last executing test programs: 9m31.234848488s ago: executing program 1 (id=112): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net\x00') fchdir(r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0)='P', 0x0, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f00000000c0), 0x0}, 0x20) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="850000002e000000270000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x803, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 9m30.33142352s ago: executing program 1 (id=115): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56369, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = epoll_create1(0x80000) r4 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x11) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc) getsockopt$inet6_dccp_buf(r8, 0x21, 0x2, &(0x7f0000000240)=""/208, &(0x7f0000000080)=0xd0) ioctl$sock_netrom_SIOCDELRT(r7, 0x890c, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000100)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r9, &(0x7f0000000040)={0x6000200e}) 9m29.248462917s ago: executing program 1 (id=119): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6707, 0x100, 0xfffffffe, 0x1cd}, &(0x7f00000005c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) 9m26.462079815s ago: executing program 1 (id=126): r0 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x32, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaa2aaaaaaaabbbbbbbbbbbb08"], 0x0) (fail_nth: 2) 9m25.363269556s ago: executing program 1 (id=128): ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x404001, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001a00)={{0x12, 0x1, 0x663c0cc142c0180e, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x304, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x70, 0xe6, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x7, 0xc, {0x9, 0x21, 0x7, 0x94, 0x1, {0x22, 0x6e8}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x9, 0x8}}}}}]}}]}}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xfe) mkdir(&(0x7f0000001d00)='./file0\x00', 0x40) 9m24.206760437s ago: executing program 1 (id=134): socket(0x2a, 0x2, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x184) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x0, 0x1}, 0x18, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) (async) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) (async) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) getpid() (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f00001fb000/0x4000)=nil, 0x4000, 0xb635773f05ebbee4, 0x810, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000003380)) eventfd2(0x0, 0x0) (async) r6 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000001c0)={0x0, r6}) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x4008af14, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000f40)={0x6, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 9m10.978155991s ago: executing program 32 (id=127): mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x88001, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x40045431, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f07ebbeec, 0x30, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$inet6(r4, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0), 0x4028) sendto$inet6(r4, 0x0, 0x0, 0x840, 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') mount_setattr(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000300)={0x27, 0x78}, 0x20) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) dup3(r4, 0xffffffffffffffff, 0x0) 9m9.124401979s ago: executing program 33 (id=132): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56369, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) epoll_create1(0x80000) syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) 9m9.053655173s ago: executing program 34 (id=134): socket(0x2a, 0x2, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x184) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x0, 0x1}, 0x18, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) (async) bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) (async) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) getpid() (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f00001fb000/0x4000)=nil, 0x4000, 0xb635773f05ebbee4, 0x810, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000003380)) eventfd2(0x0, 0x0) (async) r6 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000001c0)={0x0, r6}) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x4008af14, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000f40)={0x6, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 8m33.676809784s ago: executing program 4 (id=213): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 8m33.354924575s ago: executing program 4 (id=214): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000280)=[{}], 0x4000) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xf}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0xfffffffffffffca5) r2 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='auto_da_alloc', 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304, 0x38}, "faffffff0000003c", "82d7773879241628cb2d7129d5a01853", '\n\x00^ ', "614db575ffffffff"}, 0x28) 8m33.040115292s ago: executing program 4 (id=216): r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x50000, 0x0) fstatfs(r0, &(0x7f0000000100)=""/112) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000014c0)=@base={0xf, 0x4, 0x8, 0xacc, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x6, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) 8m32.274791894s ago: executing program 4 (id=220): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000e80)="1300000032001f00320300f9002304000a04d6", 0x13) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='snd_soc_jack_report\x00', r1}, 0x18) (async, rerun: 64) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 64) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 8m31.739067803s ago: executing program 4 (id=222): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x44, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x9, 0x87, &(0x7f0000000200)=""/135, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a190", 0x32}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r6}, 0x38) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8m30.254715515s ago: executing program 4 (id=227): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56369, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = epoll_create1(0x80000) r4 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x11) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_dccp_buf(r8, 0x21, 0x2, &(0x7f0000000240)=""/208, &(0x7f0000000080)=0xd0) ioctl$sock_netrom_SIOCDELRT(r7, 0x890c, 0x0) fsopen(&(0x7f0000000040)='hfs\x00', 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000100)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r9, &(0x7f0000000040)={0x6000200e}) 8m13.963650092s ago: executing program 35 (id=227): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56369, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = epoll_create1(0x80000) r4 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x11) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_dccp_buf(r8, 0x21, 0x2, &(0x7f0000000240)=""/208, &(0x7f0000000080)=0xd0) ioctl$sock_netrom_SIOCDELRT(r7, 0x890c, 0x0) fsopen(&(0x7f0000000040)='hfs\x00', 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000100)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r9, &(0x7f0000000040)={0x6000200e}) 8m11.605264298s ago: executing program 3 (id=259): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56369, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = epoll_create1(0x80000) r4 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x11) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) getsockopt$inet6_dccp_buf(r7, 0x21, 0x2, &(0x7f0000000240)=""/208, &(0x7f0000000080)=0xd0) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000100)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r8, &(0x7f0000000040)={0x6000200e}) 8m9.446216304s ago: executing program 3 (id=262): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56369, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r3 = epoll_create1(0x80000) r4 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x11) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x2, &(0x7f0000000240)=""/208, &(0x7f0000000080)=0xd0) ioctl$sock_netrom_SIOCDELRT(r7, 0x890c, 0x0) fsopen(&(0x7f0000000040)='hfs\x00', 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000100)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r8, &(0x7f0000000040)={0x6000200e}) 8m8.739720186s ago: executing program 3 (id=264): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740f8cb9694c01f2babb95936415d219753d982b3e6ab52070adabe6f61dce71e", 0x49) write$qrtrtun(r0, &(0x7f0000000240)="25375468d806d8f58187445ffe9858217350a60bd72487386e5fed8ee07cb6f6b4ecc8a6356cee94d42a3c845f5cbc57894aff8eacaae9da41cdfa6d7271cc7d040fe895bfad9e135d362cf74dd7ee61374eb3f4f4d18d0e5317", 0x5a) write$qrtrtun(r0, &(0x7f0000000900)="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", 0x3ba) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}}, 0x24008080) getpeername$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'pim6reg0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x230, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x214, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x230}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 8m8.513296281s ago: executing program 3 (id=266): syz_open_dev$video4linux(0x0, 0x101, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x6c6c, 0x40, 0xfffffffd, 0x32}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310400000000030000001600000018000180140002006e657464657673696d300000000000000500020001000000050003"], 0x3c}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0x3, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x11, @broadcast, 0x4000, 0x0, 'rr\x00', 0x14, 0x8, 0x67}, 0x2c) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r7}) close(r6) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 8m6.078294337s ago: executing program 3 (id=269): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87, 0xffffffffffffffff}, './file0\x00'}) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x7, {0x7, 0x0, "8092000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8m1.699323644s ago: executing program 3 (id=281): ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x404001, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001a00)={{0x12, 0x1, 0x663c0cc142c0180e, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x304, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x70, 0xe6, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x7, 0xc, {0x9, 0x21, 0x7, 0x94, 0x1, {0x22, 0x6e8}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x9, 0x8}}}}}]}}]}}, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9e, &(0x7f0000001ac0)=@string={0x9e, 0x3, "7acfebd62b97f13e6314dfe4fba3a690a14b7f5b10e9d5262f4b63083841627ff10d59df873b75f2fee1f68bf5174ea82bcd55380fc4dd156ded25d366ffcecc3e58f86b9fcc416792ea74c4b5b24ea726d8228ed124e18b21e4456fb3b86c9807a336e87f4332a1a6472c9cfad51fddb35263b6da3f6d4ad5fa49f02b3c4773be2d5e6334df4d9da3cdcf29ddf509e533b5e8bc3cadf312a9513c96"}}]}) fsmount(0xffffffffffffffff, 0x0, 0xfe) mkdir(&(0x7f0000001d00)='./file0\x00', 0x40) 7m46.637332536s ago: executing program 36 (id=281): ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x404001, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001a00)={{0x12, 0x1, 0x663c0cc142c0180e, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x304, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x70, 0xe6, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x7, 0xc, {0x9, 0x21, 0x7, 0x94, 0x1, {0x22, 0x6e8}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x9, 0x8}}}}}]}}]}}, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x9e, &(0x7f0000001ac0)=@string={0x9e, 0x3, "7acfebd62b97f13e6314dfe4fba3a690a14b7f5b10e9d5262f4b63083841627ff10d59df873b75f2fee1f68bf5174ea82bcd55380fc4dd156ded25d366ffcecc3e58f86b9fcc416792ea74c4b5b24ea726d8228ed124e18b21e4456fb3b86c9807a336e87f4332a1a6472c9cfad51fddb35263b6da3f6d4ad5fa49f02b3c4773be2d5e6334df4d9da3cdcf29ddf509e533b5e8bc3cadf312a9513c96"}}]}) fsmount(0xffffffffffffffff, 0x0, 0xfe) mkdir(&(0x7f0000001d00)='./file0\x00', 0x40) 7m4.388518591s ago: executing program 7 (id=399): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$UHID_INPUT(r1, &(0x7f00000040c0)={0x8, {"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", 0x1000}}, 0x1006) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x10) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040)={0x9, 0x2, 0xd, 0x7fff, 0x1}, 0x14) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3fd, @mcast1}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, 0x0, 0x0) ioctl$BLKSECTGET(r4, 0x1267, 0x0) syz_open_pts(0xffffffffffffffff, 0x2401) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 7m3.764318186s ago: executing program 7 (id=402): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3cecffff5a19c18e6d4e3a61fcae7a5e7d55c0f4c724a5654742014c7af12084123030d1b532282804c0a1cb872ee3fee58de9df0c8291c0da0b0649b7fba17b0aa2c37b477317f9069d", @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf25210000001c002d8008000200fdffffff050001000300000005000400010000000c0006000100000001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000880}, 0x4000) 7m3.363108763s ago: executing program 7 (id=404): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="2c385aa3dcadcf44e9d21b3630816dff", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002680)=@newtaction={0xb48, 0x30, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{0x638, 0x1, [@m_ipt={0x78, 0x1b, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x70000}]}, {0x1c, 0x6, "4794b9a19728fed469286cbefc723d98dfc88e7ad4703e16"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x1cc, 0xd, 0x0, 0x0, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x10001}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x91, 0x6, {0x4, 'nat\x00', 0x10, 0x0, "841aab3120ccc5736bf58dbf8ba0c6bbc838cefe3718d395bf4429a9f2fac01b37365bd80075973e23a88b2781d78398e6d66dea0d6c2642c2a22dd9bfd49f9782ceaa5fc8753fba165b65e3b1a505314a2c8845af2df351a1b4a94234d200186d2adc433b9d1a"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0xb7, 0x6, "7e71c9c17860398dd97fe7b0be62f7dfe06c18db86059043d53c0c275fccf8dfb5d73edb003fc6cb6a3e15c268ac72f4385d83735e3e054b6ddd9e8f2ff742bfedd378d19cb178de774a8871db095e3cce901d55edc0fc106563d72e064b1d989e6d71ee0297597fc9d9306f10510fe73aaf5da9008657bfed493bcd7f0e8c0b5f83803bb3b9a10a268cb6b1090a3e20f512a41cf5bee1456d157b74b1f9a986242eda94a03af45f16372c2eeffe57801c97e6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ipt={0x394, 0x1d, 0x0, 0x0, {{0x8}, {0x2c4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x2a, 0x6, {0xf89d, 'nat\x00', 0xf4, 0x101}}, @TCA_IPT_INDEX={0x8, 0x3, 0x61620a38}, @TCA_IPT_TARG={0x125, 0x6, {0x2b0e, 'nat\x00', 0x9, 0x3, "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"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0xc1, 0x6, {0xc, 'security\x00', 0xe, 0x7, "7b8185ea62607e2bbfceac8c8ffa9c4389fe1fd6e843d0d906a779555829df785581dccf05353a6d4ffae819e6b624c030cb4d5160271a97ce71aa0865794be849227fba38c23b09b548439dfd95cc87d39196519439258f53d2e6d65b1a925c2a6a5ef09dd119248209f9d6a53d8edfb685dc73763380a9090b907c77087f2a2b49f93c2f8375085ffcd7c65ac159466b9a65b30a715f"}}]}, {0xa9, 0x6, "86dfc4d04c8ac723f5d06945fc0ee764e2e728122e874d7390f8e31dd473c274d99ecfd21e47cbb0307f775e40e5f74a85e33228c306b10ebc624a034d9762f66dd38862eb94e5838476df7a210eefcdef8e03219f7e81d0ac9762530bc1592d10e98dfdbe5c48eb7aeec30badee5778797cc11fa856843b8500b16ac992f63f2d39c1a0c51498c63f40e4ba77469a379927ca3a33906f5fa7a4b9f6e726d76a7a620620ac"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ipt={0x5c, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x31, 0x6, "46587d2d4a775b0eeb00b2934f5cea66e5a3379e255302f269b2bb18b8abe8ea2bcb4f27def7956f95264d1ac9"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x4fc, 0x1, [@m_ipt={0x4f8, 0x16, 0x0, 0x0, {{0x8}, {0x3fc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xffff}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x3b1, 0x6, {0x7, 'nat\x00', 0x9, 0x2, "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"}}]}, {0xd5, 0x6, "8750d86e68ffb313e8fdcf334cc811f04eb006f5be4673a5cb85be93ef436b893f42348463441ba7ec57b7a3014aeefbe1ff4299c5234f20a9a1c4c2606f59080545b59ab16b8e0a749e72dd8524321eb1a1af1f537d5b5cc47f903781b034c14bd62cb62b727872dd82e423328f87890ad6dbc8fad33dc8605f185cc7d9479c7f6fe9691f257e26ed7c80a8f2c455a57e76524c7ee155fc207ffa011ad132970000909a798d892badb1bcafeac6c7712010235b690113af711ac1ab8ee0a0fe8152bc89e7ce2f46d4e6447db178930b2c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xeb3c47013e6b82e4, 0x2}}}}]}]}, 0xb48}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000800) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) 7m3.226436178s ago: executing program 7 (id=405): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioperm(0x0, 0x82, 0x1f) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) pivot_root(0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) gettid() timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) 7m0.975201075s ago: executing program 7 (id=411): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0) r6 = mq_open(0x0, 0x42, 0x0, 0x0) dup2(r6, r6) epoll_create(0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000f80)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r7}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 6m58.181592988s ago: executing program 7 (id=414): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0xfffffffffffffffa, 0xf}, {0x2, 0x9}, 0xf, [0x3ff, 0x5, 0x0, 0x2a, 0xc15, 0x7, 0xdca, 0x7470, 0xc8df, 0x5, 0x2, 0x40, 0x8e, 0xff, 0x5, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000200)=r1) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$bt_hci(r3, 0x0, 0x1, 0x0, &(0x7f0000000080)=0x2) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) poll(0x0, 0x0, 0x6) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r6, &(0x7f0000002080)=0x464, 0x23f) r8 = open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') write$sysctl(r7, 0x0, 0x0) open(&(0x7f0000000380)='./bus\x00', 0xec902, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './bus/file0\x00'}) openat(0xffffffffffffff9c, 0x0, 0x60843, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 6m43.007939376s ago: executing program 37 (id=414): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0xfffffffffffffffa, 0xf}, {0x2, 0x9}, 0xf, [0x3ff, 0x5, 0x0, 0x2a, 0xc15, 0x7, 0xdca, 0x7470, 0xc8df, 0x5, 0x2, 0x40, 0x8e, 0xff, 0x5, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000200)=r1) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$bt_hci(r3, 0x0, 0x1, 0x0, &(0x7f0000000080)=0x2) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) poll(0x0, 0x0, 0x6) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r6, &(0x7f0000002080)=0x464, 0x23f) r8 = open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') write$sysctl(r7, 0x0, 0x0) open(&(0x7f0000000380)='./bus\x00', 0xec902, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './bus/file0\x00'}) openat(0xffffffffffffff9c, 0x0, 0x60843, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 2m38.713314296s ago: executing program 8 (id=1182): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioperm(0x0, 0x82, 0x1f) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) pivot_root(0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) 2m33.031777968s ago: executing program 8 (id=1198): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) keyctl$chown(0x4, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2m31.969555864s ago: executing program 8 (id=1203): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x43, 0x4, 0x1}, 0x10) bind$tipc(r0, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x3f, 0x2}}}, 0x10) 2m31.935714189s ago: executing program 8 (id=1204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1f, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000001c00000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f080003400000000714000000020a01"], 0xa0}}, 0x0) 2m31.814416929s ago: executing program 8 (id=1205): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_open_dev$usbmon(&(0x7f0000000100), 0x2c, 0x800) r0 = syz_io_uring_setup(0x729b, &(0x7f0000000200)={0x0, 0x21b4, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000), &(0x7f00000000c0)=@v2={0x6, 0x3, 0x0, 0x0, 0x1, 'b'}, 0xa, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_setup(0xa94, &(0x7f00000005c0), &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r4, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f00000000c0), 0x4) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) renameat2(r7, &(0x7f0000000280)='./file0\x00', r2, &(0x7f0000000340)='./file1\x00', 0x1) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r8, 0x40049366, &(0x7f0000000180)) 2m29.839973529s ago: executing program 8 (id=1215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000003"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x0, 0x0, 0x400, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r2, 0x0, 0xa, &(0x7f0000000240)='syzkaller\x00'}, 0x30) fstat(r2, &(0x7f00000029c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1d, 0x4, 0x6, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0xfffffff8, 0x93cf, 0x32315258, 0x0, 0x8, [{0x6, 0x1}, {0x9, 0x5}, {0x8, 0x3}, {0x4, 0x9}, {0x2, 0xb68a}, {0x6, 0x7ff}, {0x3, 0x2}, {0x50ad0a9a}], 0x9, 0x7f, 0x2, 0x2}}) 2m14.272421303s ago: executing program 38 (id=1215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000003"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x0, 0x0, 0x400, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, r2, 0x0, 0xa, &(0x7f0000000240)='syzkaller\x00'}, 0x30) fstat(r2, &(0x7f00000029c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1d, 0x4, 0x6, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0xfffffff8, 0x93cf, 0x32315258, 0x0, 0x8, [{0x6, 0x1}, {0x9, 0x5}, {0x8, 0x3}, {0x4, 0x9}, {0x2, 0xb68a}, {0x6, 0x7ff}, {0x3, 0x2}, {0x50ad0a9a}], 0x9, 0x7f, 0x2, 0x2}}) 11.536173119s ago: executing program 0 (id=1567): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_connect$uac1(0x5, 0xe3, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x3, 0x1, 0x9, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1109, 0x8}, [@selector_unit={0x9, 0x24, 0x5, 0x5, 0x0, "96d7b918"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xff, 0x3, 0x0, 0x7, "e34e97e1a2"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x9, 0x1, "d2"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x80, 0x8, 0xd, "db8935b5b1b5c272e4"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x1a, 0x4cc, 0xd, "3ae60bbcb54490"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x81, 0x4, 0x5, 0x7, "34adad6c2e58"}, @as_header={0x7, 0x24, 0x1, 0x7d, 0x7, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x5d7, 0xad, 0x81, 0x4, {0x7, 0x25, 0x1, 0x1, 0x0, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7, 0x1, 0x1, 0x3, "b71fa5762de493"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x34, 0x2, 0x5, 0x0, "cc11c9", "e5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xb, 0x3, 0xd7, {0x7, 0x25, 0x1, 0x80, 0xe, 0x5}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x111, 0x6, 0x9, 0x5, 0x8, 0x14}, 0x28, &(0x7f0000000180)={0x5, 0xf, 0x28, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x10001, 0xff0f, 0x4, [0xc0, 0x3f50, 0xff00c0, 0xcf, 0xc0]}]}, 0x6, [{0x4e, &(0x7f00000001c0)=@string={0x4e, 0x3, "3eb96c4c49a5c2811c7c2d2c0bb5d48304a587debc6e39e22b5bd5a8ae03f20fd74a0396fe7a401f9b5f1ea108cee0679609362e9572601d3755f51e13df3e45e4ba047fa00f2583e2bfd8af"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2401}}, {0x94, &(0x7f0000000340)=@string={0x94, 0x3, "be43592c4ed2b50f5d0435f6458a8f69a3f5eb34b802b76e484e28eeec25823631b84f5143b1093d42382676945c06668086aa5ac20a56384c11d85115a7e72691b1b6c1da4af802905cf53d535357be111294a7536853464b5631b3af6e06ff23504262dc1f3a9504d0717513e61fa42889322c267565b7bee87414fab33f64e617e7838874365fda24bda673c3cf981d1d"}}]}) 9.870851896s ago: executing program 5 (id=1572): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x2, 0x3, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1568, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000840}, 0x800) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x501000, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(r2, 0x5523) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x20, 0x2, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESOCT=r7, @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x28, 0x2, 0x1030, 0x4, 0x0, 0xfffffffc}}, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r9, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) r10 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r10, &(0x7f0000000680), 0x4924924924925c6, 0x0) 8.83421631s ago: executing program 5 (id=1576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r0, 0x400454cc, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r2, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 8.401549381s ago: executing program 0 (id=1577): r0 = syz_io_uring_setup(0x10c, &(0x7f0000000440)={0x0, 0x5885, 0x80, 0x2, 0x30c}, &(0x7f0000000340), &(0x7f0000000280)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000900)=@newsa={0x10c, 0x10, 0x1, 0x70bd2b, 0x0, {{@in=@rand_addr=0x64010102, @in6=@remote, 0x0, 0x6, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x3, 0x2b}, @in=@broadcast, {0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x20000000000000}, {0x0, 0x4, 0x40000000}, {0x0, 0x0, 0x5}, 0x0, 0x3502, 0x2, 0x0, 0x1, 0x24}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e21, @in=@multicast2}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4810) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000740)) syz_usb_control_io(r2, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000000)=ANY=[@ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.222251816s ago: executing program 2 (id=1580): fsopen(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x102, 0x1003, 0x4, {0xa, @pix_mp={0xf, 0x5be7, 0x39565559, 0x7, 0xb, [{0x4}, {0x6, 0xb325}, {0x10000001, 0x7}, {0x40063d, 0x7fd}, {0xfffffffb, 0xb}, {0x805, 0x3}, {0xc270}, {0xfb, 0x3}], 0xfd, 0xc, 0x8, 0x1, 0x3}}, 0xfffffffd}) getdents(r4, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r4, &(0x7f0000000140)={0x18, 0x0, r6, {0xf}}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r8 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x15) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='ext4_load_inode\x00', r9}, 0x18) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4010bc08, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x3d}) syz_open_dev$usbfs(&(0x7f0000000280), 0x77, 0x101a01) 7.149525903s ago: executing program 9 (id=1581): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPSET_CMD_DEL(r1, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x1f4, 0xa, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xf75}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}]}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xb, 0x1a, 'batadv\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x400}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xc}}]}, @IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xc0f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xf1}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x401}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3c}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xb}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x8}]}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_SKBQUEUE={0x6}, @IPSET_ATTR_SKBQUEUE={0x6}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}]}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x101}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2c}]}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r2, @ANYBLOB="8304050000000000001000028f0500090081000000040e3860eac237a38fc0deed001300"], 0x40}}, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, 0x0, 0x0) (async) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty}}}], 0x20}}], 0x1, 0x0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x34, r4, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3c}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000005}, 0x4) 7.104190842s ago: executing program 5 (id=1582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f00000005c0)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x8f8) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) listen(r3, 0xa26d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) preadv(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000040)=""/16, 0x10}, {&(0x7f00000002c0)=""/164, 0xa4}, {&(0x7f00000000c0)=""/126, 0x7e}, {&(0x7f00000003c0)=""/90, 0x5a}, {&(0x7f0000000740)=""/250, 0xfa}, {&(0x7f0000000480)=""/156, 0x9c}, {&(0x7f0000000540)=""/119, 0x77}, {&(0x7f0000000380)=""/7, 0x7}, {&(0x7f00000009c0)=""/158, 0x9e}, {&(0x7f0000000940)=""/103, 0x67}], 0xa, 0xffffffff, 0x7) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = dup(r9) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000093000040"]) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 6.353118209s ago: executing program 9 (id=1583): pipe(0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a20014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f", 0xbd}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0x4e) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000140)='b', 0x1}], 0x1, 0x0) write(r2, &(0x7f0000000040)='g', 0x1) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3fc, 0xfffffffc, 0xb5}) sendmsg$kcm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e"], 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x2) rt_sigaction(0x25, &(0x7f0000000140)={0x0, 0x10000000, 0x0, {[0x5c40]}}, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000440)) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) 6.233353992s ago: executing program 6 (id=1584): ioperm(0x0, 0x82, 0x1f) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) pivot_root(0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) 6.102429489s ago: executing program 5 (id=1585): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@getnexthop={0x20, 0x76, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$l2tp(0x2, 0x2, 0x73) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000a3b370086d04ae225811010203010902120001000000000904000600096e7e00"], 0x0) syz_usb_disconnect(r5) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x42, 0x40, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8001, 0x9, 0xa}, {0x6, 0x24, 0x1a, 0x9, 0x13}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x6b, 0x11}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x6, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3f7, 0x80, 0x4, 0x7}}}}}}}]}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x54, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x0, 0x2, 0x0, {0x9, 0x1ff0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400, 0xb3, 0x8}}, @NL80211_ATTR_BSS_BASIC_RATES={0x7, 0x24, [{0x18, 0x1}, {0x9}, {0x3, 0x1}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random="f7"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x9}]}, 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f00000000c0)=0x6, 0x4) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xec, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x3, 0x1, 0x3e, 0x0, 0x5a, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x80}, [@processing_unit={0x7, 0x24, 0x7, 0x1, 0x5, 0x9}, @processing_unit={0x9, 0x24, 0x7, 0x1, 0x0, 0xe3, "e738"}, @mixer_unit={0x9, 0x24, 0x4, 0x6, 0x3, "f3724043"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x2, 0x1, 0x7, "", "d206"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x1, 0xfa, 0x6, "9a9f2ab470b77ab1"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2f0, 0xfff7, 0x5d, "0fcb63f5a0d2410660"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x4, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x1, 0x1, 0x2}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x1, 0x6, 0xa, '*', "d5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x30, 0x8, 0x6, 0x80, {0x7, 0x25, 0x1, 0x2, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x2, 0x50, 0x7, '@LX'}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x3, 0x4, 0x9, "8a0bb0"}, @as_header={0x7, 0x24, 0x1, 0x6, 0xe, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0x9, 0x7f, {0x7, 0x25, 0x1, 0x1, 0x0, 0x8000}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x27, 0x0, 0x6, 0xff, 0x2}, 0x10, &(0x7f0000000280)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x0, 0xb2, 0xf8, 0x87, 0x0, 0x1}]}, 0x5, [{0x43, &(0x7f0000000600)=@string={0x43, 0x3, "f386cc111b9cf7984ae41930cc7fc0357daa3f4d67e677df711adb39582b21b692c7f09de79253fbbb34ce3b48b3682bb1c574cc04b601a8fb90d55695e276fa5e"}}, {0x5b, &(0x7f00000006c0)=@string={0x5b, 0x3, "d41b61119818f85c8fe6f2295f9d57af73e1fa9cda2298c69c84442e0ad4394b38ed6d9ffc513f50a0659dc17004414b97cfe31d50fed82d6cfd68975a1c0379ee6bd55a4202b1372ccc761b5323a945c5e6c29359ef1c2c2b"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3801}}, {0xed, &(0x7f0000000740)=@string={0xed, 0x3, "82097dce2e29fe04a752b1da965cd2af41013d89e08bbd3bedc47a3a3bf955d1ae3eb0338463f4afdbb8bf8bea58c623572afdc8b0ef1afb2bbf216d05c26944797ece6c2d4bdc3b9c09c49bc2506cec905a0891b57d072e1afcf147053288f02f35dbb9263edf287f5aaf7c266d52013bddea4354820f29265a84440bcb8910e54ae0f0474bd9e0cde651285fb5153cc9131b58e85869a1bdd0135f740448d7eb5f520668be3bad27807988e90279b9a8040a34d44afddb582a6303611ce2fa651f580c102afc0370ceade11dd557f57b118fa97d6e12df6d9ca2c75083495e8e826608e8997ff042b8a6"}}]}) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x4, r8}) ioctl$DMA_BUF_SET_NAME_A(r10, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r10, 0xc0086202, &(0x7f0000000540)=0x1) write$cgroup_int(r6, &(0x7f0000000080)=0x3, 0x12) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES16=r11, @ANYRES16=r0], 0x30}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) ioctl$VHOST_SET_LOG_BASE(r12, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) 5.426973818s ago: executing program 2 (id=1586): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioperm(0x0, 0x82, 0x1f) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) sched_setattr(0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 5.306770519s ago: executing program 0 (id=1587): r0 = socket$caif_stream(0x25, 0x1, 0x2) sendmsg$inet(r0, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x4004001) 4.862259558s ago: executing program 6 (id=1588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073222237e60000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000000034000000080a01010000000000000000020000000900020073797a32000000000900010073797a30"], 0xa8}}, 0x0) (fail_nth: 4) 4.840077579s ago: executing program 0 (id=1589): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x6a802, 0x0) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) connect$qrtr(0xffffffffffffffff, &(0x7f0000000000), 0xc) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) write(r2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) semget(0x1, 0x3, 0x204) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)={{0xcc, 0x2, 0xc, 0x369, 0xd7, 0x5, 0x27, 0x25}, "7318dd1bfef107241c8452d384a9aa36dacf64852275a6f15e1a71db1a920922e6be74013f45639b27ca83b0365270507c6ee429ae27552ca90db59f96e7041a571052a094d77c423d2a4fb9bb5c42efb0d39bc44961870c934f928072b591ec9cda1a2ba7d1d23868db6b4a816b0558bfea18bf61294dae0078c4fbe880b17b245250720efb7ad4230021a01b71db012b8bd10a12a98827693d083ac90c357aa77d6527a11c52c00cba00dde31c8f9c83f308cfacd8f1a23254bf32fa8974ccaf94a42d01fccc65942681f23fdff0996a8efccee24765c68dbdb8816249af745ee7", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x802) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 4.498374836s ago: executing program 2 (id=1590): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a00009040000010301010009210008000122010009", @ANYRES32], 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x68, 0x3, 0x3, 0x2, 0x8, 0x3, 0xbd}}}, 0x0) 4.207499801s ago: executing program 6 (id=1591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)) semctl$GETPID(r1, 0x0, 0xb, 0x0) semtimedop(r1, &(0x7f0000000100)=[{0x6, 0x3, 0x1000}, {0x4, 0x6, 0xf0226814b9ead12}, {0x2, 0x6, 0x800}, {0x2, 0x7, 0x2800}, {0x3, 0x100, 0x800}], 0x5, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0xd0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) (async) getpid() (async) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) (async) semget$private(0x0, 0x5, 0x0) (async) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)) (async) semctl$GETPID(r1, 0x0, 0xb, 0x0) (async) semtimedop(r1, &(0x7f0000000100)=[{0x6, 0x3, 0x1000}, {0x4, 0x6, 0xf0226814b9ead12}, {0x2, 0x6, 0x800}, {0x2, 0x7, 0x2800}, {0x3, 0x100, 0x800}], 0x5, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) preadv(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x0, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0xd0) (async) 4.194979364s ago: executing program 9 (id=1592): socket(0x39, 0x9, 0x0) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0xd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000008000000030000000900000000000000a91105cdd00899dde2250438ff44de22fff639ed929396f0f84b2a03cbfecb543dc1b4d803f9b94b1de1cdff1b503f217be91ebba348cc6ebef432ea9e673d596bb65a8f472f44d35104f8cc6a49202573989a0987f522ec2838e6c7ceb7512b6b54c2264b4c8fae019168047012d8258e954c0869912d25815c3a8a63176721ec7cf7d85550310d503cb764684f86bef830e04fb5d745a4955c0ff95a2aece9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) socket(0x11, 0x3, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x3, 'team0\x00', {0x9}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'pimreg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x800) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0x4020565a, &(0x7f0000000040)={0x3, 0x980902, 0x2023}) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@nfs_export_on}]}) 3.818007449s ago: executing program 0 (id=1593): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_emit_ethernet(0x7e, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60ff690b00482f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000000000000800000086dd7fff0002080088be00000000100006000100000000000000080022eb00000000200000000600000000000000000000000800655800000000bdb2d71e5ce935603ffa452506742cdd707e989744537f0b4ffa4354e915509907f0f7be20fb268cef1ba849f9070ceab9321fbcd689cd03b153114aad29d99086d77492909df296c334ed52e4345fe0f7d5efc919b396689a2a272710ed4cab728d7da85199e20ee2898f4fe3443ace0911cc0244866a74e1b6556054e1ed74c560cd8aca94932698d7c46d5aaf23e07ead83b4a157766ee68834990b3776e18b3570a30000000000000000"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000e00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016001d0a"], 0x14}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = dup3(r4, r5, 0x0) ioctl$MON_IOCG_STATS(r8, 0xc0109207, &(0x7f00000001c0)) r9 = dup(r3) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r10, 0x4040ae9e, &(0x7f0000000100)={0x9a00000000000000, 0x2000, 0x7ff, 0x8, 0x11}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r11, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a35f2001c0600ff020000000000000000000000000001fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7000000090784000fe03f9890a59d702"], 0x0) clock_getres(0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa0, 0x5f, 0x1c, 0x40, 0x742, 0x2008, 0xe89b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x10, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xae, 0x0, 0x0, 0x49, 0x93, 0xba}}]}}]}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x280080, 0x0) 3.078945458s ago: executing program 6 (id=1594): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioperm(0x0, 0x82, 0x1f) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) pivot_root(0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) 3.017966899s ago: executing program 9 (id=1595): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioperm(0x0, 0x82, 0x1f) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) pivot_root(0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) 2.163334518s ago: executing program 5 (id=1596): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) getpgrp(r1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000017c0)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=ANY=[], 0x14}}, 0x8000) r5 = accept4$inet6(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r6, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001e00)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x857305fc5432a946}, {0x0, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x3e0000}], 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00i\x00\v'], 0x20}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.099416732s ago: executing program 9 (id=1597): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="21002dbd7000000000000e00000008000300", @ANYRES32=r6, @ANYBLOB="06001200004000000a000600ffffffffffff0000040013000600b5002902"], 0x44}}, 0x0) 2.003091132s ago: executing program 2 (id=1598): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x24, r2, 0xc07, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}, 0x1, 0x1000000, 0x0, 0x918ca50f99ff3bbd}, 0x800) 1.783172963s ago: executing program 2 (id=1599): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioperm(0x0, 0x82, 0x1f) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) pivot_root(0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) 864.730642ms ago: executing program 9 (id=1600): r0 = io_uring_setup(0xad2, &(0x7f0000000100)={0x0, 0x935, 0x80}) close(r0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) quotactl_fd$Q_SYNC(r2, 0xffffffff80000100, 0x0, 0x0) syz_io_uring_setup(0x5169, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000015040)={0x0, 0x2b7a, 0x80, 0x2, 0x4}, &(0x7f0000000240)=0x0, &(0x7f00000150c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000340)={&(0x7f00000003c0)={0x1d, r8}, 0x10, &(0x7f0000000540)={&(0x7f0000000b00)={0x1, 0xc91b751d487fcdb3, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "12f544ffe3dfbf09c12374d2ab3807e6337b97017934979117b8f35a9853039c7e9ed3859974dfd353dee3d7bd34a145fadb551ba4266f4a70e5ee7181b6f2fc"}}, 0x80}}, 0x0) sendmsg$can_bcm(r7, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r8}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x844, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0xff, 0x0, 0x0, 0x0, "d015d48f126de17910da6b6d6db83da5f30b7ba8d8d599b92370931f6720dcbfc3acf07fff2873e9c557e080d3ee193bfbb811a7b47acb7d51c00d6f9a9fa54e"}}, 0x80}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x10, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x40, 0x7, 0xa, 0x4894, 0x8, 0x0, 0xfffffffd, 0xa000000, 0x97}}}}]}, 0x58}}, 0x44080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x0, r7}, 0x18) ioctl$BTRFS_IOC_SPACE_INFO(r11, 0xc0109414, &(0x7f0000000b80)={0x84f, 0x7d2a, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 396.099283ms ago: executing program 6 (id=1601): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d4c466b340e28b05c93a072528230718"}]}}}}}}}}, 0x0) (fail_nth: 4) 92.441142ms ago: executing program 6 (id=1602): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000a67000/0x4000)=nil, 0x4000, 0x0, 0x80010, r1, 0x180000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(r2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000180)={0x2, 'veth0_to_batadv\x00', {0x4}, 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[], 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, 0x0, &(0x7f0000000080)=0x0) timer_getoverrun(r5) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100)=0x91f7, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r0, &(0x7f0000003940)=[{{0x0, 0xfffffffffffffe95, &(0x7f0000000240)=[{&(0x7f0000000900)="03", 0x1}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES8=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r6, &(0x7f0000000300)='(', 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone3(0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 81.581662ms ago: executing program 5 (id=1603): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioperm(0x0, 0x82, 0x1f) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) sched_setattr(0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) 32.329783ms ago: executing program 0 (id=1604): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0xfffffffffffdfffe) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180)=0x3, 0x12) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r1) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) getsockname$netrom(r1, &(0x7f0000000380)={{0x3, @bcast}, [@remote, @remote, @null, @rose, @netrom, @null, @default, @netrom]}, &(0x7f0000000400)=0x48) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r5, 0x40047459, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000140)="00e246e92e87aad723e2ab3e892f", 0xe}], 0x1}, 0x80) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r2, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xa, 0x45}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x400d0}, 0x4000001) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 0s ago: executing program 2 (id=1605): socket(0x39, 0x9, 0x0) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0xd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000008000000030000000900000000000000a91105cdd00899dde2250438ff44de22fff639ed929396f0f84b2a03cbfecb543dc1b4d803f9b94b1de1cdff1b503f217be91ebba348cc6ebef432ea9e673d596bb65a8f472f44d35104f8cc6a49202573989a0987f522ec2838e6c7ceb7512b6b54c2264b4c8fae019168047012d8258e954c0869912d25815c3a8a63176721ec7cf7d85550310d503cb764684f86bef830e04fb5d745a4955c0ff95a2aece9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) socket(0x11, 0x3, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x3, 'team0\x00', {0x9}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'pimreg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x800) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0x4020565a, &(0x7f0000000040)={0x3, 0x980902, 0x2023}) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@nfs_export_on}]}) kernel console output (not intermixed with test programs): executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf37780809 code=0x7ffc0000 [ 552.039262][ T29] audit: type=1326 audit(1732859327.762:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.9.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf37780809 code=0x7ffc0000 [ 552.052144][T11144] netlink: 'syz.9.1298': attribute type 2 has an invalid length. [ 552.083520][T11144] netlink: 244 bytes leftover after parsing attributes in process `syz.9.1298'. [ 552.101487][ T29] audit: type=1326 audit(1732859327.762:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.9.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fdf37780809 code=0x7ffc0000 [ 552.125240][ T29] audit: type=1326 audit(1732859327.762:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.9.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf37780809 code=0x7ffc0000 [ 552.149127][ T29] audit: type=1326 audit(1732859327.762:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.9.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf37780809 code=0x7ffc0000 [ 552.218239][ T8] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 552.230041][ T8] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 552.241591][ T8] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 552.377209][ T8] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 552.386487][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.442807][ T8] usb 3-1: config 0 descriptor?? [ 552.454611][ T8] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 552.695725][T11147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.722040][T11147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.000359][ T7590] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 553.171744][ T7590] usb 7-1: too many configurations: 110, using maximum allowed: 8 [ 553.449671][ T7590] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 553.461801][ T7590] usb 7-1: can't read configurations, error -61 [ 553.620030][ T7590] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 553.635888][T10994] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 553.655548][T10994] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 553.685174][T10994] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 553.709691][T10994] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 553.796058][ T7590] usb 7-1: too many configurations: 110, using maximum allowed: 8 [ 553.822380][ T7590] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 553.832791][ T7590] usb 7-1: can't read configurations, error -61 [ 553.853559][ T7590] usb usb7-port1: attempt power cycle [ 553.899436][T10994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.162468][T10994] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.220372][ T7590] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 554.231908][ T7983] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.238976][ T7983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.364653][ T7590] usb 7-1: too many configurations: 110, using maximum allowed: 8 [ 554.365924][ T7983] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.379725][ T7983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.423178][ T7590] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 554.453868][ T7590] usb 7-1: can't read configurations, error -61 [ 554.474705][T10994] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 554.492634][T10994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 554.591285][ T5922] usb 3-1: USB disconnect, device number 35 [ 554.610072][ T7590] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 554.635317][ T5922] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 554.664538][ T7590] usb 7-1: too many configurations: 110, using maximum allowed: 8 [ 554.681369][ T7590] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 554.696171][T10994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.774762][ T7590] usb 7-1: can't read configurations, error -61 [ 555.098906][ T7590] usb usb7-port1: unable to enumerate USB device [ 555.127843][T10994] veth0_vlan: entered promiscuous mode [ 555.137988][T10994] veth1_vlan: entered promiscuous mode [ 555.160974][T10994] veth0_macvtap: entered promiscuous mode [ 555.169838][T10994] veth1_macvtap: entered promiscuous mode [ 555.185624][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.196356][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.206481][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.217271][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.228568][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.239745][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.249690][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.260828][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.271575][T10994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.282045][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.292554][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.302435][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.313052][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.323049][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.333562][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.343465][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.353944][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.364324][T10994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.532480][T10994] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.541702][T10994] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.550544][T10994] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.559437][T10994] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.482530][ T7984] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 556.494948][ T7984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.534855][ T7981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.537688][ T7984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.548638][ T7981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.290988][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 557.291004][ T29] audit: type=1400 audit(1732859333.252:1321): avc: denied { mounton } for pid=10994 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 558.379656][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 558.624390][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1306'. [ 559.141960][ T5922] kernel write not supported for file task/945/attr/keycreate (pid: 5922 comm: kworker/1:6) [ 559.609965][ T5922] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 559.771052][ T7590] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 559.790207][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 559.804505][ T5922] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 559.814689][ T5922] usb 3-1: config 0 has no interface number 0 [ 559.841010][ T5922] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 559.931058][ T7590] usb 1-1: device descriptor read/64, error -71 [ 559.992700][ T5922] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 560.178649][ T5922] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 560.193865][ T7590] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 560.448728][ T5922] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 560.531538][ T7590] usb 1-1: device descriptor read/64, error -71 [ 560.639671][ T5922] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 560.686627][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.698123][ T5922] usb 3-1: config 0 descriptor?? [ 560.707593][ T5922] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 560.720229][ T7590] usb usb1-port1: attempt power cycle [ 561.880219][ T7590] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 561.890028][ T7983] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 561.913929][ T7590] usb 1-1: device descriptor read/8, error -71 [ 562.200415][ T7590] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 562.223082][ T7590] usb 1-1: device descriptor read/8, error -71 [ 562.505244][ T7590] usb usb1-port1: unable to enumerate USB device [ 562.626022][ T8] usb 3-1: USB disconnect, device number 36 [ 562.626108][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 562.693103][T11215] ldusb 3-1:0.55: Couldn't submit interrupt_out_urb -19 [ 562.703948][ T8] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 562.726631][ T29] audit: type=1400 audit(1732859338.642:1322): avc: denied { write } for pid=11244 comm="syz.6.1318" path="socket:[33780]" dev="sockfs" ino=33780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 562.787371][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.794898][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.414256][ T5924] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 563.578925][T11262] FAULT_INJECTION: forcing a failure. [ 563.578925][T11262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.592134][T11262] CPU: 0 UID: 0 PID: 11262 Comm: syz.0.1324 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 563.602563][T11262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 563.612626][T11262] Call Trace: [ 563.615908][T11262] [ 563.618842][T11262] dump_stack_lvl+0x16c/0x1f0 [ 563.623545][T11262] should_fail_ex+0x497/0x5b0 [ 563.628250][T11262] _copy_from_user+0x2e/0xd0 [ 563.632856][T11262] kstrtouint_from_user+0xd7/0x1c0 [ 563.637991][T11262] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 563.643739][T11262] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 563.649396][T11262] proc_fail_nth_write+0x84/0x250 [ 563.654445][T11262] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 563.660092][T11262] ? ksys_write+0x12b/0x250 [ 563.664612][T11262] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 563.670261][T11262] vfs_write+0x24c/0x1150 [ 563.674601][T11262] ? __fget_files+0x1fc/0x3a0 [ 563.679286][T11262] ? __pfx___mutex_lock+0x10/0x10 [ 563.684330][T11262] ? __pfx_vfs_write+0x10/0x10 [ 563.689113][T11262] ? __fget_files+0x206/0x3a0 [ 563.693808][T11262] ksys_write+0x12b/0x250 [ 563.699886][T11262] ? __pfx_ksys_write+0x10/0x10 [ 563.704753][T11262] do_syscall_64+0xcd/0x250 [ 563.709274][T11262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.715183][T11262] RIP: 0033:0x7fb4d697f2bf [ 563.719604][T11262] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 8e 02 00 48 [ 563.739224][T11262] RSP: 002b:00007fb4d7857050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 563.747655][T11262] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb4d697f2bf [ 563.755637][T11262] RDX: 0000000000000001 RSI: 00007fb4d78570b0 RDI: 0000000000000003 [ 563.763620][T11262] RBP: 00007fb4d78570a0 R08: 0000000000000000 R09: 0000000000000000 [ 563.771600][T11262] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 563.779577][T11262] R13: 0000000000000000 R14: 00007fb4d6b45fa0 R15: 00007ffea08d9bd8 [ 563.787572][T11262] [ 564.076745][ T968] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 564.260145][ T5924] usb 10-1: Using ep0 maxpacket: 8 [ 565.271445][ T5924] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 565.282778][ T5924] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 565.292919][ T5924] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 38243, setting to 1024 [ 565.304262][ T5924] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 565.314467][ T5924] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 565.460469][ T5924] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 565.469627][ T5924] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.280719][T11290] FAULT_INJECTION: forcing a failure. [ 566.280719][T11290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.298109][ T5924] usb 10-1: can't set config #16, error -71 [ 566.319694][ T5924] usb 10-1: USB disconnect, device number 32 [ 566.354395][T11290] CPU: 0 UID: 0 PID: 11290 Comm: syz.5.1331 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 566.364845][T11290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 566.374908][T11290] Call Trace: [ 566.378194][T11290] [ 566.381137][T11290] dump_stack_lvl+0x16c/0x1f0 [ 566.385837][T11290] should_fail_ex+0x497/0x5b0 [ 566.390540][T11290] _copy_from_iter+0x2a1/0x1560 [ 566.395402][T11290] ? trace_lock_acquire+0x14e/0x1f0 [ 566.400618][T11290] ? __alloc_skb+0x1fe/0x380 [ 566.405217][T11290] ? __pfx__copy_from_iter+0x10/0x10 [ 566.410506][T11290] ? __virt_addr_valid+0x1a4/0x590 [ 566.415634][T11290] ? __virt_addr_valid+0x5e/0x590 [ 566.420669][T11290] ? __phys_addr_symbol+0x30/0x80 [ 566.425703][T11290] ? __check_object_size+0x488/0x710 [ 566.431000][T11290] netlink_sendmsg+0x813/0xd70 [ 566.435775][T11290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.441083][T11290] ____sys_sendmsg+0xaaf/0xc90 [ 566.445859][T11290] ? copy_msghdr_from_user+0x10b/0x160 [ 566.451328][T11290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 566.456636][T11290] ___sys_sendmsg+0x135/0x1e0 [ 566.461322][T11290] ? __pfx____sys_sendmsg+0x10/0x10 [ 566.466537][T11290] ? __pfx_lock_release+0x10/0x10 [ 566.471567][T11290] ? trace_lock_acquire+0x14e/0x1f0 [ 566.476798][T11290] ? __fget_files+0x206/0x3a0 [ 566.481490][T11290] __sys_sendmsg+0x16e/0x220 [ 566.486092][T11290] ? __pfx___sys_sendmsg+0x10/0x10 [ 566.491230][T11290] do_syscall_64+0xcd/0x250 [ 566.495749][T11290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.498475][ T7588] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 566.501647][T11290] RIP: 0033:0x7f95b3780809 [ 566.501670][T11290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.533208][T11290] RSP: 002b:00007f95b44af058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.541612][T11290] RAX: ffffffffffffffda RBX: 00007f95b3945fa0 RCX: 00007f95b3780809 [ 566.549590][T11290] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 566.557559][T11290] RBP: 00007f95b44af0a0 R08: 0000000000000000 R09: 0000000000000000 [ 566.565521][T11290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.573501][T11290] R13: 0000000000000000 R14: 00007f95b3945fa0 R15: 00007ffc1f3b6ae8 [ 566.581495][T11290] [ 566.620354][ T5922] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 566.728834][ T7588] usb 3-1: config 12 has an invalid interface number: 249 but max is 2 [ 566.757328][ T7588] usb 3-1: config 12 has an invalid interface number: 20 but max is 2 [ 566.775969][ T7588] usb 3-1: config 12 has an invalid interface number: 152 but max is 2 [ 566.796533][ T7588] usb 3-1: config 12 has no interface number 0 [ 566.816832][ T7588] usb 3-1: config 12 has no interface number 1 [ 566.837137][ T7588] usb 3-1: config 12 has no interface number 2 [ 566.855070][ T7588] usb 3-1: config 12 interface 249 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 566.871937][ T29] audit: type=1326 audit(1732859342.812:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 566.899909][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 566.908208][ T29] audit: type=1326 audit(1732859342.822:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 566.916227][ T5922] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 566.932164][ T29] audit: type=1326 audit(1732859342.822:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 566.932204][ T29] audit: type=1326 audit(1732859342.822:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 566.932239][ T29] audit: type=1326 audit(1732859342.862:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 566.932273][ T29] audit: type=1326 audit(1732859342.862:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 566.932306][ T29] audit: type=1326 audit(1732859342.862:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 566.932338][ T29] audit: type=1326 audit(1732859342.862:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 567.290612][ T7588] usb 3-1: config 12 interface 249 altsetting 7 endpoint 0xB has an invalid bInterval 255, changing to 4 [ 567.330292][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 567.751949][T11305] netlink: 'syz.5.1336': attribute type 2 has an invalid length. [ 567.759704][T11305] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1336'. [ 567.929606][ T7588] usb 3-1: config 12 interface 20 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 567.940444][ T5922] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 567.949433][ T7588] usb 3-1: config 12 interface 152 altsetting 4 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 567.960776][ T5922] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 567.969826][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.233234][ T7588] usb 3-1: config 12 interface 152 altsetting 4 has an endpoint descriptor with address 0x3E, changing to 0xE [ 568.244967][ T7588] usb 3-1: config 12 interface 152 altsetting 4 has an endpoint descriptor with address 0x78, changing to 0x8 [ 568.256651][ T7588] usb 3-1: config 12 interface 152 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 568.267835][ T7588] usb 3-1: config 12 interface 152 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 568.278628][ T7588] usb 3-1: config 12 interface 249 has no altsetting 0 [ 568.285522][ T7588] usb 3-1: config 12 interface 20 has no altsetting 0 [ 568.292443][ T7588] usb 3-1: config 12 interface 152 has no altsetting 0 [ 568.303528][ T5922] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 568.312250][ T5922] usb 1-1: no configuration chosen from 1 choice [ 568.322256][ T29] audit: type=1326 audit(1732859342.862:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 568.347398][ T29] audit: type=1326 audit(1732859342.862:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 568.371014][ T29] audit: type=1326 audit(1732859342.922:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 568.394630][ T29] audit: type=1326 audit(1732859342.922:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 568.418202][ T29] audit: type=1326 audit(1732859342.922:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 568.420424][T10847] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 568.442099][ T29] audit: type=1326 audit(1732859342.922:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 568.473218][ T29] audit: type=1326 audit(1732859342.922:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 568.496760][ T29] audit: type=1326 audit(1732859342.922:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 568.520468][ T29] audit: type=1326 audit(1732859342.922:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 568.545220][ T29] audit: type=1326 audit(1732859342.922:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11300 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 568.575036][ T7588] usb 3-1: string descriptor 0 read error: -71 [ 568.581422][ T7588] usb 3-1: New USB device found, idVendor=046d, idProduct=0905, bcdDevice=d2.27 [ 568.590615][ T7588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.613741][ T7588] usb 3-1: can't set config #12, error -71 [ 568.632317][ T7588] usb 3-1: USB disconnect, device number 37 [ 569.707998][ T7981] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 569.816005][T10847] usb 7-1: Using ep0 maxpacket: 8 [ 569.831300][ T7588] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 569.844825][T11232] usb 1-1: USB disconnect, device number 11 [ 569.861163][T10847] usb 7-1: device descriptor read/all, error -71 [ 569.990217][ T7588] usb 6-1: Using ep0 maxpacket: 32 [ 570.189759][ T7588] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 570.238878][ T7588] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 570.253216][ T7588] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 570.270511][ T7588] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 570.377734][ T7588] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 570.387765][ T7588] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 570.400851][ T7588] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 570.410146][ T7588] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.127176][ T7588] usb 6-1: config 0 descriptor?? [ 571.462563][ T7588] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 571.487064][ T7588] usb 6-1: USB disconnect, device number 29 [ 571.509965][ T7588] usblp0: removed [ 572.088505][ T7588] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 572.490075][ T7588] usb 6-1: Using ep0 maxpacket: 32 [ 572.498710][ T7588] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 572.521944][ T7588] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 572.568574][ T7588] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 572.577985][ T7588] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 572.598598][ T7588] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 572.627540][ T7588] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 572.645278][ T7588] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 572.654660][ T7588] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.824269][ T7588] usb 6-1: config 0 descriptor?? [ 572.836882][ T7588] usb 6-1: can't set config #0, error -71 [ 572.913039][ T7588] usb 6-1: USB disconnect, device number 30 [ 573.220109][ T7588] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 573.400104][ T7588] usb 6-1: device descriptor read/64, error -71 [ 573.660006][ T7588] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 573.668801][ T6640] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 574.050308][ T7588] usb 6-1: device descriptor read/64, error -71 [ 574.162214][ T7588] usb usb6-port1: attempt power cycle [ 574.341158][T10847] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 574.365599][ T5924] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 574.552474][ T7588] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 574.581295][ T7588] usb 6-1: device descriptor read/8, error -71 [ 574.627305][T10847] usb 10-1: config 0 has an invalid interface number: 106 but max is 0 [ 574.636191][T10847] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.646946][T10847] usb 10-1: config 0 has no interface number 0 [ 574.654217][T10847] usb 10-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 574.665430][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 574.671611][T10847] usb 10-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 574.685303][T10847] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 574.695077][T10847] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.707415][ T5924] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 574.721952][ T5924] usb 3-1: config 0 has no interface number 0 [ 574.734143][T10847] usb 10-1: config 0 descriptor?? [ 574.739896][ T5924] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 574.751864][ T5924] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 574.766099][ T5924] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 574.778020][ T5924] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 574.792364][T10847] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 574.815294][ T5924] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 574.828319][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.830036][ T7588] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 574.848114][ T5924] usb 3-1: config 0 descriptor?? [ 574.860776][ T5924] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 574.888338][ T7588] usb 6-1: device descriptor read/8, error -71 [ 574.998117][ T11] usb 10-1: Failed to submit usb control message: -71 [ 574.998344][ T5924] usb 10-1: USB disconnect, device number 33 [ 575.018499][ T11] usb 10-1: unable to send the bmi data to the device: -71 [ 575.026194][ T7588] usb usb6-port1: unable to enumerate USB device [ 575.031919][ T11] usb 10-1: unable to get target info from device [ 575.039474][ T11] usb 10-1: could not get target info (-71) [ 575.045779][ T11] usb 10-1: could not probe fw (-71) [ 575.290291][ T7588] usb 3-1: USB disconnect, device number 38 [ 575.309628][ T7588] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 575.590396][ T7984] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 575.660633][T10847] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 576.440237][T11401] IPv6: NLM_F_CREATE should be specified when creating new route [ 576.479015][T11401] cifs: Unknown parameter 'mode' [ 576.547699][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 576.547709][ T29] audit: type=1326 audit(1732859352.502:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11397 comm="syz.6.1361" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f209a580809 code=0x0 [ 576.629971][ T9] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 576.741069][T11405] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11405 comm=syz.6.1361 [ 576.799634][T11405] SELinux: syz.6.1361 (11405) set checkreqprot to 1. This is no longer supported. [ 576.799796][ T29] audit: type=1400 audit(1732859352.752:1371): avc: denied { setcheckreqprot } for pid=11397 comm="syz.6.1361" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 576.869687][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.948609][ T9] usb 10-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25 [ 577.187384][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.231249][ T9] usb 10-1: Product: syz [ 577.572276][ T9] usb 10-1: Manufacturer: syz [ 577.592511][ T9] usb 10-1: SerialNumber: syz [ 577.602668][ T9] usb 10-1: config 0 descriptor?? [ 577.807779][ T29] audit: type=1400 audit(1732859353.752:1372): avc: denied { read } for pid=11416 comm="syz.5.1365" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 577.874698][ T29] audit: type=1400 audit(1732859353.752:1373): avc: denied { open } for pid=11416 comm="syz.5.1365" path="/268/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 577.962470][ T29] audit: type=1400 audit(1732859353.752:1374): avc: denied { ioctl } for pid=11416 comm="syz.5.1365" path="/268/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 578.006319][ T29] audit: type=1400 audit(1732859353.882:1375): avc: denied { setattr } for pid=11395 comm="syz.9.1360" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 578.033721][ T29] audit: type=1400 audit(1732859353.882:1376): avc: denied { write } for pid=11395 comm="syz.9.1360" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 578.212489][T10847] usb 10-1: USB disconnect, device number 34 [ 579.476442][ T6640] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 579.500260][T11438] FAULT_INJECTION: forcing a failure. [ 579.500260][T11438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.550039][T11438] CPU: 1 UID: 0 PID: 11438 Comm: syz.2.1370 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 579.560483][T11438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 579.570522][T11438] Call Trace: [ 579.573781][T11438] [ 579.576691][T11438] dump_stack_lvl+0x16c/0x1f0 [ 579.581717][T11438] should_fail_ex+0x497/0x5b0 [ 579.586410][T11438] _copy_from_iter+0x2a1/0x1560 [ 579.591241][T11438] ? trace_lock_acquire+0x14e/0x1f0 [ 579.596428][T11438] ? __alloc_skb+0x1fe/0x380 [ 579.600998][T11438] ? __pfx__copy_from_iter+0x10/0x10 [ 579.606258][T11438] ? __virt_addr_valid+0x1a4/0x590 [ 579.611355][T11438] ? __virt_addr_valid+0x5e/0x590 [ 579.616382][T11438] ? __phys_addr_symbol+0x30/0x80 [ 579.621388][T11438] ? __check_object_size+0x488/0x710 [ 579.626665][T11438] netlink_sendmsg+0x813/0xd70 [ 579.631410][T11438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.636686][T11438] ____sys_sendmsg+0xaaf/0xc90 [ 579.641435][T11438] ? copy_msghdr_from_user+0x10b/0x160 [ 579.646876][T11438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 579.652155][T11438] ___sys_sendmsg+0x135/0x1e0 [ 579.656813][T11438] ? __pfx____sys_sendmsg+0x10/0x10 [ 579.662000][T11438] ? __pfx_lock_release+0x10/0x10 [ 579.667007][T11438] ? trace_lock_acquire+0x14e/0x1f0 [ 579.672194][T11438] ? __fget_files+0x206/0x3a0 [ 579.676855][T11438] __sys_sendmsg+0x16e/0x220 [ 579.681688][T11438] ? __pfx___sys_sendmsg+0x10/0x10 [ 579.686793][T11438] do_syscall_64+0xcd/0x250 [ 579.691287][T11438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.697164][T11438] RIP: 0033:0x7f49c9580809 [ 579.701560][T11438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.721148][T11438] RSP: 002b:00007f49ca375058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.729544][T11438] RAX: ffffffffffffffda RBX: 00007f49c9745fa0 RCX: 00007f49c9580809 [ 579.737494][T11438] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 579.745443][T11438] RBP: 00007f49ca3750a0 R08: 0000000000000000 R09: 0000000000000000 [ 579.753390][T11438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.761356][T11438] R13: 0000000000000000 R14: 00007f49c9745fa0 R15: 00007ffc00caa268 [ 579.769314][T11438] [ 580.839573][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 581.274938][T11455] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 581.286515][T11455] overlayfs: missing 'lowerdir' [ 581.880021][ T7588] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 582.724981][ T29] audit: type=1400 audit(1732859358.192:1377): avc: denied { read } for pid=5195 comm="acpid" name="event8" dev="devtmpfs" ino=3201 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 582.768050][ T7588] usb 3-1: Using ep0 maxpacket: 32 [ 582.768113][ T29] audit: type=1400 audit(1732859358.202:1378): avc: denied { open } for pid=5195 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=3201 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 582.962355][ T29] audit: type=1400 audit(1732859358.212:1379): avc: denied { ioctl } for pid=5195 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=3201 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 583.305762][ T7588] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 583.316660][ T7588] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 583.330823][ T7588] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 583.356980][ T7588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.369381][T11477] FAULT_INJECTION: forcing a failure. [ 583.369381][T11477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.409390][ T7588] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 583.418180][T11477] CPU: 0 UID: 0 PID: 11477 Comm: syz.9.1381 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 583.428612][T11477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 583.438679][T11477] Call Trace: [ 583.441946][T11477] [ 583.444884][T11477] dump_stack_lvl+0x16c/0x1f0 [ 583.449550][T11477] should_fail_ex+0x497/0x5b0 [ 583.454218][T11477] _copy_to_user+0x32/0xd0 [ 583.458617][T11477] bpf_test_finish.isra.0+0x4a1/0x680 [ 583.463994][T11477] ? lock_acquire+0x2f/0xb0 [ 583.468498][T11477] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 583.474382][T11477] ? _copy_from_user+0x59/0xd0 [ 583.479134][T11477] bpf_prog_test_run_xdp+0xa13/0x1580 [ 583.484497][T11477] ? lock_acquire+0x2f/0xb0 [ 583.488979][T11477] ? __fget_files+0x40/0x3a0 [ 583.493551][T11477] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 583.499343][T11477] ? __fget_files+0x206/0x3a0 [ 583.504004][T11477] ? fput+0x67/0x440 [ 583.507900][T11477] ? __bpf_prog_get+0xa0/0x290 [ 583.512649][T11477] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 583.518447][T11477] __sys_bpf+0xfc6/0x49c0 [ 583.522763][T11477] ? __pfx_lock_release+0x10/0x10 [ 583.527785][T11477] ? __pfx___sys_bpf+0x10/0x10 [ 583.532541][T11477] ? vfs_write+0x306/0x1150 [ 583.537048][T11477] ? __mutex_unlock_slowpath+0x164/0x690 [ 583.542676][T11477] ? fput+0x67/0x440 [ 583.546554][T11477] ? ksys_write+0x1ba/0x250 [ 583.551039][T11477] ? __pfx_ksys_write+0x10/0x10 [ 583.555875][T11477] __x64_sys_bpf+0x78/0xc0 [ 583.560286][T11477] ? lockdep_hardirqs_on+0x7c/0x110 [ 583.565476][T11477] do_syscall_64+0xcd/0x250 [ 583.569969][T11477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.575850][T11477] RIP: 0033:0x7fdf37780809 [ 583.580246][T11477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.599838][T11477] RSP: 002b:00007fdf38666058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 583.608249][T11477] RAX: ffffffffffffffda RBX: 00007fdf37945fa0 RCX: 00007fdf37780809 [ 583.616200][T11477] RDX: 000000000000004f RSI: 00000000200000c0 RDI: 000000000000000a [ 583.624157][T11477] RBP: 00007fdf386660a0 R08: 0000000000000000 R09: 0000000000000000 [ 583.632132][T11477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.640106][T11477] R13: 0000000000000000 R14: 00007fdf37945fa0 R15: 00007ffe5e7cb538 [ 583.648067][T11477] [ 583.654797][ T7588] usb 3-1: no configuration chosen from 1 choice [ 584.757253][T10847] usb 3-1: USB disconnect, device number 39 [ 584.776365][T11495] tmpfs: Unknown parameter '' [ 584.785373][T11495] fuse: Unknown parameter '' [ 585.416624][ T62] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 586.600887][ T7983] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 587.111965][ T29] audit: type=1400 audit(1732859363.072:1380): avc: denied { read } for pid=11505 comm="syz.0.1390" path="socket:[35181]" dev="sockfs" ino=35181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 587.617257][ T29] audit: type=1400 audit(1732859363.572:1381): avc: denied { ioctl } for pid=11505 comm="syz.0.1390" path="socket:[35181]" dev="sockfs" ino=35181 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 587.739496][ T29] audit: type=1400 audit(1732859363.692:1382): avc: denied { read write } for pid=11526 comm="syz.6.1394" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 587.916546][ T29] audit: type=1400 audit(1732859363.692:1383): avc: denied { open } for pid=11526 comm="syz.6.1394" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 587.955924][T11528] netlink: 'syz.6.1394': attribute type 25 has an invalid length. [ 587.964105][T11528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 587.971379][T11528] IPv6: NLM_F_CREATE should be set when creating new route [ 587.978587][T11528] IPv6: NLM_F_CREATE should be set when creating new route [ 587.988730][T11528] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1394'. [ 588.139310][T11533] FAULT_INJECTION: forcing a failure. [ 588.139310][T11533] name failslab, interval 1, probability 0, space 0, times 0 [ 588.697910][T11533] CPU: 1 UID: 0 PID: 11533 Comm: syz.5.1395 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 588.708359][T11533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 588.718412][T11533] Call Trace: [ 588.721686][T11533] [ 588.724606][T11533] dump_stack_lvl+0x16c/0x1f0 [ 588.729286][T11533] should_fail_ex+0x497/0x5b0 [ 588.733959][T11533] ? fs_reclaim_acquire+0xae/0x150 [ 588.739067][T11533] should_failslab+0xc2/0x120 [ 588.743736][T11533] __kmalloc_noprof+0xcb/0x510 [ 588.748490][T11533] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 588.754118][T11533] tomoyo_realpath_from_path+0xb9/0x720 [ 588.759658][T11533] ? tomoyo_path_number_perm+0x235/0x590 [ 588.765284][T11533] ? tomoyo_path_number_perm+0x235/0x590 [ 588.770910][T11533] tomoyo_path_number_perm+0x248/0x590 [ 588.776361][T11533] ? tomoyo_path_number_perm+0x235/0x590 [ 588.781990][T11533] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 588.787981][T11533] ? __pfx_lock_release+0x10/0x10 [ 588.792997][T11533] ? trace_lock_acquire+0x14e/0x1f0 [ 588.798196][T11533] ? lock_acquire+0x2f/0xb0 [ 588.802690][T11533] ? __fget_files+0x40/0x3a0 [ 588.807272][T11533] ? __fget_files+0x206/0x3a0 [ 588.811940][T11533] security_file_ioctl+0x9b/0x240 [ 588.816958][T11533] __x64_sys_ioctl+0xb7/0x200 [ 588.821631][T11533] do_syscall_64+0xcd/0x250 [ 588.826130][T11533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.832019][T11533] RIP: 0033:0x7f95b3780809 [ 588.836434][T11533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.856031][T11533] RSP: 002b:00007f95b15d5058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 588.864432][T11533] RAX: ffffffffffffffda RBX: 00007f95b3946160 RCX: 00007f95b3780809 [ 588.872399][T11533] RDX: 0000000020000040 RSI: 00000000c0184800 RDI: 0000000000000003 [ 588.880357][T11533] RBP: 00007f95b15d50a0 R08: 0000000000000000 R09: 0000000000000000 [ 588.888313][T11533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.896270][T11533] R13: 0000000000000000 R14: 00007f95b3946160 R15: 00007ffc1f3b6ae8 [ 588.904251][T11533] [ 588.963788][T11533] ERROR: Out of memory at tomoyo_realpath_from_path. [ 589.072090][T11542] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 589.083725][T11542] overlayfs: missing 'lowerdir' [ 589.633289][T11550] tmpfs: Unknown parameter '' [ 589.649495][T11550] fuse: Unknown parameter '' [ 589.897984][ T29] audit: type=1400 audit(1732859365.852:1384): avc: denied { create } for pid=11545 comm="syz.2.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 589.930344][ T29] audit: type=1400 audit(1732859365.882:1385): avc: denied { ioctl } for pid=11545 comm="syz.2.1399" path="socket:[35899]" dev="sockfs" ino=35899 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 590.319520][T11552] block device autoloading is deprecated and will be removed. [ 590.944169][ T7984] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 591.287702][ T29] audit: type=1400 audit(1732859367.242:1386): avc: denied { ioctl } for pid=11562 comm="syz.0.1404" path="socket:[35256]" dev="sockfs" ino=35256 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 591.480099][ T5922] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 591.850293][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 591.861721][ T5922] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 592.136379][ T5922] usb 3-1: config 0 has no interface number 0 [ 592.160793][ T5922] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 592.189268][ T5922] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 592.206807][ T5922] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 592.217948][ T5922] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 592.227620][ T62] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 592.231135][ T5922] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 592.247301][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.287123][ T5922] usb 3-1: config 0 descriptor?? [ 592.317788][T11585] FAULT_INJECTION: forcing a failure. [ 592.317788][T11585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.336482][T11585] CPU: 0 UID: 0 PID: 11585 Comm: syz.5.1411 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 592.346912][T11585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 592.356963][T11585] Call Trace: [ 592.360232][T11585] [ 592.363144][T11585] dump_stack_lvl+0x16c/0x1f0 [ 592.367808][T11585] should_fail_ex+0x497/0x5b0 [ 592.372477][T11585] _copy_to_user+0x32/0xd0 [ 592.376878][T11585] bpf_test_finish.isra.0+0x4a1/0x680 [ 592.382244][T11585] ? lock_acquire+0x2f/0xb0 [ 592.386747][T11585] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 592.392643][T11585] ? _copy_from_user+0x59/0xd0 [ 592.397420][T11585] bpf_prog_test_run_xdp+0xa13/0x1580 [ 592.402820][T11585] ? lock_acquire+0x2f/0xb0 [ 592.404398][ T5922] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 592.407315][T11585] ? __fget_files+0x40/0x3a0 [ 592.419936][T11585] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 592.425731][T11585] ? __fget_files+0x206/0x3a0 [ 592.430408][T11585] ? fput+0x67/0x440 [ 592.434283][T11585] ? __bpf_prog_get+0xa0/0x290 [ 592.439026][T11585] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 592.444830][T11585] __sys_bpf+0xfc6/0x49c0 [ 592.449173][T11585] ? __pfx_lock_release+0x10/0x10 [ 592.454204][T11585] ? __pfx___sys_bpf+0x10/0x10 [ 592.458984][T11585] ? vfs_write+0x306/0x1150 [ 592.463501][T11585] ? __mutex_unlock_slowpath+0x164/0x690 [ 592.469175][T11585] ? fput+0x67/0x440 [ 592.473087][T11585] ? ksys_write+0x1ba/0x250 [ 592.473611][ T29] audit: type=1326 audit(1732859368.402:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 592.477583][T11585] ? __pfx_ksys_write+0x10/0x10 [ 592.477613][T11585] __x64_sys_bpf+0x78/0xc0 [ 592.502007][ T29] audit: type=1326 audit(1732859368.402:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 592.505844][T11585] ? lockdep_hardirqs_on+0x7c/0x110 [ 592.516061][ T29] audit: type=1326 audit(1732859368.402:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 592.533626][T11585] do_syscall_64+0xcd/0x250 [ 592.533665][T11585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.533696][T11585] RIP: 0033:0x7f95b3780809 [ 592.545860][ T29] audit: type=1326 audit(1732859368.402:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 592.562186][T11585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.562211][T11585] RSP: 002b:00007f95b44af058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 592.562236][T11585] RAX: ffffffffffffffda RBX: 00007f95b3945fa0 RCX: 00007f95b3780809 [ 592.562250][T11585] RDX: 000000000000000c RSI: 0000000020000500 RDI: 000000000000000a [ 592.562264][T11585] RBP: 00007f95b44af0a0 R08: 0000000000000000 R09: 0000000000000000 [ 592.562277][T11585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.562289][T11585] R13: 0000000000000000 R14: 00007f95b3945fa0 R15: 00007ffc1f3b6ae8 [ 592.562316][T11585] [ 592.597340][ T29] audit: type=1326 audit(1732859368.402:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 592.675850][ T5924] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 592.740084][ T29] audit: type=1326 audit(1732859368.402:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 592.918891][T11588] netlink: 'syz.6.1413': attribute type 2 has an invalid length. [ 592.926712][T11588] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1413'. [ 593.404235][ T29] audit: type=1326 audit(1732859368.402:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 593.428073][ T29] audit: type=1326 audit(1732859368.402:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 593.451819][ T29] audit: type=1326 audit(1732859368.402:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 593.475352][ T29] audit: type=1326 audit(1732859368.402:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 593.499045][ T29] audit: type=1326 audit(1732859368.402:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 593.523100][ T29] audit: type=1326 audit(1732859368.402:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 593.546987][ T29] audit: type=1326 audit(1732859368.402:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 593.570781][ T29] audit: type=1326 audit(1732859368.402:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 593.594513][ T29] audit: type=1326 audit(1732859368.402:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11586 comm="syz.6.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 594.286803][T11232] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 594.613129][T11232] usb 1-1: Using ep0 maxpacket: 8 [ 594.668488][T11232] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 594.718723][T10847] usb 3-1: USB disconnect, device number 40 [ 594.728886][T10847] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 594.749888][T11232] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 594.764041][T11232] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 38243, setting to 1024 [ 594.775477][T11232] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 594.785711][T11232] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 594.849752][T11232] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 594.870086][T11232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.779996][T11232] usb 1-1: usb_control_msg returned -71 [ 595.785598][T11232] usbtmc 1-1:16.0: can't read capabilities [ 595.980203][T11621] FAULT_INJECTION: forcing a failure. [ 595.980203][T11621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.003723][T11621] CPU: 0 UID: 0 PID: 11621 Comm: syz.2.1421 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 596.014165][T11621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 596.024228][T11621] Call Trace: [ 596.027520][T11621] [ 596.030455][T11621] dump_stack_lvl+0x16c/0x1f0 [ 596.035148][T11621] should_fail_ex+0x497/0x5b0 [ 596.039852][T11621] _copy_from_iter+0x2a1/0x1560 [ 596.041836][T11232] usb 1-1: USB disconnect, device number 13 [ 596.044697][T11621] ? trace_lock_acquire+0x14e/0x1f0 [ 596.044730][T11621] ? __alloc_skb+0x1fe/0x380 [ 596.044751][T11621] ? __pfx__copy_from_iter+0x10/0x10 [ 596.044770][T11621] ? __virt_addr_valid+0x1a4/0x590 [ 596.070743][T11621] ? __virt_addr_valid+0x5e/0x590 [ 596.075780][T11621] ? __phys_addr_symbol+0x30/0x80 [ 596.080814][T11621] ? __check_object_size+0x488/0x710 [ 596.086118][T11621] netlink_sendmsg+0x813/0xd70 [ 596.090891][T11621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.096213][T11621] ____sys_sendmsg+0xaaf/0xc90 [ 596.100992][T11621] ? copy_msghdr_from_user+0x10b/0x160 [ 596.106459][T11621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 596.111772][T11621] ___sys_sendmsg+0x135/0x1e0 [ 596.116457][T11621] ? __pfx____sys_sendmsg+0x10/0x10 [ 596.121674][T11621] ? __pfx_lock_release+0x10/0x10 [ 596.126702][T11621] ? trace_lock_acquire+0x14e/0x1f0 [ 596.131920][T11621] ? __fget_files+0x206/0x3a0 [ 596.136610][T11621] __sys_sendmsg+0x16e/0x220 [ 596.141210][T11621] ? __pfx___sys_sendmsg+0x10/0x10 [ 596.146348][T11621] do_syscall_64+0xcd/0x250 [ 596.150870][T11621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.156769][T11621] RIP: 0033:0x7f49c9580809 [ 596.161166][T11621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.180755][T11621] RSP: 002b:00007f49ca354058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.189142][T11621] RAX: ffffffffffffffda RBX: 00007f49c9746080 RCX: 00007f49c9580809 [ 596.197104][T11621] RDX: 0000000000004040 RSI: 0000000020000400 RDI: 0000000000000003 [ 596.205078][T11621] RBP: 00007f49ca3540a0 R08: 0000000000000000 R09: 0000000000000000 [ 596.213053][T11621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.221025][T11621] R13: 0000000000000001 R14: 00007f49c9746080 R15: 00007ffc00caa268 [ 596.229013][T11621] [ 596.491147][T11232] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 596.705498][ T62] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 596.749928][T11232] usb 1-1: Using ep0 maxpacket: 16 [ 596.756647][T11232] usb 1-1: config index 0 descriptor too short (expected 548, got 36) [ 596.765025][T11232] usb 1-1: config 0 has an invalid interface number: 41 but max is -1 [ 596.773319][T11232] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 596.797297][T11232] usb 1-1: config 0 has no interface number 0 [ 596.803840][T11232] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 596.813821][T11232] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 596.823883][T11232] usb 1-1: config 0 interface 41 has no altsetting 0 [ 597.943995][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 597.944015][ T29] audit: type=1326 audit(1732859372.952:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11632 comm="syz.6.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 597.979644][ T29] audit: type=1326 audit(1732859372.952:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11632 comm="syz.6.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 597.979721][T11232] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 598.006144][T11636] netlink: 'syz.6.1425': attribute type 2 has an invalid length. [ 598.020524][T11636] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1425'. [ 598.418629][ T62] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 598.441712][ T29] audit: type=1326 audit(1732859372.952:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11632 comm="syz.6.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 598.490017][ T5924] usb 10-1: device descriptor read/64, error -110 [ 598.516793][ T29] audit: type=1326 audit(1732859372.952:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11632 comm="syz.6.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 598.593778][ T29] audit: type=1326 audit(1732859373.152:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11632 comm="syz.6.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 599.492248][ T5924] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 599.533253][ T29] audit: type=1326 audit(1732859373.152:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11632 comm="syz.6.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 599.649953][ T5924] usb 10-1: device descriptor read/64, error -32 [ 599.770107][ T5924] usb usb10-port1: attempt power cycle [ 600.029289][T11232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.037349][T11232] usb 1-1: Product: syz [ 600.041578][T11232] usb 1-1: Manufacturer: syz [ 600.046182][T11232] usb 1-1: SerialNumber: syz [ 600.086970][ T29] audit: type=1326 audit(1732859373.172:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11632 comm="syz.6.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 600.129980][T11232] usb 1-1: config 0 descriptor?? [ 600.139309][T11232] usb 1-1: can't set config #0, error -71 [ 600.140009][ T5924] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 600.163214][ T29] audit: type=1326 audit(1732859373.172:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11632 comm="syz.6.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 600.198784][ T29] audit: type=1326 audit(1732859373.172:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11632 comm="syz.6.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 600.230434][ T5924] usb 10-1: device descriptor read/8, error -32 [ 600.667021][ T29] audit: type=1326 audit(1732859373.172:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11632 comm="syz.6.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 600.730264][ T5924] raw-gadget.1 gadget.9: failed to queue suspend event [ 600.737419][ T5924] raw-gadget.1 gadget.9: failed to queue reset event [ 600.767668][T11232] usb 1-1: USB disconnect, device number 14 [ 600.810539][ T5924] raw-gadget.1 gadget.9: failed to queue resume event [ 600.855980][T11657] tmpfs: Unknown parameter '' [ 600.867025][T11657] fuse: Unknown parameter '' [ 600.879974][ T5924] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 601.012122][ C0] raw-gadget.1 gadget.9: ignoring, device is not running [ 601.020256][ T5924] usb 10-1: device descriptor read/8, error -32 [ 601.040103][T10847] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 601.209344][ T5924] raw-gadget.1 gadget.9: failed to queue suspend event [ 601.236046][ T5924] usb usb10-port1: unable to enumerate USB device [ 601.283030][T10847] usb 3-1: config 1 interface 0 altsetting 245 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 601.384366][T10847] usb 3-1: config 1 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 601.407317][T10847] usb 3-1: config 1 interface 0 has no altsetting 0 [ 601.419180][T10847] usb 3-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 601.459801][T10847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.469039][T10847] usb 3-1: Product: syz [ 601.475396][T10847] usb 3-1: Manufacturer: syz [ 601.485376][T10847] usb 3-1: SerialNumber: syz [ 601.527916][T11655] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 601.759211][T11232] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 601.768272][T10847] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input26 [ 601.987107][T11232] usb 1-1: Using ep0 maxpacket: 8 [ 602.001448][T11232] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 602.010154][T11232] usb 1-1: config 0 has no interface number 0 [ 602.016323][T11232] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 602.027405][T11232] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 602.817510][ T7984] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 602.835072][T11232] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 603.106485][T11676] netlink: 'syz.5.1436': attribute type 2 has an invalid length. [ 603.114329][T11676] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1436'. [ 603.210033][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 603.210068][ T29] audit: type=1326 audit(1732859378.802:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11671 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 603.493053][T11232] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 603.506243][T11232] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 603.515325][T11232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.533426][ T29] audit: type=1326 audit(1732859378.942:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11671 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 603.557605][ T29] audit: type=1326 audit(1732859378.942:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11671 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 603.581350][ T29] audit: type=1326 audit(1732859378.942:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11671 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 603.604958][ T29] audit: type=1326 audit(1732859378.942:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11671 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 603.628517][ T29] audit: type=1326 audit(1732859378.942:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11671 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 603.652473][ T29] audit: type=1326 audit(1732859378.942:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11671 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 603.676943][T11232] usb 1-1: config 0 descriptor?? [ 603.753199][ T7984] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 603.767302][ T29] audit: type=1326 audit(1732859379.642:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11671 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 603.792220][ T29] audit: type=1326 audit(1732859379.642:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11671 comm="syz.5.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 603.818478][T11232] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 603.870043][ T5924] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 604.029992][ T5924] usb 7-1: Using ep0 maxpacket: 16 [ 604.038452][ T5924] usb 7-1: config 0 has an invalid interface number: 161 but max is 0 [ 604.052233][ T5924] usb 7-1: config 0 has no interface number 0 [ 604.059399][ T5924] usb 7-1: config 0 interface 161 has no altsetting 0 [ 604.077902][ T5924] usb 7-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 604.106311][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.144027][ T5924] usb 7-1: Product: syz [ 604.161793][ T5924] usb 7-1: Manufacturer: syz [ 604.177334][ T5924] usb 7-1: SerialNumber: syz [ 604.208371][ T5924] usb 7-1: config 0 descriptor?? [ 604.226592][ T5924] ums-jumpshot 7-1:0.161: USB Mass Storage device detected [ 604.241915][T10847] usb 1-1: USB disconnect, device number 15 [ 604.262571][T10847] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 604.270913][T11687] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 604.307206][T11687] overlayfs: missing 'lowerdir' [ 604.328695][ T5924] ums-jumpshot 7-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 604.353921][T11579] raw-gadget.1 gadget.9: failed to queue disconnect event [ 604.428975][T11678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.437662][T11678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.490136][T10847] usb 7-1: USB disconnect, device number 35 [ 605.530288][ T7588] usb 3-1: USB disconnect, device number 41 [ 605.538834][ T5195] bcm5974 3-1:1.0: could not read from device [ 605.560473][ T5195] bcm5974 3-1:1.0: could not read from device [ 605.588196][ T9493] bcm5974 3-1:1.0: could not read from device [ 605.702864][ T5195] bcm5974 3-1:1.0: could not read from device [ 607.100073][ T8] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 607.360162][T10847] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 607.461499][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.471886][ T9] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 607.484027][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 607.504261][ T8] usb 7-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 607.518546][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.528645][T10847] usb 1-1: Using ep0 maxpacket: 8 [ 607.538025][ T8] usb 7-1: Product: syz [ 607.544966][ T8] usb 7-1: Manufacturer: syz [ 607.551152][T10847] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 607.567619][ T8] usb 7-1: SerialNumber: syz [ 607.572303][T10847] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 607.588678][T10847] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 38243, setting to 1024 [ 607.603692][ T5924] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 607.635307][ T8] usb 7-1: config 0 descriptor?? [ 607.641360][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 607.660035][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 607.679433][ T8] redrat3 7-1:0.0: Couldn't find all endpoints [ 607.688050][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 607.704011][T10847] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 607.716653][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 38243, setting to 1024 [ 607.735541][T10847] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.754699][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 607.784764][ T5924] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 607.792865][T10847] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 607.813082][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.828998][T10847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.837395][ T5924] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 607.847746][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 607.857903][ T5924] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 607.868856][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.877881][ T5924] usb 6-1: config 0 interface 0 has no altsetting 0 [ 607.895807][ T5924] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 607.915523][ T29] audit: type=1400 audit(1732859383.872:1547): avc: denied { sqpoll } for pid=11707 comm="syz.6.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 607.918153][ T8] usb 7-1: USB disconnect, device number 36 [ 607.944251][ T5924] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 607.961860][ T5924] usb 6-1: config 0 interface 0 has no altsetting 0 [ 607.973094][ T5924] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 607.998916][ T5924] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 608.034476][ T5924] usb 6-1: config 0 interface 0 has no altsetting 0 [ 608.056796][ T5924] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 608.080425][T10847] usb 1-1: GET_CAPABILITIES returned 0 [ 608.091437][ T5924] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 608.107821][T10847] usbtmc 1-1:16.0: can't read capabilities [ 608.114235][ T9] usb 10-1: GET_CAPABILITIES returned 0 [ 608.120499][ T9] usbtmc 10-1:16.0: can't read capabilities [ 608.130678][ T5924] usb 6-1: config 0 interface 0 has no altsetting 0 [ 608.140026][ T5924] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 608.163700][ T5924] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 608.175142][ T5924] usb 6-1: config 0 interface 0 has no altsetting 0 [ 608.187651][ T5924] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 608.199349][ T5924] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 608.213207][ T5924] usb 6-1: config 0 interface 0 has no altsetting 0 [ 608.221810][ T5924] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 608.231284][ T5924] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 608.243202][ T5924] usb 6-1: config 0 interface 0 has no altsetting 0 [ 608.260563][ T5924] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 608.273148][ T5924] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 608.290160][ T5924] usb 6-1: config 0 interface 0 has no altsetting 0 [ 608.312433][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 608.321563][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 608.330641][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 608.339679][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 608.348717][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 608.360124][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 608.369330][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 608.378377][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 608.387421][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 608.396462][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 608.405500][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 608.414554][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 608.423590][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 608.432625][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 608.441662][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 608.450695][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 608.472838][ T5880] usb 10-1: USB disconnect, device number 39 [ 608.490798][ T5924] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 608.500156][ T5924] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 608.508606][ T5924] usb 6-1: Product: syz [ 608.512816][ T5924] usb 6-1: Manufacturer: syz [ 608.517422][ T5924] usb 6-1: SerialNumber: syz [ 608.538551][ T7588] usb 1-1: USB disconnect, device number 16 [ 608.543962][ T5924] usb 6-1: config 0 descriptor?? [ 608.561695][ T5924] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 608.869321][ T968] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 609.627289][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 609.808542][ T5880] usb 6-1: USB disconnect, device number 35 [ 609.815747][ T5880] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 612.709792][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1458'. [ 612.929488][ T5924] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 613.549563][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1465'. [ 614.205502][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 614.337295][ T5924] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 614.349912][ T5924] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 614.360250][ T5924] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 38243, setting to 1024 [ 614.371597][ T5924] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 614.381711][ T5924] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 614.407704][ T5924] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 614.416816][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.622709][ T7986] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 614.672605][ T5924] usb 3-1: GET_CAPABILITIES returned 0 [ 614.679961][ T5924] usbtmc 3-1:16.0: can't read capabilities [ 614.933269][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 614.942373][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 614.951415][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 614.960453][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 614.969490][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 614.978524][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 614.993676][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 614.996716][ T9] usb 3-1: USB disconnect, device number 42 [ 615.002737][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 615.018056][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.024904][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 615.040156][ T5924] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 615.366844][ T7986] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 615.500558][ T5924] usb 7-1: Using ep0 maxpacket: 8 [ 615.509758][ T5924] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 615.517999][ T5924] usb 7-1: config 0 has no interface number 0 [ 615.524649][ T5924] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 615.537068][ T5924] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 615.548982][ T5924] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 615.560172][ T5924] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 615.574306][ T5924] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 615.584798][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.596084][ T5924] usb 7-1: config 0 descriptor?? [ 615.609231][ T5924] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 617.730806][T11810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.781076][T11810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.807627][ T8] usb 7-1: USB disconnect, device number 37 [ 617.813588][ C0] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 617.842560][ T8] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 618.896113][ T5924] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 618.919171][ T29] audit: type=1326 audit(1732859394.872:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.6.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 618.959218][ T29] audit: type=1326 audit(1732859394.872:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.6.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 619.116922][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 619.176786][T11829] netlink: 'syz.6.1477': attribute type 2 has an invalid length. [ 619.189737][T11829] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1477'. [ 619.692694][ T29] audit: type=1326 audit(1732859394.872:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.6.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 619.990080][ T29] audit: type=1326 audit(1732859394.872:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.6.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 620.087182][ T5924] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 620.099236][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 620.117653][ T5924] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 620.126906][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.128526][ T29] audit: type=1326 audit(1732859394.872:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.6.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 620.167135][ T29] audit: type=1326 audit(1732859394.872:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.6.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 620.200021][ T29] audit: type=1326 audit(1732859394.872:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.6.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 620.224249][ T29] audit: type=1326 audit(1732859394.872:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.6.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 620.263369][ T29] audit: type=1326 audit(1732859394.872:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.6.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 620.290030][ T29] audit: type=1326 audit(1732859394.872:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11824 comm="syz.6.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209a580809 code=0x7ffc0000 [ 620.297222][ T5924] usb 1-1: config 0 descriptor?? [ 620.337926][ T5924] hub 1-1:0.0: bad descriptor, ignoring hub [ 620.344008][ T5924] hub 1-1:0.0: probe with driver hub failed with error -5 [ 620.352091][ T5924] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 620.399859][ T7981] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 620.732520][T10847] usb 1-1: USB disconnect, device number 17 [ 621.031396][ T7985] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 621.768170][T11849] tmpfs: Unknown parameter '' [ 621.808415][T11849] fuse: Unknown parameter '' [ 621.994531][T11854] FAULT_INJECTION: forcing a failure. [ 621.994531][T11854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.007755][T11854] CPU: 0 UID: 0 PID: 11854 Comm: syz.5.1486 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 622.018181][T11854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 622.028241][T11854] Call Trace: [ 622.031523][T11854] [ 622.034452][T11854] dump_stack_lvl+0x16c/0x1f0 [ 622.039144][T11854] should_fail_ex+0x497/0x5b0 [ 622.043839][T11854] _copy_from_iter+0x2a1/0x1560 [ 622.048694][T11854] ? trace_lock_acquire+0x14e/0x1f0 [ 622.053911][T11854] ? __alloc_skb+0x1fe/0x380 [ 622.058508][T11854] ? __pfx__copy_from_iter+0x10/0x10 [ 622.063801][T11854] ? __virt_addr_valid+0x1a4/0x590 [ 622.068932][T11854] ? __virt_addr_valid+0x5e/0x590 [ 622.073972][T11854] ? __phys_addr_symbol+0x30/0x80 [ 622.079005][T11854] ? __check_object_size+0x488/0x710 [ 622.084302][T11854] netlink_sendmsg+0x813/0xd70 [ 622.089070][T11854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.094364][T11854] ____sys_sendmsg+0xaaf/0xc90 [ 622.099111][T11854] ? copy_msghdr_from_user+0x10b/0x160 [ 622.104550][T11854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 622.109823][T11854] ___sys_sendmsg+0x135/0x1e0 [ 622.114495][T11854] ? __pfx____sys_sendmsg+0x10/0x10 [ 622.119679][T11854] ? __pfx_lock_release+0x10/0x10 [ 622.124684][T11854] ? trace_lock_acquire+0x14e/0x1f0 [ 622.129886][T11854] ? __fget_files+0x206/0x3a0 [ 622.134545][T11854] __sys_sendmsg+0x16e/0x220 [ 622.139114][T11854] ? __pfx___sys_sendmsg+0x10/0x10 [ 622.144211][T11854] do_syscall_64+0xcd/0x250 [ 622.148703][T11854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.154583][T11854] RIP: 0033:0x7f95b3780809 [ 622.158974][T11854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.178561][T11854] RSP: 002b:00007f95b44af058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 622.186969][T11854] RAX: ffffffffffffffda RBX: 00007f95b3945fa0 RCX: 00007f95b3780809 [ 622.194920][T11854] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 622.202869][T11854] RBP: 00007f95b44af0a0 R08: 0000000000000000 R09: 0000000000000000 [ 622.210827][T11854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.218778][T11854] R13: 0000000000000000 R14: 00007f95b3945fa0 R15: 00007ffc1f3b6ae8 [ 622.226736][T11854] [ 622.309055][T11858] netlink: 'syz.0.1487': attribute type 2 has an invalid length. [ 622.370157][T10847] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 623.412763][T10847] usb 10-1: Using ep0 maxpacket: 8 [ 623.496240][T10847] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 623.504704][ T8] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 623.515188][T10847] usb 10-1: config 0 has no interface number 0 [ 623.521465][T10847] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 623.532451][T10847] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 623.544101][T10847] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 623.555810][T10847] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 623.569100][T10847] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 623.578421][T10847] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.589687][T10847] usb 10-1: config 0 descriptor?? [ 623.792403][T10847] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 623.997645][ T8] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 624.006868][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.018697][ T8] usb 6-1: config 0 descriptor?? [ 624.211856][ T7588] usb 10-1: USB disconnect, device number 40 [ 624.221982][ T7588] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 624.236206][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.243701][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.609499][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 624.609516][ T29] audit: type=1326 audit(1732859400.562:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.5.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 624.700324][ T29] audit: type=1326 audit(1732859400.592:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.5.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 624.798543][ T29] audit: type=1326 audit(1732859400.602:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.5.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 624.861078][ T29] audit: type=1326 audit(1732859400.602:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.5.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 624.901956][ T29] audit: type=1326 audit(1732859400.602:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.5.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 624.904715][ T8] ath6kl: Failed to submit usb control message: -71 [ 624.950509][ T8] ath6kl: unable to send the bmi data to the device: -71 [ 624.957920][ T8] ath6kl: Unable to send get target info: -71 [ 624.973838][ T29] audit: type=1326 audit(1732859400.602:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.5.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b3780809 code=0x7ffc0000 [ 624.991879][ T8] ath6kl: Failed to init ath6kl core: -71 [ 625.080628][ T8] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 625.137542][ T8] usb 6-1: USB disconnect, device number 36 [ 625.938334][ T7588] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 626.204357][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 626.267946][T11897] tmpfs: Unknown parameter '' [ 626.275550][T11897] fuse: Unknown parameter '' [ 626.471347][ T7588] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 626.483112][ T7588] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.496907][ T7588] usb 3-1: New USB device found, idVendor=22ed, idProduct=1010, bcdDevice= 0.00 [ 626.559974][ T7588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.659216][ T7588] usb 3-1: config 0 descriptor?? [ 626.721773][ T8] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 626.970620][ T8] usb 10-1: Using ep0 maxpacket: 8 [ 627.081766][ T8] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 627.107461][ T8] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 627.126103][ T8] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 38243, setting to 1024 [ 627.146379][ T8] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 627.158780][ T8] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 627.171835][ T7588] hid-generic 0003:22ED:1010.000E: unknown main item tag 0x0 [ 627.172025][ T8] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 627.185422][ T7588] hid-generic 0003:22ED:1010.000E: hidraw0: USB HID v10.00 Device [HID 22ed:1010] on usb-dummy_hcd.2-1/input0 [ 627.188453][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.422610][ T62] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 627.490192][ T5922] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 627.661056][T11232] usb 3-1: USB disconnect, device number 44 [ 627.794500][ T8] usb 10-1: GET_CAPABILITIES returned 0 [ 627.800160][ T8] usbtmc 10-1:16.0: can't read capabilities [ 629.151060][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 629.160239][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 629.169376][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 629.178502][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 629.187623][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 629.230364][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 629.239563][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 629.248696][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 629.257856][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 629.267010][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 629.276164][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 629.285313][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 629.307161][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 629.316365][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 629.325525][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 629.334673][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 629.863179][T11938] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 630.027602][T11938] overlayfs: missing 'lowerdir' [ 630.211323][T10847] usb 10-1: USB disconnect, device number 41 [ 630.303007][T11940] FAULT_INJECTION: forcing a failure. [ 630.303007][T11940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.351227][T11940] CPU: 0 UID: 0 PID: 11940 Comm: syz.2.1507 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 630.361676][T11940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 630.371739][T11940] Call Trace: [ 630.375012][T11940] [ 630.377930][T11940] dump_stack_lvl+0x16c/0x1f0 [ 630.382603][T11940] should_fail_ex+0x497/0x5b0 [ 630.387274][T11940] _copy_from_iter+0x2a1/0x1560 [ 630.392124][T11940] ? trace_lock_acquire+0x14e/0x1f0 [ 630.397329][T11940] ? __alloc_skb+0x1fe/0x380 [ 630.401908][T11940] ? __pfx__copy_from_iter+0x10/0x10 [ 630.407195][T11940] ? __virt_addr_valid+0x1a4/0x590 [ 630.412315][T11940] ? __virt_addr_valid+0x5e/0x590 [ 630.417329][T11940] ? __phys_addr_symbol+0x30/0x80 [ 630.422338][T11940] ? __check_object_size+0x488/0x710 [ 630.427604][T11940] netlink_sendmsg+0x813/0xd70 [ 630.432379][T11940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.437684][T11940] ____sys_sendmsg+0xaaf/0xc90 [ 630.442452][T11940] ? copy_msghdr_from_user+0x10b/0x160 [ 630.447906][T11940] ? __pfx_____sys_sendmsg+0x10/0x10 [ 630.453194][T11940] ___sys_sendmsg+0x135/0x1e0 [ 630.457871][T11940] ? __pfx____sys_sendmsg+0x10/0x10 [ 630.463061][T11940] ? __pfx_lock_release+0x10/0x10 [ 630.468083][T11940] ? trace_lock_acquire+0x14e/0x1f0 [ 630.473297][T11940] ? __fget_files+0x206/0x3a0 [ 630.477971][T11940] __sys_sendmsg+0x16e/0x220 [ 630.482562][T11940] ? __pfx___sys_sendmsg+0x10/0x10 [ 630.487674][T11940] do_syscall_64+0xcd/0x250 [ 630.492179][T11940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.498083][T11940] RIP: 0033:0x7f49c9580809 [ 630.502498][T11940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.522107][T11940] RSP: 002b:00007f49ca375058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.530529][T11940] RAX: ffffffffffffffda RBX: 00007f49c9745fa0 RCX: 00007f49c9580809 [ 630.538480][T11940] RDX: 0000000020000040 RSI: 00000000200001c0 RDI: 0000000000000003 [ 630.546442][T11940] RBP: 00007f49ca3750a0 R08: 0000000000000000 R09: 0000000000000000 [ 630.554413][T11940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.562398][T11940] R13: 0000000000000000 R14: 00007f49c9745fa0 R15: 00007ffc00caa268 [ 630.570390][T11940] [ 631.440491][ T7985] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 631.516083][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1511'. [ 632.288143][T11959] netlink: 'syz.6.1513': attribute type 5 has an invalid length. [ 632.660191][T11232] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 632.826960][T11232] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.844612][ T5922] usb 1-1: device descriptor read/64, error -110 [ 632.979965][T11232] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 633.387237][ T7984] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 633.410119][T11232] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 633.419171][T11232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 633.433789][T11232] usb 7-1: SerialNumber: syz [ 633.599933][ T5922] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 634.320135][ T5922] usb 1-1: device descriptor read/64, error -32 [ 634.435287][ T5922] usb usb1-port1: attempt power cycle [ 635.032545][T11232] usb 7-1: 0:2 : does not exist [ 635.037482][T11232] usb 7-1: unit 5: unexpected type 0x0b [ 635.166372][T11232] usb 7-1: USB disconnect, device number 38 [ 635.930034][ T5922] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 635.944960][ T9534] udevd[9534]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 635.961707][ T5922] usb 1-1: device descriptor read/8, error -32 [ 635.984228][T11906] raw-gadget.2 gadget.0: failed to queue suspend event [ 635.992276][T11906] raw-gadget.2 gadget.0: failed to queue disconnect event [ 636.067415][T10847] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 636.268617][T10847] usb 6-1: Using ep0 maxpacket: 32 [ 637.246127][ T6640] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 637.375480][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1523'. [ 638.029469][ T29] audit: type=1400 audit(1732859413.582:1603): avc: denied { map } for pid=12008 comm="syz.2.1524" path="/proc/724/pagemap" dev="proc" ino=37246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 638.074376][T10847] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 638.085548][T10847] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 638.098635][T10847] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 638.107904][T10847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.118769][T10847] usb 6-1: config 0 descriptor?? [ 638.500837][ T7985] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 638.623846][ T29] audit: type=1400 audit(1732859413.582:1604): avc: denied { execute } for pid=12008 comm="syz.2.1524" path="/proc/724/pagemap" dev="proc" ino=37246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 639.371307][T10847] usb 6-1: can't set config #0, error -71 [ 639.460059][T10847] usb 6-1: USB disconnect, device number 37 [ 642.360031][T11232] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 642.465907][T12063] FAULT_INJECTION: forcing a failure. [ 642.465907][T12063] name failslab, interval 1, probability 0, space 0, times 0 [ 642.589081][T12063] CPU: 0 UID: 0 PID: 12063 Comm: syz.6.1537 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 642.599531][T12063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 642.609598][T12063] Call Trace: [ 642.612883][T12063] [ 642.615819][T12063] dump_stack_lvl+0x16c/0x1f0 [ 642.620515][T12063] should_fail_ex+0x497/0x5b0 [ 642.625209][T12063] ? fs_reclaim_acquire+0xae/0x150 [ 642.629927][T11232] usb 10-1: Using ep0 maxpacket: 16 [ 642.630330][T12063] should_failslab+0xc2/0x120 [ 642.636821][T11232] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.640150][T12063] __kmalloc_noprof+0xcb/0x510 [ 642.640180][T12063] ? d_absolute_path+0x137/0x1b0 [ 642.640207][T12063] ? rcu_is_watching+0x12/0xc0 [ 642.640236][T12063] tomoyo_encode2+0x100/0x3e0 [ 642.651325][T11232] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.655886][T12063] tomoyo_encode+0x29/0x50 [ 642.661422][T11232] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 642.665530][T12063] tomoyo_realpath_from_path+0x19d/0x720 [ 642.670254][T11232] usb 10-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 642.680127][T12063] tomoyo_path_number_perm+0x248/0x590 [ 642.680155][T12063] ? tomoyo_path_number_perm+0x235/0x590 [ 642.680180][T12063] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 642.680227][T12063] ? __pfx_lock_release+0x10/0x10 [ 642.685469][T11232] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.697416][T12063] ? trace_lock_acquire+0x14e/0x1f0 [ 642.697453][T12063] ? lock_acquire+0x2f/0xb0 [ 642.697474][T12063] ? __fget_files+0x40/0x3a0 [ 642.697500][T12063] ? __fget_files+0x206/0x3a0 [ 642.761147][T12063] security_file_ioctl+0x9b/0x240 [ 642.766192][T12063] __x64_sys_ioctl+0xb7/0x200 [ 642.768542][T11232] usb 10-1: config 0 descriptor?? [ 642.770874][T12063] do_syscall_64+0xcd/0x250 [ 642.770911][T12063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.770940][T12063] RIP: 0033:0x7f209a580809 [ 642.770959][T12063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.770979][T12063] RSP: 002b:00007f209b3fe058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 642.771001][T12063] RAX: ffffffffffffffda RBX: 00007f209a745fa0 RCX: 00007f209a580809 [ 642.771017][T12063] RDX: 0000000020000340 RSI: 00000000c0105502 RDI: 0000000000000003 [ 642.771031][T12063] RBP: 00007f209b3fe0a0 R08: 0000000000000000 R09: 0000000000000000 [ 642.771044][T12063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.771057][T12063] R13: 0000000000000000 R14: 00007f209a745fa0 R15: 00007ffe14339368 [ 642.858503][T12063] [ 642.932754][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1538'. [ 642.947050][T12063] ERROR: Out of memory at tomoyo_realpath_from_path. [ 642.956651][T12063] usb usb8: usbfs: process 12063 (syz.6.1537) did not claim interface 0 before use [ 643.903378][T12059] bond0: entered promiscuous mode [ 643.913397][T12059] bond_slave_0: entered promiscuous mode [ 643.929010][T12059] bond_slave_1: entered promiscuous mode [ 644.060507][ T968] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 644.183111][T11232] hid-multitouch 0003:045E:9994.000F: unknown main item tag 0x2 [ 644.190973][T11232] hid-multitouch 0003:045E:9994.000F: unknown main item tag 0x0 [ 644.198944][T11232] hid-multitouch 0003:045E:9994.000F: unknown main item tag 0x0 [ 644.206845][T11232] hid-multitouch 0003:045E:9994.000F: unknown main item tag 0x0 [ 644.214905][T11232] hid-multitouch 0003:045E:9994.000F: unknown main item tag 0x0 [ 644.223493][T11232] hid-multitouch 0003:045E:9994.000F: unknown main item tag 0x0 [ 644.231284][T11232] hid-multitouch 0003:045E:9994.000F: unknown main item tag 0x0 [ 644.239008][T11232] hid-multitouch 0003:045E:9994.000F: unknown main item tag 0x0 [ 644.246741][T11232] hid-multitouch 0003:045E:9994.000F: unknown main item tag 0x0 [ 644.254665][T11232] hid-multitouch 0003:045E:9994.000F: unknown main item tag 0x0 [ 644.262472][T11232] hid-multitouch 0003:045E:9994.000F: unknown main item tag 0x0 [ 644.442632][T11232] hid-multitouch 0003:045E:9994.000F: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.9-1/input0 [ 644.475795][T11232] usb 10-1: USB disconnect, device number 42 [ 647.980488][T11232] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 648.239861][T10847] IPVS: starting estimator thread 0... [ 648.360233][T12111] IPVS: using max 24 ests per chain, 57600 per kthread [ 648.421340][T12115] FAULT_INJECTION: forcing a failure. [ 648.421340][T12115] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 648.445208][T12115] CPU: 0 UID: 0 PID: 12115 Comm: syz.9.1552 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 648.455647][T12115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 648.465714][T12115] Call Trace: [ 648.469002][T12115] [ 648.471939][T12115] dump_stack_lvl+0x16c/0x1f0 [ 648.476642][T12115] should_fail_ex+0x497/0x5b0 [ 648.481343][T12115] ? fs_reclaim_acquire+0xae/0x150 [ 648.486482][T12115] should_fail_alloc_page+0xe7/0x130 [ 648.491777][T12115] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 648.497918][T12115] __alloc_pages_noprof+0x190/0x25b0 [ 648.503191][T12115] ? __pfx_mark_lock+0x10/0x10 [ 648.507944][T12115] ? __pfx___lock_acquire+0x10/0x10 [ 648.513132][T12115] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 648.518841][T12115] ? hlock_class+0x4e/0x130 [ 648.523338][T12115] ? hlock_class+0x4e/0x130 [ 648.527835][T12115] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 648.533727][T12115] ? policy_nodemask+0xea/0x4e0 [ 648.538563][T12115] alloc_pages_mpol_noprof+0x2c9/0x610 [ 648.544014][T12115] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 648.550000][T12115] ? find_held_lock+0x2d/0x110 [ 648.554766][T12115] __pmd_alloc+0x3f/0x860 [ 648.559082][T12115] __handle_mm_fault+0x94a/0x2a40 [ 648.564106][T12115] ? __pfx___handle_mm_fault+0x10/0x10 [ 648.569569][T12115] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 648.575198][T12115] ? find_vma+0xc0/0x140 [ 648.579434][T12115] ? __pfx_find_vma+0x10/0x10 [ 648.584118][T12115] handle_mm_fault+0x3fa/0xaa0 [ 648.588880][T12115] do_user_addr_fault+0x7a3/0x13f0 [ 648.593991][T12115] exc_page_fault+0x5c/0xc0 [ 648.598489][T12115] asm_exc_page_fault+0x26/0x30 [ 648.603334][T12115] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 648.609133][T12115] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 648.628733][T12115] RSP: 0018:ffffc9000219fda0 EFLAGS: 00050206 [ 648.634787][T12115] RAX: 0000000000000001 RBX: 0000000020000080 RCX: 000000000000000e [ 648.642744][T12115] RDX: fffff52000433fc5 RSI: 0000000020000080 RDI: ffffc9000219fe18 [ 648.650702][T12115] RBP: 000000000000000e R08: 0000000000000001 R09: fffff52000433fc4 [ 648.658659][T12115] R10: ffffc9000219fe25 R11: 0000000000000000 R12: 0000000000000000 [ 648.666617][T12115] R13: ffffc9000219fe18 R14: 000000000000000e R15: 0000000000000000 [ 648.674586][T12115] _copy_from_user+0x9a/0xd0 [ 648.679169][T12115] move_addr_to_kernel+0x68/0x160 [ 648.684194][T12115] __sys_connect+0xb0/0x170 [ 648.688683][T12115] ? __pfx___sys_connect+0x10/0x10 [ 648.693787][T12115] ? __pfx_ksys_write+0x10/0x10 [ 648.698630][T12115] __x64_sys_connect+0x72/0xb0 [ 648.703380][T12115] ? lockdep_hardirqs_on+0x7c/0x110 [ 648.708571][T12115] do_syscall_64+0xcd/0x250 [ 648.713073][T12115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.718961][T12115] RIP: 0033:0x7fdf37780809 [ 648.723361][T12115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.742977][T12115] RSP: 002b:00007fdf38666058 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 648.751381][T12115] RAX: ffffffffffffffda RBX: 00007fdf37945fa0 RCX: 00007fdf37780809 [ 648.759338][T12115] RDX: 000000000000000e RSI: 0000000020000080 RDI: 0000000000000004 [ 648.767292][T12115] RBP: 00007fdf386660a0 R08: 0000000000000000 R09: 0000000000000000 [ 648.775248][T12115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.783210][T12115] R13: 0000000000000000 R14: 00007fdf37945fa0 R15: 00007ffe5e7cb538 [ 648.791187][T12115] [ 649.116264][ T29] audit: type=1400 audit(1732859424.952:1605): avc: denied { recv } for pid=12113 comm="syz.6.1553" saddr=10.128.0.169 src=42918 daddr=10.128.0.201 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 649.494961][T11232] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 649.724481][ T29] audit: type=1400 audit(1732859425.262:1606): avc: denied { create } for pid=12113 comm="syz.6.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 649.833127][ T7981] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 650.596812][ T5880] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 650.790120][T11232] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 651.071906][T11232] usb 10-1: Using ep0 maxpacket: 16 [ 651.148290][T11232] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 651.173509][T11232] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.210355][T11232] usb 10-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 651.219806][T11232] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.368375][T11232] usb 10-1: config 0 descriptor?? [ 651.660625][ T7588] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 652.255711][T11232] uclogic 0003:2179:0077.0010: interface is invalid, ignoring [ 652.871139][T10847] usb 10-1: USB disconnect, device number 43 [ 653.026676][ T8] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 653.487186][T11232] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 654.185023][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1566'. [ 655.014435][ T7588] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 655.022615][ T7588] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 655.234329][ T5924] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 655.295210][ T7985] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 655.617992][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 655.810710][ T5924] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 655.818913][ T5924] usb 1-1: config 0 has no interface number 0 [ 655.830396][ T5924] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 655.839538][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.847952][ T5924] usb 1-1: Product: syz [ 655.856574][ T5924] usb 1-1: Manufacturer: syz [ 655.864671][ T5924] usb 1-1: SerialNumber: syz [ 656.005236][ T5924] usb 1-1: config 0 descriptor?? [ 656.111851][T12196] fuse: Bad value for 'user_id' [ 656.116840][T12196] fuse: Bad value for 'user_id' [ 656.311386][ T8] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 656.520462][ T5924] radio-si470x 1-1:0.35: this is not a si470x device. [ 656.535411][T12173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.550781][T11232] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 656.588404][T12173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.601143][ T5924] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 656.618704][T12200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1574'. [ 656.637113][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 656.650150][ T5924] usb 1-1: USB disconnect, device number 22 [ 656.660160][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 656.689733][ T8] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 656.709516][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.793704][ T8] usb 7-1: config 0 descriptor?? [ 656.800947][ T8] hub 7-1:0.0: bad descriptor, ignoring hub [ 656.806919][ T8] hub 7-1:0.0: probe with driver hub failed with error -5 [ 656.817349][ T8] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 656.954389][ T62] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 657.250831][ T8] usb 7-1: USB disconnect, device number 39 [ 657.359274][ T29] audit: type=1400 audit(1732859433.312:1607): avc: denied { relabelfrom } for pid=12205 comm="syz.5.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 657.404212][ T29] audit: type=1400 audit(1732859433.362:1608): avc: denied { relabelto } for pid=12205 comm="syz.5.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 657.663945][ T5922] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 657.715353][T12215] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 657.727046][T12215] overlayfs: missing 'lowerdir' [ 658.400060][ T5924] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 658.552608][ T5924] usb 1-1: device descriptor read/64, error -71 [ 658.684995][T12228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=12228 comm=syz.9.1581 [ 658.706463][ T7588] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 658.711027][T12228] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1581'. [ 658.912213][ T5924] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 659.203718][ T5924] usb 1-1: device descriptor read/64, error -71 [ 659.420326][ T7981] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 659.434530][ T5924] usb usb1-port1: attempt power cycle [ 659.700081][ T5922] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 659.741009][T11232] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 659.790210][ T5924] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 659.860057][ T5922] usb 10-1: Using ep0 maxpacket: 8 [ 659.878723][ T5922] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 659.892200][ T5922] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 659.903405][ T5922] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 38243, setting to 1024 [ 659.917419][ T5922] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 659.928446][ T5922] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 659.995484][ T5924] usb 1-1: device descriptor read/8, error -71 [ 660.052292][ T5922] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 660.064526][ T5922] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.120218][ T7588] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 660.260172][ T5924] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 660.270062][ T7588] usb 6-1: Using ep0 maxpacket: 8 [ 660.282293][ T7588] usb 6-1: config 0 interface 0 has no altsetting 0 [ 660.292360][ T5922] usb 10-1: usb_control_msg returned -71 [ 660.294686][ T5924] usb 1-1: device descriptor read/8, error -71 [ 660.306579][ T5922] usbtmc 10-1:16.0: can't read capabilities [ 660.313536][ T7588] usb 6-1: New USB device found, idVendor=046d, idProduct=22ae, bcdDevice=11.58 [ 660.326768][ T5922] usb 10-1: USB disconnect, device number 44 [ 660.333026][ T7588] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.354854][ T7588] usb 6-1: Product: syz [ 660.359029][ T7588] usb 6-1: Manufacturer: syz [ 660.365553][ T7588] usb 6-1: SerialNumber: syz [ 660.396999][ T7588] usb 6-1: config 0 descriptor?? [ 660.706273][ T6640] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 660.712864][ T5924] usb usb1-port1: unable to enumerate USB device [ 660.751996][ T7588] hub 6-1:0.0: bad descriptor, ignoring hub [ 660.765510][ T29] audit: type=1400 audit(1732859436.722:1609): avc: denied { create } for pid=12251 comm="syz.0.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 660.785662][T11232] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 660.795578][ T7588] hub 6-1:0.0: probe with driver hub failed with error -5 [ 660.871162][T12254] FAULT_INJECTION: forcing a failure. [ 660.871162][T12254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.884495][ T29] audit: type=1400 audit(1732859436.752:1610): avc: denied { write } for pid=12251 comm="syz.0.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 660.911370][T12254] CPU: 0 UID: 0 PID: 12254 Comm: syz.6.1588 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 660.921814][T12254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 660.931873][T12254] Call Trace: [ 660.935153][T12254] [ 660.938088][T12254] dump_stack_lvl+0x16c/0x1f0 [ 660.942785][T12254] should_fail_ex+0x497/0x5b0 [ 660.947492][T12254] _copy_from_iter+0x2a1/0x1560 [ 660.952354][T12254] ? trace_lock_acquire+0x14e/0x1f0 [ 660.957558][T12254] ? __alloc_skb+0x1fe/0x380 [ 660.962142][T12254] ? __pfx__copy_from_iter+0x10/0x10 [ 660.967420][T12254] ? __virt_addr_valid+0x1a4/0x590 [ 660.972530][T12254] ? __virt_addr_valid+0x5e/0x590 [ 660.977551][T12254] ? __phys_addr_symbol+0x30/0x80 [ 660.982569][T12254] ? __check_object_size+0x488/0x710 [ 660.987849][T12254] netlink_sendmsg+0x813/0xd70 [ 660.992618][T12254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.997923][T12254] ____sys_sendmsg+0xaaf/0xc90 [ 661.002690][T12254] ? copy_msghdr_from_user+0x10b/0x160 [ 661.008143][T12254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 661.013429][T12254] ___sys_sendmsg+0x135/0x1e0 [ 661.018097][T12254] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.023291][T12254] ? __pfx_lock_release+0x10/0x10 [ 661.028304][T12254] ? trace_lock_acquire+0x14e/0x1f0 [ 661.033500][T12254] ? __fget_files+0x206/0x3a0 [ 661.038172][T12254] __sys_sendmsg+0x16e/0x220 [ 661.042751][T12254] ? __pfx___sys_sendmsg+0x10/0x10 [ 661.047863][T12254] do_syscall_64+0xcd/0x250 [ 661.052363][T12254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.058252][T12254] RIP: 0033:0x7f209a580809 [ 661.062654][T12254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.082247][T12254] RSP: 002b:00007f209b3fe058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.090648][T12254] RAX: ffffffffffffffda RBX: 00007f209a745fa0 RCX: 00007f209a580809 [ 661.098607][T12254] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 661.106563][T12254] RBP: 00007f209b3fe0a0 R08: 0000000000000000 R09: 0000000000000000 [ 661.114519][T12254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.122474][T12254] R13: 0000000000000000 R14: 00007f209a745fa0 R15: 00007ffe14339368 [ 661.130440][T12254] [ 661.366720][T10847] usb 6-1: USB disconnect, device number 38 [ 661.836833][ T5922] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 661.886805][T12267] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 662.047650][T12270] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 662.069936][T12270] overlayfs: missing 'lowerdir' [ 662.133755][ T7588] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 662.192321][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1593'. [ 662.260052][T11232] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 662.276804][ T29] audit: type=1400 audit(1732859438.162:1611): avc: denied { ioctl } for pid=12266 comm="syz.0.1593" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 662.307768][ T7588] usb 3-1: Using ep0 maxpacket: 32 [ 662.314880][ T7588] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 662.335910][ T7588] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 662.366630][ T7588] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.453958][ T7588] usb 3-1: config 0 descriptor?? [ 662.473351][ T7588] hub 3-1:0.0: bad descriptor, ignoring hub [ 662.486332][ T7588] hub 3-1:0.0: probe with driver hub failed with error -5 [ 662.497625][ T7588] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 662.543778][T11232] usb 6-1: Using ep0 maxpacket: 8 [ 662.556237][T11232] usb 6-1: config 0 interface 0 has no altsetting 0 [ 662.572414][T11232] usb 6-1: New USB device found, idVendor=046d, idProduct=22ae, bcdDevice=11.58 [ 662.588471][T11232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.596656][ T5922] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 662.619672][T11232] usb 6-1: Product: syz [ 662.628381][T11232] usb 6-1: Manufacturer: syz [ 662.633411][ T62] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 662.652098][T11232] usb 6-1: SerialNumber: syz [ 662.693007][ T5885] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 662.700361][ T5885] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 662.709541][T11232] usb 6-1: config 0 descriptor?? [ 662.715216][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 662.800148][ T5922] usb 1-1: device descriptor read/64, error -71 [ 662.861026][ T46] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 663.033133][ T7588] usb 3-1: USB disconnect, device number 45 [ 663.044176][ T5922] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 663.390127][ T5922] usb 1-1: device descriptor read/64, error -71 [ 663.483638][T11232] usb 6-1: can't set config #0, error -71 [ 663.500210][ T5922] usb usb1-port1: attempt power cycle [ 663.532367][T11232] usb 6-1: USB disconnect, device number 39 [ 663.952976][T12292] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1597'. [ 664.503001][ T46] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 664.529126][ T5922] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 664.644737][ T5922] usb 1-1: device descriptor read/8, error -71 [ 665.304017][T12302] FAULT_INJECTION: forcing a failure. [ 665.304017][T12302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.324479][T12302] CPU: 0 UID: 0 PID: 12302 Comm: syz.6.1601 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 665.334892][T12302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 665.344944][T12302] Call Trace: [ 665.348199][T12302] [ 665.351111][T12302] dump_stack_lvl+0x16c/0x1f0 [ 665.355777][T12302] should_fail_ex+0x497/0x5b0 [ 665.360444][T12302] _copy_to_user+0x32/0xd0 [ 665.364843][T12302] simple_read_from_buffer+0xd0/0x160 [ 665.370215][T12302] proc_fail_nth_read+0x198/0x270 [ 665.375247][T12302] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 665.380781][T12302] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 665.386312][T12302] vfs_read+0x1df/0xbe0 [ 665.390449][T12302] ? __fget_files+0x1fc/0x3a0 [ 665.395109][T12302] ? __pfx___mutex_lock+0x10/0x10 [ 665.400123][T12302] ? __pfx_vfs_read+0x10/0x10 [ 665.404785][T12302] ? __fget_files+0x206/0x3a0 [ 665.409445][T12302] ksys_read+0x12b/0x250 [ 665.413664][T12302] ? __pfx_ksys_read+0x10/0x10 [ 665.418411][T12302] do_syscall_64+0xcd/0x250 [ 665.422903][T12302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.428783][T12302] RIP: 0033:0x7f209a57f21c [ 665.433176][T12302] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 665.452763][T12302] RSP: 002b:00007f209b3fe050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 665.461154][T12302] RAX: ffffffffffffffda RBX: 00007f209a745fa0 RCX: 00007f209a57f21c [ 665.469102][T12302] RDX: 000000000000000f RSI: 00007f209b3fe0b0 RDI: 0000000000000004 [ 665.477050][T12302] RBP: 00007f209b3fe0a0 R08: 0000000000000000 R09: 0000000000000000 [ 665.485016][T12302] R10: 000000000000005e R11: 0000000000000246 R12: 0000000000000001 [ 665.492966][T12302] R13: 0000000000000000 R14: 00007f209a745fa0 R15: 00007ffe14339368 [ 665.500925][T12302] [ 665.510636][ T5922] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 665.538363][ T29] audit: type=1400 audit(1732859441.462:1612): avc: denied { override_creds } for pid=12298 comm="syz.9.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 771.229794][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 771.236770][ C0] rcu: 1-...!: (1 GPs behind) idle=749c/0/0x1 softirq=47302/47305 fqs=0 [ 771.246791][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12307/1:b..l [ 771.254801][ C0] rcu: (detected by 0, t=10505 jiffies, g=43857, q=199 ncpus=2) [ 771.262526][ C0] Sending NMI from CPU 0 to CPUs 1: [ 771.262555][ C1] NMI backtrace for cpu 1 [ 771.262567][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 771.262590][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 771.262602][ C1] RIP: 0010:advance_sched+0x6c4/0xc60 [ 771.262632][ C1] Code: 75 52 f8 48 8b 7c 24 20 e8 79 7e c7 ff e8 14 5f f3 01 31 ff 89 c3 89 c6 e8 59 77 52 f8 85 db 0f 85 d0 01 00 00 e8 0c 75 52 f8 <48> c7 c7 40 bb 1b 8e 48 8d 35 00 00 00 00 e8 e9 19 2f f8 e8 14 d5 [ 771.262651][ C1] RSP: 0018:ffffc90000a18d80 EFLAGS: 00000046 [ 771.262666][ C1] RAX: 0000000080010001 RBX: 0000000000000001 RCX: ffffffff893c5214 [ 771.262679][ C1] RDX: ffff88801d294880 RSI: ffffffff893c5034 RDI: 0000000000000001 [ 771.262692][ C1] RBP: ffff888012bc5c10 R08: 0000000000000001 R09: 0000000000000000 [ 771.262705][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 771.262717][ C1] R13: ffff888012bc5c00 R14: ffff88807a523340 R15: ffff888012bc6c00 [ 771.262730][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 771.262750][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 771.262763][ C1] CR2: 000055559437e808 CR3: 0000000067ff0000 CR4: 00000000003526f0 [ 771.262776][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 771.262787][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 771.262799][ C1] Call Trace: [ 771.262806][ C1] [ 771.262814][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 771.262841][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 771.262860][ C1] ? nmi_handle+0x1ac/0x5d0 [ 771.262882][ C1] ? advance_sched+0x6c4/0xc60 [ 771.262904][ C1] ? default_do_nmi+0x6a/0x160 [ 771.262925][ C1] ? exc_nmi+0x170/0x1e0 [ 771.262945][ C1] ? end_repeat_nmi+0xf/0x53 [ 771.262966][ C1] ? advance_sched+0x8a4/0xc60 [ 771.262986][ C1] ? advance_sched+0x6c4/0xc60 [ 771.263007][ C1] ? advance_sched+0x6c4/0xc60 [ 771.263028][ C1] ? advance_sched+0x6c4/0xc60 [ 771.263050][ C1] ? advance_sched+0x6c4/0xc60 [ 771.263071][ C1] [ 771.263077][ C1] [ 771.263089][ C1] ? __pfx_advance_sched+0x10/0x10 [ 771.263109][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 771.263140][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 771.263165][ C1] ? read_tsc+0x9/0x20 [ 771.263193][ C1] hrtimer_interrupt+0x392/0x8e0 [ 771.263224][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 771.263248][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 771.263274][ C1] [ 771.263280][ C1] [ 771.263286][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 771.263316][ C1] RIP: 0010:acpi_safe_halt+0x1a/0x20 [ 771.263336][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 65 48 8b 05 98 ff d3 74 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 88 a3 ad 00 fb f4 c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 771.263359][ C1] RSP: 0018:ffffc900001a7d58 EFLAGS: 00000246 [ 771.263374][ C1] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8b2fbc99 [ 771.263387][ C1] RDX: 0000000000000001 RSI: ffff888141ace000 RDI: ffff888141ace064 [ 771.263399][ C1] RBP: ffff888141ace064 R08: 0000000000000001 R09: ffffed10170e6fed [ 771.263412][ C1] R10: ffff8880b8737f6b R11: 0000000000000000 R12: ffff8881472cd000 [ 771.263425][ C1] R13: ffffffff8ee17b20 R14: 0000000000000001 R15: 0000000000000000 [ 771.263440][ C1] ? ct_kernel_exit+0x139/0x190 [ 771.263469][ C1] acpi_idle_enter+0xc5/0x160 [ 771.263489][ C1] cpuidle_enter_state+0xaa/0x4f0 [ 771.263518][ C1] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 771.263539][ C1] cpuidle_enter+0x4e/0xa0 [ 771.263565][ C1] do_idle+0x310/0x3f0 [ 771.263585][ C1] ? __pfx_do_idle+0x10/0x10 [ 771.263608][ C1] cpu_startup_entry+0x4f/0x60 [ 771.263627][ C1] start_secondary+0x222/0x2b0 [ 771.263645][ C1] ? __pfx_start_secondary+0x10/0x10 [ 771.263665][ C1] common_startup_64+0x13e/0x148 [ 771.263694][ C1] [ 771.264549][ C0] task:syz.6.1602 state:R running task stack:28544 pid:12307 tgid:12306 ppid:6488 flags:0x00000000 [ 771.659573][ C0] Call Trace: [ 771.662853][ C0] [ 771.665788][ C0] __schedule+0xe58/0x5ad0 [ 771.670227][ C0] ? __pfx_mark_lock+0x10/0x10 [ 771.675003][ C0] ? __pfx___schedule+0x10/0x10 [ 771.679864][ C0] ? __pfx_mark_lock+0x10/0x10 [ 771.684647][ C0] ? mark_held_locks+0x9f/0xe0 [ 771.689420][ C0] preempt_schedule_irq+0x51/0x90 [ 771.694455][ C0] irqentry_exit+0x36/0x90 [ 771.698881][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 771.704878][ C0] RIP: 0010:lock_acquire.part.0+0x155/0x380 [ 771.710778][ C0] Code: b8 ff ff ff ff 65 0f c1 05 e0 10 97 7e 83 f8 01 0f 85 d0 01 00 00 9c 58 f6 c4 02 0f 85 e5 01 00 00 48 85 ed 0f 85 b6 01 00 00 <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 771.730385][ C0] RSP: 0018:ffffc9000ba4f6a8 EFLAGS: 00000206 [ 771.736454][ C0] RAX: 0000000000000046 RBX: 1ffff92001749ed6 RCX: 00000000d5635161 [ 771.744426][ C0] RDX: 0000000000000001 RSI: ffffffff8b6ce300 RDI: ffffffff8bd1e5c0 [ 771.752398][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff2dd0998 [ 771.760368][ C0] R10: ffffffff96e84cc7 R11: 0000000000000001 R12: 0000000000000000 [ 771.768338][ C0] R13: ffffffff8e1bbb40 R14: 0000000000000000 R15: 0000000000000000 [ 771.776326][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 771.781967][ C0] ? rcu_is_watching+0x12/0xc0 [ 771.786744][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 771.791961][ C0] ? is_bpf_text_address+0x30/0x1a0 [ 771.797167][ C0] ? lock_acquire+0x2f/0xb0 [ 771.801674][ C0] ? is_bpf_text_address+0x30/0x1a0 [ 771.806884][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 771.813055][ C0] is_bpf_text_address+0x36/0x1a0 [ 771.818086][ C0] ? is_bpf_text_address+0x30/0x1a0 [ 771.823291][ C0] kernel_text_address+0x8d/0x100 [ 771.828329][ C0] __kernel_text_address+0xd/0x40 [ 771.833357][ C0] unwind_get_return_address+0x59/0xa0 [ 771.838824][ C0] arch_stack_walk+0xa7/0x100 [ 771.843520][ C0] ? tomoyo_realpath_from_path+0xb9/0x720 [ 771.849250][ C0] stack_trace_save+0x95/0xd0 [ 771.853939][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 771.859325][ C0] ? __pfx_mark_lock+0x10/0x10 [ 771.864098][ C0] kasan_save_stack+0x33/0x60 [ 771.868779][ C0] ? kasan_save_stack+0x33/0x60 [ 771.873631][ C0] ? kasan_save_track+0x14/0x30 [ 771.878483][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 771.883250][ C0] ? __kmalloc_noprof+0x21c/0x510 [ 771.888278][ C0] ? tomoyo_realpath_from_path+0xb9/0x720 [ 771.894004][ C0] ? tomoyo_path_number_perm+0x248/0x590 [ 771.899641][ C0] ? security_file_ioctl+0x9b/0x240 [ 771.904865][ C0] ? __x64_sys_ioctl+0xb7/0x200 [ 771.909745][ C0] ? do_syscall_64+0xcd/0x250 [ 771.914448][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.920572][ C0] kasan_save_track+0x14/0x30 [ 771.925260][ C0] __kasan_kmalloc+0xaa/0xb0 [ 771.929862][ C0] __kmalloc_noprof+0x21c/0x510 [ 771.934722][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 771.940369][ C0] tomoyo_realpath_from_path+0xb9/0x720 [ 771.945930][ C0] ? tomoyo_path_number_perm+0x235/0x590 [ 771.951569][ C0] ? tomoyo_path_number_perm+0x235/0x590 [ 771.957213][ C0] tomoyo_path_number_perm+0x248/0x590 [ 771.962675][ C0] ? tomoyo_path_number_perm+0x235/0x590 [ 771.968321][ C0] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 771.974336][ C0] ? __pfx_lock_release+0x10/0x10 [ 771.979366][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 771.984576][ C0] ? __pfx_sigprocmask+0x10/0x10 [ 771.989523][ C0] ? lock_acquire+0x2f/0xb0 [ 771.994029][ C0] ? __fget_files+0x40/0x3a0 [ 771.998628][ C0] ? __fget_files+0x206/0x3a0 [ 772.003319][ C0] security_file_ioctl+0x9b/0x240 [ 772.008356][ C0] __x64_sys_ioctl+0xb7/0x200 [ 772.013047][ C0] do_syscall_64+0xcd/0x250 [ 772.017563][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.023473][ C0] RIP: 0033:0x7f209a58040b [ 772.027887][ C0] RSP: 002b:00007f209b3fe060 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 772.036302][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f209a58040b [ 772.044277][ C0] RDX: 0000000000000000 RSI: 0000000000006364 RDI: 00000000000000d8 [ 772.052247][ C0] RBP: 00007f209a745fa0 R08: 00007ffe14339367 R09: 0000000000000000 [ 772.060216][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f209a745fac [ 772.068187][ C0] R13: 0000000000000001 R14: 00007ffe14339280 R15: 00007ffe14339368 [ 772.076171][ C0] [ 772.079188][ C0] rcu: rcu_preempt kthread starved for 10505 jiffies! g43857 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 772.090384][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 772.100346][ C0] rcu: RCU grace-period kthread stack dump: [ 772.106224][ C0] task:rcu_preempt state:R running task stack:27488 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 772.118002][ C0] Call Trace: [ 772.121279][ C0] [ 772.124215][ C0] __schedule+0xe58/0x5ad0 [ 772.128646][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 772.133859][ C0] ? __pfx___schedule+0x10/0x10 [ 772.138717][ C0] ? schedule+0x298/0x350 [ 772.143060][ C0] ? __pfx_lock_release+0x10/0x10 [ 772.148091][ C0] ? lock_acquire+0x2f/0xb0 [ 772.152598][ C0] ? schedule+0x1fd/0x350 [ 772.156939][ C0] schedule+0xe7/0x350 [ 772.161017][ C0] schedule_timeout+0x124/0x280 [ 772.165875][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 772.171252][ C0] ? __pfx_process_timeout+0x10/0x10 [ 772.176558][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 772.182374][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 772.187841][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 772.192614][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 772.197907][ C0] ? rcu_gp_init+0xc82/0x1630 [ 772.202591][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 772.207801][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 772.213619][ C0] rcu_gp_kthread+0x271/0x380 [ 772.218305][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 772.223511][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 772.228720][ C0] ? __kthread_parkme+0x148/0x220 [ 772.233755][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 772.238959][ C0] kthread+0x2c1/0x3a0 [ 772.243034][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 772.248237][ C0] ? __pfx_kthread+0x10/0x10 [ 772.252839][ C0] ret_from_fork+0x45/0x80 [ 772.257261][ C0] ? __pfx_kthread+0x10/0x10 [ 772.261863][ C0] ret_from_fork_asm+0x1a/0x30 [ 772.266649][ C0] [ 772.269665][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 772.275979][ C0] CPU: 0 UID: 0 PID: 8024 Comm: syz-executor Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 772.286479][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 772.296528][ C0] RIP: 0010:smp_call_function_many_cond+0x45d/0x1300 [ 772.303215][ C0] Code: 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 7a 0d 0c 00 f3 90 41 0f b6 04 24 <40> 38 c5 7c 08 84 c0 0f 85 a7 0c 00 00 8b 43 08 31 ff 83 e0 01 41 [ 772.322823][ C0] RSP: 0018:ffffc90003387990 EFLAGS: 00000293 [ 772.328891][ C0] RAX: 0000000000000000 RBX: ffff8880b8744a40 RCX: ffffffff8182b7ec [ 772.336861][ C0] RDX: ffff888030cd2440 RSI: ffffffff8182b7c6 RDI: 0000000000000005 [ 772.344834][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 772.352800][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170e8949 [ 772.360771][ C0] R13: 0000000000000001 R14: ffff8880b8744a48 R15: ffff8880b863fe40 [ 772.368740][ C0] FS: 00005555607da500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 772.377670][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 772.384255][ C0] CR2: 00007ff2dc4ea255 CR3: 0000000067ff0000 CR4: 00000000003526f0 [ 772.392234][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 772.400206][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 772.408174][ C0] Call Trace: [ 772.411449][ C0] [ 772.414294][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 772.420633][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 772.425841][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 772.431321][ C0] ? timekeeping_advance+0x70a/0xa60 [ 772.436607][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 772.442255][ C0] ? __asan_memcpy+0x3c/0x60 [ 772.446851][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 772.452156][ C0] ? rcu_is_watching+0x12/0xc0 [ 772.456931][ C0] ? update_process_times+0x178/0x2d0 [ 772.462312][ C0] ? __pfx_update_process_times+0x10/0x10 [ 772.468038][ C0] ? update_wall_time+0x1c/0x40 [ 772.472892][ C0] ? tick_nohz_handler+0x376/0x530 [ 772.478016][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 772.483485][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 772.488871][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 772.494597][ C0] ? read_tsc+0x9/0x20 [ 772.498682][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 772.503828][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 772.510006][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 772.515830][ C0] [ 772.518767][ C0] [ 772.521702][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 772.527879][ C0] ? smp_call_function_many_cond+0x47c/0x1300 [ 772.533960][ C0] ? smp_call_function_many_cond+0x456/0x1300 [ 772.540043][ C0] ? smp_call_function_many_cond+0x45d/0x1300 [ 772.546132][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 772.551355][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 772.556571][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 772.561701][ C0] flush_tlb_mm_range+0x289/0x330 [ 772.566747][ C0] copy_process+0x72ec/0x8df0 [ 772.571435][ C0] ? hlock_class+0x4e/0x130 [ 772.575968][ C0] ? __pfx_copy_process+0x10/0x10 [ 772.581027][ C0] kernel_clone+0xfd/0x960 [ 772.585453][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 772.590496][ C0] ? find_held_lock+0x59/0x110 [ 772.595268][ C0] ? find_held_lock+0x2d/0x110 [ 772.600046][ C0] __do_sys_clone+0xba/0x100 [ 772.604644][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 772.609862][ C0] ? do_user_addr_fault+0x83d/0x13f0 [ 772.615158][ C0] do_syscall_64+0xcd/0x250 [ 772.619678][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.625584][ C0] RIP: 0033:0x7f49c9577053 [ 772.630001][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 772.649607][ C0] RSP: 002b:00007ffc00caa4e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 772.658025][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f49c9577053 [ 772.665995][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 772.673962][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 772.681932][ C0] R10: 00005555607da7d0 R11: 0000000000000246 R12: 0000000000000000 [ 772.689900][ C0] R13: 00000000000a2689 R14: 00000000000a2126 R15: 00007ffc00caa670 [ 772.697883][ C0]