last executing test programs: 16m32.264455249s ago: executing program 32 (id=690): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x113000, 0x0, 0x9}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r1, 0x47f6, 0x8dd1, 0x0, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0, 0xffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}) fcntl$setsig(r7, 0xa, 0x2c) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@upd={0xe8, 0x12, 0x1, 0x70bd26, 0x25dfdbfb, {{'drbg_pr_hmac_sha384\x00'}, '\x00', '\x00', 0x2000, 0x2000}, [{0x8, 0x1, 0x1}]}, 0xe8}, 0x1, 0x0, 0x0, 0xc385b0818445394c}, 0x8000) socket$alg(0x26, 0x5, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x1}, 0xe) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000080)={r10, 0x8, 0x4, 0x7}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8045}, 0x0) 12m24.842145002s ago: executing program 33 (id=1661): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 12m4.090388213s ago: executing program 4 (id=1793): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x4182, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x3) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r4, &(0x7f0000001480)=""/4096, 0x38) setreuid(0x0, r3) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000040)={0x3, @default, r3}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc01, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0xeefff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000200", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="0500110002"], 0x48}}, 0x0) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a2401000000020102132406000006020000000000000000000000000924030000000000070924050000f8431cfd092403000303fc04000624050400fd09040100000102000009040101010102000009050109000000000807250100000000090402000001020000090402010101020000090582091000000000072501000000002df00403cf9ea812f4905e9812420f63f9c9ec430a4201c056493c366506977f7418209928ffa0f362fff7b0de30a7dc1ca7991cc2"], 0x0) 12m3.01632864s ago: executing program 4 (id=1799): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES8=0x0, @ANYRES32=r0], 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f00000000c0)="66b9a00d00000f32a9329e66b8040000000f23c80f21f866350c00a0000f23f8666a3c3e3e0f01d10f01bd0000f0294b8065360f01d1f2668098b354008fe9e802b70500", 0x44}], 0x1, 0x10, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000b00)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000840)="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", 0x14d}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44cb2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4750b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a36a8b449955e83e91b379c179017f8f4657d1b22eca6bca33036d33e1a684059c53cea91c8f637ac780ab2bcf85f774b0d4e5876fe9aee4724b7cb59731c97e70ebd706003994eb07de2f3c6a9448c3206cff6d290b433f331c2399", 0xbe}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000440)="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", 0x2f3}], 0x4}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 11m58.6497112s ago: executing program 2 (id=1818): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xfffffffffffffffe) 11m58.509366744s ago: executing program 2 (id=1821): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000795d6c08450c00616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x1000000000000160) 11m58.441383037s ago: executing program 4 (id=1823): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_USERDATA={0x5, 0x3, "91"}]}], {0x14}}, 0x44}}, 0x0) close(r0) 11m58.440724051s ago: executing program 1 (id=1824): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x70bd25, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0xfe}]}, 0x28}}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000090e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4000000) 11m58.366705826s ago: executing program 3 (id=1825): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000380)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000100)="3897b966aa836b5b210facb6ca36dfc9964b98a2305c00841ab58b0642ae3700b83f33bebe359e8a48b6ed9fc20a4316e14f56ef2b58a8a6a6740af7d8b197af7197f2553d57aba9a6b31f5575f2295a6f", 0x51}], 0x1) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x10ba40, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0700000006d8f472", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000580)="0f01c80f3235004000000f309c660f381010b960050000b800000000ba008000000f300f21ec66baf80cb8204eef84ef66bafc0ced0f47c9b8070000000f23c00f21f8b9fe0000000f32b876a600000f23c0c744240010000000c74424020d000000c7442406000000000f01142435030006000f23f826640f01cf", 0x7b}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000340)={0x81, 0x0, 0x2}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r9, 0x10, 0x70bd28, 0x3, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xa}}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x10004000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000180)={r8, @in={{0x2, 0x0, @empty}}}, 0x90) r10 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000004c0)={'bridge_slave_0\x00'}) ioctl$SG_GET_PACK_ID(r10, 0x2287, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000240)={r8, @in6={{0xa, 0x4e23, 0x2, @remote, 0x8}}, [0x2, 0xffffffffffffffff, 0x5, 0x7, 0x6, 0x9, 0x29de, 0x68b0, 0x4, 0xfffffffffffffffa, 0x9, 0x5d0, 0x2, 0x8, 0x5]}, &(0x7f0000000080)=0x100) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r11, 0x1, 0x46, &(0x7f0000000080), 0x8) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f00000003c0)=0x7, 0x4) getsockname$packet(r5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11m58.365825164s ago: executing program 4 (id=1826): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000180001000000000000000000020000000100fe020000000008000400", @ANYRES32=r4, @ANYBLOB="08000700ffffffff"], 0x2c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x356, @time, 0x1}) syz_emit_ethernet(0x76, &(0x7f0000001b40)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6002adf700403a00fe880000000000000000000000000001ff02000000000000000000000000000102009078d000000060fd90630000000000000000000000000000ffffac1414aa00000000000000000000ffffac1414aa73000000000000000700000000000000"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, 0x0, 0x20000000) 11m58.244168828s ago: executing program 4 (id=1827): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000b40), 0x40000000, 0x4400) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x0, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"}) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x3000)=nil) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000009002010014001a80100002800c00018008001d000600000008001b00000000008aaa7954d185f4e8374dcbd9b4fd136cff64c899ee9a8c5c267c67009ff9d6cf72f363b3ab4a5048827c1f06f0aaffed6f6e9b0e50ee2192bb0dde22e8ebb553ce5dff75a065e09b8e352f5e2e766b27fa4af36f"], 0x3c}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_debug_messages', 0x20a2040cbf131922, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x3}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001600)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000400030000000000000000040000004300000000010000050000000002000000010000000000000000002e00"], 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80e85411, &(0x7f00000022c0)) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) 11m58.218159376s ago: executing program 1 (id=1828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_usbip_server_init(0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b, 0x4000000000000000}, 0x0) 11m55.653659907s ago: executing program 4 (id=1829): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) write$sequencer(r1, &(0x7f0000000180)=[@l, @e], 0x10) r2 = memfd_secret(0x80000) ftruncate(r2, 0x1000000000d) socket(0x2a, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0xfffffffe, 0x1, 0xa, 0xb}, {0x5, 0x5, 0x8, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r3, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r7}, 0x0, &(0x7f00000007c0)='%pS \x00', 0x2}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x3) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 11m55.627365631s ago: executing program 1 (id=1830): bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffc6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x808, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="09cf6d88bbe4e905010027", @ANYRESOCT=r1, @ANYBLOB="04002f80"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth0_to_team\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth0_to_team\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB="80008f00ed000200aaaaaaaaaae7d6a3b0a71c0000"], 0x28}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB="80008f00ed000200aaaaaaaaaae7d6a3b0a71c0000"], 0x28}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) fchdir(0xffffffffffffffff) socket$can_raw(0x1d, 0x3, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5fd695a5) r5 = syz_open_procfs(r2, &(0x7f0000000440)='net/ip_tables_matches\x00') r6 = syz_open_dev$vim2m(&(0x7f00000006c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405668, &(0x7f0000000040)={0x0, 0x0, 0x3, "bc14e90b67000077cbe19affffffffffec00000000000000000000fe00"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000002300850000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$key(0xf, 0x3, 0x2) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="021880090200000000000000fbdbdf25"], 0x10}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000004c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000004c0)={0xc}) 11m55.544047558s ago: executing program 3 (id=1831): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x1a3c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x4}}, 0xf) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000d80)=@nat={'nat\x00', 0x62, 0x5, 0x528, 0xa8, 0x150, 0xffffffff, 0x490, 0x398, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'rose0\x00', 'virt_wifi0\x00', {}, {}, 0xf1bca4f3d3c1eb74}, 0xffffeb74, 0x70, 0xa8, 0x0, {0x22e}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @empty, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @empty, @icmp_id=0x65, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'tunl0\x00', 'ipvlan0\x00'}, 0x0, 0x210, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth0_to_batadv\x00', {0x1, 0x3, 0x46, 0x71e, 0x6f, 0xfffffffc, 0x4, 0x20, 0x8}, {0x9}}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x22}, 0xff000000, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "febc"}}, @common=@inet=@socket2={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @port=0x4e21, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f00000000c0)={0x0, &(0x7f0000000140)='{', 0x1}) 11m54.706271783s ago: executing program 2 (id=1834): r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5417, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x400400c0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="230900000000000000000100000005000700e4ffffff0800090000000600060002000000000008000a0000000000080017"], 0x3c}}, 0x0) 11m54.325820272s ago: executing program 2 (id=1836): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x428, 0x1b8, 0x300, 0x1b8, 0x0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0xf803000000000000}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@loopback, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @private2, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 11m54.213606925s ago: executing program 2 (id=1837): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c5512406c7f00", [0x6, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000100)={r0, 0x0, {0x2ae4, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x800, 0x7fffc]}}) 11m53.980339265s ago: executing program 3 (id=1838): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x321, 0x0, 0x1, 0x4, 0x0}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={r1, 0x33, "2b72b4064251444f3dd9e31eef74e20cebb276646070d5f8e1b47edcc2ebb0d08bac8300fdd0b995f7f02e3585764b6f780914"}, &(0x7f00000000c0)=0x3b) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x97}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed4, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 11m53.979927063s ago: executing program 2 (id=1839): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xe8}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 11m53.803377963s ago: executing program 1 (id=1840): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000b40), 0x40000000, 0x4400) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x0, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"}) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x3000)=nil) 11m53.757174763s ago: executing program 3 (id=1841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x78, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffa}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x21}, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x9]}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') write$khugepaged_scan(r2, &(0x7f0000000300), 0x8) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000600)='page_pool_release\x00'}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0xc, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004884}, 0x181) 11m53.516116946s ago: executing program 1 (id=1842): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000f00), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000fc0)={0x14, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @private0}, {0xa, 0x0, 0x0, @local}}}, 0x48) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000049500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) acct(&(0x7f00000001c0)='./file0\x00') ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) setfsgid(0xee00) setresgid(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r5, 0x800, 0x0, &(0x7f0000000380), 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 11m53.452134991s ago: executing program 3 (id=1843): r0 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000002ec0), 0x2, 0x0) preadv(r0, &(0x7f0000004540)=[{&(0x7f0000002f00)=""/179, 0xb3}, {0x0}], 0x2, 0xbc, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x2}, 0x61, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000100)={0x8000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x4b45, 0x3) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) 11m52.21785932s ago: executing program 3 (id=1844): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x40980, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000380)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8bc4}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[], 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001402) ioctl$TUNSETOFFLOAD(r7, 0x8004745a, 0x2000000c) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000080)={'some', 0x20, 0x2000000001, 0x20, 0x10000000fffff}, 0x2f) r10 = openat$cgroup_pressure(r8, 0x0, 0x2, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000100)=0x11) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r9, 0x0, 0x0, 0x0, 0x8, 0xf2c}) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) socketpair$unix(0x1, 0x6, 0x0, 0x0) write$cgroup_pressure(r9, &(0x7f0000000140)={'full', 0x20, 0xc4c, 0x20, 0x3}, 0x2f) ioctl$BTRFS_IOC_RESIZE(r8, 0x50009403, &(0x7f00000000c0)={{r7}, {@void, @max}}) close_range(r0, 0xffffffffffffffff, 0x0) 11m51.88836657s ago: executing program 1 (id=1845): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1391ccd1beab952f}, [@IFLA_PORT_SELF={0x4}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x7c9cd}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x40}, 0x1, 0x0, 0x200000000000000}, 0x0) 10m50.384820377s ago: executing program 34 (id=1835): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[@ANYRES32]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)={0x50, 0x8000, 0x9, {0x7, 0x2}, {0x7}, @period={0x59, 0x200, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xff}, 0x0, 0x0}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x40008, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b001200000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) mlock2(&(0x7f00000ac000/0x3000)=nil, 0x3000, 0x0) r7 = io_uring_setup(0x39da, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x8}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000008c0)=@IORING_OP_RECVMSG={0xa, 0x3, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f00000003c0)=""/119, 0x77}, {&(0x7f0000000740)=""/237, 0xed}, {&(0x7f0000004700)=""/4096, 0x1000}], 0x4}, 0x0, 0x100, 0x0, {0x2}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) 10m50.330652672s ago: executing program 35 (id=1845): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1391ccd1beab952f}, [@IFLA_PORT_SELF={0x4}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x7c9cd}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x40}, 0x1, 0x0, 0x200000000000000}, 0x0) 10m50.265541773s ago: executing program 36 (id=1839): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xe8}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) 10m50.184711255s ago: executing program 37 (id=1844): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x40980, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000380)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8bc4}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[], 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001402) ioctl$TUNSETOFFLOAD(r7, 0x8004745a, 0x2000000c) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000080)={'some', 0x20, 0x2000000001, 0x20, 0x10000000fffff}, 0x2f) r10 = openat$cgroup_pressure(r8, 0x0, 0x2, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000100)=0x11) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r9, 0x0, 0x0, 0x0, 0x8, 0xf2c}) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) socketpair$unix(0x1, 0x6, 0x0, 0x0) write$cgroup_pressure(r9, &(0x7f0000000140)={'full', 0x20, 0xc4c, 0x20, 0x3}, 0x2f) ioctl$BTRFS_IOC_RESIZE(r8, 0x50009403, &(0x7f00000000c0)={{r7}, {@void, @max}}) close_range(r0, 0xffffffffffffffff, 0x0) 10m50.045934772s ago: executing program 38 (id=1829): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) write$sequencer(r1, &(0x7f0000000180)=[@l, @e], 0x10) r2 = memfd_secret(0x80000) ftruncate(r2, 0x1000000000d) socket(0x2a, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0xfffffffe, 0x1, 0xa, 0xb}, {0x5, 0x5, 0x8, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r3, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r7}, 0x0, &(0x7f00000007c0)='%pS \x00', 0x2}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x3) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 4m1.448109905s ago: executing program 0 (id=3474): bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') shutdown(0xffffffffffffffff, 0x1) r4 = shmget$private(0x0, 0x3000, 0x386, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x140}, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (fail_nth: 2) 3m58.827728294s ago: executing program 0 (id=3478): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400192340834b00000d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000c0001000a0c10000000010000000000", 0x58}], 0x1) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x5], [0x12000], [0x7fff]], '\x00', [{}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x6}, {0x8000000, 0xfffffffe}, {}, {0x0, 0x8}], '\x00', 0x1000}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a0067412abd7000ffdbdf250a0000000000000008000a0002000000080005"], 0x28}, 0x1, 0x4c00000000000000}, 0x24000080) 3m58.665942742s ago: executing program 0 (id=3479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x7600000000000000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}]}}) 3m58.443497941s ago: executing program 0 (id=3482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1400000010000100000000000000f5ffffff000a38000000060a0b2fa6b56f0000000000020000000c00058008000140000000840900010073797a30000000000900020073797a32"], 0x60}}, 0x0) 3m58.387010782s ago: executing program 0 (id=3483): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) close(r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'geneve1\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r2, &(0x7f0000000540)="0503092c8f0b480301020d0086ddf7c25975e014b02f0800eb2b2ff0dac8897c6b118777faff30236beae6efafbb1c65f7ffff306610", 0x36, 0x800, 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r5}, './file0\x00'}) r6 = fanotify_init(0x200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000580)={'sit0\x00', r4, 0x80, 0x8000, 0x4, 0xffffffff, {{0x1a, 0x4, 0x1, 0x2, 0x68, 0x68, 0x0, 0x1, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, {[@timestamp={0x44, 0x10, 0xf2, 0x0, 0x8, [0x3, 0x0, 0x1]}, @rr={0x7, 0x7, 0xa1, [@dev={0xac, 0x14, 0x14, 0x17}]}, @noop, @timestamp_addr={0x44, 0xc, 0x44, 0x1, 0x4, [{@remote, 0xfff}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @lsrr={0x83, 0x27, 0x98, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x13}, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @end]}}}}}) bind$packet(r8, &(0x7f0000000300)={0x11, 0x18, r9, 0x1, 0xff, 0x6, @remote}, 0x14) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r6, 0x101, 0x4000086e, r10, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x100, 0x1403, 0x100, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x3, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x801) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) 3m56.88645524s ago: executing program 0 (id=3490): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_io_uring_setup(0x50ca, &(0x7f00000035c0)={0x0, 0x0, 0x10100, 0x0, 0x40000000}, &(0x7f0000000180)=0x0, &(0x7f0000003580)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000400)="1fdf", 0x2}, {0x0}], 0x2}, 0x0, 0x4}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) socket$inet6(0xa, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400080bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) write$binfmt_elf64(r7, &(0x7f0000000240)=ANY=[], 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3m41.769612198s ago: executing program 39 (id=3490): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_io_uring_setup(0x50ca, &(0x7f00000035c0)={0x0, 0x0, 0x10100, 0x0, 0x40000000}, &(0x7f0000000180)=0x0, &(0x7f0000003580)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000400)="1fdf", 0x2}, {0x0}], 0x2}, 0x0, 0x4}) io_uring_enter(r1, 0x291c, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) socket$inet6(0xa, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400080bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) write$binfmt_elf64(r7, &(0x7f0000000240)=ANY=[], 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6.104834068s ago: executing program 5 (id=4493): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 5.964350393s ago: executing program 5 (id=4495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) setgroups(0x5b, 0xffffffffffffffff) 5.090309186s ago: executing program 7 (id=4500): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0xc0082, 0x181) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) mknod(&(0x7f0000000180)='./file0\x00', 0x40, 0x105) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="38020000300009007fffffff000000000700002c040006801e0001"], 0x238}}, 0x0) r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(0xffffffffffffffff, r7, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8008700b, &(0x7f0000000300)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000400)={{0x5, 0x5}, {0x0, 0x4}, 0x3, 0x5, 0x6}) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.1044323s ago: executing program 7 (id=4504): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000800000000000000630118000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) 4.104126958s ago: executing program 5 (id=4505): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0xf0, 0x43, 0xa0, 0xf0, 0x98, 0x290, 0x178, 0x178, 0x290, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0xff, 0x0, 'veth0_to_bond\x00', 'veth1_macvtap\x00'}, 0x12a, 0xd0, 0xf0, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{}, {0x3000000}]}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@empty, [], @ipv4=@multicast1, [], @ipv6=@loopback, [], @ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x45}, 0x0, 0x3a08}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x388) 4.05914427s ago: executing program 6 (id=4507): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3.952290668s ago: executing program 6 (id=4508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000020ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b8002944291189"], 0xfdef) 3.951978535s ago: executing program 7 (id=4509): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, &(0x7f0000000140)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400230300000008000100000a000000", @ANYRES32=r2, @ANYBLOB="080008001404000014000100ff"], 0x34}}, 0x0) r3 = syz_open_procfs(0x0, 0x0) memfd_secret(0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$cgroup_int(r3, 0x0, 0x0) 3.93936811s ago: executing program 5 (id=4510): mkdir(&(0x7f0000000080)='./file2\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) rename(&(0x7f0000000080)='./file2\x00', &(0x7f0000000040)='./file2/file0/file0\x00') (async) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="38003c72ebabe29ceae9a6fa1397d42f4f2f000323441f00000000000000000024ff9041bcb2fb80030024a650d6cb49e9e62b", @ANYRES32=r1, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028004001a80"], 0x38}, 0x1, 0x2}, 0x0) 3.909290099s ago: executing program 9 (id=4511): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) flock(r0, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x4005}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/warn_count', 0x824000, 0xe2) connect$unix(r2, &(0x7f0000002340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8b}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) 3.812133952s ago: executing program 7 (id=4512): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x4c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) 3.811822583s ago: executing program 5 (id=4513): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x2000c050) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, 0x0, 0x0}, 0x20) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 3.775051484s ago: executing program 6 (id=4514): syz_open_dev$vim2m(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) timer_settime(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 3.76922641s ago: executing program 7 (id=4515): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0xf, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000002300)={0x50, 0x0, r7, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r6, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r8}, 0x10) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r9, r6, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r10, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) 2.966089614s ago: executing program 9 (id=4516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) setgroups(0x5b, 0xffffffffffffffff) 2.796306895s ago: executing program 6 (id=4517): r0 = open(0x0, 0x401, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setregid(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b040700e0ff030002004788aa96a13bb100000000004305400f", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback=r1, 0x12, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], &(0x7f0000000500), 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002900)={r6, 0xe0, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000680), &(0x7f0000000740), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000340)={0x81}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@fallback=r2, 0xffffffffffffffff, 0x1d, 0x6, 0xffffffffffffffff, @void, @value, @void, @void, r7}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'gre0\x00', &(0x7f00000006c0)={'ip_vti0\x00', 0x0, 0x20, 0x20, 0x5, 0x4, {{0x7, 0x4, 0x1, 0x5, 0x1c, 0x64, 0x5, 0xfe, 0x4, 0x0, @multicast1, @local, {[@ra={0x94, 0x4, 0x1}, @end]}}}}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r9, 0x40045569, 0x0) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r9, 0x5501) ioctl$UI_DEV_DESTROY(r9, 0x5502) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x2, 0x0}, 0x0) ioctl$KVM_NMI(r11, 0xae9a) 2.336559899s ago: executing program 8 (id=4519): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000000000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.252236969s ago: executing program 6 (id=4520): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) fanotify_init(0x1200, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80, 0x7) 2.245191365s ago: executing program 8 (id=4521): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000000)={0x8, 0x9}) keyctl$set_timeout(0xf, 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000029c0)={0x4, 0x0, 0x0, @discrete={0x7, 0xffffffa5}}) 2.174502585s ago: executing program 8 (id=4522): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="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", 0x26f}, {&(0x7f0000000580)="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", 0x212}], 0x2}, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r0, &(0x7f0000003780)=""/4096, 0x1000) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0xd000}, 0x0) 2.170556789s ago: executing program 6 (id=4523): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180040001ffffffffffff00000000ffffff"], 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/62, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000006c0)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f00000000480100100000000019002b000a0001000500000000000072080003001f00000000", 0x39}], 0x1) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './file0', [{0x20, '-'}, {0x20, '('}, {0x20, '%+/.!@$'}, {}, {0x20, '&'}, {0x20, '\x9f\x8a'}, {}, {}, {0x20, 'c@.\x8b('}, {0x20, '*${*'}], 0xa, "38cca972f8ead8748d42328fb9bf30c3170c5f1cba6e2f4855a97276c60f275f342283d4c8474e3b0eec5970ecfdaec11953a1e29d5f43baed1ba4655d401970cfd31a5672bff736042ec79e7792dd09870ed690a2d2ec690baab2a276427b1574fb3c8b8b79ed8e17a53191926aecbfcf05baf17f92f3720de5d3085ba3b8106ff784fe0b2c5bed1938728c0f82f2c3ffbabf980db6f8d0a63d733f4d4aa5344a5dc9e1f73caf2ffc7c081d952f9bd3c87b4405aaefe23688bb0b276ac7b0a2bd26aa2dc448134f1a5768a6c0d4bdfbd81641ed82ae2fc2f7fbf6e20d6f1e13a949271be7d35523e39f14d74396de6f51a72d6fb64f173c2a4d127072"}, 0x127) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x8, 'bridge0\x00', {'macvlan0\x00'}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x1c, 0x20000048, 0x0) 1.924361151s ago: executing program 8 (id=4524): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x20, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 1.226521104s ago: executing program 7 (id=4525): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, "bf631e4b"}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) 1.226216498s ago: executing program 9 (id=4526): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmmsg$inet(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)='{', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)="d9", 0x1}], 0x1}}], 0x2, 0x11) 1.169824289s ago: executing program 9 (id=4527): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x40102, 0x0) sendfile(r1, r2, 0x0, 0xbf8) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110a2000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.16551815s ago: executing program 8 (id=4528): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x112, 0x2, 0x0, &(0x7f0000000180)) 1.072225222s ago: executing program 9 (id=4529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x107, 0x15, 0x0, 0x20000000) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000004c0)={0x2, 0x3, 0x6, 0x3, r0}) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x8a382, 0x0) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000fc0)=""/4096, 0x1000}], 0x1, 0xab68, 0x6) syz_io_uring_setup(0x1404, &(0x7f0000000500)={0x0, 0xfffffffd, 0x200, 0x0, 0x400000}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r9, &(0x7f0000000200)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1, 0xfffffffc, 0x0) syz_io_uring_submit(r6, r7, 0x0) read$dsp(r5, &(0x7f00000000c0)=""/108, 0x6c) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x5dc, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) 123.64685ms ago: executing program 5 (id=4530): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x1f, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x10000000, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20], [0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0xa90d, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc000000]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @broadcast, 'vcan0\x00'}}, 0x1e) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001380)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x12, r3, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x5452, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) r7 = syz_io_uring_setup(0x7604, &(0x7f0000000200)={0x0, 0x2006cc8, 0x10100, 0x0, 0x34}, &(0x7f0000000500), &(0x7f0000000000)) syz_io_uring_setup(0x360b, &(0x7f0000001040), &(0x7f0000000340)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r8, r9, 0x0) io_uring_enter(r7, 0xb15, 0x0, 0x0, 0x0, 0x0) 58.267309ms ago: executing program 9 (id=4531): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) chdir(&(0x7f0000000480)='./cgroup\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000c21000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffffffc, &(0x7f0000000000), 0x0, 0x100000e4, 0x0, 0x0, 0x0, 0x34c844f937b18842}) 0s ago: executing program 8 (id=4532): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) (fail_nth: 2) kernel console output (not intermixed with test programs): 7/0x540 [ 1020.708774][T18114] user_path_at+0x24/0x60 [ 1020.713128][T18114] __x64_sys_umount+0xf1/0x170 [ 1020.717918][T18114] ? __pfx___x64_sys_umount+0x10/0x10 [ 1020.723310][T18114] ? do_syscall_64+0x100/0x230 [ 1020.728100][T18114] ? do_syscall_64+0xb6/0x230 [ 1020.732806][T18114] do_syscall_64+0xf3/0x230 [ 1020.737336][T18114] ? clear_bhb_loop+0x35/0x90 [ 1020.742049][T18114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.748000][T18114] RIP: 0033:0x7f3af1b7e719 [ 1020.752441][T18114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1020.772068][T18114] RSP: 002b:00007f3af2931038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1020.780515][T18114] RAX: ffffffffffffffda RBX: 00007f3af1d35f80 RCX: 00007f3af1b7e719 [ 1020.788510][T18114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 [ 1020.796530][T18114] RBP: 00007f3af2931090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.804520][T18114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.812687][T18114] R13: 0000000000000000 R14: 00007f3af1d35f80 R15: 00007ffddd8525b8 [ 1020.820697][T18114] [ 1020.888704][T18114] Process accounting resumed [ 1020.967366][ T12] tipc: Left network mode [ 1021.112838][T18054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.135369][T18054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.174917][T18054] bridge_slave_0: entered allmulticast mode [ 1021.182857][T18054] bridge_slave_0: entered promiscuous mode [ 1021.218702][T18054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.226558][T18054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.266718][T18054] bridge_slave_1: entered allmulticast mode [ 1021.305321][T18054] bridge_slave_1: entered promiscuous mode [ 1021.530344][T18054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.569383][ T29] audit: type=1326 audit(1731322475.573:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18137 comm="syz.9.3573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3857e719 code=0x7ffc0000 [ 1021.572315][T18054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.591326][T18056] Bluetooth: hci2: command tx timeout [ 1021.628669][ T29] audit: type=1326 audit(1731322475.603:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18137 comm="syz.9.3573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8d3857e719 code=0x7ffc0000 [ 1021.675278][ T29] audit: type=1326 audit(1731322475.603:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18137 comm="syz.9.3573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3857e719 code=0x7ffc0000 [ 1021.698740][ T5876] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1021.771776][ T29] audit: type=1326 audit(1731322475.603:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18137 comm="syz.9.3573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f8d3857e719 code=0x7ffc0000 [ 1021.838526][ T29] audit: type=1326 audit(1731322475.603:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18137 comm="syz.9.3573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d3857e719 code=0x7ffc0000 [ 1021.921381][ T5876] usb 6-1: Using ep0 maxpacket: 8 [ 1021.944204][ T5876] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1021.996803][ T5876] usb 6-1: config 4 has no interfaces? [ 1022.050904][ T5876] usb 6-1: New USB device found, idVendor=2001, idProduct=4a00, bcdDevice=8e.1b [ 1022.115142][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.187900][ T5876] usb 6-1: Product: syz [ 1022.219541][ T5876] usb 6-1: Manufacturer: syz [ 1022.242417][ T5876] usb 6-1: SerialNumber: syz [ 1022.358904][ T5884] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1022.452519][T18054] team0: Port device team_slave_0 added [ 1022.518552][ T5884] usb 10-1: Using ep0 maxpacket: 32 [ 1022.532621][ T5884] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 1022.558112][ T12] batadv_slave_1: left promiscuous mode [ 1022.566039][ T5884] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.581536][ T5884] usb 10-1: config 0 has no interface number 0 [ 1022.587889][ T5884] usb 10-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 1022.610726][ T12] hsr_slave_0: left promiscuous mode [ 1022.635539][ T12] hsr_slave_1: left promiscuous mode [ 1022.645993][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1022.653619][ T5884] usb 10-1: config 0 interface 8 has no altsetting 0 [ 1022.661338][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.671973][ T5884] usb 10-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 1022.698585][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1022.703410][ T5884] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.709795][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.727899][ T5884] usb 10-1: Product: syz [ 1022.737210][ T5884] usb 10-1: Manufacturer: syz [ 1022.744423][ T5884] usb 10-1: SerialNumber: syz [ 1022.755401][ T5884] usb 10-1: config 0 descriptor?? [ 1022.757444][ T12] batman_adv: batadv0: Interface deactivated: vlan1 [ 1022.779238][ T12] batman_adv: batadv0: Removing interface: vlan1 [ 1022.814778][ T12] veth0_macvtap: left promiscuous mode [ 1022.848969][ T12] veth1_vlan: left promiscuous mode [ 1022.858856][ T12] veth0_vlan: left promiscuous mode [ 1023.652987][T18144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.662141][T18144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.704511][T18056] Bluetooth: hci2: command tx timeout [ 1024.388747][ T973] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1024.528820][ T973] usb 9-1: device descriptor read/64, error -71 [ 1024.798791][ T973] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1024.979082][ T973] usb 9-1: device descriptor read/64, error -71 [ 1025.102471][ T973] usb usb9-port1: attempt power cycle [ 1025.519859][ T973] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1025.560705][ T973] usb 9-1: device descriptor read/8, error -71 [ 1025.807725][ T973] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1025.859246][ T973] usb 9-1: device descriptor read/8, error -71 [ 1025.980600][ T973] usb usb9-port1: unable to enumerate USB device [ 1026.190445][T18054] team0: Port device team_slave_1 added [ 1026.263294][ T5884] ath6kl: Failed to submit usb control message: -71 [ 1026.271362][ T5884] ath6kl: unable to send the bmi data to the device: -71 [ 1026.276770][ T5876] usb 6-1: USB disconnect, device number 68 [ 1026.278550][ T5884] ath6kl: Unable to send get target info: -71 [ 1026.356466][ T5884] ath6kl: Failed to init ath6kl core: -71 [ 1026.363003][ T5884] ath6kl_usb 10-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 1026.409041][ T5884] usb 10-1: USB disconnect, device number 33 [ 1026.451842][T18185] overlayfs: overlapping lowerdir path [ 1026.479603][T18054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.486591][T18054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.513239][T18054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.528875][T18054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.535846][T18054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.561974][T18054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.627158][T18054] hsr_slave_0: entered promiscuous mode [ 1026.655847][T18054] hsr_slave_1: entered promiscuous mode [ 1026.714442][T18054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1026.723546][T18054] Cannot create hsr debugfs directory [ 1027.625604][ T12] IPVS: stop unused estimator thread 0... [ 1028.053357][T18213] overlayfs: overlapping lowerdir path [ 1028.685144][T18216] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1028.812507][T18054] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1028.970200][T18054] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1029.009867][T18054] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1029.020572][T18054] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1029.206494][T18054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.254718][T18054] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.301417][ T7807] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.308593][ T7807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.317821][ T7807] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.324992][ T7807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.468852][T18239] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3607'. [ 1029.851919][T18253] overlayfs: overlapping lowerdir path [ 1030.230941][T18256] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.3612'. [ 1030.403155][T18054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.401323][T18054] veth0_vlan: entered promiscuous mode [ 1031.431618][T18054] veth1_vlan: entered promiscuous mode [ 1031.469086][ T973] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 1031.491069][T18054] veth0_macvtap: entered promiscuous mode [ 1031.521978][T18054] veth1_macvtap: entered promiscuous mode [ 1031.563919][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1031.584697][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.272707][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.330341][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.406437][T18054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.420282][ T973] usb 6-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1032.431553][ T973] usb 6-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x23, changing to 0x3 [ 1032.461891][ T973] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1032.491046][ T973] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1032.540187][ T973] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1032.589979][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.601117][ T973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.624116][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.650538][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.661523][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.676203][T18054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.690853][T18054] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.700167][T18054] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.709296][T18054] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.719798][T18054] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.653618][T15877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.661619][T15877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.669651][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.677635][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.690381][ T973] ath6kl: Failed to submit usb control message: -110 [ 1033.697383][ T973] ath6kl: unable to send the bmi data to the device: -110 [ 1033.760972][ T973] ath6kl: Unable to send get target info: -110 [ 1033.794173][ T973] ath6kl: Failed to init ath6kl core: -110 [ 1033.806656][ T973] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 1033.808615][ T970] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1033.823071][ T973] usb 6-1: USB disconnect, device number 69 [ 1034.780420][ T970] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1034.793668][ T970] usb 10-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1034.805431][ T970] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.814429][ T970] usb 10-1: Product: syz [ 1034.819307][T12053] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1034.828352][ T970] usb 10-1: Manufacturer: syz [ 1034.833149][ T970] usb 10-1: SerialNumber: syz [ 1034.840480][ T970] usb 10-1: config 0 descriptor?? [ 1034.850576][ T970] powermate 10-1:0.0: probe with driver powermate failed with error -5 [ 1034.976218][T12053] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1035.006618][T12053] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.018200][T18332] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 1035.026938][T12053] usb 9-1: Product: syz [ 1035.032040][T12053] usb 9-1: Manufacturer: syz [ 1035.037923][T12053] usb 9-1: SerialNumber: syz [ 1035.207063][T12053] usb 9-1: config 0 descriptor?? [ 1035.217436][T18308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.307743][T18338] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1035.998893][T18308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.062478][ T973] usb 10-1: USB disconnect, device number 34 [ 1036.206844][T16770] IPVS: starting estimator thread 0... [ 1036.309054][T18348] IPVS: using max 21 ests per chain, 50400 per kthread [ 1036.446265][T12053] usb 9-1: USB disconnect, device number 48 [ 1036.655474][T18357] ieee802154 phy0 wpan0: encryption failed: -22 [ 1037.734016][T18369] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3648'. [ 1037.836862][T18373] bond0: (slave macvlan2): Opening slave failed [ 1038.016303][T18379] lo speed is unknown, defaulting to 1000 [ 1038.022210][T18380] bond0: (slave macvlan2): Opening slave failed [ 1038.068162][ T29] audit: type=1400 audit(1731322492.063:3586): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="M" requested=w pid=18382 comm="syz.7.3655" daddr=::ffff:0.0.0.0 [ 1038.095529][T18381] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3649'. [ 1038.157355][T18390] netlink: 'syz.9.3654': attribute type 3 has an invalid length. [ 1038.168623][ T29] audit: type=1400 audit(1731322492.073:3587): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="M" requested=w pid=18382 comm="syz.7.3655" dest=20001 [ 1038.188334][T18390] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3654'. [ 1038.198127][T18390] netlink: 'syz.9.3654': attribute type 3 has an invalid length. [ 1038.206615][T18390] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3654'. [ 1038.997892][T18399] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3659'. [ 1039.167827][T18402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1039.954377][T18417] fuse: Bad value for 'fd' [ 1040.478016][T18424] fuse: Bad value for 'fd' [ 1040.923600][T18432] CUSE: unknown device info "" [ 1040.934069][T18432] CUSE: unknown device info "appraise_type" [ 1040.940467][T18432] CUSE: DEVNAME unspecified [ 1040.979103][T18432] netlink: 184 bytes leftover after parsing attributes in process `syz.6.3665'. [ 1041.025016][T18437] netlink: 6 bytes leftover after parsing attributes in process `syz.8.3668'. [ 1041.325186][T18444] overlayfs: overlapping lowerdir path [ 1041.412805][T18441] lo speed is unknown, defaulting to 1000 [ 1041.600243][T18447] fuse: Bad value for 'fd' [ 1043.160857][T18478] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1043.167430][T18478] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1043.175622][T18478] vhci_hcd vhci_hcd.0: Device attached [ 1043.687485][T18480] vhci_hcd: connection closed [ 1043.765433][ T35] vhci_hcd: stop threads [ 1043.776724][ T35] vhci_hcd: release socket [ 1043.812143][ T35] vhci_hcd: disconnect device [ 1043.839059][ T973] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1043.847423][ T973] usb 47-1: enqueue for inactive port 0 [ 1044.225956][T12053] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1044.305554][ T973] vhci_hcd: vhci_device speed not set [ 1044.392201][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3683'. [ 1044.420856][T12053] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1044.434201][T12053] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1044.446085][T12053] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1044.457627][T12053] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.475072][T18466] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1044.511392][T12053] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1044.752045][T16770] usb 9-1: USB disconnect, device number 49 [ 1044.955831][T18526] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3690'. [ 1045.727284][T18536] CUSE: unknown device info "" [ 1045.732557][T18536] CUSE: unknown device info "appraise_type" [ 1045.740349][T18536] CUSE: DEVNAME unspecified [ 1045.745629][T18536] netlink: 184 bytes leftover after parsing attributes in process `syz.8.3694'. [ 1045.757957][T18539] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3695'. [ 1045.802635][T18536] lo speed is unknown, defaulting to 1000 [ 1046.148562][T12053] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1046.238278][T18556] netlink: 'syz.5.3698': attribute type 10 has an invalid length. [ 1046.252795][T18556] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3698'. [ 1046.338838][T12053] usb 7-1: Using ep0 maxpacket: 8 [ 1046.345763][T12053] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1046.360373][T12053] usb 7-1: config 179 has no interface number 0 [ 1046.390002][T12053] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1046.441641][T12053] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1046.453805][T12053] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1046.484414][T18558] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3702'. [ 1046.499578][T12053] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1046.511298][T12053] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1046.525558][T12053] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1046.570215][T12053] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.624435][T18544] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1046.869493][T12053] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input49 [ 1047.322272][T18492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1048.229885][T18570] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3706'. [ 1048.260956][T18568] openvswitch: netlink: Key type 13316 is out of range max 32 [ 1049.228670][ T5876] usb 7-1: USB disconnect, device number 5 [ 1049.229013][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1049.243248][ T5876] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1049.245567][ C0] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 1050.218118][T18591] CUSE: unknown device info "" [ 1050.236469][T18591] CUSE: unknown device info "appraise_type" [ 1050.315804][T18591] CUSE: DEVNAME unspecified [ 1050.669460][ T5876] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1051.113910][T18600] FAULT_INJECTION: forcing a failure. [ 1051.113910][T18600] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.127242][T18600] CPU: 0 UID: 0 PID: 18600 Comm: syz.5.3714 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 1051.138032][T18600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1051.148085][T18600] Call Trace: [ 1051.151386][T18600] [ 1051.154345][T18600] dump_stack_lvl+0x241/0x360 [ 1051.159017][T18600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1051.164225][T18600] ? __pfx__printk+0x10/0x10 [ 1051.168933][T18600] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1051.174939][T18600] ? __pfx___might_resched+0x10/0x10 [ 1051.180264][T18600] should_fail_ex+0x3b0/0x4e0 [ 1051.184974][T18600] should_failslab+0xac/0x100 [ 1051.189687][T18600] ? __alloc_skb+0x1c3/0x440 [ 1051.194308][T18600] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1051.195356][T18591] lo speed is unknown, defaulting to 1000 [ 1051.200128][T18600] __alloc_skb+0x1c3/0x440 [ 1051.200159][T18600] ? __pfx___alloc_skb+0x10/0x10 [ 1051.200183][T18600] ? netlink_autobind+0xd6/0x2f0 [ 1051.220182][T18600] ? netlink_autobind+0x2b0/0x2f0 [ 1051.225238][T18600] netlink_sendmsg+0x638/0xcb0 [ 1051.230044][T18600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1051.235369][T18600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1051.240681][T18600] __sock_sendmsg+0x221/0x270 [ 1051.245379][T18600] ____sys_sendmsg+0x52a/0x7e0 [ 1051.250170][T18600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1051.255492][T18600] __sys_sendmsg+0x292/0x380 [ 1051.260099][T18600] ? __pfx___sys_sendmsg+0x10/0x10 [ 1051.265234][T18600] ? __pfx_vfs_write+0x10/0x10 [ 1051.270038][T18600] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1051.276388][T18600] ? do_syscall_64+0x100/0x230 [ 1051.281151][T18600] ? do_syscall_64+0xb6/0x230 [ 1051.285818][T18600] do_syscall_64+0xf3/0x230 [ 1051.290328][T18600] ? clear_bhb_loop+0x35/0x90 [ 1051.295017][T18600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.300904][T18600] RIP: 0033:0x7f3af1b7e719 [ 1051.305363][T18600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1051.318808][ T5876] usb 7-1: Using ep0 maxpacket: 8 [ 1051.324949][T18600] RSP: 002b:00007f3af2931038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1051.324979][T18600] RAX: ffffffffffffffda RBX: 00007f3af1d35f80 RCX: 00007f3af1b7e719 [ 1051.324994][T18600] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1051.325006][T18600] RBP: 00007f3af2931090 R08: 0000000000000000 R09: 0000000000000000 [ 1051.325019][T18600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.336182][ T5876] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1051.338421][T18600] R13: 0000000000000000 R14: 00007f3af1d35f80 R15: 00007ffddd8525b8 [ 1051.338456][T18600] [ 1051.406473][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.415034][ T5876] usb 7-1: Product: syz [ 1051.423298][ T5876] usb 7-1: Manufacturer: syz [ 1051.429032][ T5876] usb 7-1: SerialNumber: syz [ 1051.435938][ T5876] usb 7-1: config 0 descriptor?? [ 1051.690363][ T5876] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1051.695457][T18614] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3718'. [ 1052.252390][T16770] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 1053.058938][T16770] usb 6-1: device descriptor read/64, error -71 [ 1053.329661][T16770] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1053.739010][T16770] usb 6-1: device descriptor read/64, error -71 [ 1053.849002][T16770] usb usb6-port1: attempt power cycle [ 1054.188528][T16770] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1054.239632][T16770] usb 6-1: device descriptor read/8, error -71 [ 1054.498851][T16770] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1054.524244][T18644] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 1054.559356][T16770] usb 6-1: device descriptor read/8, error -71 [ 1054.631911][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.666026][T18649] fuse: Unknown parameter 'r1jN*x/|>Xp ~oK}p|NMRlJ6/q&yztl$(%8xfxGDA_'s:73;r'vphh0+qP ktֶ* Ta] ]Le5Z$ [ 1054.666026][T18649] %|wqo㤁0x0000000000000003' [ 1054.718926][T16770] usb usb6-port1: unable to enumerate USB device [ 1054.739877][T18651] fuse: Unknown parameter 'r1jN*x/|>Xp ~oK}p|NMRlJ6/q&yztl$(%8xfxGDA_'s:73;r'vphh0+qP ktֶ* Ta] ]Le5Z$ [ 1054.739877][T18651] %|wqo㤁0x0000000000000003' [ 1054.743309][T18652] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3728'. [ 1054.797494][T18649] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3727'. [ 1054.856831][T18649] 9pnet_fd: Insufficient options for proto=fd [ 1055.215968][ T5876] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1055.228006][ T5876] usb 7-1: USB disconnect, device number 6 [ 1055.270808][T18663] lo speed is unknown, defaulting to 1000 [ 1055.293694][T18670] bond_slave_0: entered promiscuous mode [ 1055.299456][T18670] bond_slave_1: entered promiscuous mode [ 1055.315108][T18670] vlan2: entered promiscuous mode [ 1055.320310][T18670] bond0: entered promiscuous mode [ 1055.338348][T18670] bond0: left promiscuous mode [ 1055.344110][T18670] bond_slave_0: left promiscuous mode [ 1055.349652][T18670] bond_slave_1: left promiscuous mode [ 1057.224458][T18686] netlink: 6 bytes leftover after parsing attributes in process `syz.9.3737'. [ 1057.566778][T18706] misc userio: No port type given on /dev/userio [ 1057.722869][T18708] No such timeout policy "syz0" [ 1059.053002][T18737] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.3754'. [ 1059.067696][T18729] lo speed is unknown, defaulting to 1000 [ 1059.224026][T18744] netlink: 'syz.8.3756': attribute type 1 has an invalid length. [ 1059.264069][T18744] netlink: 9352 bytes leftover after parsing attributes in process `syz.8.3756'. [ 1059.285601][T18744] netlink: 'syz.8.3756': attribute type 1 has an invalid length. [ 1059.294155][T18744] netlink: 'syz.8.3756': attribute type 2 has an invalid length. [ 1059.309295][T18744] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3756'. [ 1059.716467][T18759] fuse: Bad value for 'fd' [ 1060.855634][T18771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3767'. [ 1060.882270][T18771] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3767'. [ 1061.718070][T18789] fuse: Bad value for 'fd' [ 1062.542368][T12053] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1062.601244][ T5907] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1062.728735][T12053] usb 9-1: Using ep0 maxpacket: 16 [ 1062.748727][T12053] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.847705][T12053] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.861658][ T5907] usb 6-1: device descriptor read/64, error -71 [ 1062.976227][T12053] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1063.138977][ T5907] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1063.206354][T12053] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1063.218557][T12053] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.245708][T12053] usb 9-1: config 0 descriptor?? [ 1063.262754][T18807] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3776'. [ 1063.308632][ T5907] usb 6-1: device descriptor read/64, error -71 [ 1063.419768][ T5907] usb usb6-port1: attempt power cycle [ 1063.556521][T18813] overlayfs: overlapping lowerdir path [ 1063.661124][T12053] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1063.682820][T12053] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0011/input/input50 [ 1063.713520][T12053] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1063.758830][ T5907] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1063.779406][ T5907] usb 6-1: device descriptor read/8, error -71 [ 1063.894517][T12053] usb 9-1: USB disconnect, device number 50 [ 1063.908886][T16770] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1064.018699][ T5907] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1064.059306][T16770] usb 7-1: Using ep0 maxpacket: 8 [ 1064.059540][ T5907] usb 6-1: device descriptor read/8, error -71 [ 1064.074426][T16770] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 1064.082872][T16770] usb 7-1: config 0 has no interface number 0 [ 1064.092921][T16770] usb 7-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1064.102262][T16770] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.110779][T16770] usb 7-1: Product: syz [ 1064.115058][T16770] usb 7-1: Manufacturer: syz [ 1064.120118][T16770] usb 7-1: SerialNumber: syz [ 1064.145665][T16770] usb 7-1: config 0 descriptor?? [ 1064.158937][T16770] radio-usb-si4713 7-1:0.128: Si4713 development board discovered: (10C4:8244) [ 1064.191634][ T5907] usb usb6-port1: unable to enumerate USB device [ 1064.237298][T18819] netlink: 'syz.7.3782': attribute type 1 has an invalid length. [ 1064.246971][T18819] netlink: 9352 bytes leftover after parsing attributes in process `syz.7.3782'. [ 1064.259508][T18819] netlink: 'syz.7.3782': attribute type 1 has an invalid length. [ 1064.267427][T18819] netlink: 'syz.7.3782': attribute type 2 has an invalid length. [ 1064.275259][T18819] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3782'. [ 1064.649622][T16770] radio-usb-si4713 7-1:0.128: probe with driver radio-usb-si4713 failed with error -71 [ 1064.660083][T16770] usbhid 7-1:0.128: couldn't find an input interrupt endpoint [ 1064.688278][T16770] usb 7-1: USB disconnect, device number 7 [ 1065.217586][T18827] fuse: Bad value for 'fd' [ 1065.651657][T18833] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3787'. [ 1065.781325][T18840] overlayfs: overlapping lowerdir path [ 1066.221297][T18859] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1067.143483][T18868] FAULT_INJECTION: forcing a failure. [ 1067.143483][T18868] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.213493][T18868] CPU: 0 UID: 0 PID: 18868 Comm: syz.7.3799 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 1067.224304][T18868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1067.234386][T18868] Call Trace: [ 1067.237683][T18868] [ 1067.240632][T18868] dump_stack_lvl+0x241/0x360 [ 1067.245339][T18868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1067.250558][T18868] ? __pfx__printk+0x10/0x10 [ 1067.255173][T18868] ? fs_reclaim_acquire+0x93/0x130 [ 1067.260306][T18868] ? __pfx___might_resched+0x10/0x10 [ 1067.265621][T18868] should_fail_ex+0x3b0/0x4e0 [ 1067.270331][T18868] ? tomoyo_encode+0x26f/0x540 [ 1067.275124][T18868] should_failslab+0xac/0x100 [ 1067.279808][T18868] ? tomoyo_encode+0x26f/0x540 [ 1067.284574][T18868] __kmalloc_noprof+0xd8/0x400 [ 1067.289345][T18868] tomoyo_encode+0x26f/0x540 [ 1067.293945][T18868] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1067.299592][T18868] tomoyo_path_perm+0x2b7/0x740 [ 1067.304441][T18868] ? tomoyo_path_perm+0x287/0x740 [ 1067.309459][T18868] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1067.314839][T18868] ? stack_trace_save+0x118/0x1d0 [ 1067.319885][T18868] ? do_syscall_64+0xf3/0x230 [ 1067.324584][T18868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.330662][T18868] tomoyo_sb_umount+0xd0/0x110 [ 1067.335427][T18868] ? __pfx_tomoyo_sb_umount+0x10/0x10 [ 1067.340798][T18868] ? bpf_lsm_capable+0x9/0x10 [ 1067.345474][T18868] ? hook_sb_umount+0x122/0x390 [ 1067.350318][T18868] ? security_sb_umount+0x13/0x280 [ 1067.355426][T18868] security_sb_umount+0xb9/0x280 [ 1067.360360][T18868] path_umount+0x399/0xf70 [ 1067.364804][T18868] ? kasan_quarantine_put+0xdc/0x230 [ 1067.370093][T18868] ? __pfx_path_umount+0x10/0x10 [ 1067.375034][T18868] ? user_path_at+0x44/0x60 [ 1067.379541][T18868] __x64_sys_umount+0x123/0x170 [ 1067.384393][T18868] ? __pfx___x64_sys_umount+0x10/0x10 [ 1067.389765][T18868] ? do_syscall_64+0x100/0x230 [ 1067.394529][T18868] ? do_syscall_64+0xb6/0x230 [ 1067.399206][T18868] do_syscall_64+0xf3/0x230 [ 1067.403706][T18868] ? clear_bhb_loop+0x35/0x90 [ 1067.408385][T18868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.414275][T18868] RIP: 0033:0x7f42dfb7e719 [ 1067.418697][T18868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1067.438307][T18868] RSP: 002b:00007f42e09a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1067.446746][T18868] RAX: ffffffffffffffda RBX: 00007f42dfd35f80 RCX: 00007f42dfb7e719 [ 1067.454714][T18868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 [ 1067.462680][T18868] RBP: 00007f42e09a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.470647][T18868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.478612][T18868] R13: 0000000000000000 R14: 00007f42dfd35f80 R15: 00007fffb97171b8 [ 1067.486592][T18868] [ 1067.578753][T18868] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1067.712502][T18868] Process accounting resumed [ 1067.996209][T18873] fuse: Bad value for 'fd' [ 1068.599408][T18886] bpf: Bad value for 'uid' [ 1068.603783][T18887] loop2: detected capacity change from 0 to 7 [ 1068.622341][T18887] Dev loop2: unable to read RDB block 7 [ 1068.634565][T18887] loop2: unable to read partition table [ 1068.644978][T18887] loop2: partition table beyond EOD, truncated [ 1068.656766][T18887] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1069.662618][T18898] overlayfs: overlapping lowerdir path [ 1070.219132][T18909] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1070.426158][ T970] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1070.603623][ T970] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.616859][ T970] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1070.647570][ T970] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.685082][ T970] usb 10-1: config 0 descriptor?? [ 1070.895379][T18931] overlayfs: overlapping lowerdir path [ 1071.137947][ T970] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 1071.164224][ T970] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0012/input/input51 [ 1071.279128][ T970] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 1071.912472][T18902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.946113][T18902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.006267][T12053] usb 10-1: USB disconnect, device number 35 [ 1072.046319][T18951] netlink: 6 bytes leftover after parsing attributes in process `syz.6.3825'. [ 1072.147193][T18953] openvswitch: netlink: Actions may not be safe on all matching packets [ 1072.337222][T18960] syz_tun: entered promiscuous mode [ 1072.343316][T18960] macvtap1: entered promiscuous mode [ 1072.350624][T18960] macvtap1: entered allmulticast mode [ 1072.356736][T18960] syz_tun: entered allmulticast mode [ 1072.365767][T18960] syz_tun: left allmulticast mode [ 1072.371224][T18960] syz_tun: left promiscuous mode [ 1072.418976][T16770] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1072.625094][T16770] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1072.662338][T16770] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.678087][T16770] usb 9-1: Product: syz [ 1072.682372][T16770] usb 9-1: Manufacturer: syz [ 1072.687077][T16770] usb 9-1: SerialNumber: syz [ 1072.702489][T16770] usb 9-1: config 0 descriptor?? [ 1072.732415][T18970] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3833'. [ 1073.241025][T16770] usb 9-1: USB disconnect, device number 51 [ 1075.061835][T19000] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.3842'. [ 1075.543276][ T5907] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1075.715770][T19005] netlink: 'syz.5.3841': attribute type 10 has an invalid length. [ 1075.724165][T19005] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3841'. [ 1076.827483][ T5907] usb 10-1: Using ep0 maxpacket: 32 [ 1076.942086][ T5907] usb 10-1: device descriptor read/all, error -71 [ 1077.167375][T19026] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3849'. [ 1078.246742][T19041] netlink: 3 bytes leftover after parsing attributes in process `syz.9.3853'. [ 1079.048064][T19055] netlink: 'syz.8.3857': attribute type 10 has an invalid length. [ 1079.056582][T19055] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3857'. [ 1081.294281][T19083] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3864'. [ 1081.349453][T19085] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3865'. [ 1082.293106][T19095] bridge0: left allmulticast mode [ 1082.425865][T19089] fuse: Bad value for 'fd' [ 1082.702111][T19109] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1082.757349][T19111] loop2: detected capacity change from 0 to 7 [ 1082.780563][T19111] Dev loop2: unable to read RDB block 7 [ 1082.786451][T19111] loop2: unable to read partition table [ 1082.793245][T19111] loop2: partition table beyond EOD, truncated [ 1082.808251][T19111] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1084.200390][T19127] FAULT_INJECTION: forcing a failure. [ 1084.200390][T19127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1084.236198][T19127] CPU: 1 UID: 0 PID: 19127 Comm: syz.6.3880 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 1084.247034][T19127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1084.257118][T19127] Call Trace: [ 1084.260422][T19127] [ 1084.263371][T19127] dump_stack_lvl+0x241/0x360 [ 1084.268077][T19127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1084.273308][T19127] ? __pfx__printk+0x10/0x10 [ 1084.277924][T19127] ? __pfx_lock_release+0x10/0x10 [ 1084.283074][T19127] should_fail_ex+0x3b0/0x4e0 [ 1084.287958][T19127] _copy_from_iter+0x21f/0x1e70 [ 1084.292836][T19127] ? __virt_addr_valid+0x183/0x530 [ 1084.297977][T19127] ? __pfx_lock_release+0x10/0x10 [ 1084.303036][T19127] ? __alloc_skb+0x28f/0x440 [ 1084.307646][T19127] ? __pfx__copy_from_iter+0x10/0x10 [ 1084.312959][T19127] ? __virt_addr_valid+0x183/0x530 [ 1084.318100][T19127] ? __virt_addr_valid+0x183/0x530 [ 1084.323225][T19127] ? __virt_addr_valid+0x45f/0x530 [ 1084.328345][T19127] ? __check_object_size+0x48e/0x900 [ 1084.333651][T19127] netlink_sendmsg+0x73d/0xcb0 [ 1084.338457][T19127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1084.343766][T19127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1084.349058][T19127] __sock_sendmsg+0x221/0x270 [ 1084.353765][T19127] ____sys_sendmsg+0x52a/0x7e0 [ 1084.358564][T19127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1084.363885][T19127] __sys_sendmsg+0x292/0x380 [ 1084.368491][T19127] ? __pfx___sys_sendmsg+0x10/0x10 [ 1084.373626][T19127] ? __pfx_vfs_write+0x10/0x10 [ 1084.378415][T19127] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1084.384755][T19127] ? do_syscall_64+0x100/0x230 [ 1084.389523][T19127] ? do_syscall_64+0xb6/0x230 [ 1084.394211][T19127] do_syscall_64+0xf3/0x230 [ 1084.398725][T19127] ? clear_bhb_loop+0x35/0x90 [ 1084.403411][T19127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.409388][T19127] RIP: 0033:0x7f318f17e719 [ 1084.413802][T19127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1084.433501][T19127] RSP: 002b:00007f318fef8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1084.441920][T19127] RAX: ffffffffffffffda RBX: 00007f318f335f80 RCX: 00007f318f17e719 [ 1084.449888][T19127] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1084.457868][T19127] RBP: 00007f318fef8090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.465845][T19127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.473815][T19127] R13: 0000000000000000 R14: 00007f318f335f80 R15: 00007ffed6663d58 [ 1084.481795][T19127] [ 1084.831474][T19135] netlink: 'syz.8.3884': attribute type 3 has an invalid length. [ 1084.848720][T19135] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3884'. [ 1084.906996][T19135] netlink: 'syz.8.3884': attribute type 3 has an invalid length. [ 1084.938740][T19135] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3884'. [ 1085.327840][ T29] audit: type=1400 audit(1731326634.326:3588): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="M" requested=w pid=19138 comm="syz.6.3886" daddr=::ffff:0.0.0.0 [ 1085.398913][ T29] audit: type=1400 audit(1731326634.326:3589): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="M" requested=w pid=19138 comm="syz.6.3886" dest=20001 [ 1085.639939][T19149] xt_nat: multiple ranges no longer supported [ 1085.946761][T19152] lo speed is unknown, defaulting to 1000 [ 1087.442441][T19177] overlayfs: failed to set uuid (430/file1, err=-1); falling back to uuid=null. [ 1087.451897][T19177] overlayfs: failed to verify upper root origin [ 1088.519081][T19193] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0000 [ 1088.540641][T19193] tipc: Enabled bearer , priority 10 [ 1089.138559][ T5876] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1089.794224][ T5876] usb 10-1: config 0 has an invalid interface number: 18 but max is 0 [ 1089.802754][ T5876] usb 10-1: config 0 has no interface number 0 [ 1089.888617][T12053] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1089.916750][ T5876] usb 10-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.012731][ T5876] usb 10-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1090.028076][ T5876] usb 10-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 1090.048011][ T5876] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1090.769885][ T5876] usb 10-1: Manufacturer: syz [ 1090.777105][ T5876] usb 10-1: config 0 descriptor?? [ 1090.835732][T12053] usb 9-1: Using ep0 maxpacket: 32 [ 1091.128705][T16770] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1091.248858][T12053] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1091.256903][T12053] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.278706][T12053] usb 9-1: config 0 has no interface number 0 [ 1091.285399][T12053] usb 9-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 1091.299409][T12053] usb 9-1: config 0 interface 8 has no altsetting 0 [ 1091.309149][T16770] usb 7-1: Using ep0 maxpacket: 8 [ 1091.324009][T16770] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1091.336583][T16770] usb 7-1: config 179 has no interface number 0 [ 1091.373633][T16770] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1091.432903][T16770] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1091.497271][T16770] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1091.563712][T16770] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1091.644579][T16770] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1091.727200][T16770] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1091.771092][T16770] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.833095][T19213] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1092.074614][T12053] usb 9-1: string descriptor 0 read error: -71 [ 1092.081478][T12053] usb 9-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 1092.090625][T12053] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.130809][T12053] usb 9-1: config 0 descriptor?? [ 1092.136384][T12053] usb 9-1: can't set config #0, error -71 [ 1092.158501][T12413] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input52 [ 1092.158823][T12053] usb 9-1: USB disconnect, device number 52 [ 1092.279145][ T5876] usbhid 10-1:0.18: can't add hid device: -71 [ 1092.285357][ T5876] usbhid 10-1:0.18: probe with driver usbhid failed with error -71 [ 1092.297397][ T5876] usb 10-1: USB disconnect, device number 38 [ 1093.282867][T19236] lo speed is unknown, defaulting to 1000 [ 1094.449372][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1094.449377][T12053] usb 7-1: USB disconnect, device number 8 [ 1094.449506][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1094.472331][T12053] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1094.534490][T19269] program syz.7.3921 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1094.535043][T19266] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3922'. [ 1094.951608][T19272] fuse: Bad value for 'fd' [ 1095.572380][T19283] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1096.888793][ T5876] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1097.149444][ T5876] usb 10-1: Using ep0 maxpacket: 16 [ 1097.165035][ T5876] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.285487][ T5876] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1097.327666][ T5876] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1097.346025][ T5876] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.354530][ T5876] usb 10-1: Product: syz [ 1097.368496][ T5876] usb 10-1: Manufacturer: syz [ 1097.373215][ T5876] usb 10-1: SerialNumber: syz [ 1097.708573][T12053] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1097.862188][T12053] usb 9-1: Using ep0 maxpacket: 32 [ 1097.885028][T12053] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.942646][T12053] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1097.968088][T12053] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.011995][T12053] usb 9-1: Product: syz [ 1098.021535][T12053] usb 9-1: Manufacturer: syz [ 1098.031507][T12053] usb 9-1: SerialNumber: syz [ 1098.051431][T12053] usb 9-1: bad CDC descriptors [ 1098.390899][T16770] usb 9-1: USB disconnect, device number 53 [ 1099.819644][ T5876] usb 10-1: 0:2 : does not exist [ 1099.837285][ T5876] usb 10-1: USB disconnect, device number 39 [ 1099.911232][T19323] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3937'. [ 1099.920563][T19318] fuse: Unknown parameter 'permit_directio' [ 1101.696541][T19353] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3945'. [ 1102.878709][ T5907] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1103.229780][ T5907] usb 7-1: config 0 has an invalid interface number: 18 but max is 0 [ 1103.238167][ T5907] usb 7-1: config 0 has no interface number 0 [ 1103.244828][ T5907] usb 7-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.265070][ T5907] usb 7-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.321777][ T5907] usb 7-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 1103.337706][ T5907] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1103.365869][ T5907] usb 7-1: Manufacturer: syz [ 1103.414863][ T5907] usb 7-1: config 0 descriptor?? [ 1103.504563][T19372] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3952'. [ 1103.735996][T19382] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3955'. [ 1103.963353][ T5907] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.18/0003:054C:03D5.0013/input/input53 [ 1104.346365][ T5907] sony 0003:054C:03D5.0013: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.6-1/input18 [ 1104.399015][T19391] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3958'. [ 1104.429470][ T5907] usb 7-1: USB disconnect, device number 9 [ 1104.459737][T19391] vlan0: entered promiscuous mode [ 1104.480954][T19392] autofs: Bad value for 'fd' [ 1104.524004][T19391] team0: Port device vlan0 added [ 1104.592550][T19392] team0: Port device vlan0 removed [ 1106.077761][T19416] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3966'. [ 1106.098183][T19418] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1106.178267][T19420] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3968'. [ 1106.300425][ T5907] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1106.659363][ T5907] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1106.675589][ T5907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.689018][ T5907] usb 7-1: Product: syz [ 1106.693230][ T5907] usb 7-1: Manufacturer: syz [ 1106.698151][ T5907] usb 7-1: SerialNumber: syz [ 1106.720226][ T5907] usb 7-1: config 0 descriptor?? [ 1106.857129][T19426] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3970'. [ 1106.881868][T19426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.000289][T19430] overlayfs: overlapping lowerdir path [ 1107.046967][T12413] usb 7-1: USB disconnect, device number 10 [ 1107.159454][T19433] Process accounting resumed [ 1107.949286][T19453] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3979'. [ 1108.003395][T19455] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3978'. [ 1108.695462][T19471] netlink: 420 bytes leftover after parsing attributes in process `syz.8.3985'. [ 1108.718932][T19471] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3985'. [ 1108.768607][ T5876] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1108.920424][ T5876] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 1108.932944][ T5876] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1108.963991][ T5876] usb 10-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 1108.985338][ T5876] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.010308][ T5876] usb 10-1: config 0 descriptor?? [ 1109.269145][ T5907] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1109.412315][ T5907] usb 9-1: device descriptor read/64, error -71 [ 1109.645211][T19468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.682592][T19468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.812653][ T5876] appletouch 10-1:0.0: Geyser mode initialized. [ 1109.832545][ T5876] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input54 [ 1110.050880][ T5876] usb 10-1: USB disconnect, device number 40 [ 1110.062568][ T5876] appletouch 10-1:0.0: input: appletouch disconnected [ 1110.238772][ T5907] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1111.149226][T12053] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1111.159766][ T5907] usb 9-1: device descriptor read/64, error -71 [ 1111.272080][ T5907] usb usb9-port1: attempt power cycle [ 1111.336149][T12053] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1111.506454][T12053] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.565845][T12053] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1111.658744][T12053] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1111.668286][T12053] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.676849][T12053] usb 6-1: Product: syz [ 1111.681623][T12053] usb 6-1: Manufacturer: syz [ 1111.686246][T12053] usb 6-1: SerialNumber: syz [ 1111.707026][T12053] usb 6-1: config 0 descriptor?? [ 1111.730055][T12053] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1111.758042][T12053] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1111.941079][ T5907] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1111.969200][ T5907] usb 9-1: device descriptor read/8, error -71 [ 1112.017537][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1112.029627][T12053] usb 6-1: USB disconnect, device number 78 [ 1113.781203][T19538] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4007'. [ 1113.819021][T19542] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4008'. [ 1113.833500][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4008'. [ 1114.060954][T19549] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1114.138969][ T5876] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1114.193866][T19549] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1114.763481][ T5876] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1114.773526][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.784188][ T5876] usb 7-1: Product: syz [ 1114.788993][ T5876] usb 7-1: Manufacturer: syz [ 1114.795843][ T5876] usb 7-1: SerialNumber: syz [ 1114.802206][ T5876] usb 7-1: config 0 descriptor?? [ 1114.809039][ T5876] ch341 7-1:0.0: ch341-uart converter detected [ 1115.324807][ T5876] usb 7-1: failed to receive control message: -121 [ 1115.585833][T19545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.605390][T19545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.622127][ T5876] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 1115.657438][T19545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.680009][T19545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.074179][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.128898][T12401] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1116.138886][ T5907] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1116.297319][T19585] ip6t_rpfilter: unknown options [ 1116.972041][ T5907] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1116.982041][T12401] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.997697][T12401] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.007672][ T5907] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.018932][T12401] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1117.020625][T19588] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4023'. [ 1117.028779][T12401] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.045898][ T5907] usb 10-1: config 0 descriptor?? [ 1117.055311][T12401] usb 9-1: config 0 descriptor?? [ 1117.429860][T12401] usbhid 9-1:0.0: can't add hid device: -71 [ 1117.517372][T19591] fuse: Bad value for 'fd' [ 1117.532343][T12401] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1117.621806][ T5907] [drm:udl_init] *ERROR* Selecting channel failed [ 1117.676645][T12401] usb 9-1: USB disconnect, device number 58 [ 1117.686016][ T5907] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 1117.693203][ T5907] [drm] Initialized udl on minor 2 [ 1117.710031][ T5907] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1117.718204][ T5907] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1118.030512][ T5907] usb 10-1: USB disconnect, device number 41 [ 1118.121331][ T970] usb 7-1: USB disconnect, device number 11 [ 1118.162930][ T970] ch341 7-1:0.0: device disconnected [ 1118.904749][T19616] Process accounting resumed [ 1118.965904][T19623] xt_CT: No such helper "netbios-ns" [ 1119.104153][T19629] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4034'. [ 1119.149138][ T29] audit: type=1326 audit(1731326668.086:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19625 comm="syz.8.4033" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b3097e719 code=0x0 [ 1119.199721][T19633] netlink: 'syz.7.4035': attribute type 20 has an invalid length. [ 1119.689644][T19643] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4038'. [ 1121.388526][ T5907] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1121.420420][T19658] xt_TCPMSS: Only works on TCP SYN packets [ 1121.429340][T19658] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4043'. [ 1121.651787][T19663] netlink: 'syz.7.4044': attribute type 12 has an invalid length. [ 1121.687371][T19663] netlink: 197276 bytes leftover after parsing attributes in process `syz.7.4044'. [ 1121.838607][ T5907] usb 6-1: Using ep0 maxpacket: 16 [ 1122.058086][ T5907] usb 6-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 16 [ 1122.162581][ T5907] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1122.432020][ T5907] usb 6-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 0 [ 1122.609004][ T5907] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1122.663250][ T5907] usb 6-1: string descriptor 0 read error: -71 [ 1122.768913][ T5907] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1122.798342][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.839033][ T5907] usb 6-1: can't set config #1, error -71 [ 1122.872267][ T5907] usb 6-1: USB disconnect, device number 79 [ 1122.896350][T19675] pim6reg: entered allmulticast mode [ 1124.441602][T19697] fuse: Bad value for 'fd' [ 1124.781367][ T5907] usb 9-1: new low-speed USB device number 59 using dummy_hcd [ 1125.118508][ T5907] usb 9-1: device descriptor read/64, error -71 [ 1125.157319][T19707] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4059'. [ 1125.262033][T19712] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1125.358732][ T5907] usb 9-1: new low-speed USB device number 60 using dummy_hcd [ 1125.489295][ T5907] usb 9-1: device descriptor read/64, error -71 [ 1125.513100][ T970] hid-generic 0005:16C0:FFF9.0014: item fetching failed at offset 0/1 [ 1125.526155][ T970] hid-generic 0005:16C0:FFF9.0014: probe with driver hid-generic failed with error -22 [ 1125.944246][ T5907] usb usb9-port1: attempt power cycle [ 1126.998569][ T5907] usb 9-1: new low-speed USB device number 61 using dummy_hcd [ 1127.269492][ T5907] usb 9-1: device descriptor read/8, error -71 [ 1127.419238][T16770] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1127.804183][T16770] usb 10-1: Using ep0 maxpacket: 32 [ 1127.812516][T16770] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.823971][T16770] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.834900][T16770] usb 10-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1127.854136][T16770] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.866571][T19738] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.4068'. [ 1127.877380][T16770] usb 10-1: config 0 descriptor?? [ 1128.058025][T19748] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4070'. [ 1128.075508][T19748] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4070'. [ 1128.383935][T16770] greenasia 0003:0E8F:0012.0015: item fetching failed at offset 0/3 [ 1128.613881][T16770] greenasia 0003:0E8F:0012.0015: parse failed [ 1128.688906][T16770] greenasia 0003:0E8F:0012.0015: probe with driver greenasia failed with error -22 [ 1128.721576][T16770] usb 10-1: USB disconnect, device number 42 [ 1128.722644][T19751] binder: 19750:19751 ioctl c0306201 20000880 returned -14 [ 1129.255783][T19762] netlink: 'syz.9.4076': attribute type 3 has an invalid length. [ 1129.266433][T19762] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4076'. [ 1129.276287][T19762] netlink: 'syz.9.4076': attribute type 3 has an invalid length. [ 1129.285957][T19762] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4076'. [ 1131.519258][T16770] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1131.751677][T16770] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.762432][T16770] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1131.776389][T16770] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.796837][T16770] usb 10-1: config 0 descriptor?? [ 1131.806604][T16770] pwc: Askey VC010 type 2 USB webcam detected. [ 1132.012661][T16770] pwc: send_video_command error -71 [ 1132.019629][T16770] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1132.028200][T16770] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -71 [ 1132.063349][T16770] usb 10-1: USB disconnect, device number 43 [ 1132.599486][T16770] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1132.766175][T16770] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.783130][T16770] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1132.811364][T16770] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.856665][T16770] usb 10-1: config 0 descriptor?? [ 1132.880379][T16770] pwc: Askey VC010 type 2 USB webcam detected. [ 1133.278785][T16770] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1133.303153][T16770] pwc: recv_control_msg error -32 req 02 val 2700 [ 1133.328923][T16770] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1133.354930][T19785] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1133.370525][T16770] pwc: recv_control_msg error -32 req 04 val 1000 [ 1133.391762][T16770] pwc: recv_control_msg error -32 req 04 val 1300 [ 1133.399268][T19785] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 1133.418939][T16770] pwc: recv_control_msg error -32 req 04 val 1400 [ 1133.436072][T16770] pwc: recv_control_msg error -32 req 02 val 2000 [ 1133.446562][T16770] pwc: recv_control_msg error -32 req 02 val 2100 [ 1133.456881][T16770] pwc: recv_control_msg error -32 req 04 val 1500 [ 1133.469519][T16770] pwc: recv_control_msg error -32 req 02 val 2500 [ 1133.535699][T16770] pwc: recv_control_msg error -32 req 02 val 2400 [ 1133.553578][T16770] pwc: recv_control_msg error -32 req 02 val 2600 [ 1136.174883][T19756] bond0: (slave macvlan4): Error -98 calling set_mac_address [ 1136.187874][T19781] netlink: 'syz.6.4081': attribute type 10 has an invalid length. [ 1136.197672][T19798] bpf: Bad value for 'uid' [ 1136.454143][T16770] pwc: recv_control_msg error -71 req 02 val 2800 [ 1136.759485][T16770] pwc: recv_control_msg error -71 req 04 val 1100 [ 1137.588009][T16770] pwc: recv_control_msg error -71 req 04 val 1200 [ 1137.604801][T19816] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4089'. [ 1137.639164][T16770] pwc: Registered as video103. [ 1137.645110][T16770] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input55 [ 1137.667525][T16770] usb 10-1: USB disconnect, device number 44 [ 1138.045480][T19818] bridge0: port 3(vlan2) entered blocking state [ 1138.052916][T19818] bridge0: port 3(vlan2) entered disabled state [ 1138.059897][T19818] vlan2: entered allmulticast mode [ 1138.069358][T19818] ip6gretap0: entered allmulticast mode [ 1138.213629][T19818] vlan2: entered promiscuous mode [ 1138.229161][T19818] ip6gretap0: entered promiscuous mode [ 1138.545342][T19826] fuse: Bad value for 'fd' [ 1138.652334][T19818] bridge0: port 3(vlan2) entered blocking state [ 1138.658741][T19818] bridge0: port 3(vlan2) entered forwarding state [ 1138.874087][T19825] lo speed is unknown, defaulting to 1000 [ 1139.916321][T19844] loop2: detected capacity change from 0 to 7 [ 1139.942441][T19844] Dev loop2: unable to read RDB block 7 [ 1139.948145][T19844] loop2: unable to read partition table [ 1139.956275][T19844] loop2: partition table beyond EOD, truncated [ 1139.962803][T19844] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1140.209633][T19846] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4097'. [ 1140.639900][T19852] bond_slave_0: entered promiscuous mode [ 1140.645641][T19852] bond_slave_1: entered promiscuous mode [ 1140.702343][T19852] vlan2: entered promiscuous mode [ 1140.717802][T19852] bond0: entered promiscuous mode [ 1140.736091][T19852] bond0: left promiscuous mode [ 1140.765857][T19852] bond_slave_0: left promiscuous mode [ 1140.771384][T19852] bond_slave_1: left promiscuous mode [ 1140.899907][T19854] bond0: (slave macvlan4): Opening slave failed [ 1140.925347][T19860] bpf: Bad value for 'uid' [ 1141.229452][T19865] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1141.310430][T19865] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 1141.724404][T19877] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4105'. [ 1141.769441][T19881] xt_TCPMSS: Only works on TCP SYN packets [ 1141.845792][T19881] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4104'. [ 1142.113141][T19888] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4109'. [ 1142.149376][T19888] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4109'. [ 1143.201491][T19897] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4110'. [ 1143.660521][T19917] overlayfs: overlapping lowerdir path [ 1144.075621][T19925] 9pnet_fd: Insufficient options for proto=fd [ 1144.888652][T19934] fuse: Bad value for 'fd' [ 1145.347660][T19941] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1146.369187][T19943] binder: 19942:19943 ioctl c00c6211 9999999999999999 returned -14 [ 1147.019375][T19951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1147.858577][T16770] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1148.020721][T16770] usb 7-1: Using ep0 maxpacket: 8 [ 1148.032924][T16770] usb 7-1: config 135 has an invalid interface number: 230 but max is 0 [ 1148.046499][T16770] usb 7-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.089554][T16770] usb 7-1: config 135 has no interface number 0 [ 1148.118758][T16770] usb 7-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1148.195215][T16770] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1148.202164][T19964] CUSE: unknown device info "" [ 1148.227479][T16770] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.324713][T16770] usb 7-1: Product: syz [ 1148.324798][T16770] usb 7-1: Manufacturer: syz [ 1148.324872][T16770] usb 7-1: SerialNumber: syz [ 1148.334181][T19964] CUSE: unknown device info "appraise_type" [ 1148.339389][T19970] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4131'. [ 1148.747848][ T5876] usb 7-1: USB disconnect, device number 12 [ 1148.774236][T19964] CUSE: DEVNAME unspecified [ 1148.942858][T19964] lo speed is unknown, defaulting to 1000 [ 1150.568109][T19993] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4138'. [ 1151.098811][T20007] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4143'. [ 1151.877573][T20013] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4146'. [ 1152.174304][T20025] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1152.211778][T20025] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 1152.665513][T20037] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4152'. [ 1152.674583][T20037] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4152'. [ 1153.112879][T20042] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4155'. [ 1153.330858][T20052] bond0: (slave macvlan4): Error -98 calling set_mac_address [ 1153.458622][ T5884] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1153.612696][ T5884] usb 10-1: no configurations [ 1153.618201][ T5884] usb 10-1: can't read configurations, error -22 [ 1153.777340][ T5884] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1153.953437][ T5884] usb 10-1: no configurations [ 1154.037901][ T5884] usb 10-1: can't read configurations, error -22 [ 1154.171631][ T5884] usb usb10-port1: attempt power cycle [ 1154.200213][T20072] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4167'. [ 1154.365351][T20081] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4170'. [ 1154.465572][T20087] misc userio: No port type given on /dev/userio [ 1154.543868][ T5884] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1154.548013][ T29] audit: type=1326 audit(1731326703.546:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20090 comm="syz.6.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318f17e719 code=0x7ffc0000 [ 1154.559175][T20092] No such timeout policy "syz0" [ 1154.614896][ T29] audit: type=1326 audit(1731326703.596:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20090 comm="syz.6.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318f17e719 code=0x7ffc0000 [ 1154.621015][T20085] block device autoloading is deprecated and will be removed. [ 1154.637817][ T29] audit: type=1326 audit(1731326703.596:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20090 comm="syz.6.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f318f17d0b0 code=0x7ffc0000 [ 1154.666775][ C1] vkms_vblank_simulate: vblank timer overrun [ 1154.685533][ T5884] usb 10-1: no configurations [ 1154.688257][T20085] NILFS (loop11): device size too small [ 1154.692514][ T5884] usb 10-1: can't read configurations, error -22 [ 1154.697455][ T29] audit: type=1326 audit(1731326703.606:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20090 comm="syz.6.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f318f17e31b code=0x7ffc0000 [ 1154.801167][ T29] audit: type=1326 audit(1731326703.606:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20090 comm="syz.6.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f318f17e31b code=0x7ffc0000 [ 1154.832161][ T29] audit: type=1326 audit(1731326703.616:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20090 comm="syz.6.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f318f17e31b code=0x7ffc0000 [ 1154.858658][ T29] audit: type=1326 audit(1731326703.616:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20090 comm="syz.6.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f318f17e31b code=0x7ffc0000 [ 1154.880210][ C1] vkms_vblank_simulate: vblank timer overrun [ 1154.887282][T16770] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1154.958800][ T5884] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1155.075810][ T29] audit: type=1326 audit(1731326703.776:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20090 comm="syz.6.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f318f17e31b code=0x7ffc0000 [ 1155.097434][ C1] vkms_vblank_simulate: vblank timer overrun [ 1155.190672][ T29] audit: type=1326 audit(1731326703.826:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20090 comm="syz.6.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f318f17e31b code=0x7ffc0000 [ 1155.285413][ T29] audit: type=1326 audit(1731326703.916:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20090 comm="syz.6.4175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f318f17e31b code=0x7ffc0000 [ 1155.289395][T20095] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4176'. [ 1155.379941][ T5884] usb 10-1: no configurations [ 1155.384707][ T5884] usb 10-1: can't read configurations, error -22 [ 1155.455369][ T5884] usb usb10-port1: unable to enumerate USB device [ 1155.566658][T16770] usb 7-1: Using ep0 maxpacket: 8 [ 1155.686700][T16770] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1155.747929][T16770] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1155.823363][T16770] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1155.885410][T16770] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1156.016102][T16770] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1156.174078][T20108] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1156.369810][T16770] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.494792][T20118] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4184'. [ 1156.570637][T20120] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4184'. [ 1156.595445][T20120] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4184'. [ 1156.759711][T16770] usb 7-1: usb_control_msg returned -71 [ 1156.765928][T16770] usbtmc 7-1:16.0: can't read capabilities [ 1156.775846][T16770] usb 7-1: USB disconnect, device number 13 [ 1156.806630][T20123] netlink: 'syz.9.4185': attribute type 10 has an invalid length. [ 1156.828523][ T5876] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1157.439200][ T5876] usb 6-1: Using ep0 maxpacket: 16 [ 1157.450347][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.656191][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.666545][ T5876] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1157.679746][ T5876] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1157.689068][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.709382][ T5876] usb 6-1: config 0 descriptor?? [ 1159.469084][ T5876] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0016/input/input56 [ 1159.830946][ T5876] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1159.859093][ T5876] usb 6-1: USB disconnect, device number 80 [ 1161.009431][T20174] fuse: Bad value for 'fd' [ 1161.078759][ T5884] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1161.242061][T20176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4199'. [ 1161.380602][ T5884] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 1161.414096][ T5884] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1161.425170][ T5884] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1162.034329][ T5884] usb 7-1: config 64 interface 0 has no altsetting 0 [ 1162.278727][ T5884] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1162.287756][ T5884] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1162.308013][ T5884] usb 7-1: config 64 interface 0 has no altsetting 0 [ 1162.319934][ T5884] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1162.329275][ T5884] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1162.348216][ T5884] usb 7-1: config 64 interface 0 has no altsetting 0 [ 1162.356835][ T5884] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1162.366713][ T5884] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1162.379675][ T5884] usb 7-1: config 64 interface 0 has no altsetting 0 [ 1162.390344][ T5884] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1162.409729][ T5884] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1162.559418][ T5884] usb 7-1: config 64 interface 0 has no altsetting 0 [ 1162.727864][ T5907] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1162.768666][ T5884] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1162.777907][ T5884] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1162.792226][ T5884] usb 7-1: config 64 interface 0 has no altsetting 0 [ 1163.049336][ T5884] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1163.059218][ T5884] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1163.070429][ T5884] usb 7-1: config 64 interface 0 has no altsetting 0 [ 1163.077799][ T5907] usb 9-1: Using ep0 maxpacket: 8 [ 1163.084247][ T5884] usb 7-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 1163.119140][ T5884] usb 7-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1163.212285][ T5884] usb 7-1: config 64 interface 0 has no altsetting 0 [ 1163.362502][ T5907] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1163.373037][ T5884] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1163.382500][ T5884] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1163.395755][ T5907] usb 9-1: config 179 has no interface number 0 [ 1163.402374][ T5884] usb 7-1: Product: syz [ 1163.406539][ T5884] usb 7-1: Manufacturer: syz [ 1163.415456][ T5907] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1163.465699][ T5884] usb 7-1: SerialNumber: syz [ 1163.473712][ T5907] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1163.478053][T20202] bond0: (slave macvlan4): Opening slave failed [ 1163.699561][T20206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.703999][ T5884] yurex 7-1:64.0: USB YUREX device now attached to Yurex #0 [ 1163.708261][T20206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.724820][ T5907] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1163.748128][ T5907] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1163.771310][ T5907] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1163.790903][ T5907] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1163.802652][ T5907] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.815810][T20195] lo speed is unknown, defaulting to 1000 [ 1163.847704][T20188] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1163.943541][ T5907] usb 7-1: USB disconnect, device number 14 [ 1163.959149][ T5907] yurex 7-1:64.0: USB YUREX #0 now disconnected [ 1164.069438][ T5884] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input57 [ 1164.123057][T20217] xt_connbytes: Forcing CT accounting to be enabled [ 1164.132634][T20217] --map-set only usable from mangle table [ 1164.202987][T20219] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1164.221542][T20219] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 1164.758820][ T5907] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1165.893087][ T5907] usb 7-1: config 0 has no interfaces? [ 1165.900483][ T5907] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1165.909808][ T5907] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1165.917894][ T5907] usb 7-1: Product: syz [ 1165.966532][ T5907] usb 7-1: Manufacturer: syz [ 1165.975890][ T5907] usb 7-1: config 0 descriptor?? [ 1166.021157][ T5907] usb 9-1: USB disconnect, device number 63 [ 1166.027118][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1166.027144][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1166.084846][ T5907] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1166.167309][T20237] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4215'. [ 1166.207675][ T970] usb 7-1: USB disconnect, device number 15 [ 1166.502001][T20241] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1167.205891][T20248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4218'. [ 1167.658045][T20255] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1167.865375][T20255] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1168.126288][T20266] program syz.6.4223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1169.639366][ T5876] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1169.819500][ T5876] usb 7-1: Using ep0 maxpacket: 32 [ 1169.844627][ T5876] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1169.872938][ T5876] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.942358][ T5876] usb 7-1: config 0 has no interface number 0 [ 1169.954510][ T5876] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1169.963753][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.996665][ T5876] usb 7-1: config 0 descriptor?? [ 1170.257780][T20301] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1171.615806][T20313] CUSE: unknown device info "" [ 1171.628880][T20313] CUSE: unknown device info "appraise_type" [ 1171.645043][T20313] CUSE: DEVNAME unspecified [ 1171.793334][ T5876] usb 7-1: USB disconnect, device number 16 [ 1171.868976][T20318] lo speed is unknown, defaulting to 1000 [ 1172.321623][T20337] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4241'. [ 1172.666939][T20346] ɶƣ0GC: entered promiscuous mode [ 1173.569541][ T970] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1173.729455][ T970] usb 9-1: Using ep0 maxpacket: 8 [ 1173.746108][ T970] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1173.764072][ T970] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1173.785388][ T970] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.809942][ T970] usb 9-1: config 0 descriptor?? [ 1173.899318][T20365] CUSE: unknown device info "" [ 1173.904232][T20365] CUSE: unknown device info "appraise_type" [ 1173.910543][T20365] CUSE: DEVNAME unspecified [ 1174.107581][T20371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1174.136304][T20369] lo speed is unknown, defaulting to 1000 [ 1174.367733][ T970] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1174.381367][ T970] usb 9-1: USB disconnect, device number 64 [ 1174.393732][ T970] iowarrior 9-1:0.0: I/O-Warror #0 now disconnected [ 1175.886237][T20395] netlink: 165 bytes leftover after parsing attributes in process `syz.9.4262'. [ 1175.898686][T20395] program syz.9.4262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1175.969492][T20399] netlink: 80 bytes leftover after parsing attributes in process `syz.8.4263'. [ 1175.979557][T20399] netlink: 80 bytes leftover after parsing attributes in process `syz.8.4263'. [ 1177.466381][T20414] batman_adv: batadv0: Removing interface: erspan1 [ 1177.511258][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.546386][T12413] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1177.568407][T20417] netlink: 54 bytes leftover after parsing attributes in process `syz.9.4267'. [ 1177.828959][T12413] usb 9-1: device descriptor read/64, error -71 [ 1177.917239][T20425] CUSE: unknown device info "" [ 1177.925471][T20425] CUSE: unknown device info "appraise_type" [ 1177.939666][T20425] CUSE: DEVNAME unspecified [ 1178.020264][T20422] nbd7: detected capacity change from 0 to 22 [ 1178.039516][T20422] block nbd7: shutting down sockets [ 1178.068824][T12413] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1178.127024][T20432] lo speed is unknown, defaulting to 1000 [ 1178.369221][T12413] usb 9-1: device descriptor read/64, error -71 [ 1178.450171][T20441] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1178.490858][T12413] usb usb9-port1: attempt power cycle [ 1178.856956][T20443] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4274'. [ 1178.879130][T12413] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1179.075088][T20443] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4274'. [ 1179.092333][T12413] usb 9-1: device descriptor read/8, error -71 [ 1179.479788][T20452] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1179.517681][T20452] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1179.533449][T12413] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1179.559620][T12413] usb 9-1: device descriptor read/8, error -71 [ 1179.727660][T12413] usb usb9-port1: unable to enumerate USB device [ 1180.415025][T20465] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4283'. [ 1180.445225][T20469] 9pnet_fd: Insufficient options for proto=fd [ 1180.462962][T20467] misc userio: No port type given on /dev/userio [ 1180.658783][T20470] No such timeout policy "syz0" [ 1181.286201][T20469] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4282'. [ 1182.906580][T20490] netlink: 'syz.8.4289': attribute type 5 has an invalid length. [ 1183.188894][T20490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.196428][T20490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.230091][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1183.448220][T20504] FAULT_INJECTION: forcing a failure. [ 1183.448220][T20504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1183.466654][T20504] CPU: 1 UID: 0 PID: 20504 Comm: syz.5.4294 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 1183.477484][T20504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1183.487577][T20504] Call Trace: [ 1183.490891][T20504] [ 1183.493843][T20504] dump_stack_lvl+0x241/0x360 [ 1183.498543][T20504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1183.503765][T20504] ? __pfx__printk+0x10/0x10 [ 1183.508386][T20504] ? __pfx_lock_release+0x10/0x10 [ 1183.513439][T20504] should_fail_ex+0x3b0/0x4e0 [ 1183.518140][T20504] _copy_from_user+0x2f/0xc0 [ 1183.522744][T20504] __sys_bpf+0x1a4/0x810 [ 1183.527007][T20504] ? __pfx___sys_bpf+0x10/0x10 [ 1183.531801][T20504] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1183.537806][T20504] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1183.544241][T20504] ? do_syscall_64+0x100/0x230 [ 1183.549029][T20504] __x64_sys_bpf+0x7c/0x90 [ 1183.553467][T20504] do_syscall_64+0xf3/0x230 [ 1183.557988][T20504] ? clear_bhb_loop+0x35/0x90 [ 1183.562684][T20504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.568595][T20504] RIP: 0033:0x7f3af1b7e719 [ 1183.573023][T20504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1183.592648][T20504] RSP: 002b:00007f3af2931038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1183.601082][T20504] RAX: ffffffffffffffda RBX: 00007f3af1d35f80 RCX: 00007f3af1b7e719 [ 1183.609072][T20504] RDX: 0000000000000048 RSI: 0000000020000100 RDI: 0300000000000000 [ 1183.617053][T20504] RBP: 00007f3af2931090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.625037][T20504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.633022][T20504] R13: 0000000000000001 R14: 00007f3af1d35f80 R15: 00007ffddd8525b8 [ 1183.641024][T20504] [ 1184.285075][T20530] fuse: Bad value for 'fd' [ 1184.876551][T20520] ceph: No mds server is up or the cluster is laggy [ 1185.003956][T20529] block device autoloading is deprecated and will be removed. [ 1186.036638][T20541] netlink: 'syz.6.4303': attribute type 32 has an invalid length. [ 1186.094081][T20541] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4303'. [ 1186.124236][T20541] (unnamed net_device) (uninitialized): option coupled_control: invalid value (232) [ 1188.465555][T20566] overlay: ./file0 is not a directory [ 1188.477779][T20565] netlink: 'syz.6.4313': attribute type 10 has an invalid length. [ 1188.493069][T20565] macvlan0: entered promiscuous mode [ 1188.518677][T20565] macvlan0: entered allmulticast mode [ 1188.536231][T20565] veth1_vlan: entered allmulticast mode [ 1188.551964][T20565] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1188.619271][T20570] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4312'. [ 1188.678511][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 1188.678531][ T29] audit: type=1400 audit(1731326738.671:3683): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="M" requested=w pid=20568 comm="syz.7.4311" [ 1188.817494][T20582] loop2: detected capacity change from 0 to 7 [ 1188.857711][T20582] Dev loop2: unable to read RDB block 7 [ 1188.867630][T20582] loop2: unable to read partition table [ 1188.879351][T20582] loop2: partition table beyond EOD, truncated [ 1188.893182][T20582] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1188.968974][ T5907] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1189.250446][T20591] fuse: Bad value for 'fd' [ 1189.350282][ T5907] usb 6-1: config 0 has an invalid descriptor of length 20, skipping remainder of the config [ 1189.425252][ T5907] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1189.537121][ T5907] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1189.550066][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.569576][ T5907] usb 6-1: Product: syz [ 1189.576478][ T5907] usb 6-1: Manufacturer: syz [ 1189.593562][ T5907] usb 6-1: SerialNumber: syz [ 1189.724063][ T5907] usb 6-1: config 0 descriptor?? [ 1189.761528][T20597] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4323'. [ 1189.991871][ T5907] usb 6-1: USB disconnect, device number 81 [ 1190.166539][T20610] input: syz0 as /devices/virtual/input/input58 [ 1190.647996][T20613] FAULT_INJECTION: forcing a failure. [ 1190.647996][T20613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1190.664734][T20613] CPU: 0 UID: 0 PID: 20613 Comm: syz.5.4328 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 1190.675529][T20613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1190.685579][T20613] Call Trace: [ 1190.688851][T20613] [ 1190.691862][T20613] dump_stack_lvl+0x241/0x360 [ 1190.696539][T20613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1190.701728][T20613] ? __pfx__printk+0x10/0x10 [ 1190.706309][T20613] ? snprintf+0xda/0x120 [ 1190.710544][T20613] should_fail_ex+0x3b0/0x4e0 [ 1190.715212][T20613] _copy_to_user+0x31/0xb0 [ 1190.719636][T20613] simple_read_from_buffer+0xca/0x150 [ 1190.725030][T20613] proc_fail_nth_read+0x1e9/0x250 [ 1190.730319][T20613] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1190.735857][T20613] ? rw_verify_area+0x55e/0x6f0 [ 1190.740698][T20613] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1190.746237][T20613] vfs_read+0x1fc/0xb70 [ 1190.750384][T20613] ? fdget_pos+0x24e/0x320 [ 1190.754793][T20613] ? __pfx_vfs_read+0x10/0x10 [ 1190.759461][T20613] ? __fget_files+0x3f3/0x470 [ 1190.764139][T20613] ? fdget_pos+0x24e/0x320 [ 1190.768557][T20613] ksys_read+0x183/0x2b0 [ 1190.772810][T20613] ? __pfx_ksys_read+0x10/0x10 [ 1190.777566][T20613] ? do_syscall_64+0x100/0x230 [ 1190.782348][T20613] ? do_syscall_64+0xb6/0x230 [ 1190.787019][T20613] do_syscall_64+0xf3/0x230 [ 1190.791514][T20613] ? clear_bhb_loop+0x35/0x90 [ 1190.796185][T20613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.802070][T20613] RIP: 0033:0x7f3af1b7d15c [ 1190.806479][T20613] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1190.826117][T20613] RSP: 002b:00007f3af2931030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1190.834532][T20613] RAX: ffffffffffffffda RBX: 00007f3af1d35f80 RCX: 00007f3af1b7d15c [ 1190.842499][T20613] RDX: 000000000000000f RSI: 00007f3af29310a0 RDI: 0000000000000003 [ 1190.850462][T20613] RBP: 00007f3af2931090 R08: 0000000000000000 R09: 0000000000000000 [ 1190.858429][T20613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1190.866406][T20613] R13: 0000000000000000 R14: 00007f3af1d35f80 R15: 00007ffddd8525b8 [ 1190.874383][T20613] [ 1192.490338][T20644] FAULT_INJECTION: forcing a failure. [ 1192.490338][T20644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1192.508560][T20644] CPU: 0 UID: 0 PID: 20644 Comm: syz.8.4339 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 1192.519370][T20644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1192.529457][T20644] Call Trace: [ 1192.532759][T20644] [ 1192.535715][T20644] dump_stack_lvl+0x241/0x360 [ 1192.540441][T20644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1192.545670][T20644] ? __pfx__printk+0x10/0x10 [ 1192.550302][T20644] ? snprintf+0xda/0x120 [ 1192.554583][T20644] should_fail_ex+0x3b0/0x4e0 [ 1192.559294][T20644] _copy_to_user+0x31/0xb0 [ 1192.563736][T20644] simple_read_from_buffer+0xca/0x150 [ 1192.569149][T20644] proc_fail_nth_read+0x1e9/0x250 [ 1192.574204][T20644] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1192.579781][T20644] ? rw_verify_area+0x55e/0x6f0 [ 1192.584659][T20644] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1192.590247][T20644] vfs_read+0x1fc/0xb70 [ 1192.594438][T20644] ? fdget_pos+0x24e/0x320 [ 1192.598884][T20644] ? __pfx_vfs_read+0x10/0x10 [ 1192.603592][T20644] ? __fget_files+0x3f3/0x470 [ 1192.608299][T20644] ? fdget_pos+0x24e/0x320 [ 1192.612740][T20644] ksys_read+0x183/0x2b0 [ 1192.616980][T20644] ? __pfx_ksys_read+0x10/0x10 [ 1192.621741][T20644] ? do_syscall_64+0x100/0x230 [ 1192.626500][T20644] ? do_syscall_64+0xb6/0x230 [ 1192.631167][T20644] do_syscall_64+0xf3/0x230 [ 1192.635664][T20644] ? clear_bhb_loop+0x35/0x90 [ 1192.640332][T20644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.646221][T20644] RIP: 0033:0x7f4b3097d15c [ 1192.650656][T20644] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1192.670348][T20644] RSP: 002b:00007f4b317b2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1192.678760][T20644] RAX: ffffffffffffffda RBX: 00007f4b30b35f80 RCX: 00007f4b3097d15c [ 1192.686731][T20644] RDX: 000000000000000f RSI: 00007f4b317b20a0 RDI: 0000000000000004 [ 1192.694726][T20644] RBP: 00007f4b317b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.702719][T20644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1192.710728][T20644] R13: 0000000000000000 R14: 00007f4b30b35f80 R15: 00007ffeadb3f898 [ 1192.718705][T20644] [ 1193.486054][T20658] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1194.144111][T20669] fuse: Bad value for 'fd' [ 1194.257627][T20671] fuse: Bad value for 'fd' [ 1194.311813][T20676] overlayfs: failed to resolve './file0': -2 [ 1194.348034][T20679] netlink: 6 bytes leftover after parsing attributes in process `syz.9.4350'. [ 1195.409207][ T5907] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1195.431622][T20694] bridge_slave_0: left allmulticast mode [ 1195.459586][T20694] bridge_slave_0: left promiscuous mode [ 1195.467374][T20695] netlink: 54 bytes leftover after parsing attributes in process `syz.6.4356'. [ 1195.477315][T20694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.541379][T20694] bridge_slave_1: left allmulticast mode [ 1195.557513][T20694] bridge_slave_1: left promiscuous mode [ 1195.594265][T20694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.604160][ T5907] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1195.615873][ T5907] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1195.626740][ T5907] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1195.636461][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.650798][T20689] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1195.662192][ T5907] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1195.665508][T20694] bond0: (slave bond_slave_0): Releasing backup interface [ 1195.882256][ T5907] usb 6-1: USB disconnect, device number 82 [ 1195.916637][T20694] bond0: (slave bond_slave_1): Releasing backup interface [ 1196.007791][T20694] team0: Port device team_slave_0 removed [ 1196.032151][T20694] team0: Port device team_slave_1 removed [ 1196.038769][T20694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1196.055532][T20694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1196.078195][T20694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1196.088108][T20694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1196.105802][T20694] bond0: (slave macvlan0): Releasing backup interface [ 1196.122517][T20694] veth1_vlan: left allmulticast mode [ 1196.330783][ T29] audit: type=1400 audit(1731326746.331:3684): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="M" requested=w pid=20715 comm="syz.6.4363" daddr=::ffff:0.0.0.0 [ 1196.352047][ T29] audit: type=1400 audit(1731326746.351:3685): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="M" requested=w pid=20715 comm="syz.6.4363" dest=20001 [ 1196.471571][T20718] bond0: (slave macvlan2): Opening slave failed [ 1196.498662][ T970] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1196.648822][ T970] usb 9-1: Using ep0 maxpacket: 16 [ 1196.674440][ T970] usb 9-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=5e.a7 [ 1196.690486][T20721] bond0: (slave macvlan2): Opening slave failed [ 1196.702761][ T970] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.725375][ T970] usb 9-1: Product: syz [ 1196.735174][ T970] usb 9-1: Manufacturer: syz [ 1196.741267][ T970] usb 9-1: SerialNumber: syz [ 1196.749700][ T970] usb 9-1: config 0 descriptor?? [ 1197.062601][T20734] overlayfs: overlapping lowerdir path [ 1197.179515][ T970] mxuport 9-1:0.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 1197.187231][ T970] mxuport 9-1:0.0: probe with driver mxuport failed with error -5 [ 1197.534922][T20744] fuse: Bad value for 'fd' [ 1197.622055][T20714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.728948][T20714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.741738][T20745] FAULT_INJECTION: forcing a failure. [ 1197.741738][T20745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1197.791504][ T29] audit: type=1326 audit(1731326747.787:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20726 comm="syz.6.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318f17e719 code=0x7fc00000 [ 1197.827588][T20745] CPU: 1 UID: 0 PID: 20745 Comm: syz.7.4373 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 1197.838375][T20745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1197.848452][T20745] Call Trace: [ 1197.851741][T20745] [ 1197.854665][T20745] dump_stack_lvl+0x241/0x360 [ 1197.859340][T20745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1197.864550][T20745] ? __pfx__printk+0x10/0x10 [ 1197.869146][T20745] ? __pfx_lock_release+0x10/0x10 [ 1197.874197][T20745] should_fail_ex+0x3b0/0x4e0 [ 1197.878887][T20745] _copy_from_iter+0x21f/0x1e70 [ 1197.883736][T20745] ? __virt_addr_valid+0x183/0x530 [ 1197.888843][T20745] ? __pfx_lock_release+0x10/0x10 [ 1197.893865][T20745] ? __alloc_skb+0x28f/0x440 [ 1197.898451][T20745] ? __pfx__copy_from_iter+0x10/0x10 [ 1197.903760][T20745] ? __virt_addr_valid+0x183/0x530 [ 1197.908866][T20745] ? __virt_addr_valid+0x183/0x530 [ 1197.913978][T20745] ? __virt_addr_valid+0x45f/0x530 [ 1197.919087][T20745] ? __check_object_size+0x48e/0x900 [ 1197.924369][T20745] netlink_sendmsg+0x73d/0xcb0 [ 1197.929149][T20745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1197.934449][T20745] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1197.939724][T20745] __sock_sendmsg+0x221/0x270 [ 1197.944395][T20745] ____sys_sendmsg+0x52a/0x7e0 [ 1197.949156][T20745] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1197.954443][T20745] __sys_sendmsg+0x292/0x380 [ 1197.959021][T20745] ? __pfx___sys_sendmsg+0x10/0x10 [ 1197.964121][T20745] ? __pfx_vfs_write+0x10/0x10 [ 1197.968899][T20745] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1197.975224][T20745] ? do_syscall_64+0x100/0x230 [ 1197.979994][T20745] ? do_syscall_64+0xb6/0x230 [ 1197.984666][T20745] do_syscall_64+0xf3/0x230 [ 1197.989180][T20745] ? clear_bhb_loop+0x35/0x90 [ 1197.993874][T20745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.999767][T20745] RIP: 0033:0x7f42dfb7e719 [ 1198.004189][T20745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1198.023813][T20745] RSP: 002b:00007f42e09a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1198.032231][T20745] RAX: ffffffffffffffda RBX: 00007f42dfd35f80 RCX: 00007f42dfb7e719 [ 1198.040211][T20745] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 000000000000000a [ 1198.048178][T20745] RBP: 00007f42e09a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1198.056146][T20745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1198.064109][T20745] R13: 0000000000000000 R14: 00007f42dfd35f80 R15: 00007fffb97171b8 [ 1198.072096][T20745] [ 1198.289631][T20714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.368765][T20751] netlink: 25 bytes leftover after parsing attributes in process `syz.6.4374'. [ 1199.059045][T20714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.086823][ T970] usb 9-1: USB disconnect, device number 69 [ 1199.908669][T20766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4381'. [ 1199.920530][T20766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4381'. [ 1201.242192][T20782] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1202.180025][T20792] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4387'. [ 1202.370558][T20796] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1203.914361][T20814] netlink: 84 bytes leftover after parsing attributes in process `syz.7.4391'. [ 1203.994624][T20816] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4393'. [ 1204.005174][T20816] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4393'. [ 1206.098913][T12413] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1206.448872][T12413] usb 10-1: Using ep0 maxpacket: 8 [ 1206.456622][T12413] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1206.643009][T20846] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4400'. [ 1206.982913][T12413] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1206.994679][T12413] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1207.006269][T12413] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1207.024619][T12413] usb 10-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1207.056986][T12413] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.182984][T12413] usb 10-1: Product: syz [ 1207.203322][T12413] usb 10-1: Manufacturer: syz [ 1207.331700][T12413] usb 10-1: SerialNumber: syz [ 1207.369996][T12413] usb 10-1: config 0 descriptor?? [ 1207.608605][T12413] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input59 [ 1207.630999][T20845] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9) [ 1207.637556][T20845] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1207.645835][T20845] vhci_hcd vhci_hcd.0: Device attached [ 1207.918848][ T970] usb 52-1: SetAddress Request (2) to port 0 [ 1207.926213][ T970] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1207.968850][T16770] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1208.215832][T20880] bond0: (slave macvlan2): Opening slave failed [ 1208.415193][T16770] usb 7-1: Using ep0 maxpacket: 16 [ 1208.429806][T16770] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1208.439141][T16770] usb 7-1: config 0 has no interface number 0 [ 1208.445402][T16770] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.456639][T16770] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.466847][T16770] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1208.476288][T16770] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.504772][T16770] usb 7-1: config 0 descriptor?? [ 1208.829421][T20861] vhci_hcd: connection reset by peer [ 1208.848197][T12413] imon:send_packet: packet tx failed (-71) [ 1208.889723][ T67] vhci_hcd: stop threads [ 1208.897916][ T67] vhci_hcd: release socket [ 1208.937169][T12413] imon 10-1:0.0: panel buttons/knobs setup failed [ 1209.028390][ T67] vhci_hcd: disconnect device [ 1209.229739][T12413] rc_core: IR keymap rc-imon-pad not found [ 1209.235810][T12413] Registered IR keymap rc-empty [ 1209.271161][T12413] imon 10-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1209.300158][T12413] imon 10-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1209.319017][T12413] imon:send_packet: packet tx failed (-71) [ 1209.338801][T12413] imon 10-1:0.0: remote input dev register failed [ 1209.355880][T12413] imon 10-1:0.0: imon_init_intf0: rc device setup failed [ 1210.239849][T20908] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1210.753502][T20858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4403'. [ 1210.762692][T20858] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4403'. [ 1210.962823][T16770] usbhid 7-1:0.1: can't add hid device: -71 [ 1210.969111][T16770] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 1210.981274][T16770] usb 7-1: USB disconnect, device number 17 [ 1211.202459][T12413] imon 10-1:0.0: unable to initialize intf0, err 0 [ 1211.210066][T12413] imon:imon_probe: failed to initialize context! [ 1211.238092][T12413] imon 10-1:0.0: unable to register, err -19 [ 1211.271796][T12413] usb 10-1: USB disconnect, device number 49 [ 1211.349199][T20913] bpf: Bad value for 'uid' [ 1211.356187][T20913] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4417'. [ 1211.376090][T20913] ipvlan2: entered allmulticast mode [ 1211.382270][T20913] veth0_vlan: entered allmulticast mode [ 1211.547785][T20922] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1211.564529][T20922] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 1211.961516][T20936] tipc: Enabling of bearer rejected, failed to enable media [ 1213.057380][ T970] usb 52-1: device descriptor read/8, error -110 [ 1213.190779][T20948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1213.208734][T20948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1213.597003][T20955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1213.622896][T12413] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1214.135963][ T970] usb usb52-port1: attempt power cycle [ 1214.306907][T20958] Cannot find add_set index 0 as target [ 1214.384008][T20964] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4435'. [ 1214.657121][T20968] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1215.552775][ T970] usb usb52-port1: unable to enumerate USB device [ 1216.241251][T20977] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4436'. [ 1218.285948][T21002] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1218.336359][T21002] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 1218.510471][T21004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1219.344918][T21008] binder: 21007:21008 ioctl c018620c 200005c0 returned -22 [ 1219.394811][T21020] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4449'. [ 1219.558763][T21023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1220.360668][ T29] audit: type=1400 audit(1731326770.367:3687): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="M" requested=w pid=21026 comm="syz.9.4450" daddr=::ffff:0.0.0.0 [ 1220.400195][ T29] audit: type=1400 audit(1731326770.387:3688): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="M" requested=w pid=21026 comm="syz.9.4450" dest=20001 [ 1220.478671][T21030] netlink: 'syz.5.4452': attribute type 1 has an invalid length. [ 1220.706216][T21043] CUSE: unknown device info "" [ 1220.723201][T21043] CUSE: unknown device info "appraise_type" [ 1220.738730][T21043] CUSE: DEVNAME unspecified [ 1220.909925][T21047] lo speed is unknown, defaulting to 1000 [ 1220.948888][ T5884] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1221.169337][T21051] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1221.691186][ T5884] usb 10-1: Using ep0 maxpacket: 32 [ 1221.698387][ T5884] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1221.743429][ T5884] usb 10-1: can't read configurations, error -61 [ 1222.448726][ T5884] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1222.759024][ T5884] usb 10-1: Using ep0 maxpacket: 32 [ 1223.099535][ T5884] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1223.107427][ T5884] usb 10-1: can't read configurations, error -61 [ 1223.119306][ T5884] usb usb10-port1: attempt power cycle [ 1224.079699][ T5884] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1224.339140][ T5884] usb 10-1: device not accepting address 52, error -71 [ 1224.618902][ T5878] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1224.665518][T21096] netlink: 'syz.5.4470': attribute type 29 has an invalid length. [ 1224.675659][T21096] netlink: 'syz.5.4470': attribute type 29 has an invalid length. [ 1224.775850][T21100] netlink: 500 bytes leftover after parsing attributes in process `syz.5.4470'. [ 1225.141749][ T5878] usb 7-1: device descriptor read/64, error -71 [ 1225.596658][ T5878] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1225.614755][T21112] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 1, id = 0 [ 1225.742985][ T5878] usb 7-1: device descriptor read/64, error -71 [ 1225.863626][ T5878] usb usb7-port1: attempt power cycle [ 1226.229152][ T5878] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1226.285610][ T5878] usb 7-1: device descriptor read/8, error -71 [ 1226.452946][ T5884] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1226.494740][T21108] x_tables: ip6_tables: string.1 match: invalid size 160 (kernel) != (user) 200 [ 1226.568883][ T5878] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1226.589578][ T5878] usb 7-1: device descriptor read/8, error -71 [ 1226.608675][ T5884] usb 6-1: Using ep0 maxpacket: 8 [ 1226.655003][ T5884] usb 6-1: config 3 has an invalid interface number: 73 but max is 2 [ 1226.665856][ T5884] usb 6-1: config 3 has an invalid interface number: 78 but max is 2 [ 1226.674262][ T5884] usb 6-1: config 3 has no interface number 1 [ 1226.680525][ T5884] usb 6-1: config 3 has no interface number 2 [ 1226.686717][ T5884] usb 6-1: config 3 interface 73 altsetting 14 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1226.698350][ T5884] usb 6-1: config 3 interface 73 altsetting 14 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1226.709537][ T5884] usb 6-1: config 3 interface 73 altsetting 14 has a duplicate endpoint with address 0x7, skipping [ 1226.719269][ T5878] usb usb7-port1: unable to enumerate USB device [ 1226.721094][ T5884] usb 6-1: config 3 interface 0 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1226.771021][ T5884] usb 6-1: config 3 interface 0 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 1226.798540][ T5884] usb 6-1: config 3 interface 0 altsetting 7 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1226.828225][ T5884] usb 6-1: config 3 interface 0 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 1226.858564][ T5884] usb 6-1: config 3 interface 0 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1226.884721][ T5884] usb 6-1: config 3 interface 0 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 1226.895717][ T5884] usb 6-1: config 3 interface 0 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 1226.907511][ T5884] usb 6-1: config 3 interface 0 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 1226.918212][ T5884] usb 6-1: config 3 interface 0 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 1226.930304][ T5884] usb 6-1: config 3 interface 0 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1226.941286][ T5884] usb 6-1: config 3 interface 0 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 1226.952390][ T5884] usb 6-1: config 3 interface 78 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 1226.972876][ T5884] usb 6-1: config 3 interface 73 has no altsetting 0 [ 1226.986810][T21121] netlink: 'syz.9.4478': attribute type 1 has an invalid length. [ 1226.995320][ T5884] usb 6-1: config 3 interface 0 has no altsetting 0 [ 1227.002198][ T5884] usb 6-1: config 3 interface 78 has no altsetting 0 [ 1227.009126][T21121] netlink: 9352 bytes leftover after parsing attributes in process `syz.9.4478'. [ 1227.019834][T21121] netlink: 'syz.9.4478': attribute type 1 has an invalid length. [ 1227.038694][ T5884] usb 6-1: New USB device found, idVendor=12d1, idProduct=d7e5, bcdDevice= f.b1 [ 1227.055885][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.065700][T21121] netlink: 'syz.9.4478': attribute type 2 has an invalid length. [ 1227.083648][ T5884] usb 6-1: Product: syz [ 1227.087995][T21121] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4478'. [ 1227.097416][ T5884] usb 6-1: Manufacturer: syz [ 1227.109043][ T5884] usb 6-1: SerialNumber: syz [ 1227.231693][T21123] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4480'. [ 1227.347010][T21110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.356509][T21110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.423571][ T5884] option 6-1:3.73: GSM modem (1-port) converter detected [ 1227.469427][ T5884] usb 6-1: USB disconnect, device number 83 [ 1227.482399][ T5884] option 6-1:3.73: device disconnected [ 1227.568816][T21136] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1227.597728][T21136] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 1227.609917][T21132] netlink: 'syz.6.4482': attribute type 1 has an invalid length. [ 1227.640784][T21132] openvswitch: netlink: Actions may not be safe on all matching packets [ 1227.878961][T12401] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1228.815320][T12401] usb 10-1: Using ep0 maxpacket: 16 [ 1228.823554][T12401] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1228.834785][T12401] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1228.845021][T12401] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1228.858229][T12401] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1228.868523][T12401] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.879777][ T5884] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1228.889328][T12401] usb 10-1: config 0 descriptor?? [ 1229.043786][ T5884] usb 7-1: config 0 has an invalid interface number: 18 but max is 0 [ 1229.069196][ T5884] usb 7-1: config 0 has no interface number 0 [ 1229.088583][ T5884] usb 7-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1229.118593][ T5884] usb 7-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1229.131816][ T5884] usb 7-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 1229.141841][ T5884] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1229.150472][ T5884] usb 7-1: Manufacturer: syz [ 1229.176796][ T5884] usb 7-1: config 0 descriptor?? [ 1229.243144][T21167] overlayfs: missing 'lowerdir' [ 1229.404008][T12401] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1229.415850][T12401] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0017/input/input61 [ 1229.478781][T12401] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1229.540011][T12053] usb 10-1: USB disconnect, device number 54 [ 1230.038669][T21175] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1230.169577][T21175] usb 9-1: device descriptor read/64, error -71 [ 1230.299817][T21193] netlink: 'syz.7.4500': attribute type 1 has an invalid length. [ 1230.308054][T21193] netlink: 512 bytes leftover after parsing attributes in process `syz.7.4500'. [ 1231.104306][T21195] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4502'. [ 1231.119459][ T5884] usbhid 7-1:0.18: can't add hid device: -71 [ 1231.127189][ T5884] usbhid 7-1:0.18: probe with driver usbhid failed with error -71 [ 1231.137038][ T5884] usb 7-1: USB disconnect, device number 22 [ 1231.178878][T21175] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1231.275692][T21203] --map-set only usable from mangle table [ 1231.282597][T21205] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4506'. [ 1231.319964][T21175] usb 9-1: device descriptor read/64, error -71 [ 1231.429229][T21175] usb usb9-port1: attempt power cycle [ 1231.791716][T21175] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1231.849089][ T5884] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1232.213902][T21175] usb 9-1: device descriptor read/8, error -71 [ 1232.256766][ T29] audit: type=1804 audit(1731326782.257:3689): pid=21231 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.7.4515" name="/newroot/544/file1" dev="fuse" ino=1 res=1 errno=0 [ 1232.291131][ T5884] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 1232.315741][ T5884] usb 6-1: config 0 has no interface number 0 [ 1232.318875][ T29] audit: type=1800 audit(1731326782.257:3690): pid=21231 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.4515" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1232.349801][ T5884] usb 6-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.408882][ T5884] usb 6-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.418510][ T29] audit: type=1804 audit(1731326782.287:3691): pid=21230 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.7.4515" name="/newroot/544/file1" dev="fuse" ino=1 res=1 errno=0 [ 1232.491499][ T29] audit: type=1804 audit(1731326782.287:3692): pid=21230 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.7.4515" name="/newroot/544/file1" dev="fuse" ino=1 res=1 errno=0 [ 1232.589766][T21175] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1232.598864][ T5884] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 1232.615971][T21175] usb 9-1: device descriptor read/8, error -71 [ 1232.622421][ T5884] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1232.630611][ T5884] usb 6-1: Manufacturer: syz [ 1232.637070][ T5884] usb 6-1: config 0 descriptor?? [ 1232.645425][ T29] audit: type=1800 audit(1731326782.287:3693): pid=21230 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.4515" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1232.653082][T21236] input: syz0 as /devices/virtual/input/input62 [ 1232.729575][T21175] usb usb9-port1: unable to enumerate USB device [ 1234.076095][ T29] audit: type=1400 audit(1731326784.077:3694): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="M" requested=w pid=21257 comm="syz.9.4526" [ 1234.232002][T21265] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1234.249162][T21265] vimc vimc.0: first entity in the pipe 'Scaler' is not a source [ 1235.059216][ T29] audit: type=1400 audit(1731326784.497:3695): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="M" requested=w pid=21264 comm="syz.9.4529" daddr=::ffff:224.0.0.16 dest=20000 [ 1235.220312][ T5884] usbhid 6-1:0.18: can't add hid device: -71 [ 1235.226510][ T5884] usbhid 6-1:0.18: probe with driver usbhid failed with error -71 [ 1235.281652][ T5884] usb 6-1: USB disconnect, device number 84 [ 1235.732407][T21282] FAULT_INJECTION: forcing a failure. [ 1235.732407][T21282] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.758816][T21282] CPU: 1 UID: 0 PID: 21282 Comm: syz.8.4532 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 1235.769640][T21282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1235.779721][T21282] Call Trace: [ 1235.783003][T21282] [ 1235.785924][T21282] dump_stack_lvl+0x241/0x360 [ 1235.790623][T21282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1235.795852][T21282] ? __pfx__printk+0x10/0x10 [ 1235.800473][T21282] ? fs_reclaim_acquire+0x93/0x130 [ 1235.805617][T21282] ? __pfx___might_resched+0x10/0x10 [ 1235.810937][T21282] should_fail_ex+0x3b0/0x4e0 [ 1235.815641][T21282] ? tomoyo_encode+0x26f/0x540 [ 1235.820441][T21282] should_failslab+0xac/0x100 [ 1235.825148][T21282] ? tomoyo_encode+0x26f/0x540 [ 1235.830198][T21282] __kmalloc_noprof+0xd8/0x400 [ 1235.834990][T21282] tomoyo_encode+0x26f/0x540 [ 1235.839622][T21282] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1235.845296][T21282] tomoyo_path_number_perm+0x23a/0x880 [ 1235.850789][T21282] ? tomoyo_path_number_perm+0x208/0x880 [ 1235.856447][T21282] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1235.862472][T21282] ? __fget_files+0x29/0x470 [ 1235.867069][T21282] ? __fget_files+0x3f3/0x470 [ 1235.871765][T21282] security_file_ioctl+0xc6/0x2a0 [ 1235.876796][T21282] __se_sys_ioctl+0x47/0x170 [ 1235.881395][T21282] do_syscall_64+0xf3/0x230 [ 1235.885901][T21282] ? clear_bhb_loop+0x35/0x90 [ 1235.890590][T21282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.896486][T21282] RIP: 0033:0x7f4b3097e719 [ 1235.900905][T21282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1235.920515][T21282] RSP: 002b:00007f4b317b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1235.928935][T21282] RAX: ffffffffffffffda RBX: 00007f4b30b35f80 RCX: 00007f4b3097e719 [ 1235.936903][T21282] RDX: 0000000020000000 RSI: 0000000040045612 RDI: 0000000000000003 [ 1235.944877][T21282] RBP: 00007f4b317b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1235.952847][T21282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1235.960814][T21282] R13: 0000000000000000 R14: 00007f4b30b35f80 R15: 00007ffeadb3f898 [ 1235.968812][T21282] [ 1236.005777][T21282] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1236.027998][T21282] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1236.078250][T21282] vimc vimc.0: subdev_call error Scaler [ 1236.120482][T21282] ------------[ cut here ]------------ [ 1236.125992][T21282] WARNING: CPU: 0 PID: 21282 at drivers/media/v4l2-core/v4l2-subdev.c:455 call_s_stream+0x222/0x280 [ 1236.137520][T21282] Modules linked in: [ 1236.141787][T21282] CPU: 0 UID: 0 PID: 21282 Comm: syz.8.4532 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 1236.152879][T21282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1236.163523][T21282] RIP: 0010:call_s_stream+0x222/0x280 [ 1236.169078][T21282] Code: a5 1c fa 48 8b 7d 00 48 c7 c6 80 46 cb 8c 89 da e8 b3 73 df 03 48 bd 00 00 00 00 00 fc ff df e9 06 ff ff ff e8 af fe b5 f9 90 <0f> 0b 90 e9 de fe ff ff 89 e9 80 e1 07 38 c1 0f 8c 09 fe ff ff 48 [ 1236.189866][T21282] RSP: 0018:ffffc9000b8af980 EFLAGS: 00010293 [ 1236.195973][T21282] RAX: ffffffff87dedb01 RBX: 0000000000000000 RCX: ffff888026da3c00 [ 1236.204667][T21282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1236.213010][T21282] RBP: 0000000000000000 R08: ffffffff87ded948 R09: fffffbfff1cf9fd0 [ 1236.222050][T21282] R10: dffffc0000000000 R11: ffffffff87ded8e0 R12: ffff888146ff9820 [ 1236.230552][T21282] R13: 0000000000000000 R14: 1ffff11028dff333 R15: 0000000000000000 [ 1236.238700][T21282] FS: 00007f4b317b26c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1236.248079][T21282] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1236.254919][T21282] CR2: 0000558d4a9a0f50 CR3: 0000000030fce000 CR4: 00000000003526f0 [ 1236.263627][T21282] Call Trace: [ 1236.266931][T21282] [ 1236.269973][T21282] ? __warn+0x168/0x4e0 [ 1236.274162][T21282] ? call_s_stream+0x222/0x280 [ 1236.279072][T21282] ? report_bug+0x2b3/0x500 [ 1236.283601][T21282] ? call_s_stream+0x222/0x280 [ 1236.288876][T21282] ? handle_bug+0x60/0x90 [ 1236.293245][T21282] ? exc_invalid_op+0x1a/0x50 [ 1236.297960][T21282] ? asm_exc_invalid_op+0x1a/0x20 [ 1236.303909][T21282] ? __pfx_call_s_stream+0x10/0x10 [ 1236.309172][T21282] ? call_s_stream+0x68/0x280 [ 1236.313882][T21282] ? call_s_stream+0x221/0x280 [ 1236.318815][T21282] ? call_s_stream+0x222/0x280 [ 1236.323609][T21282] ? __pfx_call_s_stream+0x10/0x10 [ 1236.329439][T21282] ? __pfx_call_s_stream+0x10/0x10 [ 1236.334595][T21282] vimc_streamer_pipeline_terminate+0x219/0x360 [ 1236.341029][T21282] vimc_streamer_s_stream+0x69f/0x800 [ 1236.346586][T21282] vimc_capture_start_streaming+0x230/0x440 [ 1236.352708][T21282] ? __video_do_ioctl+0x4ea/0xdd0 [ 1236.357785][T21282] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 1236.364858][T21282] vb2_start_streaming+0x129/0x440 [ 1236.370108][T21282] vb2_core_streamon+0x2b5/0x4c0 [ 1236.375069][T21282] __video_do_ioctl+0xc23/0xdd0 [ 1236.380381][T21282] ? __pfx___video_do_ioctl+0x10/0x10 [ 1236.385779][T21282] ? smack_log+0x123/0x540 [ 1236.390774][T21282] ? __might_fault+0xc6/0x120 [ 1236.395891][T21282] video_usercopy+0x89b/0x1180 [ 1236.401117][T21282] ? __pfx___video_do_ioctl+0x10/0x10 [ 1236.406589][T21282] ? __pfx_video_usercopy+0x10/0x10 [ 1236.411913][T21282] ? smack_file_ioctl+0x29e/0x3a0 [ 1236.416982][T21282] ? __fget_files+0x3f3/0x470 [ 1236.422328][T21282] v4l2_ioctl+0x189/0x1e0 [ 1236.426684][T21282] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1236.431694][T21282] __se_sys_ioctl+0xf9/0x170 [ 1236.436311][T21282] do_syscall_64+0xf3/0x230 [ 1236.440985][T21282] ? clear_bhb_loop+0x35/0x90 [ 1236.445843][T21282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.451986][T21282] RIP: 0033:0x7f4b3097e719 [ 1236.456961][T21282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1236.476863][T21282] RSP: 002b:00007f4b317b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1236.485925][T21282] RAX: ffffffffffffffda RBX: 00007f4b30b35f80 RCX: 00007f4b3097e719 [ 1236.494449][T21282] RDX: 0000000020000000 RSI: 0000000040045612 RDI: 0000000000000003 [ 1236.502759][T21282] RBP: 00007f4b317b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.511399][T21282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1236.519616][T21282] R13: 0000000000000000 R14: 00007f4b30b35f80 R15: 00007ffeadb3f898 [ 1236.527656][T21282] [ 1236.530866][T21282] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1236.538158][T21282] CPU: 0 UID: 0 PID: 21282 Comm: syz.8.4532 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0 [ 1236.548936][T21282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1236.559012][T21282] Call Trace: [ 1236.562304][T21282] [ 1236.565247][T21282] dump_stack_lvl+0x241/0x360 [ 1236.569948][T21282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1236.575147][T21282] ? __pfx__printk+0x10/0x10 [ 1236.579741][T21282] ? vscnprintf+0x5d/0x90 [ 1236.584074][T21282] panic+0x349/0x880 [ 1236.587967][T21282] ? __warn+0x177/0x4e0 [ 1236.592120][T21282] ? __pfx_panic+0x10/0x10 [ 1236.596556][T21282] __warn+0x34b/0x4e0 [ 1236.600570][T21282] ? call_s_stream+0x222/0x280 [ 1236.605337][T21282] report_bug+0x2b3/0x500 [ 1236.609710][T21282] ? call_s_stream+0x222/0x280 [ 1236.614477][T21282] handle_bug+0x60/0x90 [ 1236.618632][T21282] exc_invalid_op+0x1a/0x50 [ 1236.623133][T21282] asm_exc_invalid_op+0x1a/0x20 [ 1236.627978][T21282] RIP: 0010:call_s_stream+0x222/0x280 [ 1236.633351][T21282] Code: a5 1c fa 48 8b 7d 00 48 c7 c6 80 46 cb 8c 89 da e8 b3 73 df 03 48 bd 00 00 00 00 00 fc ff df e9 06 ff ff ff e8 af fe b5 f9 90 <0f> 0b 90 e9 de fe ff ff 89 e9 80 e1 07 38 c1 0f 8c 09 fe ff ff 48 [ 1236.652979][T21282] RSP: 0018:ffffc9000b8af980 EFLAGS: 00010293 [ 1236.659062][T21282] RAX: ffffffff87dedb01 RBX: 0000000000000000 RCX: ffff888026da3c00 [ 1236.667044][T21282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1236.675022][T21282] RBP: 0000000000000000 R08: ffffffff87ded948 R09: fffffbfff1cf9fd0 [ 1236.683020][T21282] R10: dffffc0000000000 R11: ffffffff87ded8e0 R12: ffff888146ff9820 [ 1236.691010][T21282] R13: 0000000000000000 R14: 1ffff11028dff333 R15: 0000000000000000 [ 1236.698998][T21282] ? __pfx_call_s_stream+0x10/0x10 [ 1236.704125][T21282] ? call_s_stream+0x68/0x280 [ 1236.708817][T21282] ? call_s_stream+0x221/0x280 [ 1236.713661][T21282] ? __pfx_call_s_stream+0x10/0x10 [ 1236.718882][T21282] ? __pfx_call_s_stream+0x10/0x10 [ 1236.724019][T21282] vimc_streamer_pipeline_terminate+0x219/0x360 [ 1236.730273][T21282] vimc_streamer_s_stream+0x69f/0x800 [ 1236.735654][T21282] vimc_capture_start_streaming+0x230/0x440 [ 1236.741610][T21282] ? __video_do_ioctl+0x4ea/0xdd0 [ 1236.746650][T21282] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 1236.753072][T21282] vb2_start_streaming+0x129/0x440 [ 1236.758279][T21282] vb2_core_streamon+0x2b5/0x4c0 [ 1236.763225][T21282] __video_do_ioctl+0xc23/0xdd0 [ 1236.768080][T21282] ? __pfx___video_do_ioctl+0x10/0x10 [ 1236.773448][T21282] ? smack_log+0x123/0x540 [ 1236.777863][T21282] ? __might_fault+0xc6/0x120 [ 1236.782546][T21282] video_usercopy+0x89b/0x1180 [ 1236.787313][T21282] ? __pfx___video_do_ioctl+0x10/0x10 [ 1236.792687][T21282] ? __pfx_video_usercopy+0x10/0x10 [ 1236.797895][T21282] ? smack_file_ioctl+0x29e/0x3a0 [ 1236.802930][T21282] ? __fget_files+0x3f3/0x470 [ 1236.807618][T21282] v4l2_ioctl+0x189/0x1e0 [ 1236.811965][T21282] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1236.816840][T21282] __se_sys_ioctl+0xf9/0x170 [ 1236.821444][T21282] do_syscall_64+0xf3/0x230 [ 1236.826040][T21282] ? clear_bhb_loop+0x35/0x90 [ 1236.830722][T21282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.836619][T21282] RIP: 0033:0x7f4b3097e719 [ 1236.841038][T21282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1236.860655][T21282] RSP: 002b:00007f4b317b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1236.869077][T21282] RAX: ffffffffffffffda RBX: 00007f4b30b35f80 RCX: 00007f4b3097e719 [ 1236.877048][T21282] RDX: 0000000020000000 RSI: 0000000040045612 RDI: 0000000000000003 [ 1236.885046][T21282] RBP: 00007f4b317b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.893012][T21282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1236.900978][T21282] R13: 0000000000000000 R14: 00007f4b30b35f80 R15: 00007ffeadb3f898 [ 1236.908958][T21282] [ 1236.912210][T21282] Kernel Offset: disabled [ 1236.916623][T21282] Rebooting in 86400 seconds..