last executing test programs: 37m37.905333498s ago: executing program 32 (id=48): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f00008ba000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 37m32.991355199s ago: executing program 33 (id=55): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_uring_setup(0x52b4, &(0x7f0000000240)={0x0, 0x1332, 0x10000, 0x0, 0x1d}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000001c0)=0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x109) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4}}}}) 37m28.807667988s ago: executing program 34 (id=64): syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r2, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x87b0cc373e1cda89, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 36m5.942021111s ago: executing program 35 (id=160): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x8, 0x80000) fanotify_mark(r2, 0x105, 0x4800003a, r1, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) chown(0x0, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x10002, {0x1, 0x0, 0x4}, {0x0, 0xff, 0x3}, 0x0, 0xff}], 0x20) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r4) 31m57.295738803s ago: executing program 36 (id=510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523e02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000200400007d746130000000"], 0x50) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0x2, 0x0, 0x2, {0x92e, 0x6, 0x8, 0x8}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in6=@remote, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xee00}, {@in6=@empty, 0x1100, 0x3c}, @in6=@remote, {}, {}, {0x0, 0x4}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4000814) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000005c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) init_module(&(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000ffff00000000000000000000004000000000000000"], 0x40, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{0xe}, 0x0, 0x4, 0x7fffffff, {0x71, 0xe}, 0x3, 0x200}) 27m27.995432667s ago: executing program 6 (id=815): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x5, 0xfffc, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/psched\x00') ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) 27m23.660039525s ago: executing program 6 (id=821): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_uring_setup(0x52b4, &(0x7f0000000240)={0x0, 0x1332, 0x10000, 0x0, 0x1d}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000001c0)=0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x109) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4}}}}) 27m21.315297939s ago: executing program 6 (id=822): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) r1 = userfaultfd(0x801) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x0, 0x2}) socket$can_raw(0x1d, 0x3, 0x1) 27m19.451437717s ago: executing program 6 (id=828): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_uring_setup(0x52b4, &(0x7f0000000240)={0x0, 0x1332, 0x10000, 0x0, 0x1d}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000001c0)=0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x109) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4}}}}) 27m13.49850048s ago: executing program 6 (id=830): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x5, 0xfffc, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/psched\x00') ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) 27m11.644728192s ago: executing program 6 (id=836): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)="d80000002c0081064e81f782db44b904021d080005000300e8fe55a1180005000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbaceadaafc9136e30a3f36d90116d58017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809f6e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getpid() pidfd_getfd(0xffffffffffffffff, r5, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x1a5040, 0x0) 26m55.51023077s ago: executing program 37 (id=836): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)="d80000002c0081064e81f782db44b904021d080005000300e8fe55a1180005000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbaceadaafc9136e30a3f36d90116d58017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809f6e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getpid() pidfd_getfd(0xffffffffffffffff, r5, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x1a5040, 0x0) 20m58.512481992s ago: executing program 9 (id=1433): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = userfaultfd(0x801) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x20, 0x2}) socket$can_raw(0x1d, 0x3, 0x1) 20m58.270332445s ago: executing program 9 (id=1435): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x4, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r8, 0x3) sendfile(r1, r8, 0x0, 0x8006) ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2}) r9 = socket(0x10, 0x803, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001400b59500826e46fcf21fe523000000", @ANYRES32=r0, @ANYBLOB="140002"], 0x2c}, 0x1, 0x0, 0x0, 0x4100}, 0x0) 20m56.520374162s ago: executing program 9 (id=1438): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) r0 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r1 = fsopen(&(0x7f0000000080)='rootfs\x00', 0x1) close(r1) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) fcntl$lock(r0, 0x5, &(0x7f0000000100)={0x1, 0x4, 0x4, 0x7fff, r2}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7, 0x0, 0x8}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000200)={r4, 0x9, 0x3e, "0a5199311ee96f61b823e69d948aab9b27f08026339effda15d9c46db449761652aaa7941c0e64fce409837e1c0804f2254e72ec974ed5a19bc1c4921552"}, 0x46) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001f40)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002480)={'ip6gretap0\x00', 0x0}) sendmmsg$inet6(r3, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)="5a30ea0854041009de774fe2adf54a108bb89fa130c15458c27c0b4770594b9db982bfbd72820d439c418269917af42f3a6a93afa967022ca421fa7d137c80e2b8f7c6ad91e25a871d3de2e502fbac8eaeb508d6bcbe5dc5f59002bfc9b8a7496810d49aa4d437b844f3ac46a9", 0x6d}, {&(0x7f0000000300)="0cb0265cf82dcebe975bcb7369b963a8f6388445bc88eeb705380651ebf2cf72557233e8e9cb163e358d79f8b329d5112526dd1e9fdc5f3565fd0aa8411319202090f0306597a68d0ea60235146d06d4fd600180934301bfee28b7ae43ce4990f398f7f59267060510c9653a199c27a97f70edc71b72e879456ad4cd9cd39f8a00dccce163ec6171f68cf6b42dbeb3eedb60d0687ddd4467256f8f31ee767e7bc2ae4c236b1d", 0xa6}, {&(0x7f00000003c0)="274b60f79d84b0260a1376b4b224f32b224cc59d3fbc30c577a2af7da888b9ac8b0de4ba15a97e20f7e057a82d782124f1fcf3f225b9be1f3ad7d72265fe28973ff7a6e19848ba7d551aeddd792c2a71cda6062706dde494ee67a73d61048d485ad9841db6da73aef43978138a57af7a07781593d118ab15cc1bc0b0e540de77d5d386f4d8c7e20c55b6882e4e2afb1aff989d16fc2653c99ac04b4f9934906fd1b2b2261bf821d43e76c5c9c26d03510128b878f3032e62056e0c2960c37e39aef7c7f0ab39383225ccd34fb8f6bc0cecff39cd9157ad526ec32b52f538f665bd184ec94bbee9e4a88d8ad47faf711b659f3f4a", 0xf4}, {&(0x7f00000004c0)="f82cf90187674ca61f48562cc6792119a3b32f73560a1d12e0ceecb91441139b02d1b1a893c31721d835a5cbe2a543ae5613e98f46cc7e2a546e50a0f90ce187d3a1e0a28af0c94660e1e8052d709313ef09432bdb326edd9fe722a49c2ca8d4731cf74aaf31d2efa67c14175f73a3976653acd92a4aa4a1cecbc36aff11e514dd42a3e2df15b6fcd074848b9213b3d0a2dc79ada20b6c5e1c59bbd582a1677598142c73478b13208c1cbe6156be458f649d356520875179831c175bb30fc204d1fa9b6ff39880045e1d759171db9cf966e74b2a951717c8b73f00e2b9c01d8fab650db59f66f72c4a86e5b262a3a37dd42f", 0xf2}, {&(0x7f00000005c0)="b22b9ef36f665a", 0x7}, {&(0x7f0000000600)="df79d4d9f3217a0dbd181e9ab3ac51668f52faac8d4589263acfd6f69afa0f0914b29ba9c1da5d0f2ddc460805553cea930bf098cc1a7c3d5d8bac03429f822f448b22f54d7ba83e74b64b237e5eadfbbce7a4095e80ce57eeb6ef13d77baceb56c23c2cae4814fd6304eb", 0x6b}, {&(0x7f0000000680)="21ddcfde8693abfdd425fd11f342b1561ca4690e09022a82b204512cdcaf7d7fa88f060bbe994b105837dbedcd6877b14bd2d20b79b49c12a133039d13009d6ecb", 0x41}, {&(0x7f0000000700)="b30209ec73b584ed3222e66833a2da7ecb4572c625149ad35ca134128e8271f90b73aefa4a47fb0bd73208628a86b2c582a8fb0fd5f68e9e8ac6f4ba80a329e461ee3c03c961112be224fbaf89f66c18947bdcfb3c429b70a6228c765b04401ef099a3b58e7e5fbf40d613a6b07fc995c006d6ed08075fe9c69de74534473b397e6ff87ad11a1c19db7fd696ade93c01ce1bebc25372a21ba3fbcc8d5e6b13ed19acc9cd2b1959d9568a6e10f09ff3e9e0a691c5cc7576370c1cd9509cc68f09f1af83b86526dd31f1a4", 0xca}], 0x8}}, {{&(0x7f0000000880)={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000001e80)=[{&(0x7f00000008c0)="49f601dc59bf7c7ca98a602f63a7ec61233bd99e98bdd6d296e7455ec2dc4ea48fce817fd3ebc0b89dca179fce01c1feb23bbe635b01014982590ccb092d2aa56fbc6ac6e36597c6a045f8a260b39ced53c4b146176f9063c51c155a298e3f2f4b067b3413e85a60499521f53c3e10d435c717e9ed2eea447abaf4195a0a4df99b634db6c6b78702d69c3860d53bb9608d3b3693dd7c34d2", 0x98}, {&(0x7f0000000980)="a9e6b0e0eb9cee04d0be9fe9a857a862c3f3a147340e5e71fd65a2fe8ee279392bbe6c8e31229eedf2661281fe5eaff83de5e8c70cce44dbe93278740936bf7780f2ee", 0x43}, {&(0x7f0000000a00)="1aeb07444d2ea616e859b1792ab2b389e1c89203233af6f99846e9c7d03a5c49a3ad7280aa36f95ea786de561c734514f1347593a4e3fada57851d1708b14ae1f293c75488d0ad4e43d39b21fe09fdeda4cce484be32dafabea7e67e55946dfb8660bc744f44b39f9efe75d91230542822c1bbf2c015154649d5ffae1e4ce8feabfc8c33e4d8081410efe866a242db42ec3a7fd226e9f8ce14f106c0ef401ac1a87d9cd62051d0adae5cce97264fbfbfc178e7892259bc14641ea959e0ae685ad782329fb4af3c34d276f56f6858dbfb72e5936f4966dd63d74b8ca855908338d7c0832948c7fa3d6c70a5", 0xeb}, {&(0x7f0000000b00)="6b2c5fe188620c350d74b9b3395bd6826ac25dc33aa8724e88b0e73f4115b3f56c5bf4214bf00aeb16ec4b3095eaf799aa2d5bfce4acdea3108da78282ea95eb261f9c16508d24a60387bc139acb70c93d133f0b8e4fea2e510bcbf77906f8ae430fad6709fe61a4a9fdea0a63a412ae8db652caaa1675628e364f7a87880d83bcdc107b5ef02c0e690a3a69f8f3d2aa794b29fe1a7b6f3cbf9fa77839a79b7f7024d74a944909b76ef05a6fb1c4b447d2aac36b0d6a92df87c2e5b4c00782edf255800cd99dd869d32ab97965fcc2ccbf7b2a875b4c21e9f9020c067e5cf6ce012d0c1e9aa13017", 0xe8}, {&(0x7f0000000c00)="2d9f84ae97a3e176a6f87cc9a9af7384cd87cab829c54b4fc1aeb1138d42b43185cbb0904c83cf7915a740e90e0ba9ad19897415370fa6f9f1a1b7dd449777f39125f1f59f915b60c5e0", 0x4a}, {&(0x7f0000000c80)="42be4f0e2437322ca8099f586186ab6c868ac6d240ef79c70ec40c8e7c620e2304b27ff9f983927d9882ee293d06c4f36511824be9679c669a5dfbb5ac572d08bb92569b838e56c6386e7ee5cdcd506b5c277c394257c26acc5f8a83fc0826256c109118c0156617bf6b809f92be5f6a171625c48f4158e56062b79e9e1c19b705b2c3f591b0ceb2347676a8efcb9d6dd9456acc32159cefe979b63c8028e18c0972282e53782c17f4e13ce67a1c62363042d7", 0xb3}, {&(0x7f0000000d40)="a9deccad2a98527f7a382c8648329442c68ada901bf6781f65c178c3658b8e770bd3eb6ec8ec98ce02e43af011001df2ff4f0c4547609fca9aa5226fc856736a227d92e7282b9055671a796aede9008d4ad09a0340f3342950b8161a0adbb679c7b66580c92282aa4ea5a9f2fa6c1592d7e5f36ea595f188971c97be66b955cf05fd40f54529d1b0554da44c50c4619d5c09c18e7f46a6b74243f406c3", 0x9d}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="5e279f13dd4367eb872ca8f76cc2bdb5c70444016f5bb4fe684d40d9dbce9067dbd44ee8e9a9c2d9b1452aff6eced3efe89f8b5f6878a4e3728c71eeaa93de7a459ed59beb9151b7aa9828d193242b08258f35", 0x53}], 0x9, &(0x7f0000001f80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @dstopts={{0x20, 0x29, 0x37, {0xc, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x3}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x8, 0x2, 0x1, 0x9, 0x0, [@dev={0xfe, 0x80, '\x00', 0x16}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r5}}}], 0x88}}, {{&(0x7f0000002040)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0xc}, 0x40}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000002080)="07c76c5c3049c4df8a0ea6cb41bfda29d678676517f8f53b41fd34d85c56e324fc21a893e8df0dc667db3797cd3f706b4c2939307af2d0ad835a25713b9a69fd31ed6a9b1f9d9ced98def650a009c837b449c8ff267cbd49ddeb58fbfb8f71cf551feed50a7e26", 0x67}, {&(0x7f0000002100)="ef9b380ec704fb329505e359d34669e753e6a6f70d31ebe0310a34e4061d26902c148dca6a9b59e225d9c9a1330f53435d2d524451a1c9a58a9f7e64142f7de1e93cea528050558a44ee475f8f0276fa939a07b6b2183da6fe7eb374b6a94e7e43380859eecc5637c2e5191f0bc6d6fce66555aac6c7e6b6ec284250d831d3b725e24ec8e66d151e975f1fd949c07a7352476c105917", 0x96}], 0x2, &(0x7f0000002200)=[@hopopts_2292={{0x80, 0x29, 0x36, {0x33, 0xd, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0xf, 0xfffd, [0x7fffffff, 0x4, 0x0, 0x462b, 0x1, 0x2, 0xffffffffffffffe3]}}, @enc_lim, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x79}]}}}, @hopopts={{0xe0, 0x29, 0x36, {0x84, 0x18, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x5, 0xaa, "59e6f55f6c93991247257aa7fc381a0320eb3f21950303155dd883d50d87f8bc849e71bdaf4858031bd3e4f55502eb31937bc3daf2f66fe102ff161dff5bae6721a1943dcc7d4ac0124d5d332b19737f5045f1e8bace902e66127eae3b64515ee43c5de167f7423d14cd51a25d5635ade6bbdceccb7a3d45e155c39464aa9b72e878b70d555eefb74910534a75686715454f161364fa36c3ea8bbd6ea3b75c4bb4d15965ef0d22973659"}, @ra, @pad1, @pad1]}}}], 0x160}}, {{&(0x7f0000002380)={0xa, 0x4e23, 0x6, @remote, 0x4}, 0x1c, &(0x7f0000002440)=[{&(0x7f00000023c0)="9cf3f40a1c7cef59fc4fea319fe1896c2849cf41a920ba7f7eef9146f54da0bb6e027c197189a33417726e43cb0ee364287dfcf0a9a265255be2e48e1a11c6e1c54916eacdf882b53dd88468b542a62f05886d6313529bee2aaf8ce22d3d45d7ca538391e21d2dc038dabbe036c29f3a7081e2eee0e28134848c11", 0x7b}], 0x1, &(0x7f00000024c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @dstopts={{0x20, 0x29, 0x37, {0xc, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x4}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r6}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x4, 0x8, 0x0, 0x4, 0x0, [@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x3a}, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}], 0xb8}}], 0x4, 0x51) r7 = socket$netlink(0x10, 0x3, 0x5) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000002680)) sendmsg$nl_route(r3, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)=@can_delroute={0x38, 0x19, 0x400, 0x70bd29, 0x25dfdbfc, {0x1d, 0x1, 0x7}, [@CGW_LIM_HOPS={0x5, 0xd, 0x7}, @CGW_FILTER={0xc, 0xb, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}}, @CGW_SRC_IF={0x8, 0x9, r6}, @CGW_LIM_HOPS={0x5, 0xd, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048841}, 0x80) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002940)={r3, &(0x7f00000027c0)="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", &(0x7f00000028c0)=""/98, 0x4}, 0x20) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000002980)={0x0, 0x0, {0x6, 0x7fffffff, 0x9be77adfbef8844, 0x6, 0x8, 0x7, 0x4, 0x4}}) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002d00)={0x18, 0x18, &(0x7f0000002a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x2, 0x0, 0x1, 0x1, 0x6, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x4, 0x1, 0x5, 0x4, 0x1, 0xfffffffffffffff4, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x100}]}, &(0x7f0000002b00)='syzkaller\x00', 0x6, 0xb1, &(0x7f0000002b40)=""/177, 0x40f00, 0x4, '\x00', r6, 0x0, r3, 0x8, &(0x7f0000002c00)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000002c40)={0x5, 0x9, 0xb28, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002c80)=[r3], &(0x7f0000002cc0)=[{0x4, 0x4, 0xf, 0x1}, {0x5, 0x3, 0x6, 0x4}], 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002dc0)={&(0x7f0000002a00)='xprtrdma_nomrs_err\x00', r8, 0x0, 0xfffffffffffffff9}, 0x18) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000002e00)) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002e40)={0x1b, 0x0, 0x0, 0x4e08c717, 0x0, r3, 0xa8b, '\x00', r5, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000040c0)=@generic={&(0x7f0000004080)='./file0\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004140)={0x18, 0x1c, &(0x7f0000002ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x6}, @ldst={0x3, 0x2, 0x4, 0x1, 0x7, 0xffffffffffffffc0, 0xfffffffffffffff0}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}, @jmp={0x5, 0x1, 0xc, 0x7, 0x2, 0x10a, 0x1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xc}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xa4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002fc0)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000003000)=""/4096, 0x40f00, 0x50, '\x00', r6, 0x0, r3, 0x8, &(0x7f0000004000)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000004040)={0x0, 0x4, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000004100)=[r7, r3, r3, r3, r3, r10, r3, r3, r3], 0x0, 0x10, 0x5, @void, @value}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r11, &(0x7f0000004300)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000042c0)={&(0x7f0000004240)={0x64, 0x0, 0xb, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f00000047c0)={&(0x7f0000004340)={0x10, 0x0, 0x0, 0x100400}, 0xc, &(0x7f0000004780)={&(0x7f0000004380)={0x3fc, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x4d, 0x45, "f96c39c3f57e68d83cd8cc9e5eb42742464ac39773f7cbd5c4dae6f0adeab4483ae31970e5ccfbf91447bd8d99a6c1b6045e16e7f48a417788ea735104cf71c8229ee9fb43b3e8a89c"}, @NL80211_ATTR_TESTDATA={0x9c, 0x45, "7079e25be0d594cae209bdd1cc777191bff5d0dd9db28a2f7fb46a291adbb67bb136362238a6d64913a02e1b28a9ec0a9fddc70dc685276831f79546702770e7b5bf9bab441c2a237e149407856d00f97c2a31445b5ba6bdf0bfaf75d864be1aba4357509f92508ab567bb03e72db6f5a171ccc2d39f7062c5334c4f4db25e96b0dce32470c6fed97987d73b008d28cb2446ad456fcee127"}, @NL80211_ATTR_TESTDATA={0x5d, 0x45, "1d27620d89225f06ad31497e1089e6e99c7ba4fe66762843e9869a9a13d2297f1d7504ed473a76cb0b0bb5ee14b77dd634268e254980271c111f0db31bc0afb50b4b6ea4439910c6439a8b9300903e535f9526c8a1e327296a"}, @NL80211_ATTR_TESTDATA={0x4f, 0x45, "b41fb93370eb3bd3e8ed4a07e15ff7eb6bf1bb2eb30f812c199034f6a554a0ec2f3e2916efe31eea2f3518e99429365ab9f697ff738da9408e3931bf1b6748f52971740577b68c5a22bbb8"}, @NL80211_ATTR_TESTDATA={0xf2, 0x45, "a4cb9d8ad9e6994fe744d9b03de58a1f4b16d2deae161328b555bb148f409956e167df3d27778d103d69bb2117d08381f56b52bc14633435c2ba53052c87e978ecfaae5416d41aade6a216dd3780f975172cdac8a458b197de346169abb34270399757d96576cf57e2603d50b56da8b78ef546274a2312b9257953ae44747fd9d29844dae46207657254e35ac81082852e1c72e2df87cfd9f33ad6803ace7080c95965994f328a7784b487a55b19b4ada0d07a998814139d6a8fabee1b40e618fc69b3a0aaaf315250c686dfadfe569f9334027977a7f523e466f9d08b454dd7e48663f9085304b62a2e2c3051b7"}, @NL80211_ATTR_TESTDATA={0x61, 0x45, "89749dcad0b0b9aa8fb94dc49a3a96a361b1d00e0a6355738d1e49cf8714447fe5babb2d1aca4d9681095cfbb00b0ca2bb4cc89d58340a253da91c50d2929d1660601e635a5109ea3d4079708b94481ac9dbe85c9ef4b1e84c9cae5a5f"}, @NL80211_ATTR_TESTDATA={0xf4, 0x45, "44d064b6aae5bdeef96f93570c0cffb35855cff410df8318018bf4dbaf2a05091fe298c8f9539c9a5fad306613ea1ec3821beaaca0fd9227dd6f837427fe5529053fecdbbb95c89daa5053621f274e56b10071bb25cf05278ea72b66eebcae3938a8cd32972e4202502945cee110b058fc24052abfc045bf038d0056fada207a3c5e05b49b972bd58ac621594bfa9ec30743f21915913bfa5922522aa69219194850b6c22dc1900a2f96a1753d40b19d07921e9f15e5da6e6d7eceaa81de359abe581244b56b788a3b8ab6c8540112d44b621070a2376d399a24c7faf0c1a57bfdb641c8335c976312e8d2052abfa0ee"}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008040) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000004800)=0x3) 20m56.033968417s ago: executing program 9 (id=1440): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48011}, 0x8000) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1=0xac1414aa}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x543504b4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 20m54.614504859s ago: executing program 9 (id=1447): r0 = socket$inet(0x2, 0x4000000805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x200e00, 0x0) bind$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0/bus\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2001400000080119078ac1f00000000010000000e2100089078"], 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000012c0)=@nat={'nat\x00', 0x19, 0x5, 0x146, [0x200000000400, 0x0, 0x0, 0x20000000052e, 0x200000000732], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000000000000000d500000000000000000000000000000000000000000000000000fcffffff01000000050000005400000000f969705f7674693000000000000000000076657468315f746f5f626f6e640000006d6163736563300000000000000000007465616d3000bbff000000ff00bbbbbbbbbbbbff00ff00ffff6e0000006e000000b60000004552524f5200000000000000000000000000000000000000000000000000000020000000000000001bcb6bd7759b08ebd620bbe071216d385a18aca0d5cd59be2680d4c42454000000000000000000000000000000000000000000000000000000000000000000000000000001000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000feffffff00"/326]}, 0x1be) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x24044084) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x76, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xe, 0x5}}, @TCA_FLOW_PERTURB={0x0, 0xc, 0xffff8f20}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 20m53.496036601s ago: executing program 9 (id=1449): r0 = socket$inet(0x2, 0x4000000805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x200e00, 0x0) bind$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_emit_ethernet(0x146, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180a00100000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000012c0)=@nat={'nat\x00', 0x19, 0x5, 0x146, [0x200000000400, 0x0, 0x0, 0x20000000052e, 0x200000000732], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/326]}, 0x1be) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udplite\x00') lseek(r6, 0x80, 0x0) ioctl$SIOCRSGL2CALL(r6, 0x89e5, &(0x7f0000000100)=@bcast) 20m37.889777658s ago: executing program 38 (id=1449): r0 = socket$inet(0x2, 0x4000000805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x200e00, 0x0) bind$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_emit_ethernet(0x146, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180a00100000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000012c0)=@nat={'nat\x00', 0x19, 0x5, 0x146, [0x200000000400, 0x0, 0x0, 0x20000000052e, 0x200000000732], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/326]}, 0x1be) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udplite\x00') lseek(r6, 0x80, 0x0) ioctl$SIOCRSGL2CALL(r6, 0x89e5, &(0x7f0000000100)=@bcast) 14m21.190666198s ago: executing program 2 (id=2431): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x18, 0xfc, 0x3, 0x1, 0x4, 0x4}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x80, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 14m16.385200311s ago: executing program 2 (id=2452): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000040)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x3, 0x0, 0xffff}, 0x20) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x181900, 0x0) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x801, 0x0) listen(r4, 0x6) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r5, 0x0, 0x9, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0xfeff, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x10, 0x96}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) creat(&(0x7f0000003000)='./file3aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 14m15.36175329s ago: executing program 2 (id=2455): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)="28e6ceb00e919b519d9c75d8fcf6370a0e5820a3ab6a48c49f564a91ccef167412e24838a1258d11365ba45a2f25b09276ee5b5f9480a756f4470e00000100efb8c84c471dc9", 0x46}, {&(0x7f00000006c0)="52fad8a2f6e21b15aade9d6f12393327d118219aab8428e0f3480004e52eafe4592e182d4cd7f609834f6214afcceeaacdd3ce254ca8f3f4330db1ee806231cfa98b5736d6f3afbadd8022414c8613ac341b8d1538b6cf5d199b7f2b725c9353de81c0b1e0c8ac5d35b8", 0x6a}, {&(0x7f0000000300)="1b3599cc95cb5e69b24ff9b2fd5b1d69d1f18403cf", 0x15}], 0x3}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="300cc880b9329fd7cbdc2b2f231d94cd6d13c6ea067c86a0bb37ea78", 0x1c}, {&(0x7f0000000b00)="06cedc4940a621666d04c16c7bc82365a6c30f93012a61487c83", 0x1a}, {&(0x7f0000000a40)="36cd2e8754949675ce859217975c2835106d2f69c86875be005c950118164e68030330d559da3adbe0fedc3176867f5e9030073470053f9a58842d9ac8f5fef38d", 0x41}, {0x0}, {&(0x7f0000000380)="def7d85eeb781da8a936f786926156cbd93b1cb2b1279500905d56cb36d33ffd37cdcae76de804bb72748e22979b244f79c8804a2497f7ad18c3dbdd8e59e7e34eb96a61ce0a38586847ea4ca47fcf93b4de5c3a4360b4438139a060bf5fe240b8956c4985ec25af589cf498ba16", 0x6e}], 0x5}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 14m15.11894462s ago: executing program 2 (id=2460): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_retransmit\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = getpid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000000)=0x5, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0xee04c000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000003c0)={0x1f, 0x4}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 14m10.018419608s ago: executing program 2 (id=2476): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r0, 0x540b, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000f9f000/0x4000)=nil, 0x4000, 0x1, 0x13, r2, 0x44a3f000) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="04000000"], 0x48}, 0x1, 0x0, 0x0, 0x400c051}, 0x240400c6) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8d42301e501953871b264921fbacab1d34c65c8fc98df77907ba6dd759151592323be9518c036c569fc924e0cbda62bb80ed8c1da760f6c76003d54f742030088344b6c0bca669528f8c021a41340ab7129917a9d2b83274207a6a0394c4c396fd7096786827b0f4e5b26", @ANYRES64=r4, @ANYRES32=r1], 0x10}}, 0x4000014) sendmsg$key(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="02070c0702"], 0x10}}, 0x4400c030) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, 0x2, @in, 0x0, 0x4}}, 0xe8) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000100)) sendmmsg$inet6(r5, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000000c0)='exofs\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 14m9.882249187s ago: executing program 2 (id=2478): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1282, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0xf, {"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", 0x1000}}, 0x1006) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000040)="3ec16db92b818fe51d339b0c29ebd10541cd47191a83a7da27eb7aa2124f1e2584", &(0x7f00000001c0)=""/208}, 0x20) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x0, 0x15, 0x2, "efe6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000340)={0x20, 0x30, 0x38, "c23030c9a94589545f53b428205e9e398f2311cd029201fb34866cfbfe0134bbd17576b554e9141974505e417ffc991ec49fa12e6781d4de"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x85}, &(0x7f0000000440)={0x20, 0x0, 0x2}, 0x0, 0x0}) 13m54.435505982s ago: executing program 39 (id=2478): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1282, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0xf, {"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", 0x1000}}, 0x1006) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000040)="3ec16db92b818fe51d339b0c29ebd10541cd47191a83a7da27eb7aa2124f1e2584", &(0x7f00000001c0)=""/208}, 0x20) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x0, 0x15, 0x2, "efe6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000340)={0x20, 0x30, 0x38, "c23030c9a94589545f53b428205e9e398f2311cd029201fb34866cfbfe0134bbd17576b554e9141974505e417ffc991ec49fa12e6781d4de"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x85}, &(0x7f0000000440)={0x20, 0x0, 0x2}, 0x0, 0x0}) 13m40.221948226s ago: executing program 0 (id=2551): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) fsopen(&(0x7f0000000040)='binder\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x181000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_audit(0x10, 0x3, 0x9) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=r1, @ANYRESHEX], 0x20) (fail_nth: 1) 13m39.590163292s ago: executing program 1 (id=2553): socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect(0x2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/psched\x00') ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) 13m39.584966734s ago: executing program 0 (id=2554): socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0xee00, 0x0) pipe(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) socket$inet6(0x10, 0x80000, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x15, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) 13m38.10049839s ago: executing program 0 (id=2555): sigaltstack(&(0x7f0000000540)={0x0, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f"], 0x0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) r2 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) wait4(r2, &(0x7f00000003c0), 0x40000000, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x1000000, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0xe, 0x1, 0xff, 0x2, 0x6, 0xc93}, 0x20) 13m35.445677631s ago: executing program 1 (id=2560): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x311, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x20000000, 0xfffffffc}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) mkdir(&(0x7f0000000500)='./file0\x00', 0x121) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRES32=r1, @ANYRES64, @ANYRES64]) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffff8000, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x28, 0x1, 0x0) connect$packet(r4, &(0x7f0000000180)={0x28, 0x10, 0x0, 0x1, 0x44, 0x6, @local}, 0x14) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x23}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$packet(r4, &(0x7f0000000000)={0x28, 0x9, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x14) sendmmsg$inet(r3, &(0x7f0000005d40)=[{{&(0x7f0000000600)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="10000000000000000000c0"], 0x10}}], 0x1, 0x400c0) syz_open_procfs$userns(0x0, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) 13m33.430361771s ago: executing program 0 (id=2563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r2 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xa27e, 0x80, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000070961c40e90f55dbfb690102c9030902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400, 0x80000000) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x4020400) (async) landlock_restrict_self(r5, 0x4) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) sendmsg$NFT_BATCH(r0, 0x0, 0x8060) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 13m33.128524828s ago: executing program 1 (id=2564): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff2}, {0x6, 0xd}, {0x6, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) r0 = socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='rxrpc_client\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='rxrpc_client\x00', r1, 0x0, 0x5}, 0x18) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev, 0x40}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 13m33.042287949s ago: executing program 0 (id=2565): socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0xee00, 0x0) pipe(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) socket$inet6(0x10, 0x80000, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x10001}, 0x0, &(0x7f0000000180)={0x1ff, 0x1000000000, 0x8, 0x2a03, 0x4000400000000000, 0xfffffffffffffffc, 0x6a1}, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) 13m31.874470257s ago: executing program 0 (id=2567): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)="c0ab", &(0x7f0000000380), 0x44e8984e}, 0x38) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f00000000c0)={0x3, 0x9, @value=0x40}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x55}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 13m30.877396018s ago: executing program 1 (id=2569): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xffff, 0x13a0000000000, 0x0, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0xfffffffffffffff8, 0x10000, 0x2, 0x2d9, 0x4, 0x3, 0xc7, 0x8001, 0x9, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x80, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x6, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x7fffffff, 0xc333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x2, 0x5, 0x6cf2, 0x2, 0x9, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x6, 0x0, 0x3a67, 0x7f, 0x0, 0xfff, 0xffffffffffffffff, 0x8, 0x3, 0x706, 0x2, 0x5b4, 0x8, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x6, 0x2, 0x77, 0x8, 0x346, 0x0, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0x6, 0x7, 0xffffffffffffff92, 0x7, 0x5, 0xe36, 0x3, 0x9, 0x5, 0x8, 0x6, 0x40000000000000, 0x6, 0x684, 0x2, 0x401, 0x34, 0x6fc, 0xc90, 0xfff, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x1, 0x8d45, 0x100000000, 0x3ff, 0xf2, 0x800, 0x8, 0x8, 0x8001, 0x5, 0x9, 0xa, 0x1ff, 0x2, 0x6b, 0x334]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) socket(0x1, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6a, 0x0, 0x0, 0x20, 0x0, 0x0, 0x6c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 13m30.311020014s ago: executing program 1 (id=2571): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = userfaultfd(0x801) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4004550d, &(0x7f0000000500)) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) getresuid(&(0x7f00000001c0), &(0x7f0000000340)=0x0, &(0x7f0000000380)) r6 = syz_open_dev$usbmon(&(0x7f0000000140), 0x1, 0x0) ioctl$MON_IOCQ_RING_SIZE(r6, 0x9205) sendmsg$nl_generic(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000004a80)={0x1148, 0x2e, 0x800, 0x70bd2b, 0x25dfdbfc, {0x8}, [@nested={0x1c, 0x19, 0x0, 0x1, [@typed={0x8, 0x140, 0x0, 0x0, @uid=r4}, @nested={0x4, 0x9}, @nested={0x4, 0x13}, @nested={0x4, 0x4b}, @nested={0x4, 0xcf}]}, @generic="b81e83a5045347bc9635677104608dfb8d00134b66e4447070c83c8515d20ef5e5d4eebf08ab1541f7afdf917781ddd33ecadd1202ffee96a3cca53744bff2fa56cc7291ec433ca6db5705de92fbfe14eb37546de1", @generic="37ade580744f742d689c4a0527b3f1c7d18cdeb128cd5757cd5ed7d243d51d0465bccbb9dc5fba65b99b414e445c415aa8e4cbaab0c67ed567fd927a04eb4bf086252cb4a5ec6652dba6dfb1add5c8819a001d2ccef8c97a87fc61f1ff93a1632404f1182d71412efa679302ed8cf39e97a0868b2ec216181db373c83bb53af6255520e19047c579e35591e8d186", @typed={0x8, 0x97, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x20, 0x77, 0x0, 0x1, [@typed={0x14, 0xd8, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x28, 0x0, 0x0, @uid=r5}]}, @generic="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", @nested={0xc, 0x6a, 0x0, 0x1, [@typed={0x8, 0x77, 0x0, 0x0, @u32=0xb}]}]}, 0x1148}, 0x1, 0x0, 0x0, 0x20004000}, 0x11) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) syz_pidfd_open(r7, 0x0) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) unshare(0x40000000) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x0, 0x2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000003a40)=""/4105, 0x1009}, {&(0x7f00000002c0)=""/70, 0x46}, {&(0x7f0000000480)=""/74, 0x4a}], 0x5}, 0xc}], 0x1, 0x697eba712e0d3b8d, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 13m26.614156085s ago: executing program 1 (id=2577): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)="c0ab", &(0x7f0000000380), 0x44e8984e, r2}, 0x38) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f00000000c0)={0x3, 0x9, @value=0x40}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x55}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 13m16.077078056s ago: executing program 40 (id=2567): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)="c0ab", &(0x7f0000000380), 0x44e8984e}, 0x38) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f00000000c0)={0x3, 0x9, @value=0x40}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x55}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 13m11.38362979s ago: executing program 41 (id=2577): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)="c0ab", &(0x7f0000000380), 0x44e8984e, r2}, 0x38) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f00000000c0)={0x3, 0x9, @value=0x40}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x55}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 41.614291588s ago: executing program 4 (id=4526): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r4, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) setresuid(0x0, 0xee00, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r0}) 40.298337567s ago: executing program 4 (id=4529): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000080)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x1a6d, &(0x7f0000000000)={0x0, 0x896d, 0x40, 0xfffffffe, 0x21}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000004c0), 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2721, 0x0, 0x0) 39.416029126s ago: executing program 4 (id=4530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r1, 0x211, 0x4000000, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) 15.239799759s ago: executing program 5 (id=4581): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 13.66950684s ago: executing program 5 (id=4590): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setpriority(0x1, 0x0, 0xffffffffffffffd1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r4, &(0x7f0000002100)={0x2020}, 0x2020) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) 11.800931985s ago: executing program 5 (id=4592): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[], 0x48) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 11.214264195s ago: executing program 7 (id=4595): connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r3}, 0x10) syz_open_dev$usbfs(0x0, 0xf, 0xc340) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) 9.285160669s ago: executing program 7 (id=4597): r0 = io_uring_setup(0x3547, &(0x7f0000000680)={0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, 0x0, 0x20) 9.273048363s ago: executing program 5 (id=4599): socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f000052b000/0x4000)=nil, 0x4000}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGKEY(r1, 0x80404518, 0x0) 8.618454033s ago: executing program 3 (id=4600): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, 0x0) 7.914100707s ago: executing program 7 (id=4602): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x24044090) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.825676005s ago: executing program 3 (id=4603): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r0, 0x800, {0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a7ddf8a69ea917ded5ba193b3e7772fd29f35239d2", "530bf65043114b2e53000006000000000010e200", [0x1000000000]}}) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 7.738368371s ago: executing program 5 (id=4604): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000100)={0x40, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000014c0)={0x34, &(0x7f0000001240)={0x20, 0x6, 0x1, "9e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 6.270782705s ago: executing program 8 (id=4606): io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x1000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0xf47) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write(r0, &(0x7f0000000080)="ed", 0x1) 5.855199223s ago: executing program 5 (id=4607): dup(0xffffffffffffffff) unshare(0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 5.853493698s ago: executing program 3 (id=4608): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 5.692603481s ago: executing program 8 (id=4609): sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000c051) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000000240)={'macsec0\x00', 0x1}) 5.386451822s ago: executing program 3 (id=4610): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r1 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) readv(r5, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)=""/61, 0x3d}], 0x2) getrusage(0x1, &(0x7f0000000300)) 5.275954201s ago: executing program 8 (id=4611): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0xfffffffc, 0x0, r1}, &(0x7f0000000600)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x20, 0x0, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r5, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) 5.005661338s ago: executing program 7 (id=4612): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x0, 0x2) r5 = socket$inet6(0xa, 0x3, 0x37) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 2.729144102s ago: executing program 7 (id=4613): ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, 0x0) 2.418044749s ago: executing program 7 (id=4614): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0xd, 0x6000, @fd_index=0xa, 0x4, 0x0, 0xffff, 0x7, 0x1, {0x2}}) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, 0x0, 0xc8) close_range(r4, 0xffffffffffffffff, 0x0) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$TCSETS(r5, 0x5402, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2.350181619s ago: executing program 8 (id=4615): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') preadv(r0, &(0x7f0000000880)=[{&(0x7f0000000100)=""/162, 0xa2}], 0x1, 0x1239, 0x4b4a) 2.022429125s ago: executing program 3 (id=4616): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) read(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x1, 0x3ce}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f000000cdc0)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r6}, 0x10) 1.909559812s ago: executing program 4 (id=4533): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r1, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r0, 0x0, 0x50) r2 = socket(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) sendmsg$can_raw(r2, 0x0, 0x4) sendmsg$nl_route(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.760274221s ago: executing program 8 (id=4617): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB="020300001600000000000000000000000400020000000000fdffffffffffffff00000000000000000000000000000000050006006c0000000a00000300000000200100000000000000000000000000010000000000000000040004000000000007000000000000000000000000000000000000000000000005000500008000000a00000000000000ff0100000000000000000000000000010000000000000000020001"], 0xb0}}, 0x0) 1.206256741s ago: executing program 4 (id=4619): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0xfffffecc}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delneigh={0x28, 0x1d, 0x1, 0x8a, 0x0, {0x7, 0x0, 0x0, r6, 0x8, 0x12}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2749baca85309be96d5a45bbb29ea06f9cbc7eea15bc1ee369d2707231280f0415df341ab76de90db5ff7ffffffd075b373f51be98db7efbbe8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c1f870adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eacb4389adbb47efb7b3f19046c7f1bd1bf56e58555d96137f95b3aacd74ed1c8a8676468cf2405e48723c6b1ff3698422f88ffed8617dd64330f4c38ba86e3b50da03f4b1e4808aa5c9e9546d7190747c6abc5beab28cec4ff7faa3fab48cdb3d64cfd5d698416752a16f32a54ccef577832e4cf684fce2cb0bab7f6a5821b26483322000000000000596c6e1ac996b8a0924948750b6e52c09d53950e5c8143db8669f8a5bf6511df822532e3c78d019149651255048aab0399e5d6e317b6f3fbc2600ffc3c66c7244b7bcf6b78b5e8c0ee04ce344ceb084b4f2ef09b59a36a92b3874edc559e5bf58a567d385ba92df9121dfa257e60655dcbff581c75107b01b5baaf29ebaf24861c538fefcaecb52a6b69fc450e10645df60a9d50131466113c6aac5abbcf9e9f2f0384da3f9892af413bd87f51f7f0cf61096fd79327fa66effe89a72d7a75d40f0c1ad299f55eafcd52a39649ab6021e30f901933f11092"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r8, @ANYBLOB="08001b"], 0x34}}, 0x4004010) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00"], 0x50) munlockall() sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400000010000108000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0040000080a004000c002b8008000100", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x34}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}) pipe2$9p(&(0x7f00000001c0), 0x0) 1.206008622s ago: executing program 3 (id=4620): r0 = socket$packet(0x11, 0x2, 0x300) mknod$loop(0x0, 0xfff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$media(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) r3 = syz_open_procfs(0x0, 0x0) write$khugepaged_scan(r3, 0x0, 0x2d) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8924, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) 1.205863749s ago: executing program 8 (id=4621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) 0s ago: executing program 4 (id=4622): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$loop(0x0, 0xd, 0x10000) ioctl$LOOP_GET_STATUS(r2, 0x4c03, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='net/ptype\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x3, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x600d, 0x0, 0x9, 0x466}, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): issing 'lowerdir' [ 2096.434087][T16827] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 2097.104530][T22162] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2097.164501][T16827] usb 9-1: Using ep0 maxpacket: 16 [ 2097.217415][T16827] usb 9-1: config 0 has too many interfaces: 80, using maximum allowed: 32 [ 2097.247563][T16827] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 80 [ 2097.284744][T16827] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2097.310110][T16827] usb 9-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 2097.357023][T16827] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.943679][T16827] usb 9-1: config 0 descriptor?? [ 2098.102834][T16827] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 2098.613079][T22174] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3930'. [ 2098.622777][T22174] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3930'. [ 2098.924277][T16874] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2099.183933][T16874] usb 6-1: Using ep0 maxpacket: 32 [ 2099.196136][T16874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2099.207394][T16874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2099.224472][T16874] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2099.251363][T16874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.288248][T16874] usb 6-1: config 0 descriptor?? [ 2099.311815][T16874] hub 6-1:0.0: USB hub found [ 2099.515101][T16874] hub 6-1:0.0: 1 port detected [ 2100.301383][T16827] usb 9-1: USB disconnect, device number 74 [ 2100.587139][T22193] syz_tun: entered allmulticast mode [ 2101.034668][T16873] hub 6-1:0.0: activate --> -90 [ 2101.154955][T22199] overlayfs: failed to resolve './file1': -2 [ 2102.269499][T16873] hub 6-1:0.0: hub_ext_port_status failed (err = -32) [ 2104.027961][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2106.424163][T16827] usb 9-1: new full-speed USB device number 75 using dummy_hcd [ 2106.568972][T22188] syz_tun: left allmulticast mode [ 2106.645568][T16873] usb 6-1: USB disconnect, device number 38 [ 2115.193582][T22247] syzkaller0: entered promiscuous mode [ 2115.258105][T22247] syzkaller0: entered allmulticast mode [ 2115.859070][T22247] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3952'. [ 2115.868271][T22247] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3952'. [ 2115.938395][T22253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2119.237425][T22256] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3955'. [ 2120.157055][T22270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3942'. [ 2120.167676][T22270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3942'. [ 2120.635500][T22257] netlink: 'syz.8.3955': attribute type 12 has an invalid length. [ 2121.115837][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 2123.134057][ T5823] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2125.012257][T22305] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3967'. [ 2125.023204][T22305] netlink: 'syz.8.3967': attribute type 12 has an invalid length. [ 2126.583074][ T979] usb 9-1: new low-speed USB device number 76 using dummy_hcd [ 2127.266113][ T979] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2127.363753][ T979] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2127.695635][T22332] 8021q: VLANs not supported on caif0 [ 2127.775558][ T979] usb 9-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 2127.791274][ T979] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2127.819851][T22333] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2127.833260][ T979] usb 9-1: config 0 descriptor?? [ 2128.818353][ T979] logitech-djreceiver 0003:046D:C52F.0051: hidraw0: USB HID v0.00 Device [HID 046d:c52f] on usb-dummy_hcd.8-1/input0 [ 2129.485692][ T979] usb 9-1: USB disconnect, device number 76 [ 2129.687374][T22347] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2129.842713][T22347] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2130.473728][T22347] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2131.060130][T22347] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2131.159713][T22361] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3983'. [ 2131.171786][T22361] netlink: 'syz.5.3983': attribute type 12 has an invalid length. [ 2131.253241][T22363] input: syz1 as /devices/virtual/input/input25 [ 2131.286105][T22347] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2131.819298][T22347] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2132.005048][T22370] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3985'. [ 2132.020119][T22370] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3985'. [ 2132.485969][T22347] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2132.530939][T22347] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2132.810674][T22379] wlan0 speed is unknown, defaulting to 1000 [ 2133.863936][T16860] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2134.044437][T16860] usb 6-1: Using ep0 maxpacket: 16 [ 2134.054585][ T979] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2134.069786][T22394] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3994'. [ 2134.098459][T16860] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2134.172293][T16860] usb 6-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 2134.232067][T16860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2134.250005][T22395] netlink: 'syz.8.3994': attribute type 12 has an invalid length. [ 2134.273019][T16860] usb 6-1: config 0 descriptor?? [ 2134.322482][ T979] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 2134.371516][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2134.540886][T22397] wlan0 speed is unknown, defaulting to 1000 [ 2134.647868][ T979] usb 4-1: Product: syz [ 2134.652219][ T979] usb 4-1: Manufacturer: syz [ 2134.657446][ T979] usb 4-1: SerialNumber: syz [ 2134.676626][ T979] usb 4-1: config 0 descriptor?? [ 2134.695576][ T979] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 2135.346228][T22403] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3996'. [ 2135.356601][T22403] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3996'. [ 2135.558222][T16860] usbhid 6-1:0.0: can't add hid device: -71 [ 2135.624802][T16860] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2135.814960][T16860] usb 6-1: USB disconnect, device number 39 [ 2136.078217][T16827] usb 4-1: USB disconnect, device number 30 [ 2138.030124][T22415] usb usb1: usbfs: process 22415 (syz.5.4000) did not claim interface 0 before use [ 2138.093531][T22406] wlan0 speed is unknown, defaulting to 1000 [ 2138.193966][T21370] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2138.361029][T21370] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 2138.381454][T21370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2138.403909][T21370] usb 4-1: Product: syz [ 2138.414570][T21370] usb 4-1: Manufacturer: syz [ 2138.424022][T21370] usb 4-1: SerialNumber: syz [ 2138.455460][T21370] usb 4-1: config 0 descriptor?? [ 2138.485410][T21370] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 2139.873479][T11887] usb 4-1: USB disconnect, device number 31 [ 2140.374551][T21370] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 2140.824179][T21370] usb 9-1: Using ep0 maxpacket: 16 [ 2140.964373][T21370] usb 9-1: config 0 has too many interfaces: 80, using maximum allowed: 32 [ 2141.047906][T21370] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 80 [ 2141.337077][T21370] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2141.355338][T21370] usb 9-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 2141.383944][T21370] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2141.404075][T21370] usb 9-1: config 0 descriptor?? [ 2141.419347][T21370] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 2143.223153][T21370] usb 9-1: USB disconnect, device number 77 [ 2144.608835][T22470] wlan0 speed is unknown, defaulting to 1000 [ 2144.925675][T22479] FAULT_INJECTION: forcing a failure. [ 2144.925675][T22479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2144.939373][T22479] CPU: 0 UID: 0 PID: 22479 Comm: syz.5.4017 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 2144.939404][T22479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2144.939420][T22479] Call Trace: [ 2144.939430][T22479] [ 2144.939441][T22479] dump_stack_lvl+0x189/0x250 [ 2144.939492][T22479] ? __pfx____ratelimit+0x10/0x10 [ 2144.939526][T22479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2144.939559][T22479] ? __pfx__printk+0x10/0x10 [ 2144.939581][T22479] ? __might_fault+0xb0/0x130 [ 2144.939622][T22479] should_fail_ex+0x414/0x560 [ 2144.939654][T22479] _copy_from_user+0x2d/0xb0 [ 2144.939677][T22479] ___sys_sendmsg+0x158/0x2a0 [ 2144.939710][T22479] ? __pfx____sys_sendmsg+0x10/0x10 [ 2144.939780][T22479] ? __fget_files+0x2a/0x420 [ 2144.939809][T22479] ? __fget_files+0x3a0/0x420 [ 2144.939852][T22479] __x64_sys_sendmsg+0x19b/0x260 [ 2144.939884][T22479] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2144.939935][T22479] ? do_syscall_64+0xbe/0x3b0 [ 2144.939974][T22479] do_syscall_64+0xfa/0x3b0 [ 2144.940010][T22479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2144.940032][T22479] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2144.940055][T22479] ? clear_bhb_loop+0x60/0xb0 [ 2144.940083][T22479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2144.940106][T22479] RIP: 0033:0x7fa48458e929 [ 2144.940127][T22479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2144.940148][T22479] RSP: 002b:00007fa485461038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2144.940180][T22479] RAX: ffffffffffffffda RBX: 00007fa4847b6160 RCX: 00007fa48458e929 [ 2144.940198][T22479] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000000a [ 2144.940213][T22479] RBP: 00007fa485461090 R08: 0000000000000000 R09: 0000000000000000 [ 2144.940228][T22479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2144.940242][T22479] R13: 0000000000000000 R14: 00007fa4847b6160 R15: 00007ffdb159c028 [ 2144.940277][T22479] [ 2145.809032][T22484] Unsupported ieee802154 address type: 0 [ 2145.848191][T22484] fuse: Invalid rootmode [ 2146.074104][T16827] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 2146.308286][T16827] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2146.333904][T16827] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2146.385359][T16827] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2146.411343][T16827] usb 8-1: config 1 has no interface number 1 [ 2146.438677][T16827] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2146.473078][T16827] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2146.475620][T16860] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 2146.497543][T16827] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2146.513974][T16827] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2146.532588][T16827] usb 8-1: Product: syz [ 2146.538000][T16827] usb 8-1: Manufacturer: syz [ 2146.563391][T16827] usb 8-1: SerialNumber: syz [ 2146.684302][T16860] usb 9-1: Using ep0 maxpacket: 16 [ 2146.695495][T16860] usb 9-1: config 0 has too many interfaces: 80, using maximum allowed: 32 [ 2146.704523][T16860] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 80 [ 2146.724110][T16860] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2146.749001][T16860] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2146.767609][T22491] trusted_key: syz.5.4018 sent an empty control message without MSG_MORE. [ 2146.801610][T16860] usb 9-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 2146.851405][T16860] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2146.899354][T16860] usb 9-1: config 0 descriptor?? [ 2147.304393][T16827] usb 8-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 2147.312185][T16827] usb 8-1: MIDIStreaming interface descriptor not found [ 2148.226664][T16860] playstation 0003:054C:05C4.0052: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.8-1/input0 [ 2148.296462][T16827] usb 8-1: USB disconnect, device number 87 [ 2148.366378][T16860] playstation 0003:054C:05C4.0052: Invalid reportID received, expected 18 got 0 [ 2148.386498][T16860] playstation 0003:054C:05C4.0052: Failed to retrieve DualShock4 pairing info: -22 [ 2148.461746][T16860] playstation 0003:054C:05C4.0052: Failed to get MAC address from DualShock4 [ 2148.504618][T16860] playstation 0003:054C:05C4.0052: Failed to create dualshock4. [ 2148.544106][T22507] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4025'. [ 2148.551741][T16860] playstation 0003:054C:05C4.0052: probe with driver playstation failed with error -22 [ 2148.564491][T22507] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4025'. [ 2148.670748][T16860] usb 9-1: USB disconnect, device number 78 [ 2149.584045][T16860] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 2149.745161][T16860] usb 8-1: Using ep0 maxpacket: 16 [ 2149.760915][T16860] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2149.802257][T16860] usb 8-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 2149.814899][T16860] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2149.828373][T16860] usb 8-1: config 0 descriptor?? [ 2149.873108][T22522] wlan0 speed is unknown, defaulting to 1000 [ 2150.038830][T16873] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 2150.230974][T16873] usb 9-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2150.246295][T22527] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2150.259392][T16873] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2150.318521][T16873] usb 9-1: Product: syz [ 2150.318966][T16873] usb 9-1: Manufacturer: syz [ 2150.319439][T16873] usb 9-1: SerialNumber: syz [ 2150.460336][T16860] usbhid 8-1:0.0: can't add hid device: -71 [ 2150.491550][T16873] r8152-cfgselector 9-1: Unknown version 0x0000 [ 2150.505752][T16860] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2150.537039][T16873] r8152-cfgselector 9-1: config 0 descriptor?? [ 2150.629556][T16860] usb 8-1: USB disconnect, device number 88 [ 2151.099608][T16873] r8152-cfgselector 9-1: Unknown version 0x0000 [ 2151.114403][T16873] r8152-cfgselector 9-1: bad CDC descriptors [ 2151.139024][T16873] r8152-cfgselector 9-1: USB disconnect, device number 79 [ 2151.440007][T22533] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2151.558903][T22535] 8021q: VLANs not supported on caif0 [ 2153.916782][T22547] IPv6: sit1: Disabled Multicast RS [ 2155.131882][T22563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2155.969301][T16837] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2156.535132][T16837] usb 4-1: Using ep0 maxpacket: 16 [ 2156.594480][T16837] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2156.751645][T16837] usb 4-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 2156.928191][T16837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2157.630179][T16837] usb 4-1: config 0 descriptor?? [ 2158.278553][T22578] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2158.538511][T16837] usbhid 4-1:0.0: can't add hid device: -71 [ 2158.550419][T16837] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2158.954758][T16837] usb 4-1: USB disconnect, device number 32 [ 2159.089543][T22586] overlayfs: failed to resolve './file1': -2 [ 2160.614242][T22591] wlan0 speed is unknown, defaulting to 1000 [ 2161.218562][T22599] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2162.288949][T22599] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2162.469698][T22599] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2163.127210][T22616] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2163.181845][T22599] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2163.200443][T22620] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4058'. [ 2163.271191][T22616] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2163.331363][T22618] netlink: 'syz.8.4058': attribute type 12 has an invalid length. [ 2163.441086][T22599] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2163.527021][T22616] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2163.588938][T22599] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2163.736169][T22599] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2163.879393][T22599] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2164.829873][T22616] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2164.901283][T22616] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2164.946192][T22616] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2164.997703][ T30] audit: type=1326 audit(2000001059.117:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22640 comm="syz.4.4064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1c458e929 code=0x0 [ 2165.030954][T22616] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2165.583625][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.664398][T16860] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 2166.139820][T16860] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 2166.227645][T16860] usb 6-1: config 0 has no interface number 0 [ 2166.687639][T16860] usb 6-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 2166.734890][T16860] usb 6-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2166.786220][T16860] usb 6-1: config 0 interface 113 has no altsetting 0 [ 2166.809039][T16860] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 2166.826703][T16860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2167.780837][T16860] usb 6-1: Product: syz [ 2167.791445][T16860] usb 6-1: Manufacturer: syz [ 2167.796903][T16860] usb 6-1: SerialNumber: syz [ 2167.812928][T16860] usb 6-1: config 0 descriptor?? [ 2167.853213][ C1] usb 6-1: NFC: Urb failure (status -71) [ 2168.199776][T16860] usb 6-1: NFC: Unable to get FW version [ 2168.267898][T22664] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4071'. [ 2168.285626][T22664] netlink: 'syz.4.4071': attribute type 12 has an invalid length. [ 2168.372879][T16860] pn533_usb 6-1:0.113: probe with driver pn533_usb failed with error -90 [ 2168.406079][T16860] usb 6-1: USB disconnect, device number 40 [ 2168.556819][T22673] wlan0 speed is unknown, defaulting to 1000 [ 2169.515916][T22677] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4075'. [ 2169.595298][T22677] netlink: 'syz.4.4075': attribute type 12 has an invalid length. [ 2170.604167][T22702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4081'. [ 2170.617844][T22702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4081'. [ 2172.012399][T22723] netlink: 'syz.4.4089': attribute type 3 has an invalid length. [ 2172.107524][ T979] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 2172.279331][ T979] usb 9-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 2172.301273][ T979] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2172.321141][ T979] ums-cypress 9-1:1.0: USB Mass Storage device detected [ 2172.474178][T16860] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2172.650349][T16860] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2172.660315][T16860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2172.669139][T16860] usb 5-1: Product: syz [ 2172.673584][T16860] usb 5-1: Manufacturer: syz [ 2172.678298][T16860] usb 5-1: SerialNumber: syz [ 2172.687560][T16860] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2172.695688][T16860] r8152-cfgselector 5-1: config 0 descriptor?? [ 2173.195444][T16860] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2173.205026][T16860] r8152-cfgselector 5-1: bad CDC descriptors [ 2173.222702][T16860] r8152-cfgselector 5-1: USB disconnect, device number 69 [ 2173.380280][ T5823] Bluetooth: hci0: command 0x1003 tx timeout [ 2173.381298][T22735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4093'. [ 2173.387649][T17396] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2173.396383][T22735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4093'. [ 2174.223360][T22746] vxcan1: entered allmulticast mode [ 2174.231128][T22746] vxcan1: left allmulticast mode [ 2175.142454][T16873] usb 9-1: USB disconnect, device number 80 [ 2175.463358][ T30] audit: type=1326 audit(2000001069.577:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22754 comm="syz.3.4100" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f0ff8e929 code=0x0 [ 2175.548234][T22764] netlink: 'syz.4.4099': attribute type 10 has an invalid length. [ 2175.589439][T22764] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2175.883985][T16827] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2176.449242][T22768] wlan0 speed is unknown, defaulting to 1000 [ 2176.455458][T16827] usb 5-1: Using ep0 maxpacket: 16 [ 2176.495172][T16827] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2176.526262][T16827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2176.545541][T16827] usb 5-1: Product: syz [ 2176.589782][T16827] usb 5-1: Manufacturer: syz [ 2176.623939][T16827] usb 5-1: SerialNumber: syz [ 2176.647399][T16827] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2176.668132][T16827] r8152-cfgselector 5-1: config 0 descriptor?? [ 2176.998596][T14631] Bluetooth: hci0: Frame reassembly failed (-84) [ 2177.056694][T14631] Bluetooth: hci0: Frame reassembly failed (-84) [ 2177.258349][T22764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2177.281877][T22764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2177.339518][T16873] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2177.514208][T16873] usb 6-1: Using ep0 maxpacket: 32 [ 2177.522208][T16873] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 2177.530839][T16874] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 2177.538659][T16873] usb 6-1: config 0 has no interface number 0 [ 2177.549107][T16873] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2177.558338][T16873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2177.566515][T16873] usb 6-1: Product: syz [ 2177.570739][T16873] usb 6-1: Manufacturer: syz [ 2177.575855][T16873] usb 6-1: SerialNumber: syz [ 2177.582829][T16873] usb 6-1: config 0 descriptor?? [ 2177.591242][T16873] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2177.719535][T16874] usb 9-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2177.729037][T16874] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2177.737994][T16874] usb 9-1: Product: syz [ 2177.742421][T16874] usb 9-1: Manufacturer: syz [ 2177.747259][T16874] usb 9-1: SerialNumber: syz [ 2177.756729][T16874] r8152-cfgselector 9-1: Unknown version 0x0000 [ 2177.763179][T16874] r8152-cfgselector 9-1: config 0 descriptor?? [ 2177.795907][T16873] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2177.813477][T16873] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2177.997058][T22781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2178.006068][T22781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2178.230907][T22781] tipc: Failed to remove unknown binding: 66,1,1/0:2598059493/2598059495 [ 2178.242447][T22781] tipc: Failed to remove unknown binding: 66,1,1/0:2598059493/2598059495 [ 2178.251298][T22781] tipc: Failed to remove unknown binding: 66,1,1/0:2598059493/2598059495 [ 2178.264431][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2178.272604][T16874] r8152-cfgselector 9-1: Unknown version 0x0000 [ 2178.279588][T16873] usb 6-1: USB disconnect, device number 41 [ 2178.286042][T16874] r8152-cfgselector 9-1: bad CDC descriptors [ 2178.299484][T16873] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2178.312974][T16874] r8152-cfgselector 9-1: USB disconnect, device number 81 [ 2178.330583][T16873] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2178.345100][T16873] quatech2 6-1:0.51: device disconnected [ 2178.493036][T16830] r8152-cfgselector 5-1: USB disconnect, device number 70 [ 2178.628422][T22788] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4108'. [ 2178.639020][T22788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4108'. [ 2179.055218][ T5823] Bluetooth: hci0: command 0x1003 tx timeout [ 2179.061998][T17396] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2179.371555][T22798] FAULT_INJECTION: forcing a failure. [ 2179.371555][T22798] name failslab, interval 1, probability 0, space 0, times 0 [ 2179.384713][T22798] CPU: 0 UID: 0 PID: 22798 Comm: syz.8.4109 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 2179.384745][T22798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2179.384760][T22798] Call Trace: [ 2179.384769][T22798] [ 2179.384779][T22798] dump_stack_lvl+0x189/0x250 [ 2179.384818][T22798] ? __pfx____ratelimit+0x10/0x10 [ 2179.384853][T22798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2179.384885][T22798] ? __pfx__printk+0x10/0x10 [ 2179.384911][T22798] ? __pfx___might_resched+0x10/0x10 [ 2179.384945][T22798] ? fs_reclaim_acquire+0x7d/0x100 [ 2179.384982][T22798] should_fail_ex+0x414/0x560 [ 2179.385015][T22798] should_failslab+0xa8/0x100 [ 2179.385046][T22798] __kmalloc_cache_noprof+0x70/0x3d0 [ 2179.385074][T22798] ? ovl_init_fs_context+0xa0/0x510 [ 2179.385114][T22798] ovl_init_fs_context+0xa0/0x510 [ 2179.385155][T22798] alloc_fs_context+0x64e/0x7d0 [ 2179.385197][T22798] do_new_mount+0x10e/0xa40 [ 2179.385244][T22798] __se_sys_mount+0x317/0x410 [ 2179.385281][T22798] ? __pfx___se_sys_mount+0x10/0x10 [ 2179.385310][T22798] ? rcu_is_watching+0x15/0xb0 [ 2179.385349][T22798] ? do_syscall_64+0xbe/0x3b0 [ 2179.385382][T22798] ? __x64_sys_mount+0x20/0xc0 [ 2179.385415][T22798] do_syscall_64+0xfa/0x3b0 [ 2179.385448][T22798] ? lockdep_hardirqs_on+0x9c/0x150 [ 2179.385480][T22798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2179.385503][T22798] ? clear_bhb_loop+0x60/0xb0 [ 2179.385531][T22798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2179.385553][T22798] RIP: 0033:0x7fb46d78e929 [ 2179.385574][T22798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2179.385594][T22798] RSP: 002b:00007fb46e65c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2179.385618][T22798] RAX: ffffffffffffffda RBX: 00007fb46d9b6080 RCX: 00007fb46d78e929 [ 2179.385635][T22798] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 2179.385651][T22798] RBP: 00007fb46e65c090 R08: 0000200000000380 R09: 0000000000000000 [ 2179.385667][T22798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2179.385681][T22798] R13: 0000000000000000 R14: 00007fb46d9b6080 R15: 00007ffd37ea9cd8 [ 2179.385716][T22798] [ 2179.958121][T16873] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2180.284213][T16873] usb 6-1: Using ep0 maxpacket: 32 [ 2180.293518][T16873] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2180.312772][T16873] usb 6-1: can't read configurations, error -61 [ 2180.454090][T16873] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2180.462052][T22812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2180.634209][T16873] usb 6-1: Using ep0 maxpacket: 32 [ 2180.799378][T16873] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2181.011410][T16873] usb 6-1: can't read configurations, error -61 [ 2181.037614][T16873] usb usb6-port1: attempt power cycle [ 2181.434033][T16873] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2181.506880][T16873] usb 6-1: Using ep0 maxpacket: 32 [ 2181.522328][T16873] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2181.539844][T16873] usb 6-1: can't read configurations, error -61 [ 2181.695242][T16873] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2181.744079][T16837] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2181.938347][T16837] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2181.955593][T16837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2181.964555][T16873] usb 6-1: Using ep0 maxpacket: 32 [ 2181.971081][T16837] usb 5-1: Product: syz [ 2181.973280][T16873] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2181.978814][T16837] usb 5-1: Manufacturer: syz [ 2182.710309][T16837] usb 5-1: SerialNumber: syz [ 2182.721057][T16837] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2182.728187][T16837] r8152-cfgselector 5-1: config 0 descriptor?? [ 2182.852301][T16873] usb 6-1: can't read configurations, error -61 [ 2182.860396][T16873] usb usb6-port1: unable to enumerate USB device [ 2183.212494][ T6308] Bluetooth: hci0: Frame reassembly failed (-84) [ 2183.454297][T16830] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2183.520016][T16837] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2183.529307][T16837] r8152-cfgselector 5-1: bad CDC descriptors [ 2183.544572][T16837] r8152-cfgselector 5-1: USB disconnect, device number 71 [ 2183.671159][T16830] usb 6-1: Using ep0 maxpacket: 8 [ 2183.695930][T16830] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 2183.724979][T16830] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2183.739130][T16830] usb 6-1: config 0 has no interface number 0 [ 2183.748787][T16830] usb 6-1: config 0 interface 52 has no altsetting 0 [ 2183.760064][T16830] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 2183.769776][T16830] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 2183.778521][T16830] usb 6-1: Manufacturer: syz [ 2183.787705][T16830] usb 6-1: config 0 descriptor?? [ 2183.930700][T22841] program syz.3.4124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2183.944504][T22841] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2184.943923][T19732] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2184.956418][T16830] usb 6-1: Can not set alternate setting to 1, error: -71 [ 2184.965525][T16830] synaptics_usb 6-1:0.52: probe with driver synaptics_usb failed with error -71 [ 2184.989040][T16830] usb 6-1: USB disconnect, device number 46 [ 2185.214078][T17396] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2185.222172][ T5823] Bluetooth: hci0: command 0x1003 tx timeout [ 2185.477778][T19732] usb 5-1: Using ep0 maxpacket: 16 [ 2186.090024][T19732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2186.112772][T19732] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2186.126973][T19732] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 2186.136565][T19732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2186.627693][T19732] usb 5-1: config 0 descriptor?? [ 2186.818652][T22869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2187.467121][T19732] logitech 0003:046D:C623.0053: unknown main item tag 0x6 [ 2187.484832][T19732] logitech 0003:046D:C623.0053: collection stack underflow [ 2187.503941][T19732] logitech 0003:046D:C623.0053: item 0 4 0 12 parsing failed [ 2187.566173][T19732] logitech 0003:046D:C623.0053: parse failed [ 2187.600314][T19732] logitech 0003:046D:C623.0053: probe with driver logitech failed with error -22 [ 2187.670010][T19732] usb 5-1: USB disconnect, device number 72 [ 2188.164024][ T979] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2188.319015][ T979] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2188.349421][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2188.394848][ T979] usb 4-1: Product: syz [ 2188.399095][ T979] usb 4-1: Manufacturer: syz [ 2188.425986][ T979] usb 4-1: SerialNumber: syz [ 2188.446541][ T979] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2188.452866][ T979] r8152-cfgselector 4-1: config 0 descriptor?? [ 2188.968077][ T979] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2188.981822][ T979] r8152-cfgselector 4-1: bad CDC descriptors [ 2188.988782][T16837] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2189.002300][ T979] r8152-cfgselector 4-1: USB disconnect, device number 33 [ 2189.134534][T16837] usb 5-1: device descriptor read/64, error -71 [ 2189.245802][T22896] wlan0 speed is unknown, defaulting to 1000 [ 2189.431502][T16830] usb 6-1: new low-speed USB device number 47 using dummy_hcd [ 2189.472308][T16837] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 2189.764293][T16837] usb 5-1: device descriptor read/64, error -71 [ 2189.815614][T16830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2189.831003][T16830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2189.863903][T16830] usb 6-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 2189.908329][T16830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2189.917177][T16837] usb usb5-port1: attempt power cycle [ 2189.946524][T16830] usb 6-1: config 0 descriptor?? [ 2190.293974][T16837] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2190.317700][T16837] usb 5-1: device descriptor read/8, error -71 [ 2190.324312][T16827] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 2190.382472][T16830] usbhid 6-1:0.0: can't add hid device: -71 [ 2190.396031][T16830] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2190.606578][T16830] usb 6-1: USB disconnect, device number 47 [ 2190.655675][T16827] usb 8-1: Using ep0 maxpacket: 32 [ 2190.814139][T16837] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2190.905557][T16827] usb 8-1: config 0 has an invalid interface number: 88 but max is 0 [ 2190.913730][T16827] usb 8-1: config 0 has no interface number 0 [ 2190.925599][T16837] usb 5-1: device descriptor read/8, error -71 [ 2190.931920][T16827] usb 8-1: config 0 interface 88 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 2190.957123][T16827] usb 8-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 2190.971178][T16827] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2190.980079][T16827] usb 8-1: Product: syz [ 2190.984802][T16827] usb 8-1: Manufacturer: syz [ 2190.990707][T16827] usb 8-1: SerialNumber: syz [ 2190.998383][T16827] usb 8-1: config 0 descriptor?? [ 2191.034325][T16837] usb usb5-port1: unable to enumerate USB device [ 2191.637965][T16874] usb 8-1: USB disconnect, device number 89 [ 2191.841233][T16874] f81534a_ctrl 8-1:0.88: failed to set register 0x116: -19 [ 2191.864289][T16874] f81534a_ctrl 8-1:0.88: failed to enable ports: -19 [ 2191.963951][T16830] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 2192.117570][T16830] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 2192.126406][T16830] usb 6-1: config 0 has no interface number 0 [ 2192.137078][T16830] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2192.147869][T16830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2192.157395][T16830] usb 6-1: Product: syz [ 2192.162197][T16830] usb 6-1: Manufacturer: syz [ 2192.167628][T16830] usb 6-1: SerialNumber: syz [ 2192.185849][T16830] usb 6-1: config 0 descriptor?? [ 2192.549192][T16830] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 2192.608848][T16830] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 2192.678750][T16830] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 2193.174534][T16830] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 2193.233469][T16830] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2193.246285][T16830] usb 6-1: USB disconnect, device number 48 [ 2193.278284][T16830] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2193.334587][T16830] keyspan 6-1:0.133: device disconnected [ 2194.404641][T16874] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 2194.928569][T16874] usb 9-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2194.966322][T16874] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2195.028555][T16874] usb 9-1: Product: syz [ 2195.032821][T16874] usb 9-1: Manufacturer: syz [ 2195.056075][T16874] usb 9-1: SerialNumber: syz [ 2195.108200][T16874] r8152-cfgselector 9-1: Unknown version 0x0000 [ 2195.143934][T16874] r8152-cfgselector 9-1: config 0 descriptor?? [ 2195.497943][T22965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4163'. [ 2196.024183][T16874] r8152-cfgselector 9-1: Unknown version 0x0000 [ 2196.062451][T16874] r8152-cfgselector 9-1: bad CDC descriptors [ 2196.110128][T16874] r8152-cfgselector 9-1: USB disconnect, device number 82 [ 2196.533965][T22973] Cannot find map_set index 0 as target [ 2199.034977][T22992] 8021q: VLANs not supported on caif0 [ 2202.131819][T23017] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4176'. [ 2202.143558][T23017] netlink: 'syz.8.4176': attribute type 12 has an invalid length. [ 2202.323472][T23019] wlan0 speed is unknown, defaulting to 1000 [ 2202.600357][T23026] overlayfs: failed to resolve './file1': -2 [ 2205.538538][T16827] libceph: connect (1)[c::]:6789 error -101 [ 2205.591175][T16827] libceph: mon0 (1)[c::]:6789 connect error [ 2205.644075][T19732] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2205.964928][T19732] usb 5-1: Using ep0 maxpacket: 32 [ 2205.983872][T19732] usb 5-1: config 0 has an invalid interface number: 25 but max is 0 [ 2206.023664][T19732] usb 5-1: config 0 has no interface number 0 [ 2206.024363][ T979] libceph: connect (1)[c::]:6789 error -101 [ 2206.046162][T19732] usb 5-1: config 0 interface 25 has no altsetting 0 [ 2206.056457][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 2206.086894][T19732] usb 5-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice=1d.e8 [ 2206.112538][T19732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2206.146070][T19732] usb 5-1: config 0 descriptor?? [ 2206.167187][T19732] usb 5-1: can't set first interface for hiFace device. [ 2206.183918][T19732] snd-usb-hiface 5-1:0.25: probe with driver snd-usb-hiface failed with error -5 [ 2206.574234][ T979] libceph: connect (1)[c::]:6789 error -101 [ 2206.642882][ T979] libceph: mon0 (1)[c::]:6789 connect error [ 2207.367057][T23043] ceph: No mds server is up or the cluster is laggy [ 2207.694650][T23059] 8021q: VLANs not supported on caif0 [ 2207.923613][ T979] usb 5-1: USB disconnect, device number 77 [ 2210.697170][T23069] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4190'. [ 2210.781103][T23076] netlink: 'syz.5.4190': attribute type 12 has an invalid length. [ 2212.950086][T23100] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2213.107110][T23104] wlan0 speed is unknown, defaulting to 1000 [ 2213.205713][T19732] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 2213.255651][T23100] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2214.073891][T19732] usb 8-1: Using ep0 maxpacket: 16 [ 2214.103573][T19732] usb 8-1: config 0 has too many interfaces: 80, using maximum allowed: 32 [ 2214.130813][T19732] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 80 [ 2214.150860][T19732] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2214.183915][T19732] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2214.194935][T19732] usb 8-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 2214.206540][T23100] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2214.219303][T19732] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2214.259351][T19732] usb 8-1: config 0 descriptor?? [ 2214.449865][T23100] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2214.994068][T23115] 8021q: VLANs not supported on caif0 [ 2215.078333][T19732] playstation 0003:054C:05C4.0054: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.7-1/input0 [ 2215.214859][T23100] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2215.218696][T19732] playstation 0003:054C:05C4.0054: Invalid reportID received, expected 18 got 0 [ 2215.242869][T23100] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2215.251146][T19732] playstation 0003:054C:05C4.0054: Failed to retrieve DualShock4 pairing info: -22 [ 2215.251218][T19732] playstation 0003:054C:05C4.0054: Failed to get MAC address from DualShock4 [ 2215.251237][T19732] playstation 0003:054C:05C4.0054: Failed to create dualshock4. [ 2215.255815][T19732] playstation 0003:054C:05C4.0054: probe with driver playstation failed with error -22 [ 2215.310775][T23100] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2215.331013][T23100] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2215.427231][T19732] usb 8-1: USB disconnect, device number 90 [ 2219.523972][T16837] usb 9-1: new full-speed USB device number 83 using dummy_hcd [ 2220.202974][T16827] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 2220.734322][T16837] usb 9-1: config 0 has an invalid interface number: 133 but max is 0 [ 2220.742700][T16837] usb 9-1: config 0 has no interface number 0 [ 2220.748945][T16827] usb 5-1: Using ep0 maxpacket: 16 [ 2220.757552][T16827] usb 5-1: config 0 has too many interfaces: 80, using maximum allowed: 32 [ 2220.766395][T16827] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 80 [ 2220.775897][T16827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2220.814933][T16827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2220.836071][T16837] usb 9-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2220.870221][T16837] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2220.878535][T16827] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 2220.894321][T16837] usb 9-1: Product: syz [ 2220.908807][T16827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2220.917498][T16837] usb 9-1: Manufacturer: syz [ 2220.927725][T16837] usb 9-1: SerialNumber: syz [ 2220.947948][T16827] usb 5-1: config 0 descriptor?? [ 2220.961476][T16837] usb 9-1: config 0 descriptor?? [ 2221.240303][T16837] keyspan 9-1:0.133: Keyspan 1 port adapter converter detected [ 2221.255477][T16837] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 81 [ 2221.263731][T16837] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 1 [ 2221.271943][T16837] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 2 [ 2221.282059][T16837] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2221.293183][T16837] usb 9-1: USB disconnect, device number 83 [ 2221.308414][T16837] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2221.318609][T16837] keyspan 9-1:0.133: device disconnected [ 2221.381062][T16827] playstation 0003:054C:05C4.0055: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 2221.573095][T16827] playstation 0003:054C:05C4.0055: Invalid reportID received, expected 18 got 0 [ 2221.586199][T23172] wlan0 speed is unknown, defaulting to 1000 [ 2221.591037][T16827] playstation 0003:054C:05C4.0055: Failed to retrieve DualShock4 pairing info: -22 [ 2221.602370][T16827] playstation 0003:054C:05C4.0055: Failed to get MAC address from DualShock4 [ 2221.622903][T16827] playstation 0003:054C:05C4.0055: Failed to create dualshock4. [ 2221.633063][T16827] playstation 0003:054C:05C4.0055: probe with driver playstation failed with error -22 [ 2221.797919][T21370] usb 5-1: USB disconnect, device number 78 [ 2221.804448][T16837] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 2222.170573][T16837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2222.182144][T16837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2222.193483][T16837] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2222.269083][T23185] FAULT_INJECTION: forcing a failure. [ 2222.269083][T23185] name failslab, interval 1, probability 0, space 0, times 0 [ 2222.282013][T23185] CPU: 1 UID: 0 PID: 23185 Comm: syz.3.4222 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 2222.282045][T23185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2222.282059][T23185] Call Trace: [ 2222.282079][T23185] [ 2222.282089][T23185] dump_stack_lvl+0x189/0x250 [ 2222.282130][T23185] ? __pfx____ratelimit+0x10/0x10 [ 2222.282164][T23185] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2222.282197][T23185] ? __pfx__printk+0x10/0x10 [ 2222.282226][T23185] ? __pfx___might_resched+0x10/0x10 [ 2222.282265][T23185] should_fail_ex+0x414/0x560 [ 2222.282299][T23185] should_failslab+0xa8/0x100 [ 2222.282332][T23185] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2222.282361][T23185] ? __alloc_skb+0x112/0x2d0 [ 2222.282392][T23185] __alloc_skb+0x112/0x2d0 [ 2222.282421][T23185] netlink_sendmsg+0x5c6/0xb30 [ 2222.282447][T23185] ? irqentry_exit+0x74/0x90 [ 2222.282497][T23185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2222.282527][T23185] ? ____sys_sendmsg+0x61/0x830 [ 2222.282558][T23185] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2222.282585][T23185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2222.282613][T23185] __sock_sendmsg+0x21c/0x270 [ 2222.282652][T23185] ____sys_sendmsg+0x505/0x830 [ 2222.282686][T23185] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2222.282725][T23185] ? import_iovec+0x74/0xa0 [ 2222.282752][T23185] ___sys_sendmsg+0x21f/0x2a0 [ 2222.282783][T23185] ? __pfx____sys_sendmsg+0x10/0x10 [ 2222.282855][T23185] ? __fget_files+0x2a/0x420 [ 2222.282893][T23185] ? __fget_files+0x3a0/0x420 [ 2222.282936][T23185] __x64_sys_sendmsg+0x19b/0x260 [ 2222.282968][T23185] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2222.283025][T23185] do_syscall_64+0xfa/0x3b0 [ 2222.283062][T23185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2222.283084][T23185] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2222.283107][T23185] ? clear_bhb_loop+0x60/0xb0 [ 2222.283134][T23185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2222.283157][T23185] RIP: 0033:0x7f0f0ff8e929 [ 2222.283179][T23185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2222.283199][T23185] RSP: 002b:00007f0f10ddf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2222.283229][T23185] RAX: ffffffffffffffda RBX: 00007f0f101b6160 RCX: 00007f0f0ff8e929 [ 2222.283247][T23185] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000000a [ 2222.283261][T23185] RBP: 00007f0f10ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 2222.283276][T23185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2222.283290][T23185] R13: 0000000000000000 R14: 00007f0f101b6160 R15: 00007ffdb78b1158 [ 2222.283326][T23185] [ 2222.788775][T16837] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2222.804536][T16837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2222.823921][ T979] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2222.980954][T16837] usb 8-1: config 0 descriptor?? [ 2224.017468][ T979] usb 6-1: Using ep0 maxpacket: 32 [ 2224.020271][T23198] netlink: 592 bytes leftover after parsing attributes in process `syz.4.4228'. [ 2224.029813][ T979] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 2224.040364][ T979] usb 6-1: config 0 has no interface number 0 [ 2224.053770][ T979] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2224.081220][ T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2224.093911][ T979] usb 6-1: Product: syz [ 2224.098211][ T979] usb 6-1: Manufacturer: syz [ 2224.112549][ T979] usb 6-1: SerialNumber: syz [ 2224.121863][ T979] usb 6-1: config 0 descriptor?? [ 2224.318273][ T979] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2224.421921][T23204] kAFS: No cell specified [ 2225.559272][ T979] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2226.263486][ T979] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2226.273036][T16837] usbhid 8-1:0.0: can't add hid device: -71 [ 2226.320029][T16837] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2226.362365][T16837] usb 8-1: USB disconnect, device number 91 [ 2226.915468][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2227.378382][T23226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2227.393889][T23226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2228.589464][T16837] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 2229.249825][T23240] netlink: 592 bytes leftover after parsing attributes in process `syz.4.4240'. [ 2229.307738][T16837] usb 8-1: Using ep0 maxpacket: 16 [ 2229.451594][T16837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2229.469230][T16837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2229.847361][T16837] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2229.863939][T16837] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2229.873660][T16837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2229.949262][T16837] usb 8-1: config 0 descriptor?? [ 2230.181150][T23231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2230.204698][T23231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2230.259154][T23255] netlink: 'syz.4.4244': attribute type 12 has an invalid length. [ 2230.954490][T16837] microsoft 0003:045E:07DA.0056: ignoring exceeding usage max [ 2230.968978][T16837] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 2230.976628][T16837] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 2230.987415][T16837] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 2230.999280][T16837] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 2231.000773][T23254] wlan0 speed is unknown, defaulting to 1000 [ 2231.020330][T16837] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 2231.126549][T16837] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 2231.138715][T16837] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 2231.147474][T16837] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 2231.155297][T16837] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 2231.163147][T16837] microsoft 0003:045E:07DA.0056: unknown main item tag 0x0 [ 2231.201714][T16837] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0056/input/input26 [ 2231.273182][T16837] microsoft 0003:045E:07DA.0056: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 2231.366105][T16837] usb 8-1: USB disconnect, device number 92 [ 2231.467303][T23265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4246'. [ 2231.478865][T23265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4246'. [ 2233.339295][T23282] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4250'. [ 2234.428034][T23288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2234.445805][T23288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2235.470910][T23296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4254'. [ 2235.480918][T23296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4254'. [ 2237.176758][T16830] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2237.679659][T23313] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4259'. [ 2237.699457][T16830] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 2237.772037][T16830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2237.806105][T16830] usb 4-1: Product: syz [ 2237.807395][T23313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4259'. [ 2237.822615][T16830] usb 4-1: Manufacturer: syz [ 2237.834320][T16830] usb 4-1: SerialNumber: syz [ 2237.850465][T16830] usb 4-1: config 0 descriptor?? [ 2237.978508][T16830] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 2239.134365][T16837] usb 4-1: USB disconnect, device number 34 [ 2240.441259][T16860] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 2240.884099][T16860] usb 8-1: Using ep0 maxpacket: 16 [ 2240.956427][T16860] usb 8-1: config 0 has too many interfaces: 80, using maximum allowed: 32 [ 2240.993411][T16860] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 80 [ 2241.024050][T16860] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2241.043834][T16860] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2241.053678][T16860] usb 8-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 2241.105436][T16860] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2241.135174][T16860] usb 8-1: config 0 descriptor?? [ 2241.609388][T23346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2241.625295][T23346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2242.037240][T16860] usbhid 8-1:0.0: can't add hid device: -71 [ 2242.044454][T16860] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2242.341737][T16860] usb 8-1: USB disconnect, device number 93 [ 2243.440124][T19732] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2244.038221][T19732] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 2244.082331][T19732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2244.119609][T19732] usb 4-1: Product: syz [ 2244.134206][T19732] usb 4-1: Manufacturer: syz [ 2244.138887][T19732] usb 4-1: SerialNumber: syz [ 2244.154844][T19732] usb 4-1: config 0 descriptor?? [ 2244.175778][T19732] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 2244.962543][T23368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2245.749386][T19732] usb 4-1: USB disconnect, device number 35 [ 2246.420592][T23376] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2246.509679][T23376] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2246.634551][T23376] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2247.568013][T23387] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4282'. [ 2247.579210][T23387] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4282'. [ 2248.110760][T23376] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2248.270941][T23376] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2248.328015][T23376] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2248.382409][T23376] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2248.402027][T23376] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2248.517730][T23399] netlink: 'syz.8.4288': attribute type 1 has an invalid length. [ 2250.148145][T23415] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2251.969036][T23435] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4299'. [ 2252.102987][ T30] audit: type=1326 audit(2000001146.217:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23440 comm="syz.4.4302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c458e929 code=0x7ffc0000 [ 2252.237944][ T30] audit: type=1326 audit(2000001146.247:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23440 comm="syz.4.4302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc1c458e929 code=0x7ffc0000 [ 2252.303968][T11887] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 2252.323950][ T30] audit: type=1326 audit(2000001146.247:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23440 comm="syz.4.4302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c458e929 code=0x7ffc0000 [ 2252.370652][ T30] audit: type=1326 audit(2000001146.247:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23440 comm="syz.4.4302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc1c4590847 code=0x7ffc0000 [ 2252.399778][ T30] audit: type=1326 audit(2000001146.247:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23440 comm="syz.4.4302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc1c45907bc code=0x7ffc0000 [ 2252.476086][ T30] audit: type=1326 audit(2000001146.247:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23440 comm="syz.4.4302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc1c45906f4 code=0x7ffc0000 [ 2252.768176][ T30] audit: type=1326 audit(2000001146.247:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23440 comm="syz.4.4302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc1c45906f4 code=0x7ffc0000 [ 2252.807761][T11887] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2252.853994][T11887] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2252.858091][ T30] audit: type=1326 audit(2000001146.247:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23440 comm="syz.4.4302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc1c458d58a code=0x7ffc0000 [ 2252.954601][T11887] usb 9-1: config 0 descriptor?? [ 2253.169797][T11887] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2253.506519][T11887] cpia1 9-1:0.0: unexpected state after lo power cmd: 00 [ 2253.645014][ T30] audit: type=1326 audit(2000001146.247:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23440 comm="syz.4.4302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c458e929 code=0x7ffc0000 [ 2253.668381][ T30] audit: type=1326 audit(2000001146.247:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23440 comm="syz.4.4302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc1c458e929 code=0x7ffc0000 [ 2253.916611][T11887] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0) [ 2254.160787][T16837] usb 9-1: USB disconnect, device number 84 [ 2254.283962][T11887] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2254.350297][T23473] netlink: 'syz.7.4313': attribute type 12 has an invalid length. [ 2254.448578][T11887] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2254.464006][T11887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2254.472078][T11887] usb 5-1: Product: syz [ 2254.484122][T11887] usb 5-1: Manufacturer: syz [ 2254.488796][T11887] usb 5-1: SerialNumber: syz [ 2254.510157][T11887] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2254.516589][T11887] r8152-cfgselector 5-1: config 0 descriptor?? [ 2255.568292][T23483] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4316'. [ 2255.594612][T23482] netlink: 'syz.8.4316': attribute type 12 has an invalid length. [ 2256.151138][T11887] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2256.171841][T11887] r8152-cfgselector 5-1: bad CDC descriptors [ 2256.257688][T11887] r8152-cfgselector 5-1: USB disconnect, device number 79 [ 2257.181535][T23494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2260.998170][T23523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2262.144860][T23542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2262.156399][T23542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2262.321592][T23546] FAULT_INJECTION: forcing a failure. [ 2262.321592][T23546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2262.347277][T23546] CPU: 1 UID: 0 PID: 23546 Comm: syz.7.4336 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 2262.347312][T23546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2262.347327][T23546] Call Trace: [ 2262.347337][T23546] [ 2262.347347][T23546] dump_stack_lvl+0x189/0x250 [ 2262.347386][T23546] ? __pfx____ratelimit+0x10/0x10 [ 2262.347419][T23546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2262.347453][T23546] ? __pfx__printk+0x10/0x10 [ 2262.347476][T23546] ? __might_fault+0xb0/0x130 [ 2262.347516][T23546] should_fail_ex+0x414/0x560 [ 2262.347549][T23546] _copy_from_user+0x2d/0xb0 [ 2262.347572][T23546] video_usercopy+0x354/0x14f0 [ 2262.347602][T23546] ? smk_tskacc+0x2fc/0x370 [ 2262.347627][T23546] ? __pfx___video_do_ioctl+0x10/0x10 [ 2262.347650][T23546] ? __pfx_video_usercopy+0x10/0x10 [ 2262.347671][T23546] ? smack_file_ioctl+0x2a9/0x340 [ 2262.347714][T23546] ? __fget_files+0x2a/0x420 [ 2262.347744][T23546] ? __fget_files+0x3a0/0x420 [ 2262.347777][T23546] v4l2_ioctl+0x18d/0x1e0 [ 2262.347800][T23546] ? __pfx_v4l2_ioctl+0x10/0x10 [ 2262.347821][T23546] __se_sys_ioctl+0xfc/0x170 [ 2262.347849][T23546] do_syscall_64+0xfa/0x3b0 [ 2262.347883][T23546] ? lockdep_hardirqs_on+0x9c/0x150 [ 2262.347916][T23546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2262.347938][T23546] ? clear_bhb_loop+0x60/0xb0 [ 2262.347966][T23546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2262.347987][T23546] RIP: 0033:0x7f4ce8d8e929 [ 2262.348007][T23546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2262.348028][T23546] RSP: 002b:00007f4ce9c12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2262.348059][T23546] RAX: ffffffffffffffda RBX: 00007f4ce8fb5fa0 RCX: 00007f4ce8d8e929 [ 2262.348077][T23546] RDX: 0000200000000000 RSI: 00000000c0405602 RDI: 0000000000000003 [ 2262.348091][T23546] RBP: 00007f4ce9c12090 R08: 0000000000000000 R09: 0000000000000000 [ 2262.348106][T23546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2262.348119][T23546] R13: 0000000000000000 R14: 00007f4ce8fb5fa0 R15: 00007fff8a701fe8 [ 2262.348153][T23546] [ 2263.831796][T16860] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 2263.993970][T16860] usb 4-1: device descriptor read/64, error -71 [ 2264.873145][T16860] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 2265.464003][T16830] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 2266.195478][T23571] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4345'. [ 2266.212208][T23571] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4345'. [ 2266.233743][T16860] usb 4-1: device descriptor read/64, error -71 [ 2266.244008][T16830] usb 5-1: Using ep0 maxpacket: 16 [ 2266.315282][T16830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2266.344208][T16860] usb usb4-port1: attempt power cycle [ 2266.364475][T16830] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2266.400580][T16830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2266.432535][T16830] usb 5-1: config 0 descriptor?? [ 2268.165143][T16830] usbhid 5-1:0.0: can't add hid device: -71 [ 2268.598131][T16830] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2268.653571][T16830] usb 5-1: USB disconnect, device number 80 [ 2268.869329][T23589] netlink: 'syz.5.4352': attribute type 12 has an invalid length. [ 2272.152013][T19732] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 2272.222342][T23624] syz_tun: entered allmulticast mode [ 2272.514165][T19732] usb 5-1: Using ep0 maxpacket: 8 [ 2272.521425][T19732] usb 5-1: config 0 has an invalid interface number: 218 but max is 0 [ 2272.561590][T19732] usb 5-1: config 0 has no interface number 0 [ 2272.563914][T14804] Bluetooth: hci0: Frame reassembly failed (-84) [ 2272.574797][T19732] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice=e0.df [ 2272.609131][T19732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2272.641887][T19732] usb 5-1: Product: syz [ 2272.653468][T19732] usb 5-1: Manufacturer: syz [ 2272.671410][T19732] usb 5-1: SerialNumber: syz [ 2272.704172][T16837] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 2272.751838][T19732] usb 5-1: config 0 descriptor?? [ 2272.769924][T19732] usb 5-1: selecting invalid altsetting 1 [ 2272.776214][T19732] usb 5-1: Can not set alternate setting to 1, error: -22 [ 2272.783629][T19732] synaptics_usb 5-1:0.218: probe with driver synaptics_usb failed with error -22 [ 2272.884709][T16837] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 2272.892996][T16837] usb 4-1: config 0 has no interface number 0 [ 2272.943681][T16837] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2272.988892][T16837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2273.029776][T16837] usb 4-1: Product: syz [ 2273.042839][T16837] usb 4-1: Manufacturer: syz [ 2273.062043][T16837] usb 4-1: SerialNumber: syz [ 2273.085281][T16837] usb 4-1: config 0 descriptor?? [ 2274.262287][T16827] usb 5-1: USB disconnect, device number 81 [ 2274.423379][T23635] FAULT_INJECTION: forcing a failure. [ 2274.423379][T23635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2274.445143][T23635] CPU: 1 UID: 0 PID: 23635 Comm: syz.5.4364 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 2274.445178][T23635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2274.445193][T23635] Call Trace: [ 2274.445202][T23635] [ 2274.445213][T23635] dump_stack_lvl+0x189/0x250 [ 2274.445252][T23635] ? __pfx____ratelimit+0x10/0x10 [ 2274.445285][T23635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2274.445319][T23635] ? __pfx__printk+0x10/0x10 [ 2274.445342][T23635] ? __might_fault+0xb0/0x130 [ 2274.445383][T23635] should_fail_ex+0x414/0x560 [ 2274.445416][T23635] _copy_from_user+0x2d/0xb0 [ 2274.445440][T23635] ___sys_sendmsg+0x158/0x2a0 [ 2274.445472][T23635] ? __pfx____sys_sendmsg+0x10/0x10 [ 2274.445544][T23635] ? __fget_files+0x2a/0x420 [ 2274.445572][T23635] ? __fget_files+0x3a0/0x420 [ 2274.445615][T23635] __x64_sys_sendmsg+0x19b/0x260 [ 2274.445646][T23635] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2274.445692][T23635] ? __pfx_ksys_write+0x10/0x10 [ 2274.445717][T23635] ? rcu_is_watching+0x15/0xb0 [ 2274.445756][T23635] ? do_syscall_64+0xbe/0x3b0 [ 2274.445796][T23635] do_syscall_64+0xfa/0x3b0 [ 2274.445828][T23635] ? lockdep_hardirqs_on+0x9c/0x150 [ 2274.445860][T23635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2274.445883][T23635] ? clear_bhb_loop+0x60/0xb0 [ 2274.445910][T23635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2274.445932][T23635] RIP: 0033:0x7fa48458e929 [ 2274.445952][T23635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2274.445971][T23635] RSP: 002b:00007fa4854a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2274.445995][T23635] RAX: ffffffffffffffda RBX: 00007fa4847b5fa0 RCX: 00007fa48458e929 [ 2274.446012][T23635] RDX: 0000000004000855 RSI: 0000200000000080 RDI: 0000000000000003 [ 2274.446027][T23635] RBP: 00007fa4854a3090 R08: 0000000000000000 R09: 0000000000000000 [ 2274.446042][T23635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2274.446059][T23635] R13: 0000000000000000 R14: 00007fa4847b5fa0 R15: 00007ffdb159c028 [ 2274.446095][T23635] [ 2274.666568][ T5823] Bluetooth: hci0: command 0x1003 tx timeout [ 2274.673220][T17396] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2275.864034][T16830] usb 8-1: new full-speed USB device number 94 using dummy_hcd [ 2276.410656][T16837] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 2276.428082][T16837] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 2276.438305][T16830] usb 8-1: config 0 has an invalid interface number: 133 but max is 0 [ 2276.447299][T16837] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 2276.455251][T16830] usb 8-1: config 0 has no interface number 0 [ 2276.485894][T16830] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2276.512290][T16837] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 2276.528207][T23623] syz_tun: left allmulticast mode [ 2276.544507][T16830] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2276.583445][T16837] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB2 [ 2276.602434][T16830] usb 8-1: Product: syz [ 2276.607425][T16830] usb 8-1: Manufacturer: syz [ 2276.612119][T16830] usb 8-1: SerialNumber: syz [ 2276.635469][T16837] usb 4-1: USB disconnect, device number 39 [ 2276.685284][T16830] usb 8-1: config 0 descriptor?? [ 2276.691353][T16837] keyspan_1 ttyUSB2: Keyspan 1 port adapter converter now disconnected from ttyUSB2 [ 2276.711363][T16837] keyspan 4-1:0.133: device disconnected [ 2276.925985][T16830] keyspan 8-1:0.133: Keyspan 1 port adapter converter detected [ 2276.952246][T16830] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 81 [ 2276.965253][T16830] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 1 [ 2276.974164][T16830] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 2 [ 2276.987440][T16830] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB2 [ 2277.000850][T16830] usb 8-1: USB disconnect, device number 94 [ 2277.016456][T16830] keyspan_1 ttyUSB2: Keyspan 1 port adapter converter now disconnected from ttyUSB2 [ 2277.030782][T16830] keyspan 8-1:0.133: device disconnected [ 2277.094859][T16837] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2277.134065][T16873] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 2277.273973][T16837] usb 4-1: Using ep0 maxpacket: 16 [ 2277.296594][T16837] usb 4-1: config 0 has too many interfaces: 80, using maximum allowed: 32 [ 2277.318203][T16837] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 80 [ 2277.335331][T16837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2277.349898][T16837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2277.360580][T16837] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 2277.362145][T16873] usb 9-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2277.382186][T16837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2277.402891][T16873] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2277.429298][T16837] usb 4-1: config 0 descriptor?? [ 2277.432238][T16873] usb 9-1: Product: syz [ 2277.438847][T16873] usb 9-1: Manufacturer: syz [ 2277.445576][T16873] usb 9-1: SerialNumber: syz [ 2277.471944][T16873] r8152-cfgselector 9-1: Unknown version 0x0000 [ 2277.722374][T16873] r8152-cfgselector 9-1: config 0 descriptor?? [ 2277.925085][T16837] playstation 0003:054C:05C4.0057: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 2278.043163][T23668] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4376'. [ 2278.108727][T16837] playstation 0003:054C:05C4.0057: Invalid reportID received, expected 18 got 0 [ 2278.143949][T16837] playstation 0003:054C:05C4.0057: Failed to retrieve DualShock4 pairing info: -22 [ 2278.251601][T16837] playstation 0003:054C:05C4.0057: Failed to get MAC address from DualShock4 [ 2278.261609][T16837] playstation 0003:054C:05C4.0057: Failed to create dualshock4. [ 2278.274357][T16837] playstation 0003:054C:05C4.0057: probe with driver playstation failed with error -22 [ 2278.924102][T16873] r8152-cfgselector 9-1: Unknown version 0x0000 [ 2278.939846][T16873] r8152-cfgselector 9-1: bad CDC descriptors [ 2278.995510][T16873] r8152-cfgselector 9-1: USB disconnect, device number 85 [ 2279.042913][T16837] usb 4-1: USB disconnect, device number 40 [ 2279.145914][T23678] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2279.757767][T23680] netlink: 'syz.7.4378': attribute type 12 has an invalid length. [ 2281.642208][T23701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2281.664724][T23701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2282.261316][T23707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4387'. [ 2282.724102][ T979] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2283.794721][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 2284.251860][ T979] usb 4-1: config 0 has too many interfaces: 80, using maximum allowed: 32 [ 2284.260853][ T979] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 80 [ 2284.275654][T23724] FAULT_INJECTION: forcing a failure. [ 2284.275654][T23724] name failslab, interval 1, probability 0, space 0, times 0 [ 2284.341119][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2284.361720][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2284.375342][ T979] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 2284.491325][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2284.534068][T23724] CPU: 0 UID: 0 PID: 23724 Comm: syz.7.4392 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 2284.534096][T23724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2284.534107][T23724] Call Trace: [ 2284.534113][T23724] [ 2284.534120][T23724] dump_stack_lvl+0x189/0x250 [ 2284.534149][T23724] ? __pfx____ratelimit+0x10/0x10 [ 2284.534173][T23724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2284.534197][T23724] ? __pfx__printk+0x10/0x10 [ 2284.534217][T23724] ? __pfx___might_resched+0x10/0x10 [ 2284.534244][T23724] ? fs_reclaim_acquire+0x7d/0x100 [ 2284.534281][T23724] should_fail_ex+0x414/0x560 [ 2284.534315][T23724] should_failslab+0xa8/0x100 [ 2284.534338][T23724] __kmalloc_noprof+0xcb/0x4f0 [ 2284.534357][T23724] ? kfree+0x4d/0x440 [ 2284.534372][T23724] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2284.534400][T23724] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2284.534426][T23724] ? tomoyo_domain+0xda/0x130 [ 2284.534455][T23724] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2284.534475][T23724] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2284.534497][T23724] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2284.534520][T23724] ? sb_end_write+0xe9/0x1c0 [ 2284.534544][T23724] ? vfs_write+0x8d8/0xa90 [ 2284.534588][T23724] ? ksys_write+0x1e1/0x250 [ 2284.534611][T23724] security_file_ioctl+0xcb/0x2d0 [ 2284.534635][T23724] __se_sys_ioctl+0x47/0x170 [ 2284.534653][T23724] do_syscall_64+0xfa/0x3b0 [ 2284.534677][T23724] ? lockdep_hardirqs_on+0x9c/0x150 [ 2284.534700][T23724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2284.534716][T23724] ? clear_bhb_loop+0x60/0xb0 [ 2284.534736][T23724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2284.534751][T23724] RIP: 0033:0x7f4ce8d8e929 [ 2284.534766][T23724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2284.534788][T23724] RSP: 002b:00007f4ce9c12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2284.534805][T23724] RAX: ffffffffffffffda RBX: 00007f4ce8fb5fa0 RCX: 00007f4ce8d8e929 [ 2284.534817][T23724] RDX: 0000200000000000 RSI: 000000004008af10 RDI: 0000000000000003 [ 2284.534828][T23724] RBP: 00007f4ce9c12090 R08: 0000000000000000 R09: 0000000000000000 [ 2284.534838][T23724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2284.534848][T23724] R13: 0000000000000000 R14: 00007f4ce8fb5fa0 R15: 00007fff8a701fe8 [ 2284.534872][T23724] [ 2284.534928][T23724] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2284.795051][ T979] usb 4-1: config 0 descriptor?? [ 2285.214965][ T979] playstation 0003:054C:05C4.0058: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 2285.278296][T23733] netlink: 'syz.5.4393': attribute type 12 has an invalid length. [ 2285.410275][ T979] playstation 0003:054C:05C4.0058: Failed to retrieve feature with reportID 18: -32 [ 2285.421913][ T979] playstation 0003:054C:05C4.0058: Failed to retrieve DualShock4 pairing info: -32 [ 2286.027474][ T979] playstation 0003:054C:05C4.0058: Failed to get MAC address from DualShock4 [ 2286.141585][ T979] playstation 0003:054C:05C4.0058: Failed to create dualshock4. [ 2286.686601][ T979] playstation 0003:054C:05C4.0058: probe with driver playstation failed with error -32 [ 2286.745599][ T979] usb 4-1: USB disconnect, device number 41 [ 2287.451786][T23743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4398'. [ 2288.248408][T23755] wlan0 speed is unknown, defaulting to 1000 [ 2288.340350][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2288.454010][T16830] usb 8-1: new full-speed USB device number 95 using dummy_hcd [ 2288.608790][T16830] usb 8-1: config 0 has an invalid interface number: 133 but max is 0 [ 2288.637744][T16830] usb 8-1: config 0 has no interface number 0 [ 2288.663930][T16830] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2288.685793][T16830] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2288.694621][T16830] usb 8-1: Product: syz [ 2288.699157][T16830] usb 8-1: Manufacturer: syz [ 2288.716932][T16830] usb 8-1: SerialNumber: syz [ 2288.741010][T16830] usb 8-1: config 0 descriptor?? [ 2288.894438][T23768] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4404'. [ 2288.945914][T23768] netlink: 'syz.4.4404': attribute type 12 has an invalid length. [ 2288.968585][T16830] keyspan 8-1:0.133: Keyspan 1 port adapter converter detected [ 2288.994416][T16830] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 81 [ 2289.025850][T16830] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 1 [ 2289.050280][T16830] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 2 [ 2289.066613][T16830] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB2 [ 2289.080509][T16830] usb 8-1: USB disconnect, device number 95 [ 2289.100969][T16830] keyspan_1 ttyUSB2: Keyspan 1 port adapter converter now disconnected from ttyUSB2 [ 2289.111966][T16830] keyspan 8-1:0.133: device disconnected [ 2289.284203][T16860] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2289.434070][T16860] usb 4-1: Using ep0 maxpacket: 16 [ 2289.442149][T16860] usb 4-1: config 0 has too many interfaces: 80, using maximum allowed: 32 [ 2289.451762][T16860] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 80 [ 2289.461749][T16860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2289.473209][T16860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2289.493934][T16860] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 2289.504595][T16860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2289.539656][T16860] usb 4-1: config 0 descriptor?? [ 2289.694154][T17396] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2290.455609][T23775] netlink: 'syz.5.4407': attribute type 5 has an invalid length. [ 2290.474503][T23775] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4407'. [ 2290.729319][T16860] playstation 0003:054C:05C4.0059: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 2290.795195][T16860] playstation 0003:054C:05C4.0059: Failed to retrieve feature with reportID 18: -32 [ 2291.667546][T16860] playstation 0003:054C:05C4.0059: Failed to retrieve DualShock4 pairing info: -32 [ 2291.706696][T16860] playstation 0003:054C:05C4.0059: Failed to get MAC address from DualShock4 [ 2291.724533][T16860] playstation 0003:054C:05C4.0059: Failed to create dualshock4. [ 2291.739011][T16860] playstation 0003:054C:05C4.0059: probe with driver playstation failed with error -32 [ 2291.996811][T16860] usb 4-1: USB disconnect, device number 42 [ 2292.543694][T23791] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4412'. [ 2294.924496][T16837] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 2295.142884][T16837] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2295.172827][T16837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2295.211862][T16837] usb 5-1: Product: syz [ 2295.227516][T16837] usb 5-1: Manufacturer: syz [ 2295.256522][T16837] usb 5-1: SerialNumber: syz [ 2295.338327][T16837] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2295.354095][T16837] r8152-cfgselector 5-1: config 0 descriptor?? [ 2296.495073][T23825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2296.564984][T23825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2296.625097][T16837] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2296.631783][T16837] r8152-cfgselector 5-1: bad CDC descriptors [ 2296.691780][T16837] r8152-cfgselector 5-1: USB disconnect, device number 82 [ 2297.014019][T19732] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 2297.174104][T19732] usb 8-1: Using ep0 maxpacket: 16 [ 2297.188918][T19732] usb 8-1: config 0 has too many interfaces: 80, using maximum allowed: 32 [ 2297.265112][T19732] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 80 [ 2297.419482][T19732] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2297.557765][T19732] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2297.674567][T19732] usb 8-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 2297.705872][T19732] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2297.778157][T19732] usb 8-1: config 0 descriptor?? [ 2297.910036][T23842] 9pnet_fd: Insufficient options for proto=fd [ 2297.978886][T23844] netlink: 268 bytes leftover after parsing attributes in process `syz.3.4427'. [ 2298.181383][T23846] wlan0 speed is unknown, defaulting to 1000 [ 2298.197657][T19732] playstation 0003:054C:05C4.005A: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.7-1/input0 [ 2298.392355][T19732] playstation 0003:054C:05C4.005A: Invalid reportID received, expected 18 got 0 [ 2298.401685][T19732] playstation 0003:054C:05C4.005A: Failed to retrieve DualShock4 pairing info: -22 [ 2298.425331][T19732] playstation 0003:054C:05C4.005A: Failed to get MAC address from DualShock4 [ 2298.450540][T19732] playstation 0003:054C:05C4.005A: Failed to create dualshock4. [ 2298.475247][T19732] playstation 0003:054C:05C4.005A: probe with driver playstation failed with error -22 [ 2298.606718][T19732] usb 8-1: USB disconnect, device number 96 [ 2298.801527][T23854] bridge0: port 1(bridge_slave_0) entered disabled state [ 2299.653889][T16874] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2299.844721][T16874] usb 4-1: Using ep0 maxpacket: 16 [ 2301.965591][T16874] usb 4-1: config 0 has too many interfaces: 80, using maximum allowed: 32 [ 2302.143650][T16874] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 80 [ 2302.154108][T16874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2302.165421][T16874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2302.175983][T16874] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 2302.185475][T16874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2302.197215][T16874] usb 4-1: config 0 descriptor?? [ 2302.460381][T16874] usbhid 4-1:0.0: can't add hid device: -71 [ 2302.487062][T16874] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2302.744063][T16874] usb 4-1: USB disconnect, device number 43 [ 2304.157625][T23884] wlan0 speed is unknown, defaulting to 1000 [ 2307.053908][ T979] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2307.216725][ T979] usb 4-1: config 0 has an invalid descriptor of length 150, skipping remainder of the config [ 2307.248959][ T979] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2307.291546][ T979] usb 4-1: New USB device found, idVendor=0416, idProduct=c168, bcdDevice= 0.00 [ 2307.318977][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2307.373219][ T979] usb 4-1: config 0 descriptor?? [ 2307.601196][T23911] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4446'. [ 2309.892922][ T979] usb 4-1: USB disconnect, device number 44 [ 2310.703909][T16860] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 2311.002800][T16860] usb 5-1: Using ep0 maxpacket: 16 [ 2311.019201][T16860] usb 5-1: config 0 has too many interfaces: 80, using maximum allowed: 32 [ 2311.029032][T16860] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 80 [ 2311.047436][T16860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2311.059009][T16860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2311.069544][T16860] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 2311.079164][T16860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2311.137925][T16860] usb 5-1: config 0 descriptor?? [ 2312.304230][T16860] playstation 0003:054C:05C4.005B: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 2312.409587][T23934] wlan0 speed is unknown, defaulting to 1000 [ 2312.637787][T16860] playstation 0003:054C:05C4.005B: Failed to retrieve feature with reportID 18: -32 [ 2312.652462][T16860] playstation 0003:054C:05C4.005B: Failed to retrieve DualShock4 pairing info: -32 [ 2312.663727][T16860] playstation 0003:054C:05C4.005B: Failed to get MAC address from DualShock4 [ 2313.669259][T16860] playstation 0003:054C:05C4.005B: Failed to create dualshock4. [ 2313.690208][T16860] playstation 0003:054C:05C4.005B: probe with driver playstation failed with error -32 [ 2313.726465][T16860] usb 5-1: USB disconnect, device number 83 [ 2314.094155][T16837] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 2314.474400][T16837] usb 8-1: Using ep0 maxpacket: 16 [ 2314.644906][T16837] usb 8-1: config 0 has too many interfaces: 80, using maximum allowed: 32 [ 2314.658417][T16837] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 80 [ 2314.667859][T16837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2314.678967][T16837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2314.689945][T16837] usb 8-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 2314.703984][T16837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2314.720750][T16837] usb 8-1: config 0 descriptor?? [ 2314.993495][T23967] FAULT_INJECTION: forcing a failure. [ 2314.993495][T23967] name failslab, interval 1, probability 0, space 0, times 0 [ 2315.054343][T23967] CPU: 1 UID: 0 PID: 23967 Comm: syz.8.4461 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 2315.054379][T23967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2315.054395][T23967] Call Trace: [ 2315.054405][T23967] [ 2315.054417][T23967] dump_stack_lvl+0x189/0x250 [ 2315.054458][T23967] ? __pfx____ratelimit+0x10/0x10 [ 2315.054492][T23967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2315.054527][T23967] ? __pfx__printk+0x10/0x10 [ 2315.054557][T23967] ? __pfx___might_resched+0x10/0x10 [ 2315.054590][T23967] ? fs_reclaim_acquire+0x7d/0x100 [ 2315.054626][T23967] should_fail_ex+0x414/0x560 [ 2315.054660][T23967] should_failslab+0xa8/0x100 [ 2315.054691][T23967] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2315.054719][T23967] ? alloc_empty_file+0x55/0x1d0 [ 2315.054757][T23967] alloc_empty_file+0x55/0x1d0 [ 2315.054790][T23967] alloc_file_pseudo+0x13d/0x210 [ 2315.054827][T23967] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2315.054859][T23967] ? evm_inode_alloc_security+0x40/0xb0 [ 2315.054892][T23967] ? security_inode_alloc+0xd5/0x330 [ 2315.054927][T23967] sock_alloc_file+0xb8/0x2e0 [ 2315.054971][T23967] do_accept+0x34b/0x680 [ 2315.055003][T23967] ? __pfx_do_accept+0x10/0x10 [ 2315.055050][T23967] __sys_accept4+0x11c/0x1c0 [ 2315.055077][T23967] ? __pfx___sys_accept4+0x10/0x10 [ 2315.055101][T23967] ? __pfx_ksys_write+0x10/0x10 [ 2315.055142][T23967] __x64_sys_accept4+0x9a/0xb0 [ 2315.055168][T23967] do_syscall_64+0xfa/0x3b0 [ 2315.055200][T23967] ? lockdep_hardirqs_on+0x9c/0x150 [ 2315.055233][T23967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2315.055255][T23967] ? clear_bhb_loop+0x60/0xb0 [ 2315.055284][T23967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2315.055306][T23967] RIP: 0033:0x7fb46d78e929 [ 2315.055326][T23967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2315.055346][T23967] RSP: 002b:00007fb46e67d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 2315.055371][T23967] RAX: ffffffffffffffda RBX: 00007fb46d9b5fa0 RCX: 00007fb46d78e929 [ 2315.055388][T23967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 2315.055401][T23967] RBP: 00007fb46e67d090 R08: 0000000000000000 R09: 0000000000000000 [ 2315.055416][T23967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2315.055429][T23967] R13: 0000000000000000 R14: 00007fb46d9b5fa0 R15: 00007ffd37ea9cd8 [ 2315.055463][T23967] [ 2315.391645][T16837] playstation 0003:054C:05C4.005C: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.7-1/input0 [ 2316.017262][T16837] playstation 0003:054C:05C4.005C: Invalid reportID received, expected 18 got 0 [ 2316.040983][T16837] playstation 0003:054C:05C4.005C: Failed to retrieve DualShock4 pairing info: -22 [ 2316.184453][T16837] playstation 0003:054C:05C4.005C: Failed to get MAC address from DualShock4 [ 2316.296768][T16837] playstation 0003:054C:05C4.005C: Failed to create dualshock4. [ 2316.355426][T16837] playstation 0003:054C:05C4.005C: probe with driver playstation failed with error -22 [ 2316.402715][T16837] usb 8-1: USB disconnect, device number 97 [ 2316.820041][T23984] netlink: 'syz.3.4465': attribute type 1 has an invalid length. [ 2317.101968][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 2317.101997][ T30] audit: type=1800 audit(2000001211.217:150): pid=23989 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.4467" name="/" dev="9p" ino=2 res=0 errno=0 [ 2318.983404][T24007] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4473'. [ 2319.114151][T16874] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 2319.138856][T24011] wlan0 speed is unknown, defaulting to 1000 [ 2319.274410][T16874] usb 8-1: Using ep0 maxpacket: 16 [ 2319.306593][T16874] usb 8-1: config 0 has too many interfaces: 80, using maximum allowed: 32 [ 2319.340690][T16874] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 80 [ 2320.088069][T16874] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2320.099756][T16874] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2320.109648][T16874] usb 8-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 2320.119131][T16874] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2320.146633][T16874] usb 8-1: config 0 descriptor?? [ 2320.223149][T24022] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2320.587218][T16830] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 2321.458449][T16874] playstation 0003:054C:05C4.005D: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.7-1/input0 [ 2321.579400][T16830] usb 5-1: Using ep0 maxpacket: 8 [ 2321.665745][T16874] playstation 0003:054C:05C4.005D: Failed to retrieve feature with reportID 18: -32 [ 2321.668453][T24026] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4480'. [ 2321.694462][T16874] playstation 0003:054C:05C4.005D: Failed to retrieve DualShock4 pairing info: -32 [ 2321.705339][T16874] playstation 0003:054C:05C4.005D: Failed to get MAC address from DualShock4 [ 2321.708790][T16830] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 2321.715418][T16874] playstation 0003:054C:05C4.005D: Failed to create dualshock4. [ 2321.804383][T24033] input: syz0 as /devices/virtual/input/input27 [ 2321.893859][T16830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2321.946756][T16874] playstation 0003:054C:05C4.005D: probe with driver playstation failed with error -32 [ 2321.951099][T16830] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 2321.969704][T24035] netlink: 'syz.8.4482': attribute type 12 has an invalid length. [ 2322.021075][T16874] usb 8-1: USB disconnect, device number 98 [ 2322.021879][T16830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2322.073521][T16830] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2322.116455][T16830] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 2322.129146][T16830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2322.167693][T16830] usb 5-1: Product: syz [ 2322.180576][T16830] usb 5-1: Manufacturer: syz [ 2322.195682][T16830] usb 5-1: SerialNumber: syz [ 2322.223106][T16830] usb 5-1: config 0 descriptor?? [ 2322.241671][T16830] kvaser_usb 5-1:0.0: error -EMSGSIZE: Cannot get software info [ 2322.273839][T16830] kvaser_usb 5-1:0.0: probe with driver kvaser_usb failed with error -90 [ 2322.749140][T24020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2322.794306][T24020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2322.829553][T16830] usb 5-1: USB disconnect, device number 84 [ 2324.058699][T24046] wlan0 speed is unknown, defaulting to 1000 [ 2325.480077][T24066] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4490'. [ 2326.795460][T24059] wlan0 speed is unknown, defaulting to 1000 [ 2327.277805][ T30] audit: type=1326 audit(2000001221.387:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24077 comm="syz.5.4494" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa48458e929 code=0x0 [ 2328.224250][T17396] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2328.243087][T17396] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2328.253211][T17396] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2328.263316][T17396] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2328.283605][T17396] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2328.344673][T24087] netlink: 'syz.5.4496': attribute type 12 has an invalid length. [ 2328.467352][T24090] wlan0 speed is unknown, defaulting to 1000 [ 2329.411435][T24090] chnl_net:caif_netlink_parms(): no params data found [ 2329.521184][T24090] bridge0: port 1(bridge_slave_0) entered blocking state [ 2329.528751][T24090] bridge0: port 1(bridge_slave_0) entered disabled state [ 2329.538065][T24090] bridge_slave_0: entered allmulticast mode [ 2329.547109][T24090] bridge_slave_0: entered promiscuous mode [ 2329.556327][T24090] bridge0: port 2(bridge_slave_1) entered blocking state [ 2329.563651][T24090] bridge0: port 2(bridge_slave_1) entered disabled state [ 2329.572458][T24090] bridge_slave_1: entered allmulticast mode [ 2329.581415][T24090] bridge_slave_1: entered promiscuous mode [ 2329.629774][T24090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2329.643463][T24090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2329.705235][T24090] team0: Port device team_slave_0 added [ 2329.714556][T24090] team0: Port device team_slave_1 added [ 2329.759559][T24090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2329.767005][T24090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2329.795284][T24090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2329.808426][T24090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2329.815560][T24090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2329.841791][T24090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2329.906856][T24090] hsr_slave_0: entered promiscuous mode [ 2329.913686][T24090] hsr_slave_1: entered promiscuous mode [ 2329.920459][T24090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2329.928113][T24090] Cannot create hsr debugfs directory [ 2330.334192][T17396] Bluetooth: hci0: command tx timeout [ 2330.434765][T24090] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2330.446199][T24090] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2330.458851][T24090] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2330.472304][T24090] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2330.585532][T24090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2330.610798][T24090] 8021q: adding VLAN 0 to HW filter on device team0 [ 2330.631391][T15532] bridge0: port 1(bridge_slave_0) entered blocking state [ 2330.638637][T15532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2330.661398][T14631] bridge0: port 2(bridge_slave_1) entered blocking state [ 2330.668622][T14631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2331.212544][T24090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2331.503314][T24135] netlink: 'syz.5.4503': attribute type 12 has an invalid length. [ 2332.464723][T17396] Bluetooth: hci0: command tx timeout [ 2333.381390][T24160] netlink: 'syz.5.4510': attribute type 12 has an invalid length. [ 2333.722924][T24167] FAULT_INJECTION: forcing a failure. [ 2333.722924][T24167] name failslab, interval 1, probability 0, space 0, times 0 [ 2333.741278][T24167] CPU: 0 UID: 0 PID: 24167 Comm: syz.4.4512 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 2333.741310][T24167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2333.741324][T24167] Call Trace: [ 2333.741334][T24167] [ 2333.741344][T24167] dump_stack_lvl+0x189/0x250 [ 2333.741384][T24167] ? __pfx____ratelimit+0x10/0x10 [ 2333.741417][T24167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2333.741448][T24167] ? __pfx__printk+0x10/0x10 [ 2333.741477][T24167] ? __pfx___might_resched+0x10/0x10 [ 2333.741523][T24167] should_fail_ex+0x414/0x560 [ 2333.741557][T24167] should_failslab+0xa8/0x100 [ 2333.741588][T24167] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 2333.741614][T24167] ? __get_vm_area_node+0x13f/0x300 [ 2333.741647][T24167] __get_vm_area_node+0x13f/0x300 [ 2333.741678][T24167] __vmalloc_node_range_noprof+0x301/0x12f0 [ 2333.741705][T24167] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 2333.741736][T24167] ? is_bpf_text_address+0x26/0x2b0 [ 2333.741792][T24167] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2333.741822][T24167] ? irqentry_exit+0x74/0x90 [ 2333.741864][T24167] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 2333.741890][T24167] __vmalloc_noprof+0xb1/0xf0 [ 2333.741918][T24167] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 2333.741950][T24167] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 2333.741983][T24167] bpf_prog_alloc+0x3c/0x1a0 [ 2333.742014][T24167] bpf_prog_load+0x735/0x1930 [ 2333.742054][T24167] ? __pfx_bpf_prog_load+0x10/0x10 [ 2333.742105][T24167] ? bpf_lsm_bpf+0x9/0x20 [ 2333.742135][T24167] ? security_bpf+0x7e/0x300 [ 2333.742168][T24167] __sys_bpf+0x5f1/0x860 [ 2333.742198][T24167] ? __pfx___sys_bpf+0x10/0x10 [ 2333.742240][T24167] ? ksys_write+0x22a/0x250 [ 2333.742268][T24167] ? __pfx_ksys_write+0x10/0x10 [ 2333.742301][T24167] __x64_sys_bpf+0x7c/0x90 [ 2333.742327][T24167] do_syscall_64+0xfa/0x3b0 [ 2333.742362][T24167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2333.742382][T24167] ? asm_sysvec_call_function_single+0x1a/0x20 [ 2333.742405][T24167] ? clear_bhb_loop+0x60/0xb0 [ 2333.742432][T24167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2333.742454][T24167] RIP: 0033:0x7fc1c458e929 [ 2333.742474][T24167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2333.742493][T24167] RSP: 002b:00007fc1c23f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2333.742526][T24167] RAX: ffffffffffffffda RBX: 00007fc1c47b6080 RCX: 00007fc1c458e929 [ 2333.742543][T24167] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2333.742558][T24167] RBP: 00007fc1c23f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2333.742571][T24167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2333.742584][T24167] R13: 0000000000000000 R14: 00007fc1c47b6080 R15: 00007ffcd3138118 [ 2333.742618][T24167] [ 2334.415725][T24167] syz.4.4512: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2334.439164][T24167] CPU: 0 UID: 0 PID: 24167 Comm: syz.4.4512 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 2334.439196][T24167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2334.439210][T24167] Call Trace: [ 2334.439219][T24167] [ 2334.439229][T24167] dump_stack_lvl+0x189/0x250 [ 2334.439271][T24167] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 2334.439299][T24167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2334.439329][T24167] ? __pfx__printk+0x10/0x10 [ 2334.439345][T24167] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2334.439372][T24167] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2334.439403][T24167] warn_alloc+0x214/0x310 [ 2334.439431][T24167] ? __pfx_warn_alloc+0x10/0x10 [ 2334.439454][T24167] ? __get_vm_area_node+0x13f/0x300 [ 2334.439477][T24167] ? __get_vm_area_node+0x2b5/0x300 [ 2334.439501][T24167] __vmalloc_node_range_noprof+0x326/0x12f0 [ 2334.439525][T24167] ? is_bpf_text_address+0x26/0x2b0 [ 2334.439566][T24167] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2334.439588][T24167] ? irqentry_exit+0x74/0x90 [ 2334.439618][T24167] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 2334.439638][T24167] __vmalloc_noprof+0xb1/0xf0 [ 2334.439658][T24167] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 2334.439682][T24167] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 2334.439713][T24167] bpf_prog_alloc+0x3c/0x1a0 [ 2334.439751][T24167] bpf_prog_load+0x735/0x1930 [ 2334.439780][T24167] ? __pfx_bpf_prog_load+0x10/0x10 [ 2334.439818][T24167] ? bpf_lsm_bpf+0x9/0x20 [ 2334.439840][T24167] ? security_bpf+0x7e/0x300 [ 2334.439878][T24167] __sys_bpf+0x5f1/0x860 [ 2334.439899][T24167] ? __pfx___sys_bpf+0x10/0x10 [ 2334.439927][T24167] ? ksys_write+0x22a/0x250 [ 2334.439948][T24167] ? __pfx_ksys_write+0x10/0x10 [ 2334.439971][T24167] __x64_sys_bpf+0x7c/0x90 [ 2334.439989][T24167] do_syscall_64+0xfa/0x3b0 [ 2334.440014][T24167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2334.440028][T24167] ? asm_sysvec_call_function_single+0x1a/0x20 [ 2334.440044][T24167] ? clear_bhb_loop+0x60/0xb0 [ 2334.440063][T24167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2334.440078][T24167] RIP: 0033:0x7fc1c458e929 [ 2334.440092][T24167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2334.440106][T24167] RSP: 002b:00007fc1c23f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2334.440122][T24167] RAX: ffffffffffffffda RBX: 00007fc1c47b6080 RCX: 00007fc1c458e929 [ 2334.440134][T24167] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2334.440144][T24167] RBP: 00007fc1c23f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2334.440154][T24167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2334.440163][T24167] R13: 0000000000000000 R14: 00007fc1c47b6080 R15: 00007ffcd3138118 [ 2334.440186][T24167] [ 2334.443157][T24167] Mem-Info: [ 2334.504286][T17396] Bluetooth: hci0: command tx timeout [ 2334.585317][T24172] FAULT_INJECTION: forcing a failure. [ 2334.585317][T24172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2334.755197][T24167] active_anon:283 inactive_anon:3474 isolated_anon:0 [ 2334.755197][T24167] active_file:24975 inactive_file:37390 isolated_file:0 [ 2334.755197][T24167] unevictable:768 dirty:148 writeback:0 [ 2334.755197][T24167] slab_reclaimable:11893 slab_unreclaimable:115827 [ 2334.755197][T24167] mapped:30414 shmem:1411 pagetables:1112 [ 2334.755197][T24167] sec_pagetables:0 bounce:0 [ 2334.755197][T24167] kernel_misc_reclaimable:0 [ 2334.755197][T24167] free:1291414 free_pcp:8583 free_cma:0 [ 2334.805479][T24167] Node 0 active_anon:1132kB inactive_anon:13896kB active_file:99532kB inactive_file:149560kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121572kB dirty:592kB writeback:0kB shmem:4108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12992kB pagetables:4320kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2334.823964][T24172] CPU: 1 UID: 0 PID: 24172 Comm: syz.7.4513 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 2334.824004][T24172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2334.824021][T24172] Call Trace: [ 2334.824032][T24172] [ 2334.824042][T24172] dump_stack_lvl+0x189/0x250 [ 2334.824086][T24172] ? __pfx____ratelimit+0x10/0x10 [ 2334.824124][T24172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2334.824163][T24172] ? __pfx__printk+0x10/0x10 [ 2334.824190][T24172] ? __might_fault+0xb0/0x130 [ 2334.824236][T24172] should_fail_ex+0x414/0x560 [ 2334.824274][T24172] _copy_from_user+0x2d/0xb0 [ 2334.824300][T24172] video_usercopy+0x354/0x14f0 [ 2334.824332][T24172] ? smk_tskacc+0x2fc/0x370 [ 2334.824359][T24172] ? __pfx___video_do_ioctl+0x10/0x10 [ 2334.824384][T24172] ? __pfx_video_usercopy+0x10/0x10 [ 2334.824408][T24172] ? smack_file_ioctl+0x2a9/0x340 [ 2334.824459][T24172] ? __fget_files+0x2a/0x420 [ 2334.824490][T24172] ? __fget_files+0x3a0/0x420 [ 2334.824529][T24172] v4l2_ioctl+0x18d/0x1e0 [ 2334.824553][T24172] ? __pfx_v4l2_ioctl+0x10/0x10 [ 2334.824578][T24172] __se_sys_ioctl+0xfc/0x170 [ 2334.824609][T24172] do_syscall_64+0xfa/0x3b0 [ 2334.824646][T24172] ? lockdep_hardirqs_on+0x9c/0x150 [ 2334.824682][T24172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2334.824707][T24172] ? clear_bhb_loop+0x60/0xb0 [ 2334.824745][T24172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2334.824771][T24172] RIP: 0033:0x7f4ce8d8e929 [ 2334.824796][T24172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2334.824818][T24172] RSP: 002b:00007f4ce9c12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2334.824844][T24172] RAX: ffffffffffffffda RBX: 00007f4ce8fb5fa0 RCX: 00007f4ce8d8e929 [ 2334.824862][T24172] RDX: 0000200000000000 RSI: 00000000c0405602 RDI: 0000000000000003 [ 2334.824879][T24172] RBP: 00007f4ce9c12090 R08: 0000000000000000 R09: 0000000000000000 [ 2334.824896][T24172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2334.824910][T24172] R13: 0000000000000000 R14: 00007f4ce8fb5fa0 R15: 00007fff8a701fe8 [ 2334.824948][T24172] [ 2334.874363][T24090] veth0_vlan: entered promiscuous mode [ 2334.930216][T24167] Node 1 active_anon:0kB inactive_anon:0kB active_file:368kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2334.983768][T24090] veth1_vlan: entered promiscuous mode [ 2335.107117][T24167] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2335.142614][T24167] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 2335.149966][T24167] Node 0 DMA32 free:1233292kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1128kB inactive_anon:13752kB active_file:97760kB inactive_file:149492kB unevictable:1536kB writepending:592kB present:3129332kB managed:2561484kB mlocked:0kB bounce:0kB free_pcp:28960kB local_pcp:17876kB free_cma:0kB [ 2335.177413][T24090] veth0_macvtap: entered promiscuous mode [ 2335.260680][T24167] lowmem_reserve[]: 0 0 1 1 1 [ 2335.266704][T24167] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1772kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2335.299746][T24167] lowmem_reserve[]: 0 0 0 0 0 [ 2335.306400][T24167] Node 1 Normal free:3916612kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:368kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:6176kB local_pcp:6176kB free_cma:0kB [ 2335.338521][T24167] lowmem_reserve[]: 0 0 0 0 0 [ 2335.539672][T24167] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2335.554120][T24167] Node 0 DMA32: 4596*4kB (UE) 3225*8kB (UE) 1095*16kB (UME) 1725*32kB (UME) 586*64kB (UME) 160*128kB (UME) 64*256kB (UM) 34*512kB (UME) 21*1024kB (UM) 4*2048kB (UME) 239*4096kB (UM) = 1217320kB [ 2336.540257][T24167] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2336.694246][T17396] Bluetooth: hci0: command tx timeout [ 2336.707944][T24167] Node 1 Normal: 169*4kB (UME) 52*8kB (UME) 50*16kB (UME) 243*32kB (UME) 102*64kB (UE) 26*128kB (UE) 11*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 3*2048kB (UME) 948*4096kB (M) = 3916612kB [ 2336.795173][T24090] veth1_macvtap: entered promiscuous mode [ 2336.900186][T24167] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2336.970903][T24090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2336.974096][T24167] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 2337.001480][T24167] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2337.225493][T24167] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2337.240428][T24090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2337.251991][T24167] 66603 total pagecache pages [ 2337.269143][T24167] 0 pages in swap cache [ 2337.993506][T24090] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2338.003692][T24167] Free swap = 124996kB [ 2338.008550][T24090] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2338.017991][T24090] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2338.028096][T24090] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2338.054557][T24167] Total swap = 124996kB [ 2338.058773][T24167] 2097051 pages RAM [ 2338.062607][T24167] 0 pages HighMem/MovableOnly [ 2338.074410][T24167] 424573 pages reserved [ 2338.087818][T24167] 0 pages cma reserved [ 2338.490393][T14781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2338.506660][T14804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2338.578353][T14781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2338.595348][T14804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2338.841702][T24208] netlink: 'syz.5.4525': attribute type 12 has an invalid length. [ 2340.126278][T24220] fuse: Bad value for 'fd' [ 2345.335804][T11734] syz_tun (unregistering): left allmulticast mode [ 2345.342345][T11734] syz_tun (unregistering): left promiscuous mode [ 2345.454794][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2345.466541][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2345.475514][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2345.485191][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2345.494574][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2345.664049][T11734] bridge0: port 4(syz_tun) entered disabled state [ 2346.632727][T24258] wlan0 speed is unknown, defaulting to 1000 [ 2346.780501][T24274] syz_tun: entered allmulticast mode [ 2346.791028][T24271] fuse: Bad value for 'fd' [ 2347.114003][ T979] usb 9-1: new full-speed USB device number 86 using dummy_hcd [ 2347.293483][T24280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2347.705642][ T5823] Bluetooth: hci2: command tx timeout [ 2348.224801][T24280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2348.894233][ T979] usb 9-1: config 0 has an invalid interface number: 133 but max is 0 [ 2348.918630][ T979] usb 9-1: config 0 has no interface number 0 [ 2348.945012][ T979] usb 9-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2348.964690][ T979] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2348.994978][ T979] usb 9-1: Product: syz [ 2349.043501][ T979] usb 9-1: Manufacturer: syz [ 2349.056092][ T979] usb 9-1: SerialNumber: syz [ 2349.099363][T24258] chnl_net:caif_netlink_parms(): no params data found [ 2349.100084][ T979] usb 9-1: config 0 descriptor?? [ 2349.204010][ T979] usb 9-1: can't set config #0, error -71 [ 2349.223531][ T979] usb 9-1: USB disconnect, device number 86 [ 2349.253631][T24274] syz_tun: left allmulticast mode [ 2349.782254][ T5823] Bluetooth: hci2: command tx timeout [ 2349.789121][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2349.807431][T24258] bridge0: port 1(bridge_slave_0) entered blocking state [ 2349.823809][T24258] bridge0: port 1(bridge_slave_0) entered disabled state [ 2349.833930][T24258] bridge_slave_0: entered allmulticast mode [ 2349.871751][T24258] bridge_slave_0: entered promiscuous mode [ 2350.089149][T24258] bridge0: port 2(bridge_slave_1) entered blocking state [ 2350.831134][T24258] bridge0: port 2(bridge_slave_1) entered disabled state [ 2350.871259][T24258] bridge_slave_1: entered allmulticast mode [ 2350.897557][T24258] bridge_slave_1: entered promiscuous mode [ 2350.919519][T24307] FAULT_INJECTION: forcing a failure. [ 2350.919519][T24307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2350.944081][T11887] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2350.998279][T24308] overlayfs: failed to resolve './file1': -2 [ 2351.085661][T24307] CPU: 1 UID: 0 PID: 24307 Comm: syz.7.4551 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 2351.085697][T24307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2351.085712][T24307] Call Trace: [ 2351.085723][T24307] [ 2351.085734][T24307] dump_stack_lvl+0x189/0x250 [ 2351.085774][T24307] ? __pfx____ratelimit+0x10/0x10 [ 2351.085809][T24307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2351.085843][T24307] ? __pfx__printk+0x10/0x10 [ 2351.085881][T24307] should_fail_ex+0x414/0x560 [ 2351.085916][T24307] _copy_to_user+0x31/0xb0 [ 2351.085941][T24307] simple_read_from_buffer+0xe1/0x170 [ 2351.085977][T24307] proc_fail_nth_read+0x1df/0x250 [ 2351.086014][T24307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2351.086051][T24307] ? rw_verify_area+0x258/0x650 [ 2351.086077][T24307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2351.086112][T24307] vfs_read+0x200/0x980 [ 2351.086144][T24307] ? __pfx___mutex_lock+0x10/0x10 [ 2351.086181][T24307] ? __pfx_vfs_read+0x10/0x10 [ 2351.086209][T24307] ? __fget_files+0x2a/0x420 [ 2351.086244][T24307] ? __fget_files+0x3a0/0x420 [ 2351.086273][T24307] ? __fget_files+0x2a/0x420 [ 2351.086315][T24307] ksys_read+0x145/0x250 [ 2351.086352][T24307] ? __pfx_ksys_read+0x10/0x10 [ 2351.086385][T24307] ? do_syscall_64+0xbe/0x3b0 [ 2351.086424][T24307] do_syscall_64+0xfa/0x3b0 [ 2351.086457][T24307] ? lockdep_hardirqs_on+0x9c/0x150 [ 2351.086489][T24307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2351.086512][T24307] ? clear_bhb_loop+0x60/0xb0 [ 2351.086540][T24307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2351.086563][T24307] RIP: 0033:0x7f4ce8d8d33c [ 2351.086584][T24307] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2351.086604][T24307] RSP: 002b:00007f4ce9c12030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2351.086628][T24307] RAX: ffffffffffffffda RBX: 00007f4ce8fb5fa0 RCX: 00007f4ce8d8d33c [ 2351.086645][T24307] RDX: 000000000000000f RSI: 00007f4ce9c120a0 RDI: 0000000000000004 [ 2351.086660][T24307] RBP: 00007f4ce9c12090 R08: 0000000000000000 R09: 0000000000000000 [ 2351.086674][T24307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2351.086687][T24307] R13: 0000000000000000 R14: 00007f4ce8fb5fa0 R15: 00007fff8a701fe8 [ 2351.086722][T24307] [ 2351.834813][T24311] fuse: Bad value for 'fd' [ 2351.860390][ T5823] Bluetooth: hci2: command tx timeout [ 2351.917687][T11887] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 2351.941803][T11887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2351.987658][T11887] usb 4-1: Product: syz [ 2352.017317][T11887] usb 4-1: Manufacturer: syz [ 2352.033234][T11887] usb 4-1: SerialNumber: syz [ 2352.114709][T11887] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2352.124152][T11887] r8152-cfgselector 4-1: config 0 descriptor?? [ 2353.767864][T24258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2353.808892][T24258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2353.821627][T11887] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2353.829264][T11887] r8152-cfgselector 4-1: bad CDC descriptors [ 2353.841063][T11887] r8152-cfgselector 4-1: USB disconnect, device number 45 [ 2353.934284][ T5823] Bluetooth: hci2: command tx timeout [ 2353.987767][T24258] team0: Port device team_slave_0 added [ 2353.998493][T24258] team0: Port device team_slave_1 added [ 2354.070707][T24258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2354.070759][T24258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2354.070820][T24258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2354.073293][T24258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2354.073337][T24258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2354.073395][T24258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2354.117384][ C0] vkms_vblank_simulate: vblank timer overrun [ 2354.319713][T24258] hsr_slave_0: entered promiscuous mode [ 2354.320779][T24258] hsr_slave_1: entered promiscuous mode [ 2354.321500][T24258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2354.321519][T24258] Cannot create hsr debugfs directory [ 2359.179358][T24258] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2359.202659][T24258] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2359.229368][T24373] Bluetooth: MGMT ver 1.23 [ 2359.340442][T24258] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2360.093650][T24258] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2364.392669][T24258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2364.660636][T24258] 8021q: adding VLAN 0 to HW filter on device team0 [ 2364.779066][T13790] bridge0: port 1(bridge_slave_0) entered blocking state [ 2364.786334][T13790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2364.880946][T14627] bridge0: port 2(bridge_slave_1) entered blocking state [ 2364.888233][T14627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2364.998204][T24258] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2365.035341][T24258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2365.056423][T24410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4581'. [ 2365.291076][T24410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2365.314061][T24410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2365.339508][T24410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2365.347903][T24410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2366.242232][T24428] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4586'. [ 2368.136704][T24448] overlayfs: failed to resolve './file1': -2 [ 2368.814186][ T979] usb 9-1: new full-speed USB device number 87 using dummy_hcd [ 2369.290837][ T979] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2370.037195][ T979] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2370.058017][T24258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2370.065484][ T979] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2370.086883][ T979] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2370.291858][ T979] usb 9-1: config 0 descriptor?? [ 2370.324361][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 2370.331805][ T979] usb 9-1: can't set config #0, error -32 [ 2370.346962][ T979] usb 9-1: USB disconnect, device number 87 [ 2372.262431][T24482] netlink: 6068 bytes leftover after parsing attributes in process `syz.8.4601'. [ 2372.699628][T24491] loop6: detected capacity change from 0 to 524287999 [ 2372.725110][T24492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2372.804674][T24492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2374.092187][T24258] veth0_vlan: entered promiscuous mode [ 2374.207716][T24258] veth1_vlan: entered promiscuous mode [ 2374.380802][T24258] veth0_macvtap: entered promiscuous mode [ 2374.432921][T24258] veth1_macvtap: entered promiscuous mode [ 2374.578810][T24258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2374.737329][T24258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2374.803047][T24258] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2374.819897][T24258] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2374.829527][T24258] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2374.840036][T24258] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2377.530188][T14804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2377.562729][T14804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2377.660583][T21912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2377.709002][T21912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2379.472972][T24547] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2379.518249][T24547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4619'. [ 2380.207819][T24544] ------------[ cut here ]------------ [ 2380.213668][T24544] WARNING: CPU: 0 PID: 24544 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x2c8/0x370 [ 2380.225154][T24544] Modules linked in: [ 2380.229457][T24544] CPU: 0 UID: 0 PID: 24544 Comm: syz.8.4621 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 2380.242667][T24544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2380.253622][T24544] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 2380.261236][T24544] Code: 74 10 4c 89 e7 89 54 24 0c e8 54 14 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 7e 3e 75 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 2380.281319][T24544] RSP: 0018:ffffc900047079c0 EFLAGS: 00010246 [ 2380.287516][T24544] RAX: ffffc90004707a00 RBX: 000000000000002a RCX: 0000000000000000 [ 2380.295581][T24544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004707a28 [ 2380.303588][T24544] RBP: ffffc90004707aa8 R08: ffffc90004707a27 R09: 0000000000000000 [ 2380.311691][T24544] R10: ffffc90004707a00 R11: fffff520008e0f45 R12: 0000000000000000 [ 2380.319821][T24544] R13: 1ffff920008e0f3c R14: 0000000000040d40 R15: dffffc0000000000 [ 2380.328437][T24544] FS: 00007f193cde06c0(0000) GS:ffff888125c85000(0000) knlGS:0000000000000000 [ 2380.337985][T24544] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2380.345145][T24544] CR2: 00002000000002c0 CR3: 0000000069d12000 CR4: 00000000003526f0 [ 2380.353142][T24544] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2380.361740][T24544] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2380.369934][T24544] Call Trace: [ 2380.373250][T24544] [ 2380.376258][T24544] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2380.382636][T24544] ? v9fs_fid_xattr_get+0x237/0x2e0 [ 2380.387910][T24544] __alloc_pages_noprof+0xa/0x30 [ 2380.392974][T24544] ___kmalloc_large_node+0x85/0x210 [ 2380.398268][T24544] __kmalloc_large_node_noprof+0x18/0x90 [ 2380.403972][T24544] __kmalloc_noprof+0x36f/0x4f0 [ 2380.408860][T24544] ? v9fs_fid_get_acl+0x4f/0x100 [ 2380.414006][T24544] ? __pfx_v9fs_cache_inode_get_cookie+0x10/0x10 [ 2380.420379][T24544] v9fs_fid_get_acl+0x4f/0x100 [ 2380.425230][T24544] v9fs_get_acl+0x9a/0x360 [ 2380.430118][T24544] v9fs_inode_from_fid_dotl+0x221/0x2b0 [ 2380.436125][T24544] v9fs_mount+0x6cb/0xa10 [ 2380.440495][T24544] ? __pfx_v9fs_mount+0x10/0x10 [ 2380.446089][T24544] ? rcu_is_watching+0x15/0xb0 [ 2380.450896][T24544] ? cap_capable+0x11f/0x460 [ 2380.455992][T24544] legacy_get_tree+0xfd/0x1a0 [ 2380.460876][T24544] ? __pfx_v9fs_mount+0x10/0x10 [ 2380.465986][T24544] vfs_get_tree+0x92/0x2b0 [ 2380.470445][T24544] do_new_mount+0x24a/0xa40 [ 2380.475061][T24544] __se_sys_mount+0x317/0x410 [ 2380.479777][T24544] ? __pfx___se_sys_mount+0x10/0x10 [ 2380.485045][T24544] ? rcu_is_watching+0x15/0xb0 [ 2380.489853][T24544] ? do_syscall_64+0xbe/0x3b0 [ 2380.494832][T24544] ? __x64_sys_mount+0x20/0xc0 [ 2380.499647][T24544] do_syscall_64+0xfa/0x3b0 [ 2380.504250][T24544] ? lockdep_hardirqs_on+0x9c/0x150 [ 2380.509531][T24544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2380.515717][T24544] ? clear_bhb_loop+0x60/0xb0 [ 2380.520503][T24544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2380.526462][T24544] RIP: 0033:0x7f193bf8e929 [ 2380.531366][T24544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2380.551916][T24544] RSP: 002b:00007f193cde0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2380.561287][T24544] RAX: ffffffffffffffda RBX: 00007f193c1b5fa0 RCX: 00007f193bf8e929 [ 2380.569524][T24544] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 2380.577657][T24544] RBP: 00007f193c010b39 R08: 0000200000000580 R09: 0000000000000000 [ 2380.585719][T24544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2380.593798][T24544] R13: 0000000000000000 R14: 00007f193c1b5fa0 R15: 00007fff104ac0f8 [ 2380.601852][T24544] [ 2380.604973][T24544] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2380.612270][T24544] CPU: 0 UID: 0 PID: 24544 Comm: syz.8.4621 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 2380.624360][T24544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2380.634437][T24544] Call Trace: [ 2380.637765][T24544] [ 2380.640719][T24544] dump_stack_lvl+0x99/0x250 [ 2380.645333][T24544] ? __asan_memcpy+0x40/0x70 [ 2380.649941][T24544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2380.655158][T24544] ? __pfx__printk+0x10/0x10 [ 2380.659772][T24544] panic+0x2db/0x790 [ 2380.663704][T24544] ? __pfx_panic+0x10/0x10 [ 2380.668155][T24544] ? show_trace_log_lvl+0x4fb/0x550 [ 2380.673389][T24544] __warn+0x31b/0x4b0 [ 2380.677392][T24544] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 2380.683392][T24544] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 2380.689389][T24544] report_bug+0x2be/0x4f0 [ 2380.693742][T24544] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 2380.699778][T24544] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 2380.705973][T24544] ? __alloc_frozen_pages_noprof+0x2ca/0x370 [ 2380.711992][T24544] handle_bug+0x84/0x160 [ 2380.716267][T24544] exc_invalid_op+0x1a/0x50 [ 2380.720791][T24544] asm_exc_invalid_op+0x1a/0x20 [ 2380.725662][T24544] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 2380.732277][T24544] Code: 74 10 4c 89 e7 89 54 24 0c e8 54 14 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 7e 3e 75 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 2380.751905][T24544] RSP: 0018:ffffc900047079c0 EFLAGS: 00010246 [ 2380.758002][T24544] RAX: ffffc90004707a00 RBX: 000000000000002a RCX: 0000000000000000 [ 2380.765995][T24544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004707a28 [ 2380.773995][T24544] RBP: ffffc90004707aa8 R08: ffffc90004707a27 R09: 0000000000000000 [ 2380.782009][T24544] R10: ffffc90004707a00 R11: fffff520008e0f45 R12: 0000000000000000 [ 2380.789989][T24544] R13: 1ffff920008e0f3c R14: 0000000000040d40 R15: dffffc0000000000 [ 2380.797990][T24544] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2380.804460][T24544] ? v9fs_fid_xattr_get+0x237/0x2e0 [ 2380.809675][T24544] __alloc_pages_noprof+0xa/0x30 [ 2380.814653][T24544] ___kmalloc_large_node+0x85/0x210 [ 2380.819905][T24544] __kmalloc_large_node_noprof+0x18/0x90 [ 2380.825556][T24544] __kmalloc_noprof+0x36f/0x4f0 [ 2380.830444][T24544] ? v9fs_fid_get_acl+0x4f/0x100 [ 2380.835436][T24544] ? __pfx_v9fs_cache_inode_get_cookie+0x10/0x10 [ 2380.841798][T24544] v9fs_fid_get_acl+0x4f/0x100 [ 2380.846604][T24544] v9fs_get_acl+0x9a/0x360 [ 2380.851070][T24544] v9fs_inode_from_fid_dotl+0x221/0x2b0 [ 2380.856645][T24544] v9fs_mount+0x6cb/0xa10 [ 2380.860999][T24544] ? __pfx_v9fs_mount+0x10/0x10 [ 2380.865872][T24544] ? rcu_is_watching+0x15/0xb0 [ 2380.870674][T24544] ? cap_capable+0x11f/0x460 [ 2380.875306][T24544] legacy_get_tree+0xfd/0x1a0 [ 2380.880013][T24544] ? __pfx_v9fs_mount+0x10/0x10 [ 2380.884887][T24544] vfs_get_tree+0x92/0x2b0 [ 2380.889342][T24544] do_new_mount+0x24a/0xa40 [ 2380.893899][T24544] __se_sys_mount+0x317/0x410 [ 2380.898602][T24544] ? __pfx___se_sys_mount+0x10/0x10 [ 2380.903824][T24544] ? rcu_is_watching+0x15/0xb0 [ 2380.908651][T24544] ? do_syscall_64+0xbe/0x3b0 [ 2380.913356][T24544] ? __x64_sys_mount+0x20/0xc0 [ 2380.918155][T24544] do_syscall_64+0xfa/0x3b0 [ 2380.922688][T24544] ? lockdep_hardirqs_on+0x9c/0x150 [ 2380.927903][T24544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2380.933979][T24544] ? clear_bhb_loop+0x60/0xb0 [ 2380.938670][T24544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2380.944579][T24544] RIP: 0033:0x7f193bf8e929 [ 2380.949009][T24544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2380.968728][T24544] RSP: 002b:00007f193cde0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2380.977169][T24544] RAX: ffffffffffffffda RBX: 00007f193c1b5fa0 RCX: 00007f193bf8e929 [ 2380.985154][T24544] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 2380.993152][T24544] RBP: 00007f193c010b39 R08: 0000200000000580 R09: 0000000000000000 [ 2381.001160][T24544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2381.009155][T24544] R13: 0000000000000000 R14: 00007f193c1b5fa0 R15: 00007fff104ac0f8 [ 2381.017160][T24544] [ 2381.020580][T24544] Kernel Offset: disabled [ 2381.024935][T24544] Rebooting in 86400 seconds..