T5952] gspca_sn9c20x: Write register 1001 failed -71 [ 1723.585866][ T5952] gspca_sn9c20x: Device initialization failed [ 1723.592589][ T5952] gspca_sn9c20x 2-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 1723.626611][ T5952] usb 2-1: USB disconnect, device number 40 [ 1726.044800][T20370] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1726.894504][T20370] usb 6-1: too many configurations: 235, using maximum allowed: 8 [ 1726.908345][T20370] usb 6-1: config index 0 descriptor too short (expected 65327, got 72) [ 1726.925052][T20370] usb 6-1: config index 1 descriptor too short (expected 65327, got 72) [ 1726.947334][T20370] usb 6-1: config index 2 descriptor too short (expected 65327, got 72) [ 1726.977261][T20370] usb 6-1: config index 3 descriptor too short (expected 65327, got 72) [ 1726.995265][T20370] usb 6-1: config index 4 descriptor too short (expected 65327, got 72) [ 1727.023072][T20370] usb 6-1: config index 5 descriptor too short (expected 65327, got 72) [ 1727.043683][T20370] usb 6-1: config index 6 descriptor too short (expected 65327, got 72) [ 1727.078261][T20370] usb 6-1: config index 7 descriptor too short (expected 65327, got 72) [ 1727.104179][T20370] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1727.131460][T20370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.149023][T20370] usb 6-1: Product: syz [ 1727.153933][T20370] usb 6-1: Manufacturer: syz [ 1727.165076][T20370] usb 6-1: SerialNumber: syz [ 1727.304104][T20370] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1727.650861][ T5937] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1728.144808][T17488] usb 6-1: USB disconnect, device number 25 [ 1728.689788][ T5937] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1728.972056][ T5937] ath9k_htc: Failed to initialize the device [ 1728.989356][T17488] usb 6-1: ath9k_htc: USB layer deinitialized [ 1730.306360][ T3639] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1730.373526][ T3936] Bluetooth: hci4: Frame reassembly failed (-84) [ 1732.389849][T12515] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1732.489791][T26307] futex_wake_op: syz.7.5366 tries to shift op by 36; fix this program [ 1732.581229][T26315] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5368'. [ 1734.359845][T12946] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1734.452083][ T29] audit: type=1400 audit(1731240296.051:2048): avc: denied { lock } for pid=26329 comm="syz.5.5373" path="socket:[92744]" dev="sockfs" ino=92744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1734.475379][ C1] vkms_vblank_simulate: vblank timer overrun [ 1734.509857][T12946] usb 4-1: device descriptor read/64, error -71 [ 1734.549650][T26330] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1734.641308][T26339] CUSE: unknown device info "€" [ 1734.646325][T26339] CUSE: zero length info key specified [ 1734.930804][T12946] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 1735.021900][T26330] kvm: pic: level sensitive irq not supported [ 1735.022280][T26330] kvm: pic: non byte read [ 1735.040316][T26330] kvm: pic: level sensitive irq not supported [ 1735.040374][T26330] kvm: pic: non byte read [ 1735.053381][T26330] kvm: pic: level sensitive irq not supported [ 1735.053423][T26330] kvm: pic: non byte read [ 1735.140980][T12946] usb 4-1: device descriptor read/64, error -71 [ 1735.156601][T26343] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5376'. [ 1735.193538][T26330] kvm: pic: level sensitive irq not supported [ 1735.198907][T26330] kvm: pic: non byte read [ 1736.679888][ T29] audit: type=1400 audit(1731240297.521:2049): avc: denied { mount } for pid=26345 comm="syz.1.5377" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1736.748824][T12946] usb usb4-port1: attempt power cycle [ 1738.863926][T26369] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1739.008491][T26373] 9pnet_fd: Insufficient options for proto=fd [ 1739.113758][T26377] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1739.120998][T26377] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1739.302760][T26380] vivid-003: disconnect [ 1739.307977][T26380] vivid-003: reconnect [ 1739.369868][T12946] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1739.531723][T12946] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1739.552499][T12946] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1739.569098][T12946] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1739.586225][T12946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.597475][T26374] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1739.608996][T12946] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1739.835895][T26374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1739.844820][T26374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1739.856469][T26374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1739.871042][T26374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1739.992827][ T29] audit: type=1400 audit(1731240301.591:2050): avc: denied { getopt } for pid=26371 comm="syz.3.5387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1742.282163][T20370] usb 4-1: USB disconnect, device number 58 [ 1742.555667][ T29] audit: type=1400 audit(1731240304.101:2051): avc: denied { read append } for pid=26442 comm="syz.3.5405" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1742.600919][ T29] audit: type=1400 audit(1731240304.101:2052): avc: denied { open } for pid=26442 comm="syz.3.5405" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1742.683940][T26446] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1742.693061][T26446] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1742.760966][T26446] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1742.769492][T26446] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1742.815396][T26446] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1742.888361][T26446] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1743.949413][T26479] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5414'. [ 1743.966793][ T29] audit: type=1400 audit(1731240305.561:2053): avc: denied { map } for pid=26478 comm="syz.7.5414" path="socket:[93125]" dev="sockfs" ino=93125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1743.997039][ T29] audit: type=1400 audit(1731240305.561:2054): avc: denied { read accept } for pid=26478 comm="syz.7.5414" path="socket:[93125]" dev="sockfs" ino=93125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1744.129846][ T29] audit: type=1400 audit(1731240305.721:2055): avc: denied { read } for pid=26482 comm="syz.1.5415" name="file0" dev="tmpfs" ino=2666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1744.459963][T20370] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1744.609839][T20370] usb 2-1: Using ep0 maxpacket: 32 [ 1744.618564][T20370] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=a4.31 [ 1744.630092][T20370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.639270][T20370] usb 2-1: config 0 descriptor?? [ 1744.650975][T20370] usb 2-1: selecting invalid altsetting 3 [ 1744.656782][T20370] comedi comedi0: could not set alternate setting 3 in high speed [ 1744.664643][T20370] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1744.674781][T20370] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22 [ 1744.689822][T12515] Bluetooth: hci7: command 0x0406 tx timeout [ 1744.769830][T12515] Bluetooth: hci2: command 0x0406 tx timeout [ 1744.849825][T12515] Bluetooth: hci1: command 0x0406 tx timeout [ 1744.857944][T24705] Bluetooth: hci1: Opcode 0x206c failed: -110 [ 1745.027440][T26494] input: syz0 as /devices/virtual/input/input114 [ 1745.071084][T26493] input: syz0 as /devices/virtual/input/input115 [ 1745.843410][T26500] FAULT_INJECTION: forcing a failure. [ 1745.843410][T26500] name failslab, interval 1, probability 0, space 0, times 0 [ 1745.857803][T26500] CPU: 0 UID: 0 PID: 26500 Comm: syz.6.5420 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 1745.868588][T26500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1745.878649][T26500] Call Trace: [ 1745.881932][T26500] [ 1745.884866][T26500] dump_stack_lvl+0x16c/0x1f0 [ 1745.889554][T26500] should_fail_ex+0x497/0x5b0 [ 1745.894243][T26500] ? fs_reclaim_acquire+0xae/0x150 [ 1745.899369][T26500] should_failslab+0xc2/0x120 [ 1745.904063][T26500] __kmalloc_cache_noprof+0x6b/0x300 [ 1745.909367][T26500] ? alloc_super+0x52/0xbd0 [ 1745.913893][T26500] ? __pfx_super_s_dev_test+0x10/0x10 [ 1745.919283][T26500] alloc_super+0x52/0xbd0 [ 1745.923630][T26500] ? lock_acquire+0x2f/0xb0 [ 1745.928141][T26500] ? sget_fc+0xaf/0xc20 [ 1745.932314][T26500] ? __pfx_super_s_dev_test+0x10/0x10 [ 1745.937706][T26500] sget_fc+0x116/0xc20 [ 1745.941790][T26500] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1745.948042][T26500] ? __pfx_super_s_dev_set+0x10/0x10 [ 1745.953353][T26500] get_tree_bdev_flags+0x1bc/0x620 [ 1745.958478][T26500] ? __pfx_vxfs_fill_super+0x10/0x10 [ 1745.963778][T26500] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1745.969411][T26500] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 1745.975039][T26500] ? __raw_spin_lock_init+0x3a/0x110 [ 1745.980318][T26500] ? cap_capable+0x1cf/0x240 [ 1745.984902][T26500] ? bpf_lsm_capable+0x9/0x10 [ 1745.989574][T26500] vfs_get_tree+0x8f/0x380 [ 1745.993987][T26500] path_mount+0x14e6/0x1f20 [ 1745.998477][T26500] ? kmem_cache_free+0x152/0x4b0 [ 1746.003406][T26500] ? __pfx_path_mount+0x10/0x10 [ 1746.008249][T26500] ? putname+0x12e/0x170 [ 1746.012488][T26500] __x64_sys_mount+0x294/0x320 [ 1746.017244][T26500] ? __pfx___x64_sys_mount+0x10/0x10 [ 1746.022524][T26500] do_syscall_64+0xcd/0x250 [ 1746.027020][T26500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1746.032913][T26500] RIP: 0033:0x7fac3237e719 [ 1746.037326][T26500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1746.056923][T26500] RSP: 002b:00007fac307f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1746.065333][T26500] RAX: ffffffffffffffda RBX: 00007fac32535f80 RCX: 00007fac3237e719 [ 1746.073301][T26500] RDX: 0000000020000080 RSI: 0000000020000340 RDI: 0000000020000000 [ 1746.081266][T26500] RBP: 00007fac307f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1746.089226][T26500] R10: 0000000000018642 R11: 0000000000000246 R12: 0000000000000002 [ 1746.097184][T26500] R13: 0000000000000000 R14: 00007fac32535f80 R15: 00007fff33a3ab78 [ 1746.105155][T26500] [ 1746.108325][ C0] vkms_vblank_simulate: vblank timer overrun [ 1746.179894][T20370] usb 2-1: USB disconnect, device number 41 [ 1746.789835][T12515] Bluetooth: hci7: command 0x0406 tx timeout [ 1746.850299][T12515] Bluetooth: hci2: command 0x0406 tx timeout [ 1746.931513][T12515] Bluetooth: hci1: command 0x0406 tx timeout [ 1746.937774][T24705] Bluetooth: hci1: Opcode 0x2046 failed: -110 [ 1747.809896][T20370] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1748.460589][T20370] usb 2-1: device descriptor read/64, error -71 [ 1748.943222][T20370] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1749.028811][T24705] Bluetooth: hci1: command 0x0406 tx timeout [ 1749.720881][T20370] usb 2-1: device descriptor read/64, error -71 [ 1749.991720][T20370] usb usb2-port1: attempt power cycle [ 1750.420424][T20370] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1750.802225][T20370] usb 2-1: device descriptor read/8, error -71 [ 1751.090192][T24705] Bluetooth: hci1: command 0x0406 tx timeout [ 1751.590374][T26563] random: crng reseeded on system resumption [ 1752.164247][T26570] ceph: No mds server is up or the cluster is laggy [ 1752.182847][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 1752.189996][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 1753.219868][ T5952] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1753.429826][ T5952] usb 4-1: Using ep0 maxpacket: 8 [ 1753.443226][ T5952] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54 [ 1753.452627][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.473826][ T5952] usb 4-1: Product: syz [ 1753.483184][ T5952] usb 4-1: Manufacturer: syz [ 1753.487814][ T5952] usb 4-1: SerialNumber: syz [ 1753.593612][ T5952] usb 4-1: config 0 descriptor?? [ 1753.609307][T26597] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5443'. [ 1754.170762][ T5952] usb 4-1: invalid MIDI EP [ 1754.177373][ T5952] usb 4-1: snd-bcd2000: error during probing [ 1754.185707][ T5952] snd-bcd2000 4-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 1754.204842][T26601] FAULT_INJECTION: forcing a failure. [ 1754.204842][T26601] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.230146][T26601] CPU: 0 UID: 60929 PID: 26601 Comm: syz.6.5445 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 1754.241321][T26601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1754.251404][T26601] Call Trace: [ 1754.254695][T26601] [ 1754.257641][T26601] dump_stack_lvl+0x16c/0x1f0 [ 1754.262342][T26601] should_fail_ex+0x497/0x5b0 [ 1754.267039][T26601] ? fs_reclaim_acquire+0xae/0x150 [ 1754.272176][T26601] should_failslab+0xc2/0x120 [ 1754.276877][T26601] __kmalloc_noprof+0xcb/0x400 [ 1754.281656][T26601] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1754.287317][T26601] tomoyo_realpath_from_path+0xb9/0x720 [ 1754.292888][T26601] ? tomoyo_path_number_perm+0x232/0x590 [ 1754.298535][T26601] tomoyo_path_number_perm+0x245/0x590 [ 1754.303989][T26601] ? tomoyo_path_number_perm+0x232/0x590 [ 1754.309613][T26601] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1754.315602][T26601] ? trace_lock_acquire+0x14a/0x1d0 [ 1754.320799][T26601] ? lock_acquire+0x2f/0xb0 [ 1754.325288][T26601] ? __fget_files+0x40/0x3f0 [ 1754.329910][T26601] ? __fget_files+0x244/0x3f0 [ 1754.334588][T26601] security_file_ioctl+0x9b/0x240 [ 1754.341481][T26601] __x64_sys_ioctl+0xbb/0x220 [ 1754.346163][T26601] do_syscall_64+0xcd/0x250 [ 1754.350660][T26601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1754.356549][T26601] RIP: 0033:0x7fac3237e719 [ 1754.360952][T26601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1754.380549][T26601] RSP: 002b:00007fac307f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1754.389125][T26601] RAX: ffffffffffffffda RBX: 00007fac32535f80 RCX: 00007fac3237e719 [ 1754.397085][T26601] RDX: 00000000200003c0 RSI: 0000000000003b87 RDI: 0000000000000003 [ 1754.405044][T26601] RBP: 00007fac307f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1754.413013][T26601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1754.420972][T26601] R13: 0000000000000000 R14: 00007fac32535f80 R15: 00007fff33a3ab78 [ 1754.428952][T26601] [ 1754.444687][T26601] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1755.095394][T26612] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5446'. [ 1755.487114][ T5952] usb 4-1: USB disconnect, device number 59 [ 1756.140813][T26624] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5452'. [ 1756.156178][T26623] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5451'. [ 1756.414340][T26617] FAULT_INJECTION: forcing a failure. [ 1756.414340][T26617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1756.442474][T26617] CPU: 0 UID: 0 PID: 26617 Comm: syz.5.5449 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 1756.453289][T26617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1756.463364][T26617] Call Trace: [ 1756.466655][T26617] [ 1756.469598][T26617] dump_stack_lvl+0x16c/0x1f0 [ 1756.474292][T26617] should_fail_ex+0x497/0x5b0 [ 1756.478992][T26617] _copy_from_user+0x2e/0xd0 [ 1756.483604][T26617] bpf_ctx_init+0x151/0x1d0 [ 1756.488147][T26617] bpf_prog_test_run_sk_lookup+0x2a1/0xd00 [ 1756.493980][T26617] ? __fget_files+0x23a/0x3f0 [ 1756.498682][T26617] ? __pfx_lock_release+0x10/0x10 [ 1756.503721][T26617] ? trace_lock_acquire+0x14a/0x1d0 [ 1756.508934][T26617] ? find_held_lock+0x2d/0x110 [ 1756.513698][T26617] ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10 [ 1756.520020][T26617] ? lock_acquire+0x2f/0xb0 [ 1756.524526][T26617] ? __fget_files+0x40/0x3f0 [ 1756.529139][T26617] ? __fget_files+0x244/0x3f0 [ 1756.533822][T26617] ? fput+0x30/0x390 [ 1756.537716][T26617] ? __bpf_prog_get+0xa0/0x290 [ 1756.542483][T26617] ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10 [ 1756.548815][T26617] __sys_bpf+0xfc6/0x49a0 [ 1756.553139][T26617] ? ksys_write+0x21e/0x260 [ 1756.557641][T26617] ? reacquire_held_locks+0x480/0x4c0 [ 1756.563007][T26617] ? __pfx___sys_bpf+0x10/0x10 [ 1756.567764][T26617] ? vfs_write+0x306/0x1150 [ 1756.572273][T26617] ? __mutex_unlock_slowpath+0x164/0x650 [ 1756.577909][T26617] ? fput+0x30/0x390 [ 1756.581802][T26617] ? ksys_write+0x1ad/0x260 [ 1756.586303][T26617] ? __pfx_ksys_write+0x10/0x10 [ 1756.591151][T26617] __x64_sys_bpf+0x78/0xc0 [ 1756.595559][T26617] ? lockdep_hardirqs_on+0x7c/0x110 [ 1756.600754][T26617] do_syscall_64+0xcd/0x250 [ 1756.605249][T26617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1756.611137][T26617] RIP: 0033:0x7fd416f7e719 [ 1756.615548][T26617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1756.635145][T26617] RSP: 002b:00007fd4153f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1756.643549][T26617] RAX: ffffffffffffffda RBX: 00007fd417135f80 RCX: 00007fd416f7e719 [ 1756.651512][T26617] RDX: 0000000000000048 RSI: 0000000020000440 RDI: 000000000000000a [ 1756.659476][T26617] RBP: 00007fd4153f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1756.667436][T26617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1756.675395][T26617] R13: 0000000000000000 R14: 00007fd417135f80 R15: 00007ffd4df99988 [ 1756.683374][T26617] [ 1760.296492][T26687] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5469'. [ 1761.361215][T26698] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5471'. [ 1762.339773][T26710] xt_time: unknown flags 0x4 [ 1762.931521][T26721] netlink: 'syz.1.5478': attribute type 1 has an invalid length. [ 1762.939445][T26721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5478'. [ 1763.454353][T26741] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5482'. [ 1766.290244][ T5937] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1766.647640][T26783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1766.673258][T26783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1766.693682][T26783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1766.699170][ T5937] usb 6-1: Using ep0 maxpacket: 16 [ 1766.787769][ T5937] usb 6-1: config 0 has no interfaces? [ 1766.856392][ T5937] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1766.930299][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.049580][ T5937] usb 6-1: config 0 descriptor?? [ 1767.222280][T26796] futex_wake_op: syz.3.5501 tries to shift op by 36; fix this program [ 1768.128694][T26812] 9pnet: p9_errstr2errno: server reported unknown error Ý@íÎhQI¸¥ŠteœkKzEËxÐBAšÁ [ 1768.876020][ T5937] usb 6-1: string descriptor 0 read error: -71 [ 1768.883885][ T5937] usb 6-1: USB disconnect, device number 26 [ 1768.923751][T26821] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5509'. [ 1768.933974][T26821] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5509'. [ 1769.564600][ T29] audit: type=1400 audit(1731240331.081:2056): avc: denied { getopt } for pid=26831 comm="syz.5.5515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1769.566042][T26835] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5515'. [ 1770.589825][ T29] audit: type=1400 audit(1731240332.181:2057): avc: denied { map } for pid=26848 comm="syz.5.5518" path="socket:[95439]" dev="sockfs" ino=95439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1771.381993][T26871] veth0_vlan: entered allmulticast mode [ 1772.245404][T26885] binder: 26883:26885 ioctl c0046209 9999999999999999 returned -22 [ 1772.433401][T26890] futex_wake_op: syz.3.5531 tries to shift op by 36; fix this program [ 1772.911961][T12515] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1772.918927][T24326] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.942077][T24326] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1772.944316][T12515] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1773.012312][T12515] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1773.310015][T12515] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1773.317927][T12515] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1773.327955][T12515] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1773.410750][T26906] random: crng reseeded on system resumption [ 1773.414910][ T29] audit: type=1400 audit(1731240335.011:2058): avc: denied { write } for pid=26905 comm="syz.3.5537" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1773.646416][T24326] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.658502][T24326] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1773.762646][T24326] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.815790][T24326] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1774.111429][T24326] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1774.128388][T24326] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 1774.210063][T12946] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1774.348276][T26895] chnl_net:caif_netlink_parms(): no params data found [ 1774.355398][T12946] usb 2-1: device descriptor read/64, error -71 [ 1774.419576][T24326] bridge_slave_1: left allmulticast mode [ 1774.425573][T24326] bridge_slave_1: left promiscuous mode [ 1774.431719][T24326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.443925][T24326] bridge_slave_0: left allmulticast mode [ 1774.460121][T24326] bridge_slave_0: left promiscuous mode [ 1774.466058][T24326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.620363][T12946] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1774.822320][T12946] usb 2-1: device descriptor read/64, error -71 [ 1775.179952][T12946] usb usb2-port1: attempt power cycle [ 1775.410159][T24705] Bluetooth: hci4: command tx timeout [ 1775.541123][T12946] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1775.559106][T24326] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1775.579847][T12946] usb 2-1: device descriptor read/8, error -71 [ 1775.599982][ T5879] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 1775.752773][ T5879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1775.765796][ T5879] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1775.808431][ T5879] usb 4-1: New USB device found, idVendor=0bda, idProduct=0139, bcdDevice=b4.99 [ 1775.818051][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.826377][T12946] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1775.839614][ T5879] usb 4-1: Product: syz [ 1775.844161][ T5879] usb 4-1: Manufacturer: syz [ 1775.848805][ T5879] usb 4-1: SerialNumber: syz [ 1775.860444][T12946] usb 2-1: device descriptor read/8, error -71 [ 1775.870849][ T5879] usb 4-1: config 0 descriptor?? [ 1775.877844][T24326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1775.888570][T24326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1775.901036][T24326] bond0 (unregistering): Released all slaves [ 1775.970602][T12946] usb usb2-port1: unable to enumerate USB device [ 1776.090226][T24326] bond1 (unregistering): Released all slaves [ 1776.100274][T24326] bond2 (unregistering): Released all slaves [ 1776.115340][T26935] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5544'. [ 1776.223374][T24326] tipc: Disabling bearer [ 1776.336274][T24326] tipc: Disabling bearer [ 1776.381738][T24326] tipc: Left network mode [ 1776.403697][T24326] ------------[ cut here ]------------ [ 1776.409220][T24326] WARNING: CPU: 1 PID: 24326 at net/l2tp/l2tp_core.c:1881 l2tp_exit_net+0xf1/0x1a0 [ 1776.419073][T24326] Modules linked in: [ 1776.423161][T24326] CPU: 1 UID: 0 PID: 24326 Comm: kworker/u8:17 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 1776.434512][T24326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1776.445199][T24326] Workqueue: netns cleanup_net [ 1776.450547][T24326] RIP: 0010:l2tp_exit_net+0xf1/0x1a0 [ 1776.455859][T24326] Code: 00 00 fc ff df 48 8d 6b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 9d 00 00 00 48 83 bb 88 00 00 00 00 74 6c e8 20 ac 41 f7 90 <0f> 0b 90 e8 17 ac 41 f7 48 89 ef 5b 5d 41 5c e9 7b a0 c7 00 e8 06 [ 1776.475555][T24326] RSP: 0018:ffffc9000c837b98 EFLAGS: 00010293 [ 1776.481684][T24326] RAX: 0000000000000000 RBX: ffff888034e39800 RCX: ffffffff8b137015 [ 1776.489713][T24326] RDX: ffff88805db28000 RSI: ffffffff8a4bcf30 RDI: ffff888034e39888 [ 1776.497702][T24326] RBP: ffff888034e39840 R08: 0000000000000007 R09: 0000000000000002 [ 1776.505715][T24326] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000004000000 [ 1776.513739][T24326] R13: ffffc9000c837c30 R14: dffffc0000000000 R15: fffffbfff20417f8 [ 1776.521881][T24326] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1776.531067][T24326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1776.537666][T24326] CR2: 00007fd417c82000 CR3: 000000004d6ea000 CR4: 00000000003526f0 [ 1776.546094][T24326] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 1776.554654][T24326] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1776.562719][T24326] Call Trace: [ 1776.566009][T24326] [ 1776.568954][T24326] ? __warn+0xea/0x3d0 [ 1776.573116][T24326] ? l2tp_exit_net+0xf1/0x1a0 [ 1776.577831][T24326] ? report_bug+0x3c0/0x580 [ 1776.582411][T24326] ? handle_bug+0x54/0xa0 [ 1776.586796][T24326] ? exc_invalid_op+0x17/0x50 [ 1776.591560][T24326] ? asm_exc_invalid_op+0x1a/0x20 [ 1776.596624][T24326] ? idr_destroy+0x55/0x2e0 [ 1776.601192][T24326] ? l2tp_exit_net+0xf0/0x1a0 [ 1776.605890][T24326] ? l2tp_exit_net+0xf1/0x1a0 [ 1776.610620][T24326] ? l2tp_exit_net+0xf0/0x1a0 [ 1776.615316][T24326] ? __pfx_l2tp_exit_net+0x10/0x10 [ 1776.620560][T24326] ops_exit_list+0xb0/0x180 [ 1776.625243][T24326] cleanup_net+0x5b7/0xb40 [ 1776.629844][T24326] ? __pfx_cleanup_net+0x10/0x10 [ 1776.634835][T24326] ? trace_lock_acquire+0x14a/0x1d0 [ 1776.640105][T24326] ? process_one_work+0x921/0x1ba0 [ 1776.645237][T24326] ? lock_acquire+0x2f/0xb0 [ 1776.650323][T24326] ? process_one_work+0x921/0x1ba0 [ 1776.655878][T24326] process_one_work+0x9c5/0x1ba0 [ 1776.660915][T24326] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1776.667090][T24326] ? __pfx_process_one_work+0x10/0x10 [ 1776.672520][T24326] ? assign_work+0x1a0/0x250 [ 1776.677140][T24326] worker_thread+0x6c8/0xf00 [ 1776.681824][T24326] ? __kthread_parkme+0x148/0x220 [ 1776.686881][T24326] ? __pfx_worker_thread+0x10/0x10 [ 1776.692049][T24326] kthread+0x2c1/0x3a0 [ 1776.696143][T24326] ? _raw_spin_unlock_irq+0x23/0x50 [ 1776.701423][T24326] ? __pfx_kthread+0x10/0x10 [ 1776.706043][T24326] ret_from_fork+0x45/0x80 [ 1776.710566][T24326] ? __pfx_kthread+0x10/0x10 [ 1776.715176][T24326] ret_from_fork_asm+0x1a/0x30 [ 1776.720022][T24326] [ 1776.723054][T24326] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1776.730328][T24326] CPU: 1 UID: 0 PID: 24326 Comm: kworker/u8:17 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 1776.741339][T24326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1776.751406][T24326] Workqueue: netns cleanup_net [ 1776.756176][T24326] Call Trace: [ 1776.759445][T24326] [ 1776.762370][T24326] dump_stack_lvl+0x3d/0x1f0 [ 1776.766954][T24326] panic+0x71d/0x800 [ 1776.770846][T24326] ? __pfx_panic+0x10/0x10 [ 1776.775261][T24326] ? show_trace_log_lvl+0x29d/0x3d0 [ 1776.780458][T24326] ? check_panic_on_warn+0x1f/0xb0 [ 1776.785567][T24326] ? l2tp_exit_net+0xf1/0x1a0 [ 1776.790237][T24326] check_panic_on_warn+0xab/0xb0 [ 1776.795169][T24326] __warn+0xf6/0x3d0 [ 1776.799057][T24326] ? l2tp_exit_net+0xf1/0x1a0 [ 1776.803728][T24326] report_bug+0x3c0/0x580 [ 1776.808056][T24326] handle_bug+0x54/0xa0 [ 1776.812222][T24326] exc_invalid_op+0x17/0x50 [ 1776.816754][T24326] asm_exc_invalid_op+0x1a/0x20 [ 1776.821607][T24326] RIP: 0010:l2tp_exit_net+0xf1/0x1a0 [ 1776.826890][T24326] Code: 00 00 fc ff df 48 8d 6b 40 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 9d 00 00 00 48 83 bb 88 00 00 00 00 74 6c e8 20 ac 41 f7 90 <0f> 0b 90 e8 17 ac 41 f7 48 89 ef 5b 5d 41 5c e9 7b a0 c7 00 e8 06 [ 1776.846515][T24326] RSP: 0018:ffffc9000c837b98 EFLAGS: 00010293 [ 1776.852678][T24326] RAX: 0000000000000000 RBX: ffff888034e39800 RCX: ffffffff8b137015 [ 1776.860651][T24326] RDX: ffff88805db28000 RSI: ffffffff8a4bcf30 RDI: ffff888034e39888 [ 1776.868615][T24326] RBP: ffff888034e39840 R08: 0000000000000007 R09: 0000000000000002 [ 1776.876575][T24326] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000004000000 [ 1776.884537][T24326] R13: ffffc9000c837c30 R14: dffffc0000000000 R15: fffffbfff20417f8 [ 1776.892511][T24326] ? idr_destroy+0x55/0x2e0 [ 1776.897012][T24326] ? l2tp_exit_net+0xf0/0x1a0 [ 1776.901682][T24326] ? l2tp_exit_net+0xf0/0x1a0 [ 1776.906350][T24326] ? __pfx_l2tp_exit_net+0x10/0x10 [ 1776.911451][T24326] ops_exit_list+0xb0/0x180 [ 1776.915949][T24326] cleanup_net+0x5b7/0xb40 [ 1776.920358][T24326] ? __pfx_cleanup_net+0x10/0x10 [ 1776.925285][T24326] ? trace_lock_acquire+0x14a/0x1d0 [ 1776.930486][T24326] ? process_one_work+0x921/0x1ba0 [ 1776.935587][T24326] ? lock_acquire+0x2f/0xb0 [ 1776.940078][T24326] ? process_one_work+0x921/0x1ba0 [ 1776.945188][T24326] process_one_work+0x9c5/0x1ba0 [ 1776.950129][T24326] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1776.956282][T24326] ? __pfx_process_one_work+0x10/0x10 [ 1776.961654][T24326] ? assign_work+0x1a0/0x250 [ 1776.966244][T24326] worker_thread+0x6c8/0xf00 [ 1776.970831][T24326] ? __kthread_parkme+0x148/0x220 [ 1776.975850][T24326] ? __pfx_worker_thread+0x10/0x10 [ 1776.980948][T24326] kthread+0x2c1/0x3a0 [ 1776.985007][T24326] ? _raw_spin_unlock_irq+0x23/0x50 [ 1776.990204][T24326] ? __pfx_kthread+0x10/0x10 [ 1776.994784][T24326] ret_from_fork+0x45/0x80 [ 1776.999190][T24326] ? __pfx_kthread+0x10/0x10 [ 1777.003771][T24326] ret_from_fork_asm+0x1a/0x30 [ 1777.008538][T24326] [ 1777.011752][T24326] Kernel Offset: disabled [ 1777.016127][T24326] Rebooting in 86400 seconds..