last executing test programs: 4m10.171474744s ago: executing program 4 (id=76): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x1d4, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@dev}, {@in6=@loopback, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x52, 0x2, {{'ecb(cipher_null)\x00'}, 0x50, "bd54bd57fdf8cb4c0c00"}}, @algo_auth_trunc={0x8d, 0x14, {{'rmd160\x00'}, 0x208, 0x0, "e863654b40a7ad42118bc1dd69d07e3b05cf0dbc9a9aac6130f0d060cb0c958c133115ff9cbb79de1007f5583249a62fe4273013ec2c2cca44c3a2d388d9483ca3"}}]}, 0x1d4}}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x16) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'gre0\x00', &(0x7f00000003c0)={'sit0\x00', r3, 0x21, 0x10, 0x7, 0x7fffffff, {{0xd, 0x4, 0x2, 0x0, 0x34, 0x64, 0x0, 0xfa, 0x2f, 0x0, @private=0xa010102, @private=0xa010100, {[@rr={0x7, 0xb, 0x68, [@multicast2, @multicast2]}, @ra={0x94, 0x4}, @generic={0x86, 0xe, "223c8983d69eb22d33a42d66"}]}}}}}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000101000000000000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000240)={0xf0f029, 0x4}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) sendfile(r7, r7, 0x0, 0xff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000001b40)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x69}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='percpu_alloc_percpu\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000003f00000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001500)={0xffffffffffffffff, &(0x7f0000000500)="f4970e2c0873301b0f5d46eec8427fabe7ea068c0face18b6d966eed077db6af4d14ff9cf780147ce1313cb9674a364a5c247b04a8e21dce3550dd959e7dcd0759ce15a61dd85d12ebc2d3ee0b60ebec8828045c122a5d3095bd1a09ff31c753c3ff6e67eb7ee8b6"}, 0x20) r10 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000240)={0x2, @raw_data="fadbf5772f22c56d6ba8bb87457859c8383449e7611bf5b72a3bd9ea464526b05ab889e68eba4efa8496535a252bbea6b1ee01936cfdb5c9e7c45db7f28dc5b0d59d9f179ee2589169c573be406d2542a02dc50d4fc3910abc230a5804e13d54923db99c734abfb151aa0084012677e0f2fd3bcec8e06e3c5b0982aac0246c195cbead50be5baf50b0a29ec1e8c6bff5430b449e90bea75b73789f579833514289949f6dbd896f14c02db9c9319075b69d1f7143b8fc535ad613168fe90a4f2152d9e0e3ba20787c"}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet(0x2, 0x1, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r11, 0x40046109, &(0x7f0000000140)=0x11) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) getpid() openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 4m9.015391345s ago: executing program 4 (id=80): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x40, 0x1}) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, ']'}], 0xa, "7d93ec40d921b52f4e198405c8f9e9fecbc7884d9f33001e91a38ef764a9e908b8f3ef1cda8e79c79d892301b8d842f4fe136663be1eac7a8724d5a77d5e0e656b88413756ab6cb5446eef45ec8c0f9b1554e017a8d5cba10b66dea6f25fd39207c3dd1c6d"}, 0x72) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffff, 0x9, 0x0, 0x9, 0x1, 0x1c, "80a12dd85c4fc8daf9b05359624afe5b41c095166ccd9d9207ecc700cfd0175dc9a08d6a42943a026cec3b15276d8c034eea8e43643caa0b08d0133200d73613", "8a80e4b4ea4e33a29efd4e9cb36446ba2d9d511b0dbbf28e53ab71179a89d489a20f10ae2b629fc9340ea8faa3926158f6f2594e48193d813c7755224fca1b6b", "52283116ab1ad93e563a03c48f92cc0f59ead7cb79f692329a16d54c7282edfa", [0x7ff, 0x7fff]}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = signalfd(r2, &(0x7f00000001c0)={[0x2]}, 0x8) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000240)) getpeername$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x36, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x6, 0x2, 0x0, 0x80, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x624b, 0x0, 0x0, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @jmp={0x5, 0x1, 0x3, 0x0, 0x9, 0x34, 0xfffffffffffffff0}, @ldst={0x1, 0x2, 0x6, 0x2, 0x5, 0x80, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000440)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x40, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x5, 0x10000, 0x40000000}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000005c0)=[r6], &(0x7f0000000600)=[{0x5, 0x5, 0xf, 0x3}, {0x5, 0x5, 0x10, 0x2}, {0x2, 0x2, 0xd, 0x2}, {0x2, 0x3, 0x3, 0x8}, {0x5, 0x1, 0xa, 0x9}, {0x0, 0x1, 0xb, 0x3}, {0x1, 0x4, 0x5, 0xb}, {0x4, 0x4, 0xc}], 0x10, 0x9, @void, @value}, 0x94) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r3) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r8, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'ip_vti0\x00', r4, 0x8, 0x10, 0x6, 0x8, {{0x14, 0x4, 0x2, 0x15, 0x50, 0x67, 0x0, 0x80, 0x29, 0x0, @local, @private=0xa010101, {[@rr={0x7, 0x7, 0x4b, [@multicast2]}, @lsrr={0x83, 0x23, 0xdd, [@local, @multicast2, @dev={0xac, 0x14, 0x14, 0x39}, @empty, @multicast1, @broadcast, @rand_addr=0x64010101, @multicast1]}, @ssrr={0x89, 0xf, 0x1e, [@loopback, @private=0xa010101, @broadcast]}]}}}}}) sendmsg$nl_route(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=@ipv6_newroute={0x24, 0x18, 0x10, 0x70bd26, 0x25dfdbfb, {0xa, 0x10, 0x10, 0x2, 0xff, 0x2, 0xff, 0x9}, [@RTA_PREF={0x5, 0x14, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x8004) r11 = openat$incfs(r3, &(0x7f0000000a40)='.pending_reads\x00', 0x200000, 0x794b7ad039437cc4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'syztnl2\x00', r10, 0x4, 0xa9, 0x1, 0x81, 0xc, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast2, 0x7800, 0x7800, 0x0, 0x4}}) r13 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r13, 0x800442d4, &(0x7f0000000b40)=0x3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000c40)={'gre0\x00', &(0x7f0000000bc0)={'erspan0\x00', r4, 0x80, 0x8, 0x7, 0x8, {{0xd, 0x4, 0x2, 0x2b, 0x34, 0x65, 0x0, 0x4, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1a}, {[@generic={0x88, 0x2}, @rr={0x7, 0x7, 0xf, [@local]}, @rr={0x7, 0x17, 0xd9, [@rand_addr=0x64010100, @multicast1, @rand_addr=0x64010102, @multicast1, @remote]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000cc0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={r7, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000d00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000d40)=[0x0], &(0x7f0000000d80)=[0x0, 0x0], 0x0, 0xd, &(0x7f0000000dc0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000e00), &(0x7f0000000e40), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000001000)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001040)={0x2b4, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mount(&(0x7f0000001380)=@md0, &(0x7f00000013c0)='./file1\x00', &(0x7f0000001400)='coda\x00', 0x8000, &(0x7f0000001440)='wg0\x00') connect$inet(r9, &(0x7f0000001480)={0x2, 0x4e23, @loopback}, 0x10) fremovexattr(r3, &(0x7f00000014c0)=@known='trusted.overlay.redirect\x00') r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r1) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x6c, r18, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xdd9, 0x36}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "48419e2f95"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "555cde16e9cfe13ff290ee84b0"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "1cf61934f3"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4884) 4m7.044499851s ago: executing program 4 (id=86): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x2a) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x2ca0c0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe7654000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0xfffffffd) prctl$PR_SET_MM(0x23, 0x3, &(0x7f000068c000/0x3000)=nil) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0xfffffffffffffda3) mlockall(0x2) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmdt(0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="3f000000010000", 0x7) 4m4.428349625s ago: executing program 4 (id=92): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(r1, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) close(r2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400ae1595298992ea5400c2", 0x10) sendmmsg$unix(r5, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000002f80)="ccc0", 0x2}, {&(0x7f0000002d80)="94d883c0", 0x4}], 0x2, 0x0, 0x0, 0x4}}], 0x1, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r7, r7, 0xee01) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$afs(&(0x7f0000000080)=@cell={0x23, '', 'syz1'}, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000480)={[{@flock_openafs}, {@flock_openafs}, {}, {@flock_openafs}, {@dyn}, {@flock_write}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '*,+'}}, {@dont_appraise}, {@obj_user={'obj_user', 0x3d, 'sysfs\x00'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@euid_lt={'euid<', r8}}, {@appraise}, {@subj_type={'subj_type', 0x3d, 'hash\x00'}}, {@euid_eq}, {@smackfshat={'smackfshat', 0x3d, '/$:.\n,'}}]}) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 4m3.828327576s ago: executing program 4 (id=95): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x18, &(0x7f00000005c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}, @alu={0x7, 0x0, 0x7, 0x11, 0x0, 0x6, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffd}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r6, &(0x7f0000000680)="26271451e9fa7edbd3e27a5f2088bb2800c0375ebe2f0a646fee025376bf2f280038dea9b57f93497383b20d53207cbaddad8b5e7220b15a50b5f6e282e4e04556e7cba6dcc0a2f2f864dcef75cc8000000000000022db877bf2b240c99c81335253ddce75af4e014c8c6840e386a45236921a30cf86828df32a464504944988ef4bf95ab9933f0304a4a2b4378d3168427f2835d6e3d8a634b5519d5d10764d75b86be0131cc90b9fa9febb92196d0747e52e06446f4aac3d18319a590e24d02093325d51328180b333f7a418201a5d40267b497e", 0x0}, 0x20) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1, 0x0) 4m3.115910663s ago: executing program 4 (id=97): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)}}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x80000001}], 0x3, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) 4m2.004955557s ago: executing program 32 (id=97): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)}}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x80000001}], 0x3, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) 10.980496947s ago: executing program 2 (id=870): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89}, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x28, 0x2, r0, 0x0, 0x0, 0x0, 0x60, 0x1, {0x2}}) io_uring_enter(r1, 0x8aa, 0x0, 0x700, 0x0, 0x0) 10.926635409s ago: executing program 2 (id=872): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='cmdline\x00') read$FUSE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="175903000000000024001a80200002801400018008"], 0x44}}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000203000000020000000000000700000000000000000000000d02000000000051"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioperm(0x0, 0x7, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000b000000000000000000000004005bfe0002000000000000120200000000005f"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e7, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040), 0x4) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, &(0x7f0000000080)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getpeername$ax25(0xffffffffffffffff, 0xfffffffffffffffd, &(0x7f0000000080)) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r7, &(0x7f0000000c40)=@abs={0x1}, 0x6e) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000240)="9836d3d0266533820c8910690a1bea5523d4d7ffd6c1ed1bd76b0654ae522576f20a3692bdf4513a8e7d2c44f5a3e970891e8de1926578d9bc6571c6dffd7728c5310b3b1f9496e35416d6266e1424783919faaf4ccba11720fa9381fac1439eca7a5e65069a756a70c12606c15d1c36e63c7bbdaf7838", 0x77}, {&(0x7f0000000440)="ed180e8b155adc9afb53389172b504bf30e7626fcd5d6ffa96997e50b45c16312ff87613434af9eb9d708590f803323d3ee3e070e33102632e34770807c2d57ebfe1c18f7fd643caf7a2dbcb8d2d17eaafae45074b892adf4cbde3958c45a53f2b089e242e424b8d396144ffe0e29d5c0b83209ed891d371aeae1a952ae534259a42cc6cbb8423efcdc1f6045fd1600056dae9dd58415a16468a40883d64bfbecb22c4148d44887b8ede4d026f09", 0xae}, {&(0x7f0000000580)="32074eca44abc2aac966950d56eb55f0bc7281236b3cf8d91f3dd72bf7e18225eeb8eb2a1fef1f33cd47706a09b212ac78919aca7a23fe0735a9a79cd60d6602c8df17b8664402712526e6061c68ee577a2a9ce2387ae06f9593f3a1396f00015daa0d774488158c085bafa29b239c75141956cd2161e57880feb72c0d3798e98c2c2879cff19936552a7ae09dbbdd0244fa5b07619a04ddd023c7687cb2edfe0c357a03f53be041a991ce112177a9ace0fb034735297cddf394f5c134d5c161a1df50d09fbb3371aeedc16ceb109a4db61797e8af1c5bbc02975644161e75", 0xdf}, {&(0x7f0000000700)="cdcc3aced956807367b3a617b5d5b308ed0c867935c69b413817f746f3b347a8806110e9f5f8b2fbfa5770bdb9a805d78a7e939a96be36d77976deb6bd355475ed21ace87966de52e79fece309f0986c3263c255c2ef59327bf27693c37cb6947befed4ffafdddf696c2734113bbb01a048eaa707a952e197820949994334c1e140d6c5707c202fa0ccc5d9fe0c7e15a21353d759350ac9cf293f7b2f9c3e4283ece063b5b94c54ba0ce4c08ca19e44e6fc744494fff3cf0a0e5515ee2e4c4a21691ed9d16c28d495b9c902ba0060c984ad4df8f36337a3b038316e0a7", 0xdd}, {&(0x7f00000002c0)="c861b72fbf165b444951d76505bad8b5239ac98a59a4f63fe5c59e294f7e2e26fac9ea124b90330b9f181a94de57fe435ca30f04c57b324c0095cb90c7641bba53773765c5f3a930ce7dbd3671fc51", 0x4f}, {&(0x7f0000000800)="ad9d23563db1dcdcf5ccc83cc9a3af1c51044845d8cb015eaa0451ff02c03072449bb63a5ce3b1b8ffec39e3da76c573bdd99c4c30e16fdfb1345fe541ca21c07869ded84be0659f64b52146c3fee448396d1b44fbc427ce0cea8950a5ce427f4a653027ffd92604ade0c5cf7fcd8441255ca861981c06fc45095e71547ef3b8f10542903d6ce876dcb30a93f8fc06d50c47bb742623f6bc4d3fb65c0e61854f0cce0dac5580ea950c912dfdb119108f5cf51c3f8f2add9fa6b256bcaa651ceac29c", 0xc2}], 0x6, 0x0, 0x0, 0x40000}}, {{&(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000a00)="807c2b9478892e5b63eff01cb4fb731ccb0792eb8c794752dff0466e0d005d210c743da75f1e0289a0b443b9879ff102537e9812dba23b757ee00ed144fe1ec7ed8f197e53618c5e39adc04bdc2e10187c1f4005dccf8d6a401df236aec49658d0b5c2ececc8824becf29f378e68f96725a5e8a68ec12c31aa6d6290d44537d55c1d", 0x82}, {&(0x7f0000000000)="4e7d77e2cf2b511b743a0584c920dec593efee68c3cb0f79e77913e7b6", 0x1d}, {&(0x7f0000000100)="b2304797e74c0193130e7d9009861505d06de108ec022086d42f5cb8ef6ebaadfc8ab14587dcea8d9e438b56e172037a226ef1a613900fa6614c4835", 0x3c}, {&(0x7f00000003c0)="58d34f4d04f046c8db82bdd5519f76", 0xf}, {&(0x7f0000000ac0)="3323251e306d8bb5e1bc5e548933e055c8723ddb62fe9e6e5671e16261f0368e1b1bf97ab17d660f9704476b0e9f83d74d26e11524c0a911837302b4054cf72880bab960ca9efdd0f1c968593870c7ff3c0500d884051129c3bdf03c0e47a54e2a7771853df3567c472aac5b773f4939739d6f05982482af5961e89719dda74040bab1b2e648685ce6b69e97a13a116484d9cfcdc49f42b1212da1255927cacd6ace7c2b15031d1dd3e40ad5c9229ef60533891efe28f32aa07900209aacd30125ee2033347ce303f3c0b1efeec7df2791e54ae6c54e00eb739311da3632b99245c31e60cbd8aeb56c", 0xe9}, {&(0x7f0000000cc0)="3117d1bca2b856d73a90e8cd65fa29fabdd8dddd1474a9ad52dee4e27f03dfaf11cbb8d7a2252868ae6ed9732cbe6f68e7822fe72ad5b9f84f8821952ba3b098bf6f51bbdd28ea062607fd51a5a4957569bfb99366aa1cfd54b3ea87b02a265970b0b21413425661a0e0b16d277a38b8eb1e71f6f2c868c186537631ac433a1cd086d1d3a98e6661a1f2efca9812323f4603b8908b528db574a624e0d165d6263f79fcaac9e06ef46c6ee75a5f3a3436aa7ddc4dda03bade9f089e61780fbcbaa3ad88562ba37b3c77f2322e3550044bdba6f22b6045507c55aded8982702ec2", 0xe0}], 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001a00"], 0x40, 0x40080}}, {{&(0x7f0000000ec0)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001100)="8fbc8385ae52c53eef42baf00badda4c665dbb96146fa0b463612ed2c5a2b36a4d41dba50d486ffa6f134549beac5aa6bf32e5ab281a6cc8b8dcc531f2c8571cc86aa9730d06d791e58290cfcba2fdfda82a5b10159e83716acc9b23ff3ce583da4aa513b87a4885da9ad455bd37bda9dea9e168f0316abdde9e570c2f31075c2298e77892a2be299380b62379472b101969956e07aac56f58ea2aa5332915981c14923f74acb864756a55eb69df246fa9a51154739116bd5cd8f1e182907d09674da6666f07345b99d3de80be623e9a351efce017903e238217fa8d27dda1f478a1cbe615", 0xe5}, {&(0x7f0000001200)="72a11ba67f48a674aa185c8151d2e2b8ccb55f30eb01d27bfd2ff52a2ccf241aca6a73f87b4e9f1a911b61297bc2da27814b42a0ba20fc16aaab23a1a6c4ed00c1ccdf627bf1331feb4bb5", 0x4b}, {&(0x7f0000001340)="dac8420bf078875b321e059b59294abee8376a84868210ac9567b2d512d5ac1f150d9fb3dbb5826632a768eb154fa8257b32d0b5ea9be46186405cefeff54b9d5641a64d0aaa2d85330c4bc643845d124883871a9f433d3bd74740760b3e000a57dad75c789939490f58a32d1489a84507f8f93aaf11d6e60620c1e86c65f58a0df6a1234fe385eca1b3c8c9ce0f559e91479028be1dab6179a4bdf2fc", 0x9d}, {&(0x7f0000001400)="7ae2cb1444583407563af015d138d70d92d54b14798a18960beaa87b5ee6cd29f3fe556032173b7406d5333e5cd77ad9f700e03282486db63e4658345c2a1328701a7bd4c9961892f4e7a88147ae4cb8a1ada47e01da5ab674e27178ece52032e27ae832c9819abeace8b97be7b2f0d27bb211ce80373164adf36edd47ff75a5015421ef8007eaad922423355bc127715e054f59a4e6625cb2980523822abe48dade94ff87b03d98cbd4813795fd3eba98c555ec96c856882cf33f31716b9ec9da015f4c4c920b9557a0b1eaea1844d79c", 0xd1}, {&(0x7f0000001280)="2b433c3747b882ff3e29282cb772c4945dae4ebb69e06a67fc24e03e0fe79175780d1a4395805caa32be41bf5c70e6e734ee4eb3bd9b3da46b8ffb30fa0e628137bea0601870a38684d8e39c7deac075b9acb42d2e27fe3abbd393858e6969ab4b9cf65fe4b07a45", 0x68}, {&(0x7f0000001500)="909753d9d21304d9ebbfa594fe9acb3247840aee595588f8572c2a06a4625f3e8adb24c49f0b29b7fbaaec843c5f011a7f7e551c04d948c94033570115fc3885d38b486870ff6c3904e0ab22630873cf99bfccbe94e7fb5589c8233f845fd6830299df5192fa5e07", 0x68}, {&(0x7f0000001580)="4429c528eeac499baa736102a271b8b71f377d3d9b1982dbd145641e2388a6328f985bbb2a87014485e5cf5d3ea0fc0a76c4c0963859e53bf0371daea96fdfb0a3984ee74fa35f8727af304210d5fcc5d05a5c47c2367fb6349b1fa692", 0x5d}, {&(0x7f0000001600)="46a02e8fd18942e38a852a722926fafe1248e26b9a520ad26ada1b7108b0b9bc9eb8102c1eea9576246f879092ba4df00f6ba0b15ea17b2f8cb98ed1899712ac7a4955e86efad8277c98f0bf66528f7c9891560c9cac2a4f1e33b28a904f911d40d8dd3a6cd05f26383d2a23bfc2e65367e2232c2b0e7ed3b54e1b14bcd01667955dec77117cd46b7aeab96c22774b38df7e8e1b9b40b43aa1882bff8d4a7171a58732ab8e25af3d5e526c55157c41e4d6310ee55bd12632ce74f4fcc14e59713206e96d1017cb93a9527c9682d17b140fd697d0602cdc223405edb90ad0c51f40", 0xe1}, {&(0x7f0000001700)="08965e3595941e800a5c07e4d425c20d302982f386ae5f6edbdca97efd65589b025afcd4a2cb63752ebe428e12b70ccd59ac8aa230d617360781c7ace9fd6126433690673b961e58a94f683bbbdce13858d55d590b821ed54bfb9bb8570c8f81ef6d890ca405c6a9141e186f57ac0897a7ca6abe0eb1863f7224edcd200320513c97bb8dd156f252eaa8c035a4c4b1c0d6e9bb209cf2eade51eee9e58e23b6b7b2b977e77f01eb1174a08190ac272d5507a8d0ad3d8eef9257e21ddf367a49c0621f4aa394f6102456ba74771508e67136694a74dd6a7c2450c068c62036322864d9264336a7bc", 0xe7}], 0x9, &(0x7f0000001980)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r2, @ANYRES32, @ANYBLOB="1420000000000000217356ca01000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x40090}}], 0x3, 0x1840) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 9.997184518s ago: executing program 1 (id=873): r0 = socket$inet(0xa, 0xa, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x66142) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x356, @time, 0x1, {}, 0x1d}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a61a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbf0dfa5d39cee9aa24173", 0x90, 0x20048800, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0xff08) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x32d) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="060000000000000002004e2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000500000002004e24ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21000000000b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018e51f10000000000000000000000000000000000000000000000000000000000000000000000002004e23ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000f9ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d7139f49129b0c9ad930cb89f45016223945fb356b3b18f862f0f873b5b3e94ad87841a623766d041c7b210efea27cadf193c0ed1c4d890015f51d7f217f7a58acf60d03ee3cbc187d4bf99571c8bf3c1a"], 0x310) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) listen(r0, 0xfffffffd) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x81000) recvmmsg(r7, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) 9.700221362s ago: executing program 2 (id=876): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r3, 0x3312, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r1) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001e000000080004000000000008000100", @ANYBLOB="e4fa"], 0x24}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000080)=0x30) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[], 0x30}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001f00008500000003596e1a3069b20be3810000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 9.662305406s ago: executing program 1 (id=877): unshare(0x2c060000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x120}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000006980)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000340)='H', 0x1}], 0x1}}], 0x1, 0x0) 7.141550991s ago: executing program 0 (id=879): unshare(0x2c060000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2001", @ANYRES16=r1, @ANYBLOB], 0x120}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000006980)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000340)='H', 0x1}], 0x1}}], 0x1, 0x0) 5.960516135s ago: executing program 0 (id=881): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x4, r1}, 0x14) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x16da) r2 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008b00000095"], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = getpgrp(0xffffffffffffffff) sched_setscheduler(r3, 0x5, &(0x7f0000000040)=0x3) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003e0000000000000008000f0001000000", 0x24) 5.214504149s ago: executing program 2 (id=883): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$KVM_CAP_ARM_INJECT_SERROR_ESR(r3, 0x3312, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r1) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001e000000080004000000000008000100", @ANYBLOB="e4fa"], 0x24}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000080)=0x30) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[], 0x30}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001f00008500000003596e1a3069b20be3810000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 5.132449329s ago: executing program 5 (id=884): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000cc0)="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", 0x10d}], 0x1, &(0x7f0000000200)=[@assoc={0x18, 0x117, 0x4, 0x104}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}], 0x1, 0x0) recvmsg$can_j1939(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/48, 0x30}, {&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000400)=""/50, 0x32}, {&(0x7f0000000880)=""/156, 0x9c}], 0x4, 0x0, 0x0, 0xffffff8d}, 0x0) 5.018747933s ago: executing program 5 (id=885): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/19, 0x13}], 0x1) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000000000086e051c01000000000001090224000100000006090400000d0300010009210500220122290009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) set_mempolicy(0x8000, &(0x7f0000000380)=0xfff, 0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00'}) syz_emit_ethernet(0x47, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a600110000fe800000000000000000000000000000ff020000000000000000000000000001223427d5c9b86b9fa14172170a0168000000bf26cc63b9c98f4357a3567a2a65d100d08bbfc78204000000dc2cd5f8c65fcc2ec129f77676f70e3d1c432e3be7e3e888feff8d317c3219b50416a9aa817e23a31ced46321ca97076db9d4b16d0783d783d52ed70283c96f4d04338c0c3ba5c16ccf55ebf7bad547cf53414c62555b0e147d9775a7d19106b8a168a2fcc55cfbaa412c6cb7b0000"], 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) socket$xdp(0x2c, 0x3, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000540)='net/ip_mr_vif\x00') preadv(r3, &(0x7f0000000900)=[{&(0x7f0000000580)=""/240, 0xf0}], 0x1, 0x47, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="35000cf36494000000000000200000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40010102) fsmount(r4, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/../file0\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='affs\x00', 0x0, &(0x7f0000000140)='grpquota') socket$inet6(0x10, 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000940)={'#! ', './cgroup/../file0', [{0x20, '\x00\xff\xe7\xe0\x97Y\xff\xff\xff*qm\xc3~\xa2\xb9\x96\x92\xc7\xd3\x0fR\x99\xc80\xf4\x9e\x05\x13(q\x1e\xcd\xd1d\x8a8c\x98N\x96\xc0\b\x02\b\xd1\xfb#mC\xb3\x17R\xb7\xaf\x90C\r\xdd\xd9`\x9eu8\xc7b\xbc\n\x1dr\x9b\xb7W\xdb\xb5\xe0t\xfd\x97\xa0\x1fm\x964\xef'}, {0x20, '\xad'}, {0x20, '/de\xf6/kvm\x00'}, {0x20, '-.^'}, {0x20, 'syzkaller\x00\x8b\xdcK\x80\xa8\x1e4\x1d{\xe7\b\xb3~y\t[&\xcf/\xc0\xd8\xd3\xcb\x01m\xf2\xcc\xbfM\xc3\xe57[\xaa\x10\xe2p\xd6w:[y\xb8\xb0\xb7\x10}j\xe0\xfe_X\xf3\xc7y\xfc\x90U8\x86R\xf3H\xe2\xdeWh\xe3\x82\xf1\xa2W~\xf8\xa2km\xa2rN\xe8\xdc\xa8\xcd\x80\x7f\xb7\x8b\xde\xec\va:]8T0\xc9~\f\x94\xba#5\xcb\xcd\xd4\xa0\x9a\x1a,\x95\x0e\xd5r\x89P\x84cI'}, {0x20, '/#&#:@:(^*,){!@.):'}, {0x20, '[//'}, {0x20, '/dev/kvm\x00'}, {0x20, 'net/ip_mr_vif\x00'}, {0x20, 'mc\xa6\xa4^\xbb\xcfR\x92\x03\\\n\xd9\xdf5\aZ\xb8\xad\x93\xc1\xb6bW{]\xad\xd1\xc7\xc0\xdc\x8bd\xf6B\xbe\xd9)\x85(\xb7\xf6:\x03\xc4\xe0\n.|\xf3C\x8b \xe3\xa1\xce\xfe\xc9$h\xb4d\x01\xe6n\xbd\v\x96\x18R\xd1\xe3t\xe9x\x94t\xd3M^\xb7s\xd1i\xa0\x02\x897\xc6\xbe\xd4\x9f>9\x04\x10\xd0\"\xb1\xd9z\xdf\xa4y\xbf\x13pe%{;\xc8~}\xcb\x19V3o\xdc\xda\xdea?\xe3\xd1oh\x9cP-\xbe'}], 0xa, "0eaebd01cd2ea397f100ccd60290808a0fe711"}, 0x1c6) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000400"/20, @ANYRES32, @ANYBLOB="00ff000000000000000000000000000000400000aacf5e5bbae22baa34f6ce7c0f259228afe5dc4a88e70243fb27b77748a60a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.844071007s ago: executing program 0 (id=886): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_int(r1, &(0x7f0000000000)=0xfe8e, 0x12) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x71}], 0x1, 0x4, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000080)={[0xfffffffffffffff7, 0x3968, 0x8001, 0x7, 0x8, 0x81, 0x0, 0x9, 0x1b, 0x3, 0x5, 0x81, 0x7, 0x247, 0x7, 0x1000], 0x4, 0xc68a700fbc9374f6}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4.600342299s ago: executing program 3 (id=887): r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r9, 0x0, 0x11203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02017c008cdc18000e3580009f000114600000060600ac141414e0600003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000000)={0x10, 0x29, 0x300, 0x70bd28, 0x25dfdbff}, 0x10}], 0x2}, 0x20040011) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) readv(r0, &(0x7f0000000140)=[{0x0}], 0x1) 3.512732837s ago: executing program 3 (id=888): r0 = socket(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x7f, 0x0, 0x0) getpid() msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000003c0)={0x1c, 0x18, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@typed={0x5, 0xf3, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x84202) syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x6000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r3 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) fstatfs(r3, &(0x7f0000000000)=""/182) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 3.374738495s ago: executing program 0 (id=889): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x24, 0x0, "39f0275bd5000000000000000009009f03390cc9e71d5cfad751485670c7e7b01388515acb511aca12dc6cab3cc52099e130e7839e16f3535d36e35aa41d469f860775333bd363dac38a6b20fa36b0a3"}, 0xd8) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x6042, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, 0x0, &(0x7f0000000640)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r5, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)=r2}, 0x20) r6 = openat(r1, 0x0, 0x303d01, 0x0) flock(r6, 0x5) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xd, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404080c}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.244299906s ago: executing program 1 (id=890): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000280)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xd, 'veth1_to_batadv\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffeffa, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$P9_RLERRORu(r5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800400003147df800000000fedbdf250900020073797b300000000008004100736977001400330076657468305f6d616376746170000000"], 0x38}}, 0x0) 2.805873068s ago: executing program 0 (id=891): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x100004) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file5\x00') r9 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r9, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file5\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x2) ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, &(0x7f0000000180)={0x0, 0x482, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000], 0x0, 0x200394}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$eventfd(r1, &(0x7f0000000e80)=0x3f, 0x8) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) syz_io_uring_setup(0xd1, &(0x7f0000000540)={0x0, 0x800000, 0x0, 0x3, 0x23f}, 0x0, 0x0) 2.576578345s ago: executing program 3 (id=892): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000200)='./file0/../file0/file0\x00', 0x0, 0x3000000, 0x0) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x1, 0x3, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1}, 0x50) 1.890182714s ago: executing program 1 (id=893): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@iv={0x110, 0x117, 0x2, 0xf5, "2b88d9f18d9bf3152882992eba410b223e9fc60bb42b67e598f6b2c20d4d863be85e33d2506d9b39aa243c3c631fa65fcf79685a980f7e813c2e2231d9e32207ba348f131c06e1b2bb924053fe1afd5ecaf470dfd677019086ec7a422a45dce1ec5aeb4830cc3cfd354a539ed68464e4b316ed590fb7139f7fde6398c5b1febb9df936cae15a0f270f45dea00b02bbd9cefed81365a37dfd2ba0a702944624e4f33f63ea335a8e036ee9c2e98eabe872b2242776ae347ff1d4050615c4af952a1d1d7a4598b673d6ec565625e835e69dbb44b3f0f1457a1cf8f006913eb4d45e9c0ad25e3652020d726694630b7108cde412a39003"}, @iv={0x80, 0x117, 0x2, 0x65, "a3dd79c54b28a64c71dd6eed837cf102ea0334e3bd9a5f066bc69d7bee49eeba4aa4ea2a4549ddc819d5a8b01763260145bbfb022b1d8ee6f567888d8948867e4bd6c698d64d9dd86bd4e887dea295ec64dfdcd068c1e1e3e4e18fd3bca1533c60d62bc6ed"}], 0x190, 0x20000000}], 0x1, 0x4005) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0x8940) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000100)="5f0403ce8cb5049e077f3ba953190a8ce22e51a45861126641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)="84", 0x2}], 0x3) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78, 0x0, 0x0, {0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(0x0, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x37000}]) dup3(0xffffffffffffffff, r0, 0x0) 1.776498639s ago: executing program 5 (id=894): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) msgrcv(0x0, 0x0, 0x2, 0x0, 0x4800) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80) 1.776161505s ago: executing program 5 (id=895): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x409, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x20}]) 1.74624232s ago: executing program 3 (id=896): sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="cbf212b35ad1df8b39878ded7e45818c87ba6fcb66e2f7f5d1dd6e1c934f3e186c98eb443986c54a44aa13bd15b4113e2cf2c07240cb816d4e47ebccf4f6f8672ae9f3480b3adf5c7b15fe89451820c60304e38efc5200ae7f3a3a673b23b38b2c8bc2c09940d91e3f527260c203cbc8d8b3a7a6c55b4f3927ab5bacd9d54cf478e779e68e77a05b3a8f5fac36344672d59123df956d9812e783d17bf9480e90e2acbc397c13fc9a0c7596b1ac43c4b240a628d385dd6e9c4ebfbc6a306d439614d97cd489c0c81073908be3d3ad4014f348", @ANYRES16, @ANYBLOB="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"], 0x458}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0002000000000000000017000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008"], 0x50}}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1, 0x0, 0x0, 0xffffffff}, 0x10000000) 1.692623951s ago: executing program 1 (id=897): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x4, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000140), 0x4) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0xa00, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) 1.690847632s ago: executing program 2 (id=898): r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r9, 0x0, 0x11203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02017c008cdc18000e3580009f000114600000060600ac141414e0600003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000000)={0x10, 0x29, 0x300, 0x70bd28, 0x25dfdbff}, 0x10}], 0x2}, 0x20040011) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) readv(r0, &(0x7f0000000140)=[{0x0}], 0x1) 1.552449374s ago: executing program 3 (id=899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfdfffff7}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}}, 0x0) 1.5518452s ago: executing program 5 (id=900): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x18, &(0x7f00000005c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}, @alu={0x7, 0x0, 0x7, 0x11, 0x0, 0x6, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffd}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r6, &(0x7f0000000680)="26271451e9fa7edbd3e27a5f2088bb2800c0375ebe2f0a646fee025376bf2f280038dea9b57f93497383b20d53207cbaddad8b5e7220b15a50b5f6e282e4e04556e7cba6dcc0a2f2f864dcef75cc8000000000000022db877bf2b240c99c81335253ddce75af4e014c8c6840e386a45236921a30cf86828df32a464504944988ef4bf95ab9933f0304a4a2b4378d3168427f2835d6e3d8a634b5519d5d10764d75b86be0131cc90b9fa9febb92196d0747e52e06446f4aac3d18319a590e24d02093325d51328180b333f7a418201a5d40267b497e", 0x0}, 0x20) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1, 0x0) 1.318849867s ago: executing program 3 (id=901): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000102400010000f1000904000001030000030921000000012204000905810300"/54], 0x0) unshare(0x20000400) mprotect(&(0x7f0000025000/0x3000)=nil, 0x3000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x1e37, @mcast2, 0x9}, 0x1c) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000102400010000f1000904000001030000030921000000012204000905810300"/54], 0x0) (async) unshare(0x20000400) (async) mprotect(&(0x7f0000025000/0x3000)=nil, 0x3000, 0x0) (async) socket$inet6(0xa, 0x2, 0x3a) (async) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x1e37, @mcast2, 0x9}, 0x1c) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) 300.54769ms ago: executing program 5 (id=902): mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x1cb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x56ea3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000100)=0xfc000000) 166.212619ms ago: executing program 0 (id=903): mkdir(&(0x7f0000000380)='./file0\x00', 0x91) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_create1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0007c32c179c000000000000d8ec0f6c5e6be100"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x200040) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r4, 0x1000) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01080000c582b61bdd04"], 0x2c}}, 0x0) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0xfffffffc}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xffff, 0x7}, {0x8}, {0xe, 0x8}}, ["", ""]}, 0x24}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff5}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}}, 0x8040) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 44.759464ms ago: executing program 2 (id=904): r0 = openat$smackfs_access(0xffffff9c, &(0x7f0000001140)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x605, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) write$smackfs_access(r0, &(0x7f0000001180)={'-/\x06\'\'\x0e(]!', 0x20, '(', 0x20, 'rtbl'}, 0x11) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30000e00", @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25090000000c000600020000000000000005000700150000000800010000000000"], 0x30}, 0x1, 0x0, 0x0, 0x48095}, 0x10) 0s ago: executing program 1 (id=905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0xea, &(0x7f0000000500)=""/234, 0x40f00, 0x8, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x5, 0x2, 0x8, 0x3ff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000480)={&(0x7f0000000100), 0xc, &(0x7f0000000440)={&(0x7f0000000d80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002abd7000fddbdf252100000008000300", @ANYRES32=0x0, @ANYBLOB="0c002d8008000200000000003c002d8005000100000000000800030000000000080002000200000005000100010000000800020002000000080003000500000008000300ffffffff08000300", @ANYBLOB="d53892a5ad5e09fe1dc673d7baa09533f36a6820297a49cbb11c2d11b719574b5aba52bfa9bc2b501e0000f8571151dff152eb359dc3063277876b7c48b0a275613edc4499d7cf8a4c11f12bf33882ed2b6123593c1755e4c1145c1a38ee0c12a9c64323d9490b74ec8916ae5b7fbd78e2258a1c7f43ca07b13099929009ad4d756b38e16d10bf702498d3183a22d696d6da977d3e638104c243a2dee7ae27d2548a03744fede7", @ANYBLOB="586a3a3faa2a4b5e295ec6fe5d48c737325e1d133d9d92c232a222d8f4fc733d2a4a0a42577afd0b7291f0e1ad039e4ebe3224edd60614214bebbf4c3060b80761d8d6808a51645ced89a39a1564ee4aaa89beca7e537280a25ed029ef565c23d48a7b016a62be6657e524d765e61e9f1f81fa75daaedb255a646ec96ae67a6249673dbebb9edb98afb6ed11172d525187b69b2bc8fd0870a0ce8bab3c6f057cf8af3d51d1e980dc996cef82345b14063d4206a22c3742087aa7cd7f0e940e393d7ba6397229ca0b78"], 0x6c}, 0x1, 0x0, 0x0, 0x4004849}, 0x400c000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="ca56f435680b11d367c5081dec9af8e14208acb808c38c0bbfd84531f9291d5dc20d5e953ea81844a6488df6ceede6624219552c2da09614ef7112ca95a6d837c14bf6d6004e1b45be066329ace05ff44d72842d2806c2a18fde909def25d0055d7b78f56e481f90b198d5b3567d42e1b5db277b3db4c3352e9bf0c58665ef976316d1c8dbeadfc84668ba22aaebd1db074babbb2f3b5d05c9b83a5dee660de4d741f4f9fb5061e8c3e7eb731d6b4874e578f04b706060e40dfc63dd3b745f", @ANYBLOB="0f1430bb3678e70efc083a9701bde7b2874441f1794d4f4ad8a6f4690f3cfdd81e974fc5991db71b25bc0f7f5b7781a648e7b96d91f0457a003e55f0daaa969047e679822f5d87bf73b250dd4490bd59c11a501dc09c0bf1c8c3938a4a8c3fe171d71f5b77a1d6045c4455c018153456f97e7164d0f78e02347360b52bc5ac805600825c66611c877c34ce725e1c4b8f81729427499e6b92909521ac5a941136d5014ec5753d9f435137f951286ff877032f2da9fe57383a2194b2f93aae70c44eb3a864bc0524cf182386c67ae4b2c2e9"], 0x5c}, 0x1, 0xffffffff00000003, 0x0, 0x20004000}, 0x2000c001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x19c}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) r6 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) kernel console output (not intermixed with test programs): ========================================== [ 115.630637][ T5881] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 115.645516][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.681819][ T5881] usb 1-1: config 0 descriptor?? [ 115.798864][ T6688] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.820179][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.831559][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.842299][ T25] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 115.851676][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.865073][ T25] usb 2-1: config 0 descriptor?? [ 115.912512][ T5881] kaweth 1-1:0.0: Firmware present in device. [ 116.151969][ T5881] kaweth 1-1:0.0: Statistics collection: 0 [ 116.157841][ T5881] kaweth 1-1:0.0: Multicast filter limit: 0 [ 116.165131][ T5881] kaweth 1-1:0.0: MTU: 0 [ 116.169415][ T5881] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 116.345361][ T6675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.376867][ T6675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.412549][ T25] chicony 0003:04F2:1236.0004: unbalanced collection at end of report description [ 116.426847][ T25] chicony 0003:04F2:1236.0004: Chicony hid parse failed: -22 [ 116.446946][ T25] chicony 0003:04F2:1236.0004: probe with driver chicony failed with error -22 [ 116.702098][ T25] usb 2-1: USB disconnect, device number 6 [ 116.806923][ T6727] FAULT_INJECTION: forcing a failure. [ 116.806923][ T6727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.820277][ T6727] CPU: 1 UID: 0 PID: 6727 Comm: syz.5.179 Not tainted 6.12.0-rc6-syzkaller-00225-g50643bbc9eb6 #0 [ 116.830896][ T6727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 116.840975][ T6727] Call Trace: [ 116.844270][ T6727] [ 116.847222][ T6727] dump_stack_lvl+0x241/0x360 [ 116.851930][ T6727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.857148][ T6727] ? __pfx__printk+0x10/0x10 [ 116.861772][ T6727] ? snprintf+0xda/0x120 [ 116.866037][ T6727] should_fail_ex+0x3b0/0x4e0 [ 116.870736][ T6727] _copy_to_user+0x31/0xb0 [ 116.875169][ T6727] simple_read_from_buffer+0xca/0x150 [ 116.880572][ T6727] proc_fail_nth_read+0x1e9/0x250 [ 116.885617][ T6727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 116.891183][ T6727] ? rw_verify_area+0x55e/0x6f0 [ 116.896053][ T6727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 116.901623][ T6727] vfs_read+0x1fc/0xb70 [ 116.905804][ T6727] ? fdget_pos+0x24e/0x320 [ 116.910242][ T6727] ? __pfx_vfs_read+0x10/0x10 [ 116.914943][ T6727] ? __fget_files+0x3f3/0x470 [ 116.919648][ T6727] ? fdget_pos+0x24e/0x320 [ 116.924097][ T6727] ksys_read+0x183/0x2b0 [ 116.928361][ T6727] ? __pfx_ksys_read+0x10/0x10 [ 116.933145][ T6727] ? rcu_is_watching+0x15/0xb0 [ 116.937944][ T6727] ? trace_sys_enter+0x1f/0xd0 [ 116.942729][ T6727] do_syscall_64+0xf3/0x230 [ 116.947250][ T6727] ? clear_bhb_loop+0x35/0x90 [ 116.951946][ T6727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.957852][ T6727] RIP: 0033:0x7f868eb7d15c [ 116.962281][ T6727] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 116.981901][ T6727] RSP: 002b:00007f868f8ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 116.990346][ T6727] RAX: ffffffffffffffda RBX: 00007f868ed36130 RCX: 00007f868eb7d15c [ 116.998508][ T6727] RDX: 000000000000000f RSI: 00007f868f8ee0a0 RDI: 0000000000000006 [ 117.006501][ T6727] RBP: 00007f868f8ee090 R08: 0000000000000000 R09: 0000000000000000 [ 117.014659][ T6727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.022657][ T6727] R13: 0000000000000000 R14: 00007f868ed36130 R15: 00007ffe47e6d708 [ 117.030659][ T6727] [ 117.183964][ T5834] Bluetooth: hci1: command 0x041b tx timeout [ 117.233908][ T5881] kaweth 1-1:0.0: Error setting receive filter [ 117.240225][ T5881] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 117.273195][ T5881] usb 1-1: USB disconnect, device number 8 [ 117.284255][ T5909] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 117.310148][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 117.310166][ T29] audit: type=1326 audit(1731141691.173:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.5.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 117.357914][ T29] audit: type=1326 audit(1731141691.173:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.5.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 117.384746][ T29] audit: type=1326 audit(1731141691.173:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.5.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 117.415835][ T29] audit: type=1326 audit(1731141691.173:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.5.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f868eb7e753 code=0x7ffc0000 [ 117.437798][ T5909] usb 4-1: device descriptor read/64, error -71 [ 117.444792][ T29] audit: type=1326 audit(1731141691.173:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.5.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f868eb7e753 code=0x7ffc0000 [ 117.466823][ T29] audit: type=1326 audit(1731141691.173:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.5.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 117.491046][ T29] audit: type=1326 audit(1731141691.173:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.5.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 117.611845][ T29] audit: type=1326 audit(1731141691.193:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.5.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 117.697067][ T29] audit: type=1326 audit(1731141691.193:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.5.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 117.772366][ T29] audit: type=1326 audit(1731141691.193:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.5.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 117.830618][ T5909] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 118.066722][ T5909] usb 4-1: device descriptor read/64, error -71 [ 118.264899][ T5909] usb usb4-port1: attempt power cycle [ 118.903483][ T6764] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.001285][ T6762] nbd5: detected capacity change from 0 to 20 [ 119.043723][ T6769] nbd5: detected capacity change from 20 to 6 [ 119.045860][ T5835] block nbd5: Send control failed (result -89) [ 119.046002][ T5835] block nbd5: Request send failed, requeueing [ 119.050732][ T42] block nbd5: Dead connection, failed to find a fallback [ 119.050783][ T42] block nbd5: shutting down sockets [ 119.050885][ T42] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.050995][ T42] Buffer I/O error on dev nbd5, logical block 0, async page read [ 119.054136][ T5835] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.054191][ T5835] Buffer I/O error on dev nbd5, logical block 0, async page read [ 119.054473][ T5835] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.054499][ T5835] Buffer I/O error on dev nbd5, logical block 0, async page read [ 119.054614][ T5835] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.054639][ T5835] Buffer I/O error on dev nbd5, logical block 0, async page read [ 119.054743][ T5835] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.054768][ T5835] Buffer I/O error on dev nbd5, logical block 0, async page read [ 119.054834][ T5835] ldm_validate_partition_table(): Disk read failed. [ 119.054908][ T5835] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.054933][ T5835] Buffer I/O error on dev nbd5, logical block 0, async page read [ 119.055035][ T5835] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.055059][ T5835] Buffer I/O error on dev nbd5, logical block 0, async page read [ 119.055161][ T5835] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.055185][ T5835] Buffer I/O error on dev nbd5, logical block 0, async page read [ 119.055292][ T5835] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.055316][ T5835] Buffer I/O error on dev nbd5, logical block 0, async page read [ 119.055375][ T5835] Dev nbd5: unable to read RDB block 0 [ 119.055434][ T5835] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.055458][ T5835] Buffer I/O error on dev nbd5, logical block 0, async page read [ 119.055697][ T5835] nbd5: unable to read partition table [ 119.055865][ T5835] nbd5: partition table beyond EOD, truncated [ 119.185356][ T5909] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 119.202632][ T5835] ldm_validate_partition_table(): Disk read failed. [ 119.209106][ T5909] usb 4-1: device descriptor read/8, error -71 [ 119.248625][ T5834] Bluetooth: hci1: command 0x041b tx timeout [ 119.293265][ T5835] Dev nbd5: unable to read RDB block 0 [ 119.442590][ T5835] nbd5: unable to read partition table [ 119.449497][ T5835] nbd5: partition table beyond EOD, truncated [ 120.331154][ T6773] FAULT_INJECTION: forcing a failure. [ 120.331154][ T6773] name fail_futex, interval 1, probability 0, space 0, times 1 [ 120.344481][ T6773] CPU: 0 UID: 0 PID: 6773 Comm: syz.0.187 Not tainted 6.12.0-rc6-syzkaller-00225-g50643bbc9eb6 #0 [ 120.355084][ T6773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 120.365134][ T6773] Call Trace: [ 120.368430][ T6773] [ 120.371375][ T6773] dump_stack_lvl+0x241/0x360 [ 120.373569][ T5909] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 120.376067][ T6773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.376097][ T6773] ? __pfx__printk+0x10/0x10 [ 120.393307][ T6773] ? register_lock_class+0x102/0x980 [ 120.398593][ T6773] ? kmem_cache_free+0x2fc/0x420 [ 120.403523][ T6773] ? __pfx_register_lock_class+0x10/0x10 [ 120.409152][ T6773] ? do_execveat_common+0x18c/0x6f0 [ 120.414346][ T6773] ? do_syscall_64+0xf3/0x230 [ 120.419017][ T6773] should_fail_ex+0x3b0/0x4e0 [ 120.423685][ T6773] get_futex_key+0x1cc/0x1080 [ 120.428352][ T6773] ? __pfx_get_futex_key+0x10/0x10 [ 120.433450][ T6773] ? __lock_acquire+0x1384/0x2050 [ 120.438469][ T6773] futex_wake+0x12a/0x5c0 [ 120.442792][ T6773] ? __pfx_futex_wake+0x10/0x10 [ 120.447635][ T6773] do_futex+0x392/0x560 [ 120.451780][ T6773] ? __pfx_do_futex+0x10/0x10 [ 120.456442][ T6773] ? __might_fault+0xaa/0x120 [ 120.461115][ T6773] mm_release+0x193/0x430 [ 120.465433][ T6773] ? exit_robust_list+0x2cf/0x2f0 [ 120.470441][ T6773] ? __pfx_mm_release+0x10/0x10 [ 120.475277][ T6773] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.480458][ T6773] ? lockdep_hardirqs_on+0x99/0x150 [ 120.485661][ T6773] exit_mm+0xb0/0x310 [ 120.489630][ T6773] ? __pfx_exit_mm+0x10/0x10 [ 120.494202][ T6773] ? taskstats_exit+0x326/0xa60 [ 120.499046][ T6773] do_exit+0x9b2/0x28e0 [ 120.503192][ T6773] ? __pfx_do_exit+0x10/0x10 [ 120.507781][ T6773] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 120.513145][ T6773] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 120.519111][ T6773] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.525454][ T6773] ? _raw_spin_lock_irq+0xdf/0x120 [ 120.530568][ T6773] do_group_exit+0x207/0x2c0 [ 120.535161][ T6773] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.540343][ T6773] ? lockdep_hardirqs_on+0x99/0x150 [ 120.545527][ T6773] get_signal+0x16a3/0x1740 [ 120.550021][ T6773] ? __pfx_get_signal+0x10/0x10 [ 120.554863][ T6773] arch_do_signal_or_restart+0x96/0x860 [ 120.560396][ T6773] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 120.566551][ T6773] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 120.572525][ T6773] ? syscall_exit_to_user_mode+0xa3/0x370 [ 120.578233][ T6773] syscall_exit_to_user_mode+0xc9/0x370 [ 120.583769][ T6773] do_syscall_64+0x100/0x230 [ 120.588354][ T6773] ? clear_bhb_loop+0x35/0x90 [ 120.593023][ T6773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.598906][ T6773] RIP: 0033:0x7fee9f37e719 [ 120.603313][ T6773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.622918][ T6773] RSP: 002b:00007feea00a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 120.631325][ T6773] RAX: ffffffffffffff95 RBX: 00007fee9f535f80 RCX: 00007fee9f37e719 [ 120.639292][ T6773] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 120.647271][ T6773] RBP: 00007feea00a9090 R08: 0000000000000000 R09: 0000000000000000 [ 120.655233][ T6773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.663189][ T6773] R13: 0000000000000000 R14: 00007fee9f535f80 R15: 00007fff98bcafa8 [ 120.671160][ T6773] [ 120.675929][ T6793] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.684078][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.808307][ T5909] usb 4-1: device descriptor read/8, error -71 [ 120.864424][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'. [ 120.933037][ T5909] usb usb4-port1: unable to enumerate USB device [ 124.308445][ T6842] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.000920][ T5882] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 125.060613][ T5846] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 125.181047][ T5882] usb 6-1: Using ep0 maxpacket: 32 [ 125.194714][ T5882] usb 6-1: too many configurations: 32, using maximum allowed: 8 [ 125.221200][ T5846] usb 2-1: Using ep0 maxpacket: 32 [ 125.226891][ T5882] usb 6-1: too many endpoints for config 1 interface 1 altsetting 0: 34, using maximum allowed: 30 [ 125.248642][ T5846] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 125.269194][ T5882] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 125.282507][ T5846] usb 2-1: config 0 has no interface number 0 [ 125.309406][ T5846] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 125.327764][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.336969][ T5882] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.370109][ T5846] usb 2-1: Product: syz [ 125.386783][ T5882] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 125.435793][ T5846] usb 2-1: Manufacturer: syz [ 125.460232][ T5846] usb 2-1: SerialNumber: syz [ 125.489273][ T5882] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 125.599222][ T5846] usb 2-1: config 0 descriptor?? [ 125.678228][ T5882] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 126.039739][ T5882] usb 6-1: too many endpoints for config 1 interface 1 altsetting 0: 34, using maximum allowed: 30 [ 126.051794][ T5882] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 126.065766][ T5882] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 126.148293][ T5882] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 126.159087][ T5882] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 126.267052][ T5882] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 126.307492][ T5882] usb 6-1: unable to read config index 2 descriptor/start: -71 [ 126.329648][ T5882] usb 6-1: can't read configurations, error -71 [ 127.771391][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'. [ 127.783290][ T6881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.793712][ T6881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.072020][ T6881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.079514][ T6881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.270422][ T6888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.211'. [ 128.435802][ T6888] nbd: must specify at least one socket [ 129.000761][ T5922] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 129.161058][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 129.478852][ T5922] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 129.782798][ T5922] usb 1-1: config 0 has no interface number 0 [ 131.020400][ T5846] usb 2-1: can't set config #0, error -110 [ 131.229121][ T5922] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 131.238676][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.247510][ T5922] usb 1-1: Product: syz [ 131.252171][ T5922] usb 1-1: Manufacturer: syz [ 131.259952][ T5922] usb 1-1: config 0 descriptor?? [ 131.285559][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.217'. [ 131.295592][ T5922] usb 1-1: can't set config #0, error -71 [ 131.338562][ T5922] usb 1-1: USB disconnect, device number 9 [ 132.871873][ T5922] usb 2-1: USB disconnect, device number 7 [ 133.099052][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.105456][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.910347][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 135.398565][ T5909] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 136.749585][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 136.773783][ T5909] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 136.785547][ T5909] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 136.796809][ T5909] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 136.806625][ T5909] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 136.846475][ T5909] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.896927][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.913382][ T5909] usb 4-1: Product: syz [ 136.928879][ T5909] usb 4-1: Manufacturer: syz [ 137.086398][ T5909] usb 4-1: SerialNumber: syz [ 137.094177][ T5909] usb 4-1: can't set config #1, error -71 [ 137.102050][ T5909] usb 4-1: USB disconnect, device number 10 [ 137.227987][ T7005] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 137.238601][ T7005] cramfs: wrong magic [ 137.560850][ T5829] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 138.284948][ T5829] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 138.295636][ T5829] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.308078][ T5829] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 138.318246][ T5829] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 138.371941][ T5829] usb 3-1: Manufacturer: syz [ 138.394136][ T5829] usb 3-1: config 0 descriptor?? [ 138.430026][ T7015] FAULT_INJECTION: forcing a failure. [ 138.430026][ T7015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.445119][ T5829] igorplugusb 3-1:0.0: incorrect number of endpoints [ 138.462321][ T7015] CPU: 1 UID: 0 PID: 7015 Comm: syz.3.233 Not tainted 6.12.0-rc6-syzkaller-00225-g50643bbc9eb6 #0 [ 138.472941][ T7015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 138.483008][ T7015] Call Trace: [ 138.486294][ T7015] [ 138.489232][ T7015] dump_stack_lvl+0x241/0x360 [ 138.493933][ T7015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.499145][ T7015] ? __pfx__printk+0x10/0x10 [ 138.503758][ T7015] should_fail_ex+0x3b0/0x4e0 [ 138.508456][ T7015] strncpy_from_user+0x36/0x260 [ 138.513329][ T7015] getname_flags+0xf1/0x540 [ 138.517847][ T7015] do_sys_openat2+0xd2/0x1d0 [ 138.522446][ T7015] ? __pfx_do_sys_openat2+0x10/0x10 [ 138.527648][ T7015] __x64_sys_openat+0x247/0x2a0 [ 138.532498][ T7015] ? __pfx___x64_sys_openat+0x10/0x10 [ 138.537865][ T7015] ? exc_page_fault+0x590/0x8c0 [ 138.542719][ T7015] ? do_syscall_64+0xb6/0x230 [ 138.547399][ T7015] do_syscall_64+0xf3/0x230 [ 138.551905][ T7015] ? clear_bhb_loop+0x35/0x90 [ 138.556582][ T7015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.562478][ T7015] RIP: 0033:0x7fc25c77d0b0 [ 138.566888][ T7015] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 138.586491][ T7015] RSP: 002b:00007fc25d4b3a00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 138.594901][ T7015] RAX: ffffffffffffffda RBX: 0000000000080001 RCX: 00007fc25c77d0b0 [ 138.602868][ T7015] RDX: 0000000000080001 RSI: 00007fc25c7dbb80 RDI: 00000000ffffff9c [ 138.610841][ T7015] RBP: 00007fc25c7dbb80 R08: 0000000000000000 R09: 0000000000000000 [ 138.618808][ T7015] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 138.626770][ T7015] R13: 00007fc25d4b3aa0 R14: 00007fc25c935f80 R15: 00007fffe28d7be8 [ 138.634781][ T7015] [ 139.957552][ T25] usb 3-1: USB disconnect, device number 6 [ 140.997812][ T7056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.239'. [ 141.350980][ T7060] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.357128][ T7060] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.364662][ T7060] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 141.371874][ T7060] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.313876][ T7082] sd 0:0:1:0: device reset [ 142.460584][ T5846] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 142.632461][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.474573][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.484494][ T5846] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 143.494043][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.535898][ T5834] Bluetooth: hci1: command 0x041b tx timeout [ 143.542044][ T5834] Bluetooth: hci4: command 0x0419 tx timeout [ 143.548109][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.554223][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.800249][ T5846] usb 1-1: config 0 descriptor?? [ 143.830968][ T7101] netlink: 36 bytes leftover after parsing attributes in process `syz.3.248'. [ 143.920359][ T7105] netlink: 16 bytes leftover after parsing attributes in process `syz.5.249'. [ 144.067994][ T7105] netlink: 12 bytes leftover after parsing attributes in process `syz.5.249'. [ 144.213300][ T7110] fuse: Unknown parameter 'gr' [ 144.687171][ T5846] uclogic 0003:5543:0004.0005: unknown main item tag 0x0 [ 144.694438][ T5846] uclogic 0003:5543:0004.0005: unknown main item tag 0x0 [ 144.701639][ T5846] uclogic 0003:5543:0004.0005: unknown main item tag 0x0 [ 144.708736][ T5846] uclogic 0003:5543:0004.0005: unknown main item tag 0x0 [ 144.715911][ T5846] uclogic 0003:5543:0004.0005: unknown main item tag 0x0 [ 144.723712][ T5846] uclogic 0003:5543:0004.0005: No inputs registered, leaving [ 144.745222][ T5846] uclogic 0003:5543:0004.0005: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.0-1/input0 [ 144.753552][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.247'. [ 144.821060][ T5846] usb 1-1: USB disconnect, device number 10 [ 144.903810][ T7097] vlan2: entered promiscuous mode [ 144.917167][ T7097] team0: entered promiscuous mode [ 144.930603][ T7097] team_slave_0: entered promiscuous mode [ 144.936497][ T7097] team_slave_1: entered promiscuous mode [ 144.959238][ T7097] team0: left promiscuous mode [ 144.978198][ T7097] team_slave_0: left promiscuous mode [ 144.987118][ T7097] team_slave_1: left promiscuous mode [ 146.761956][ T7150] 9pnet_fd: Insufficient options for proto=fd [ 147.837869][ T7180] block nbd3: shutting down sockets [ 148.650835][ T7185] tmpfs: Bad value for 'mpol' [ 149.357583][ T7202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.632570][ T7210] random: crng reseeded on system resumption [ 150.475983][ T7224] usb usb1: usbfs: process 7224 (syz.2.268) did not claim interface 0 before use [ 151.350907][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 151.749556][ T25] usb 4-1: config 1 has an invalid descriptor of length 25, skipping remainder of the config [ 151.775555][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.799229][ T25] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 152.211476][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.255013][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.270691][ T25] usb 4-1: Product: syz [ 152.274964][ T25] usb 4-1: Manufacturer: syz [ 152.286686][ T25] usb 4-1: SerialNumber: syz [ 153.411264][ T25] cdc_ncm 4-1:1.0: bind() failure [ 153.444261][ T25] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 153.470747][ T25] cdc_ncm 4-1:1.1: bind() failure [ 153.498951][ T25] usb 4-1: USB disconnect, device number 11 [ 153.669465][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.274'. [ 153.772270][ T7262] nbd: must specify at least one socket [ 155.548017][ T7301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.561269][ T7301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.034784][ T5882] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 156.231743][ T5846] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 156.558053][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.579470][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.595175][ T5882] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 156.618691][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.649099][ T5882] usb 6-1: config 0 descriptor?? [ 156.702552][ T7308] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 156.713535][ T5846] usb 4-1: device descriptor read/64, error -71 [ 156.719119][ T7308] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 156.727685][ T7308] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 156.736163][ T7308] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 157.357614][ T5846] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 157.422946][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.288'. [ 157.554310][ T5846] usb 4-1: device descriptor read/64, error -71 [ 157.975568][ T5846] usb usb4-port1: attempt power cycle [ 158.046122][ T7330] nbd: must specify at least one socket [ 158.120765][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.121054][ T5882] itetech 0003:06CB:73F5.0006: unbalanced collection at end of report description [ 158.180314][ T5882] itetech 0003:06CB:73F5.0006: probe with driver itetech failed with error -22 [ 158.760716][ T5834] Bluetooth: hci4: command 0x0419 tx timeout [ 158.767045][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 158.773383][ T55] Bluetooth: hci1: command 0x041b tx timeout [ 159.093520][ T7350] netlink: 5312 bytes leftover after parsing attributes in process `syz.3.290'. [ 159.102889][ T7350] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 159.618240][ T5881] usb 6-1: USB disconnect, device number 4 [ 159.984896][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 159.984913][ T29] audit: type=1326 audit(1731141733.833:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7369 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 160.073930][ T29] audit: type=1326 audit(1731141733.833:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7369 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 160.311034][ T29] audit: type=1326 audit(1731141733.843:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7369 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 160.381122][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.388640][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.897238][ T29] audit: type=1326 audit(1731141733.843:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7369 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f868eb7e753 code=0x7ffc0000 [ 160.954323][ T29] audit: type=1326 audit(1731141733.843:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7369 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f868eb7e753 code=0x7ffc0000 [ 161.022483][ T29] audit: type=1326 audit(1731141733.843:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7369 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 161.285280][ T29] audit: type=1326 audit(1731141733.843:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7369 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 161.411187][ T29] audit: type=1326 audit(1731141733.843:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7369 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 161.540789][ T29] audit: type=1326 audit(1731141733.843:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7369 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 161.981337][ T29] audit: type=1326 audit(1731141733.843:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7369 comm="syz.5.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 162.291920][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.5.302'. [ 162.403116][ T7413] nbd: must specify at least one socket [ 162.456174][ T7420] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 162.501760][ T7420] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 163.451749][ T7430] netlink: 16 bytes leftover after parsing attributes in process `syz.0.307'. [ 163.549682][ T7436] autofs: Unknown parameter 'gd' [ 165.381204][ T25] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 165.590999][ T25] usb 2-1: config 0 has an invalid interface number: 183 but max is 0 [ 165.599347][ T25] usb 2-1: config 0 has no interface number 0 [ 165.625888][ T25] usb 2-1: config 0 interface 183 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 165.683198][ T25] usb 2-1: config 0 interface 183 altsetting 0 has an endpoint descriptor with address 0x96, changing to 0x86 [ 165.749740][ T25] usb 2-1: config 0 interface 183 altsetting 0 endpoint 0x86 has invalid maxpacket 58641, setting to 64 [ 165.874899][ T25] usb 2-1: config 0 interface 183 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 165.992618][ T25] usb 2-1: New USB device found, idVendor=093a, idProduct=2627, bcdDevice=c9.c0 [ 166.023676][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.050142][ T25] usb 2-1: Product: syz [ 166.082643][ T25] usb 2-1: Manufacturer: syz [ 166.100706][ T25] usb 2-1: SerialNumber: syz [ 166.122894][ T25] usb 2-1: config 0 descriptor?? [ 166.129144][ T7478] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 166.140786][ T25] gspca_main: gspca_pac7302-2.14.0 probing 093a:2627 [ 166.340693][ T5909] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 166.422244][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.323'. [ 166.452720][ T7498] þü: entered promiscuous mode [ 166.465328][ T5846] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 166.810785][ T5846] usb 6-1: Using ep0 maxpacket: 16 [ 166.865153][ T5846] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 17448, setting to 64 [ 167.195744][ T5846] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 167.205293][ T5846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.213583][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 167.213598][ T29] audit: type=1326 audit(1731141741.073:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c77e719 code=0x7ffc0000 [ 167.241325][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.249871][ T25] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 167.256954][ T5846] usb 6-1: Product: syz [ 167.256992][ T25] gspca_pac7302 2-1:0.183: probe with driver gspca_pac7302 failed with error -71 [ 167.261263][ T5846] usb 6-1: Manufacturer: syz [ 167.261284][ T5846] usb 6-1: SerialNumber: syz [ 167.281384][ T5846] usb 6-1: config 0 descriptor?? [ 167.289869][ T5846] hub 6-1:0.0: bad descriptor, ignoring hub [ 167.299430][ T5909] usb 3-1: config 1 interface 0 has no altsetting 0 [ 167.301015][ T5846] hub 6-1:0.0: probe with driver hub failed with error -5 [ 167.316329][ T5846] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input10 [ 167.321482][ T29] audit: type=1326 audit(1731141741.073:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c77e719 code=0x7ffc0000 [ 167.355788][ T29] audit: type=1326 audit(1731141741.073:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fc25c77e719 code=0x7ffc0000 [ 167.377087][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.383546][ T5909] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 167.383647][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.383669][ T5909] usb 3-1: Product: syz [ 167.383686][ T5909] usb 3-1: Manufacturer: syz [ 167.383701][ T5909] usb 3-1: SerialNumber: syz [ 167.426052][ T29] audit: type=1326 audit(1731141741.073:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c77e719 code=0x7ffc0000 [ 167.430081][ T25] usb 2-1: USB disconnect, device number 8 [ 167.450715][ T29] audit: type=1326 audit(1731141741.073:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c77e719 code=0x7ffc0000 [ 167.475069][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.486458][ T29] audit: type=1326 audit(1731141741.073:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fc25c77e719 code=0x7ffc0000 [ 167.507783][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.520786][ T29] audit: type=1326 audit(1731141741.073:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c77e719 code=0x7ffc0000 [ 167.542179][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.565429][ T29] audit: type=1326 audit(1731141741.073:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c77e719 code=0x7ffc0000 [ 167.599722][ T29] audit: type=1326 audit(1731141741.083:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc25c77e719 code=0x7ffc0000 [ 167.624062][ T29] audit: type=1326 audit(1731141741.083:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.3.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25c77e719 code=0x7ffc0000 [ 167.661933][ T5909] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input11 [ 167.888753][ T5909] usb 3-1: USB disconnect, device number 7 [ 167.973687][ T7512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.327'. [ 167.982914][ T7512] netlink: 272 bytes leftover after parsing attributes in process `syz.3.327'. [ 167.992160][ T7512] netlink: 72 bytes leftover after parsing attributes in process `syz.3.327'. [ 170.395700][ T5881] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 170.680560][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 170.790944][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'. [ 170.811012][ T5881] usb 4-1: config 0 has no interfaces? [ 170.828187][ T5881] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.856220][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.136663][ T5881] usb 4-1: Product: syz [ 171.141137][ T5881] usb 4-1: Manufacturer: syz [ 171.145761][ T5881] usb 4-1: SerialNumber: syz [ 171.179106][ T5881] usb 4-1: config 0 descriptor?? [ 171.714873][ T7549] syz.1.334 (7549) used greatest stack depth: 19384 bytes left [ 172.249577][ T7564] tipc: Enabling of bearer rejected, failed to enable media [ 172.277537][ T7564] netlink: 76 bytes leftover after parsing attributes in process `syz.2.341'. [ 172.306231][ T7564] tc_dump_action: action bad kind [ 173.150866][ T5909] usb 4-1: USB disconnect, device number 15 [ 173.153002][ T7574] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.722869][ T7590] Invalid logical block size (41471) [ 175.906430][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 175.906448][ T29] audit: type=1326 audit(1731141749.773:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fa97e719 code=0x7ffc0000 [ 175.951718][ T5846] usb 6-1: USB disconnect, device number 5 [ 176.212147][ T7599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.351'. [ 176.221230][ T7599] netlink: 272 bytes leftover after parsing attributes in process `syz.0.351'. [ 176.230312][ T7599] netlink: 72 bytes leftover after parsing attributes in process `syz.0.351'. [ 177.090052][ T29] audit: type=1326 audit(1731141749.843:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fa5fa97e719 code=0x7ffc0000 [ 177.124911][ T29] audit: type=1326 audit(1731141749.853:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fa97e719 code=0x7ffc0000 [ 177.251151][ T29] audit: type=1326 audit(1731141749.853:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fa97e719 code=0x7ffc0000 [ 177.272714][ T29] audit: type=1326 audit(1731141749.863:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fa5fa97e719 code=0x7ffc0000 [ 177.294561][ T29] audit: type=1326 audit(1731141749.863:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fa97e719 code=0x7ffc0000 [ 177.316405][ T29] audit: type=1326 audit(1731141749.863:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fa97e719 code=0x7ffc0000 [ 177.338326][ T29] audit: type=1326 audit(1731141749.983:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fa5fa97e719 code=0x7ffc0000 [ 177.359821][ T29] audit: type=1326 audit(1731141749.983:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fa97e719 code=0x7ffc0000 [ 177.381895][ T29] audit: type=1326 audit(1731141749.983:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.2.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fa97e719 code=0x7ffc0000 [ 178.615951][ T7625] Cannot find add_set index 1 as target [ 181.202461][ T7629] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 181.209110][ T7629] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 181.216194][ T7629] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 181.239903][ T7629] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 181.561521][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.667783][ T7657] netlink: 'syz.0.366': attribute type 2 has an invalid length. [ 181.800648][ T5879] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 181.950594][ T5879] usb 6-1: Using ep0 maxpacket: 32 [ 181.977076][ T5879] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 182.007085][ T5879] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 182.037559][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.069150][ T5879] usb 6-1: Product: syz [ 182.083326][ T5879] usb 6-1: Manufacturer: syz [ 182.098132][ T5879] usb 6-1: SerialNumber: syz [ 182.135063][ T5879] usb 6-1: config 0 descriptor?? [ 182.153268][ T7647] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 182.161666][ T5879] hub 6-1:0.0: bad descriptor, ignoring hub [ 182.167615][ T5879] hub 6-1:0.0: probe with driver hub failed with error -5 [ 182.177890][ T5879] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input12 [ 183.275846][ T55] Bluetooth: hci1: command 0x041b tx timeout [ 183.287300][ T55] Bluetooth: hci4: command 0x0419 tx timeout [ 183.294626][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 184.409872][ T5909] usb 6-1: USB disconnect, device number 6 [ 184.415895][ C1] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 185.756976][ T7695] fuseblk: Unknown parameter '0x000000000000000b' [ 188.445209][ T7705] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.451486][ T7705] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.478013][ T7705] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 188.500827][ T7705] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.514027][ T7716] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 188.681678][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.090396][ T7745] ip6gretap1: entered promiscuous mode [ 189.134779][ T7745] ip6gretap1: entered allmulticast mode [ 190.171392][ T5846] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 190.522610][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout [ 190.529385][ T55] Bluetooth: hci4: command 0x0419 tx timeout [ 190.620839][ T5841] Bluetooth: hci1: command 0x041b tx timeout [ 190.693379][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 191.388584][ T5846] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 191.544988][ T5846] usb 3-1: config 0 has no interface number 0 [ 192.203032][ T7767] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.212002][ T7767] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.443010][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.449633][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.726996][ T7825] UBIFS error (pid: 7825): cannot open "", error -22 [ 197.256839][ T5846] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 197.461848][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.486767][ T5846] usb 3-1: config 0 descriptor?? [ 197.493516][ T5846] usb 3-1: can't set config #0, error -32 [ 197.676464][ T7846] netlink: 104 bytes leftover after parsing attributes in process `syz.5.413'. [ 197.950869][ T5909] usb 3-1: USB disconnect, device number 8 [ 199.130562][ T5832] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 199.849778][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 200.195513][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 200.245490][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.332673][ T25] usb 3-1: config 0 descriptor?? [ 200.406896][ T25] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 200.907062][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'. [ 200.953260][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 200.964239][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 200.981600][ T5832] usb 4-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 200.990832][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.017616][ T5832] usb 4-1: Product: syz [ 201.024617][ T5832] usb 4-1: Manufacturer: syz [ 201.029310][ T5832] usb 4-1: SerialNumber: syz [ 201.048662][ T5832] usb 4-1: config 0 descriptor?? [ 201.069056][ T5832] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 201.082981][ T5832] usb 4-1: Detected SIO [ 201.090361][ T5832] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 201.150679][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 201.267416][ T7865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.287299][ T7865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.304039][ T7865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.310624][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 201.320057][ T7865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.334283][ T5832] usb 4-1: USB disconnect, device number 16 [ 201.334690][ T25] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 201.351290][ T5832] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 201.380856][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.386558][ T5832] ftdi_sio 4-1:0.0: device disconnected [ 201.407259][ T25] usb 2-1: Product: syz [ 201.416181][ T25] usb 2-1: Manufacturer: syz [ 201.434571][ T25] usb 2-1: SerialNumber: syz [ 201.445057][ T25] r8152-cfgselector 2-1: Unknown version 0x0000 [ 201.455833][ T25] r8152-cfgselector 2-1: config 0 descriptor?? [ 201.577514][ T7897] Cannot find set identified by id 0 to match [ 201.605000][ T7897] netlink: 8280 bytes leftover after parsing attributes in process `syz.5.422'. [ 201.668377][ T5909] usb 3-1: USB disconnect, device number 9 [ 201.848207][ T7897] netlink: 8280 bytes leftover after parsing attributes in process `syz.5.422'. [ 202.023428][ T7907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.426'. [ 202.088436][ T7907] nbd: must specify at least one socket [ 203.764239][ T25] r8152-cfgselector 2-1: Unknown version 0x0000 [ 203.771649][ T25] r8152-cfgselector 2-1: bad CDC descriptors [ 203.784585][ T25] r8152-cfgselector 2-1: USB disconnect, device number 9 [ 204.055319][ T7938] FAULT_INJECTION: forcing a failure. [ 204.055319][ T7938] name failslab, interval 1, probability 0, space 0, times 0 [ 204.068467][ T7938] CPU: 0 UID: 0 PID: 7938 Comm: syz.3.430 Not tainted 6.12.0-rc6-syzkaller-00225-g50643bbc9eb6 #0 [ 204.079092][ T7938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 204.089170][ T7938] Call Trace: [ 204.092464][ T7938] [ 204.095408][ T7938] dump_stack_lvl+0x241/0x360 [ 204.100110][ T7938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.105326][ T7938] ? __pfx__printk+0x10/0x10 [ 204.109941][ T7938] ? irqentry_exit+0x63/0x90 [ 204.114545][ T7938] ? lockdep_hardirqs_on+0x99/0x150 [ 204.119764][ T7938] should_fail_ex+0x3b0/0x4e0 [ 204.124465][ T7938] should_failslab+0xac/0x100 [ 204.129159][ T7938] ? sctp_add_bind_addr+0x89/0x3a0 [ 204.134287][ T7938] __kmalloc_cache_noprof+0x6c/0x2c0 [ 204.139590][ T7938] sctp_add_bind_addr+0x89/0x3a0 [ 204.144555][ T7938] sctp_copy_local_addr_list+0x311/0x500 [ 204.150211][ T7938] ? sctp_copy_local_addr_list+0xab/0x500 [ 204.155948][ T7938] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 204.162121][ T7938] ? sctp_v4_is_any+0x35/0x60 [ 204.166824][ T7938] sctp_bind_addr_copy+0xad/0x3b0 [ 204.171867][ T7938] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 204.178213][ T7938] sctp_connect_new_asoc+0x2f3/0x6c0 [ 204.183515][ T7938] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 204.189331][ T7938] ? sctp_sendmsg+0xbb9/0x3520 [ 204.194114][ T7938] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 204.199930][ T7938] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 204.205508][ T7938] sctp_sendmsg+0x219a/0x3520 [ 204.210214][ T7938] ? tomoyo_socket_sendmsg_permission+0x95/0x420 [ 204.216591][ T7938] ? __pfx_sctp_sendmsg+0x10/0x10 [ 204.221645][ T7938] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 204.228450][ T7938] ? inet_sendmsg+0x330/0x390 [ 204.233154][ T7938] __sock_sendmsg+0x1a6/0x270 [ 204.237857][ T7938] ____sys_sendmsg+0x52a/0x7e0 [ 204.242666][ T7938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.247990][ T7938] __sys_sendmmsg+0x3ab/0x730 [ 204.252703][ T7938] ? __pfx___sys_sendmmsg+0x10/0x10 [ 204.257926][ T7938] ? finish_task_switch+0x1e5/0x870 [ 204.263181][ T7938] ? __pfx___schedule+0x10/0x10 [ 204.268064][ T7938] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 204.274098][ T7938] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 204.280482][ T7938] __x64_sys_sendmmsg+0xa0/0xb0 [ 204.285386][ T7938] do_syscall_64+0xf3/0x230 [ 204.289917][ T7938] ? clear_bhb_loop+0x35/0x90 [ 204.294622][ T7938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.300633][ T7938] RIP: 0033:0x7fc25c77e719 [ 204.305079][ T7938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.324704][ T7938] RSP: 002b:00007fc25abf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 204.333141][ T7938] RAX: ffffffffffffffda RBX: 00007fc25c936130 RCX: 00007fc25c77e719 [ 204.341132][ T7938] RDX: 0000000000000002 RSI: 0000000020000880 RDI: 0000000000000005 [ 204.349209][ T7938] RBP: 00007fc25abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 204.357209][ T7938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.365279][ T7938] R13: 0000000000000000 R14: 00007fc25c936130 R15: 00007fffe28d7be8 [ 204.373268][ T7938] [ 208.927639][ T7991] netlink: 12 bytes leftover after parsing attributes in process `syz.5.444'. [ 209.026702][ T7990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 209.081797][ T7990] nbd: must specify at least one socket [ 209.123880][ T7988] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 209.225084][ T7998] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 211.385735][ T8047] program syz.1.456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.531564][ T8047] nvme_fabrics: missing parameter 'transport=%s' [ 211.538296][ T8047] nvme_fabrics: missing parameter 'nqn=%s' [ 211.544602][ T8053] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 213.659124][ T8096] fuse: Bad value for 'fd' [ 214.670342][ T8113] netlink: set zone limit has 8 unknown bytes [ 214.933725][ T8126] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.478'. [ 214.951869][ T8126] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 214.981359][ T8128] fuse: Bad value for 'fd' [ 215.058358][ T8131] netlink: 16 bytes leftover after parsing attributes in process `syz.1.479'. [ 215.220719][ T5832] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 215.402083][ T5832] usb 4-1: Using ep0 maxpacket: 16 [ 215.429057][ T5832] usb 4-1: config 0 has an invalid interface number: 53 but max is 0 [ 215.439426][ T5832] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.476927][ T5832] usb 4-1: config 0 has no interface number 0 [ 215.483358][ T5832] usb 4-1: too many endpoints for config 0 interface 53 altsetting 130: 193, using maximum allowed: 30 [ 215.494574][ T5832] usb 4-1: config 0 interface 53 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 193 [ 215.508351][ T5832] usb 4-1: config 0 interface 53 has no altsetting 0 [ 216.425638][ T5832] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 216.437006][ T5832] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 216.709884][ T5832] usb 4-1: Manufacturer: syz [ 216.774268][ T5832] usb 4-1: config 0 descriptor?? [ 217.052762][ T5832] usb 4-1: USB disconnect, device number 17 [ 217.186281][ T8157] netlink: 'syz.1.487': attribute type 33 has an invalid length. [ 217.194136][ T8157] netlink: 152 bytes leftover after parsing attributes in process `syz.1.487'. [ 218.976276][ T8169] syz.5.491 (8169) used greatest stack depth: 18248 bytes left [ 220.368530][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 220.368544][ T29] audit: type=1326 audit(1731141794.233:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8202 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9f37e719 code=0x7ffc0000 [ 220.464621][ T29] audit: type=1326 audit(1731141794.233:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8202 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9f37e719 code=0x7ffc0000 [ 220.510839][ T29] audit: type=1326 audit(1731141794.263:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8202 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9f37e719 code=0x7ffc0000 [ 220.533268][ T29] audit: type=1326 audit(1731141794.263:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8202 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9f37e719 code=0x7ffc0000 [ 220.620607][ T29] audit: type=1326 audit(1731141794.263:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8202 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fee9f37e719 code=0x7ffc0000 [ 220.692046][ T29] audit: type=1326 audit(1731141794.263:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8202 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9f37e719 code=0x7ffc0000 [ 220.737764][ T8208] netlink: 'syz.0.502': attribute type 3 has an invalid length. [ 220.745763][ T8208] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.502'. [ 220.829668][ T29] audit: type=1326 audit(1731141794.263:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8202 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9f37e719 code=0x7ffc0000 [ 220.858430][ T29] audit: type=1326 audit(1731141794.263:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8202 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fee9f37e719 code=0x7ffc0000 [ 220.953456][ T29] audit: type=1326 audit(1731141794.263:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8202 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9f37e719 code=0x7ffc0000 [ 220.975412][ T29] audit: type=1326 audit(1731141794.263:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8202 comm="syz.0.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9f37e719 code=0x7ffc0000 [ 221.062798][ T5930] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 221.234537][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 221.255360][ T5930] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 221.264087][ T5930] usb 3-1: config 0 has no interface number 0 [ 221.311518][ T5930] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 221.394881][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.403147][ T5930] usb 3-1: Product: syz [ 221.407664][ T5930] usb 3-1: Manufacturer: syz [ 221.412506][ T5930] usb 3-1: SerialNumber: syz [ 221.664975][ T5930] usb 3-1: config 0 descriptor?? [ 221.697824][ T5930] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 221.935724][ T25] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 221.987421][ T8245] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 222.013626][ T8245] CIFS mount error: No usable UNC path provided in device string! [ 222.013626][ T8245] [ 222.023959][ T8245] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 222.110671][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 222.132265][ T25] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 222.168031][ T5930] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 222.194639][ T5930] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 222.210473][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 222.277335][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 222.363622][ T25] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.447108][ T25] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 222.511624][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.695356][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.720729][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.878572][ T25] usb 6-1: GET_CAPABILITIES returned 0 [ 222.885045][ T25] usbtmc 6-1:16.0: can't read capabilities [ 223.131091][ T5882] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 223.273142][ T5930] usb 6-1: USB disconnect, device number 7 [ 223.340902][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 223.359922][ T5882] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 223.386180][ T5882] usb 2-1: config 0 has no interface number 0 [ 223.406010][ T5882] usb 2-1: config 0 interface 205 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 223.426322][ T5882] usb 2-1: New USB device found, idVendor=0079, idProduct=245b, bcdDevice=85.be [ 223.460779][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.500185][ T5882] usb 2-1: Product: syz [ 223.514646][ T5882] usb 2-1: Manufacturer: syz [ 223.527039][ T5882] usb 2-1: SerialNumber: syz [ 223.822352][ T5882] usb 2-1: config 0 descriptor?? [ 224.277604][ T8276] netlink: 'syz.0.515': attribute type 3 has an invalid length. [ 224.285677][ T8276] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.515'. [ 224.466067][ T5882] usb 2-1: USB disconnect, device number 10 [ 225.366346][ T8283] loop9: detected capacity change from 0 to 6 [ 225.451866][ T8283] loop9: [POWERTEC] p1 [ 225.462512][ T8283] loop9: p1 size 46 extends beyond EOD, truncated [ 225.555153][ T8292] loop9: [POWERTEC] p1 [ 225.568466][ T8292] loop9: p1 size 46 extends beyond EOD, truncated [ 225.913309][ T5930] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 226.583062][ T5930] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 226.590969][ T5930] usb 4-1: can't read configurations, error -61 [ 226.720763][ T5930] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 226.956604][ T5930] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 226.964423][ T5930] usb 4-1: can't read configurations, error -61 [ 226.973174][ T5930] usb usb4-port1: attempt power cycle [ 227.174330][ T8332] syz.1.525: attempt to access beyond end of device [ 227.174330][ T8332] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 227.209648][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 227.221588][ T5879] usb 3-1: USB disconnect, device number 10 [ 227.231535][ T8332] EXT4-fs (loop1): unable to read superblock [ 227.246656][ T8337] netlink: 'syz.5.527': attribute type 3 has an invalid length. [ 227.254448][ T8337] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.527'. [ 227.282396][ T5879] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 227.773935][ T5879] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 227.785602][ T5879] quatech2 3-1:0.51: device disconnected [ 227.850751][ T5930] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 227.965948][ T8345] tipc: Can't bind to reserved service type 2 [ 228.077373][ T5930] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 228.085354][ T5930] usb 4-1: can't read configurations, error -61 [ 228.423337][ T5879] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 228.807000][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 229.225255][ T5879] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 229.235052][ T5879] usb 3-1: config 0 has no interface number 0 [ 229.241685][ T5879] usb 3-1: config 0 interface 205 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 229.258829][ T5879] usb 3-1: New USB device found, idVendor=0079, idProduct=245b, bcdDevice=85.be [ 229.281092][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.298946][ T5879] usb 3-1: Product: syz [ 229.303479][ T5879] usb 3-1: Manufacturer: syz [ 229.308148][ T5879] usb 3-1: SerialNumber: syz [ 229.316439][ T5879] usb 3-1: config 0 descriptor?? [ 229.638557][ T5879] usb 3-1: USB disconnect, device number 11 [ 229.730701][ T8375] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 229.738822][ T8375] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 229.748955][ T8375] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 229.757334][ T8375] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 232.171715][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.543'. [ 232.444497][ T8418] netlink: 'syz.2.548': attribute type 3 has an invalid length. [ 232.452317][ T8418] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.548'. [ 232.890886][ T5882] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 232.990816][ T5832] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 233.061028][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 233.083872][ T5882] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 233.096375][ T5882] usb 3-1: config 0 has no interface number 0 [ 233.102897][ T5882] usb 3-1: config 0 interface 205 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 233.130908][ T5832] usb 6-1: device descriptor read/64, error -71 [ 233.174252][ T5882] usb 3-1: New USB device found, idVendor=0079, idProduct=245b, bcdDevice=85.be [ 233.183754][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.192176][ T5882] usb 3-1: Product: syz [ 233.196856][ T5882] usb 3-1: Manufacturer: syz [ 233.201645][ T5882] usb 3-1: SerialNumber: syz [ 233.209256][ T5882] usb 3-1: config 0 descriptor?? [ 233.410636][ T5832] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 233.852215][ T5832] usb 6-1: device descriptor read/64, error -71 [ 233.973880][ T5882] usb 3-1: USB disconnect, device number 12 [ 234.060936][ T5832] usb usb6-port1: attempt power cycle [ 234.245827][ T8442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.555'. [ 234.317302][ T8442] nbd: must specify at least one socket [ 234.333786][ T8446] FAULT_INJECTION: forcing a failure. [ 234.333786][ T8446] name failslab, interval 1, probability 0, space 0, times 0 [ 234.410601][ T5832] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 234.415222][ T8446] CPU: 1 UID: 0 PID: 8446 Comm: syz.3.557 Not tainted 6.12.0-rc6-syzkaller-00225-g50643bbc9eb6 #0 [ 234.428808][ T8446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 234.438876][ T8446] Call Trace: [ 234.442182][ T8446] [ 234.445131][ T8446] dump_stack_lvl+0x241/0x360 [ 234.449840][ T8446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.455070][ T8446] ? __pfx__printk+0x10/0x10 [ 234.459688][ T8446] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 234.465261][ T8446] ? __pfx___might_resched+0x10/0x10 [ 234.470573][ T8446] should_fail_ex+0x3b0/0x4e0 [ 234.475278][ T8446] ? ptlock_alloc+0x20/0x70 [ 234.479806][ T8446] should_failslab+0xac/0x100 [ 234.484513][ T8446] ? ptlock_alloc+0x20/0x70 [ 234.489044][ T8446] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 234.494449][ T8446] ptlock_alloc+0x20/0x70 [ 234.498800][ T8446] pte_alloc_one+0xd3/0x610 [ 234.503336][ T8446] ? __pfx_pte_alloc_one+0x10/0x10 [ 234.508472][ T8446] ? _raw_spin_unlock+0x28/0x50 [ 234.513344][ T8446] ? __split_huge_pmd+0x37e/0x460 [ 234.518405][ T8446] __pte_alloc+0x79/0x3c0 [ 234.522768][ T8446] ? __pfx___pte_alloc+0x10/0x10 [ 234.527736][ T8446] ? do_raw_spin_unlock+0x13c/0x8b0 [ 234.532960][ T8446] ? pmd_trans_huge_lock+0xa6/0xe0 [ 234.538113][ T8446] move_pages+0x10bb/0x16a0 [ 234.542659][ T8446] ? __pfx_move_pages+0x10/0x10 [ 234.547534][ T8446] ? __might_fault+0xc6/0x120 [ 234.552243][ T8446] userfaultfd_ioctl+0x5164/0x66f0 [ 234.557382][ T8446] ? __kernel_text_address+0xd/0x40 [ 234.562629][ T8446] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 234.568110][ T8446] ? stack_trace_save+0x118/0x1d0 [ 234.573165][ T8446] ? __pfx_stack_trace_save+0x10/0x10 [ 234.578561][ T8446] ? stack_depot_save_flags+0x29/0x830 [ 234.584065][ T8446] ? kasan_save_track+0x51/0x80 [ 234.588932][ T8446] ? kasan_save_track+0x3f/0x80 [ 234.593897][ T8446] ? kasan_save_free_info+0x40/0x50 [ 234.599112][ T8446] ? __kasan_slab_free+0x59/0x70 [ 234.604069][ T8446] ? kfree+0x1a0/0x440 [ 234.608151][ T8446] ? tomoyo_path_number_perm+0x68d/0x880 [ 234.613802][ T8446] ? security_file_ioctl+0xc6/0x2a0 [ 234.619025][ T8446] ? __se_sys_ioctl+0x47/0x170 [ 234.623805][ T8446] ? do_syscall_64+0xf3/0x230 [ 234.628511][ T8446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.634600][ T8446] ? do_vfs_ioctl+0xf08/0x2e40 [ 234.639389][ T8446] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 234.644438][ T8446] ? mark_lock+0x9a/0x360 [ 234.648804][ T8446] ? tomoyo_path_number_perm+0x208/0x880 [ 234.654453][ T8446] ? __pfx_lock_release+0x10/0x10 [ 234.659502][ T8446] ? lockdep_hardirqs_on+0x99/0x150 [ 234.664727][ T8446] ? kfree+0x1a0/0x440 [ 234.668811][ T8446] ? tomoyo_path_number_perm+0x68d/0x880 [ 234.674556][ T8446] ? tomoyo_path_number_perm+0x71a/0x880 [ 234.680214][ T8446] ? tomoyo_path_number_perm+0x208/0x880 [ 234.685863][ T8446] ? smack_log+0x123/0x540 [ 234.690292][ T8446] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 234.696292][ T8446] ? __pfx_smack_log+0x10/0x10 [ 234.701071][ T8446] ? smk_access+0x4ab/0x4e0 [ 234.705596][ T8446] ? smk_tskacc+0x300/0x370 [ 234.710118][ T8446] ? smack_file_ioctl+0x2f7/0x3a0 [ 234.715166][ T8446] ? __pfx_smack_file_ioctl+0x10/0x10 [ 234.720562][ T8446] ? __fget_files+0x3f3/0x470 [ 234.725270][ T8446] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 234.730746][ T8446] __se_sys_ioctl+0xf9/0x170 [ 234.735355][ T8446] do_syscall_64+0xf3/0x230 [ 234.739878][ T8446] ? clear_bhb_loop+0x35/0x90 [ 234.744572][ T8446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.750478][ T8446] RIP: 0033:0x7fc25c77e719 [ 234.754907][ T8446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.774534][ T8446] RSP: 002b:00007fc25d4b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.782976][ T8446] RAX: ffffffffffffffda RBX: 00007fc25c935f80 RCX: 00007fc25c77e719 [ 234.790968][ T8446] RDX: 0000000020000040 RSI: 00000000c028aa05 RDI: 0000000000000004 [ 234.798965][ T8446] RBP: 00007fc25d4b4090 R08: 0000000000000000 R09: 0000000000000000 [ 234.806959][ T8446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.814951][ T8446] R13: 0000000000000000 R14: 00007fc25c935f80 R15: 00007fffe28d7be8 [ 234.822962][ T8446] [ 234.833222][ T5832] usb 6-1: device descriptor read/8, error -71 [ 235.124999][ T5832] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 235.345041][ T8455] netlink: 'syz.3.558': attribute type 13 has an invalid length. [ 236.559948][ T5832] usb 6-1: device descriptor read/8, error -71 [ 236.623197][ T8461] xt_ecn: cannot match TCP bits for non-tcp packets [ 236.671191][ T5832] usb usb6-port1: unable to enumerate USB device [ 236.798821][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 236.798840][ T29] audit: type=1326 audit(1731141810.663:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8472 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 236.955888][ T29] audit: type=1326 audit(1731141810.713:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8472 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 238.186307][ T5832] IPVS: starting estimator thread 0... [ 238.222953][ T29] audit: type=1326 audit(1731141810.753:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8472 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 238.301435][ T8487] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 238.309131][ T8487] netlink: 113592 bytes leftover after parsing attributes in process `syz.2.568'. [ 238.318712][ T8487] netlink: 9 bytes leftover after parsing attributes in process `syz.2.568'. [ 238.330794][ T8483] IPVS: using max 22 ests per chain, 52800 per kthread [ 238.381133][ T29] audit: type=1326 audit(1731141810.753:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8472 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f868eb7e753 code=0x7ffc0000 [ 238.473777][ T29] audit: type=1326 audit(1731141812.073:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8472 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 238.496737][ T29] audit: type=1326 audit(1731141812.073:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8472 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 238.518535][ T29] audit: type=1326 audit(1731141812.073:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8472 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 238.542801][ T29] audit: type=1326 audit(1731141812.073:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8472 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 238.620828][ T29] audit: type=1326 audit(1731141812.073:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8472 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 238.656561][ T29] audit: type=1326 audit(1731141812.073:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8472 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 239.054145][ T5832] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 239.252239][ T5832] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 239.261456][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.271523][ T5832] usb 4-1: config 0 descriptor?? [ 239.278835][ T5832] cp210x 4-1:0.0: cp210x converter detected [ 239.852931][ T5832] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 239.968159][ T5832] usb 4-1: cp210x converter now attached to ttyUSB0 [ 241.764188][ T8521] 9p: Unknown uid 00000000004294967295 [ 242.551905][ T8523] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.559649][ T8523] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.690019][ T8524] vivid-001: kernel_thread() failed [ 243.009896][ T5879] usb 4-1: USB disconnect, device number 22 [ 243.109790][ T5879] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 243.255212][ T5879] cp210x 4-1:0.0: device disconnected [ 243.490175][ T8549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.588'. [ 243.499686][ T8549] nbd: must specify at least one socket [ 244.484670][ T5882] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 245.034477][ T8568] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 245.741905][ T5882] usb 6-1: config index 0 descriptor too short (expected 4114, got 18) [ 245.742600][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 245.742616][ T29] audit: type=1326 audit(1731141819.613:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8573 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5957e719 code=0x7ffc0000 [ 245.759704][ T5882] usb 6-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 245.850757][ T29] audit: type=1326 audit(1731141819.683:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8573 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7eff5957e719 code=0x7ffc0000 [ 245.888589][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.911037][ T5882] usb 6-1: Product: syz [ 245.916490][ T5882] usb 6-1: Manufacturer: syz [ 245.930774][ T29] audit: type=1326 audit(1731141819.683:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8573 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5957e719 code=0x7ffc0000 [ 245.952649][ T5882] usb 6-1: SerialNumber: syz [ 245.960189][ T5882] usb 6-1: config 0 descriptor?? [ 245.966865][ T29] audit: type=1326 audit(1731141819.683:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8573 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff5957d0b0 code=0x7ffc0000 [ 246.049597][ T29] audit: type=1326 audit(1731141819.683:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8573 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff5957e31b code=0x7ffc0000 [ 246.090654][ T5909] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 246.266060][ T29] audit: type=1326 audit(1731141819.683:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8573 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff5957e31b code=0x7ffc0000 [ 246.288082][ T29] audit: type=1326 audit(1731141819.683:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8573 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff5957e31b code=0x7ffc0000 [ 246.314792][ T29] audit: type=1326 audit(1731141819.683:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8573 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff5957e31b code=0x7ffc0000 [ 246.348260][ T29] audit: type=1326 audit(1731141819.833:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8573 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff5957e31b code=0x7ffc0000 [ 246.379576][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.442080][ T5909] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 246.463885][ T29] audit: type=1326 audit(1731141819.903:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8573 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff5957e31b code=0x7ffc0000 [ 246.552155][ T8536] netlink: 44 bytes leftover after parsing attributes in process `syz.5.585'. [ 246.564091][ T5909] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 247.074126][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=21 [ 247.091083][ T5909] usb 2-1: SerialNumber: syz [ 247.098641][ T5909] usb 2-1: config 0 descriptor?? [ 247.103110][ T5882] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 247.135952][ T5882] asix 6-1:0.0: probe with driver asix failed with error -71 [ 247.188671][ T5882] usb 6-1: USB disconnect, device number 12 [ 247.503928][ T5909] usb 2-1: USB disconnect, device number 11 [ 251.386956][ T8629] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 251.397287][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 251.397304][ T29] audit: type=1326 audit(1731141825.263:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8626 comm="syz.2.613" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa5fa97e719 code=0x0 [ 251.551985][ T8632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.613'. [ 252.557907][ T5879] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 253.043782][ T5879] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 253.055018][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.389407][ T5879] usb 6-1: Product: syz [ 253.393750][ T5879] usb 6-1: Manufacturer: syz [ 253.398977][ T5879] usb 6-1: SerialNumber: syz [ 253.415283][ T5879] usb 6-1: config 0 descriptor?? [ 253.423004][ T5879] powermate 6-1:0.0: probe with driver powermate failed with error -22 [ 253.517188][ T8646] netlink: 60 bytes leftover after parsing attributes in process `syz.3.617'. [ 253.526477][ T8646] netlink: 16 bytes leftover after parsing attributes in process `syz.3.617'. [ 253.535459][ T8646] netlink: 60 bytes leftover after parsing attributes in process `syz.3.617'. [ 254.492556][ T8655] warning: `syz.1.619' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 255.671243][ T5882] usb 6-1: USB disconnect, device number 13 [ 255.774712][ T8677] team_slave_0: entered promiscuous mode [ 255.780730][ T8677] team_slave_1: entered promiscuous mode [ 255.950472][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.963155][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.652651][ T5922] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 257.835068][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.920901][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.939434][ T5922] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 257.948907][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.966866][ T5922] usb 4-1: config 0 descriptor?? [ 257.979848][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 258.304369][ T5882] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 258.470734][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 258.477688][ T5882] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.487761][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 258.497812][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.508127][ T5882] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.521616][ T5882] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 258.531108][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.566677][ T8711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.575796][ T8711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.670776][ T5846] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 258.761559][ T5882] usb 3-1: GET_CAPABILITIES returned 0 [ 258.767124][ T5882] usbtmc 3-1:16.0: can't read capabilities [ 258.820814][ T5846] usb 6-1: Using ep0 maxpacket: 32 [ 258.832846][ T5846] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 258.847315][ T5846] usb 6-1: config 0 has no interface number 0 [ 258.859609][ T5846] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 258.869964][ T5846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.878282][ T5846] usb 6-1: Product: syz [ 258.883083][ T5846] usb 6-1: Manufacturer: syz [ 258.887728][ T5846] usb 6-1: SerialNumber: syz [ 258.897146][ T5846] usb 6-1: config 0 descriptor?? [ 258.911145][ T5846] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 259.004307][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 259.201058][ T5846] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 259.218574][ T5846] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 259.356936][ T5922] usbhid 4-1:0.0: can't add hid device: -71 [ 259.363508][ T5922] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 259.398805][ T5922] usb 4-1: USB disconnect, device number 23 [ 259.753610][ T8737] netlink: 'syz.1.642': attribute type 13 has an invalid length. [ 260.478920][ T8724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.499138][ T8724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.712069][ T8739] capability: warning: `syz.1.644' uses 32-bit capabilities (legacy support in use) [ 260.863914][ T8750] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 260.974488][ T5882] usb 3-1: USB disconnect, device number 13 [ 261.220644][ T5832] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 261.397320][ T8755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.452072][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 261.452490][ T5922] usb 6-1: USB disconnect, device number 14 [ 261.471659][ T5922] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 261.504784][ T5922] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 261.517658][ T5922] quatech2 6-1:0.51: device disconnected [ 261.572391][ T5832] usb 4-1: Using ep0 maxpacket: 16 [ 261.586886][ T5832] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 261.615296][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.648918][ T5832] usb 4-1: Product: syz [ 261.664887][ T5832] usb 4-1: Manufacturer: syz [ 261.679301][ T5832] usb 4-1: SerialNumber: syz [ 261.703530][ T5832] r8152-cfgselector 4-1: Unknown version 0x0000 [ 261.719639][ T5832] r8152-cfgselector 4-1: config 0 descriptor?? [ 261.731496][ T8773] No such timeout policy "syz0" [ 262.002728][ T8779] FAULT_INJECTION: forcing a failure. [ 262.002728][ T8779] name failslab, interval 1, probability 0, space 0, times 0 [ 262.002763][ T8779] CPU: 0 UID: 0 PID: 8779 Comm: syz.1.656 Not tainted 6.12.0-rc6-syzkaller-00225-g50643bbc9eb6 #0 [ 262.002787][ T8779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 262.002807][ T8779] Call Trace: [ 262.002815][ T8779] [ 262.002824][ T8779] dump_stack_lvl+0x241/0x360 [ 262.002854][ T8779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.002878][ T8779] ? __pfx__printk+0x10/0x10 [ 262.002911][ T8779] should_fail_ex+0x3b0/0x4e0 [ 262.002936][ T8779] ? blk_rq_map_user_iov+0xf77/0x24d0 [ 262.002956][ T8779] should_failslab+0xac/0x100 [ 262.002983][ T8779] ? blk_rq_map_user_iov+0xf77/0x24d0 [ 262.003003][ T8779] __kmalloc_noprof+0xd8/0x400 [ 262.003028][ T8779] blk_rq_map_user_iov+0xf77/0x24d0 [ 262.003074][ T8779] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 262.003100][ T8779] ? stack_depot_save_flags+0x6e4/0x830 [ 262.003140][ T8779] ? __alloc_pages_noprof+0x354/0x710 [ 262.003168][ T8779] ? import_ubuf+0x97/0x1d0 [ 262.003189][ T8779] blk_rq_map_user_io+0x288/0x420 [ 262.003212][ T8779] ? sg_common_write+0xb5f/0x14c0 [ 262.003239][ T8779] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 262.003264][ T8779] ? alloc_pages_mpol_noprof+0x417/0x680 [ 262.003300][ T8779] ? __mutex_unlock_slowpath+0x21d/0x750 [ 262.003321][ T8779] ? sg_build_indirect+0x101/0x860 [ 262.003344][ T8779] ? trace_kmalloc+0x1f/0xd0 [ 262.003366][ T8779] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 262.003389][ T8779] ? sg_build_indirect+0x5e2/0x860 [ 262.003424][ T8779] sg_common_write+0xd68/0x14c0 [ 262.003464][ T8779] ? __pfx_sg_common_write+0x10/0x10 [ 262.003493][ T8779] ? __might_fault+0xc6/0x120 [ 262.003521][ T8779] sg_write+0xa5d/0xf10 [ 262.003552][ T8779] ? __pfx_sg_write+0x10/0x10 [ 262.003609][ T8779] ? bpf_lsm_file_permission+0x9/0x10 [ 262.003626][ T8779] ? security_file_permission+0x74/0x280 [ 262.003652][ T8779] ? rw_verify_area+0x1c3/0x6f0 [ 262.003677][ T8779] vfs_writev+0x5a9/0xba0 [ 262.003713][ T8779] ? __pfx_sg_write+0x10/0x10 [ 262.003737][ T8779] ? __pfx_vfs_writev+0x10/0x10 [ 262.003783][ T8779] ? fdget_pos+0x19a/0x320 [ 262.003810][ T8779] do_writev+0x1b1/0x350 [ 262.003834][ T8779] ? __pfx_do_writev+0x10/0x10 [ 262.003855][ T8779] ? do_syscall_64+0x100/0x230 [ 262.003879][ T8779] ? do_syscall_64+0xb6/0x230 [ 262.003904][ T8779] do_syscall_64+0xf3/0x230 [ 262.003925][ T8779] ? clear_bhb_loop+0x35/0x90 [ 262.003948][ T8779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.003976][ T8779] RIP: 0033:0x7eff5957e719 [ 262.003994][ T8779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.004011][ T8779] RSP: 002b:00007eff579f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 262.004034][ T8779] RAX: ffffffffffffffda RBX: 00007eff59736058 RCX: 00007eff5957e719 [ 262.004049][ T8779] RDX: 0000000000000004 RSI: 0000000020000400 RDI: 0000000000000006 [ 262.004063][ T8779] RBP: 00007eff579f6090 R08: 0000000000000000 R09: 0000000000000000 [ 262.004076][ T8779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.004089][ T8779] R13: 0000000000000000 R14: 00007eff59736058 R15: 00007ffe22613778 [ 262.004117][ T8779] [ 262.290456][ T8752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.290787][ T8752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.470369][ T5909] r8152-cfgselector 4-1: USB disconnect, device number 24 [ 268.194784][ T8851] netlink: 'syz.5.675': attribute type 9 has an invalid length. [ 268.203715][ T8851] netlink: 'syz.5.675': attribute type 7 has an invalid length. [ 268.212927][ T8851] netlink: 'syz.5.675': attribute type 8 has an invalid length. [ 268.849346][ T8857] FAULT_INJECTION: forcing a failure. [ 268.849346][ T8857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.863866][ T8857] CPU: 1 UID: 0 PID: 8857 Comm: syz.3.678 Not tainted 6.12.0-rc6-syzkaller-00225-g50643bbc9eb6 #0 [ 268.874490][ T8857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 268.884577][ T8857] Call Trace: [ 268.887870][ T8857] [ 268.890814][ T8857] dump_stack_lvl+0x241/0x360 [ 268.895514][ T8857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.900736][ T8857] ? __pfx__printk+0x10/0x10 [ 268.905357][ T8857] ? _printk+0xa/0x120 [ 268.909452][ T8857] should_fail_ex+0x3b0/0x4e0 [ 268.914151][ T8857] _copy_from_user+0x2f/0xc0 [ 268.918754][ T8857] do_ipt_set_ctl+0x731/0x1250 [ 268.923538][ T8857] ? __pfx___might_resched+0x10/0x10 [ 268.928840][ T8857] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 268.934141][ T8857] ? __pfx_lock_release+0x10/0x10 [ 268.939186][ T8857] ? preempt_schedule_thunk+0x1a/0x30 [ 268.944585][ T8857] ? __mutex_unlock_slowpath+0x21d/0x750 [ 268.950231][ T8857] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 268.955623][ T8857] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 268.961627][ T8857] ? __pfx_ip_setsockopt+0x10/0x10 [ 268.966765][ T8857] nf_setsockopt+0x295/0x2c0 [ 268.971376][ T8857] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 268.977284][ T8857] do_sock_setsockopt+0x3af/0x720 [ 268.982331][ T8857] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 268.987890][ T8857] ? __fget_files+0x29/0x470 [ 268.992497][ T8857] ? __fget_files+0x3f3/0x470 [ 268.997191][ T8857] ? __fget_files+0x29/0x470 [ 269.001813][ T8857] __sys_setsockopt+0x1a2/0x250 [ 269.006684][ T8857] __x64_sys_setsockopt+0xb5/0xd0 [ 269.011733][ T8857] do_syscall_64+0xf3/0x230 [ 269.016259][ T8857] ? clear_bhb_loop+0x35/0x90 [ 269.020954][ T8857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.026864][ T8857] RIP: 0033:0x7fc25c77e719 [ 269.031297][ T8857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.050916][ T8857] RSP: 002b:00007fc25abf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 269.059352][ T8857] RAX: ffffffffffffffda RBX: 00007fc25c936130 RCX: 00007fc25c77e719 [ 269.067339][ T8857] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000008 [ 269.075326][ T8857] RBP: 00007fc25abf6090 R08: 00000000000002c0 R09: 0000000000000000 [ 269.083310][ T8857] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 269.091290][ T8857] R13: 0000000000000000 R14: 00007fc25c936130 R15: 00007fffe28d7be8 [ 269.099291][ T8857] [ 269.718262][ T8862] netlink: 16 bytes leftover after parsing attributes in process `syz.3.679'. [ 272.030757][ T8879] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 272.037745][ T8879] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 272.096727][ T8879] vhci_hcd vhci_hcd.0: Device attached [ 272.153581][ T8882] vhci_hcd: connection closed [ 272.160017][ T11] vhci_hcd: stop threads [ 272.177189][ T11] vhci_hcd: release socket [ 272.202904][ T8890] sctp: [Deprecated]: syz.2.689 (pid 8890) Use of int in maxseg socket option. [ 272.202904][ T8890] Use struct sctp_assoc_value instead [ 272.236636][ T11] vhci_hcd: disconnect device [ 272.350602][ T5882] vhci_hcd: vhci_device speed not set [ 272.374796][ T8890] binder: 8889:8890 ioctl c0306201 20000580 returned -14 [ 274.808503][ T8913] netlink: 'syz.1.692': attribute type 13 has an invalid length. [ 276.238769][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.697'. [ 276.508148][ T5832] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 276.850770][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 276.871110][ T5832] usb 3-1: too many configurations: 255, using maximum allowed: 8 [ 276.884052][ T5832] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 276.892149][ T5832] usb 3-1: can't read configurations, error -61 [ 277.151295][ T5832] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 277.214287][ T8950] FAULT_INJECTION: forcing a failure. [ 277.214287][ T8950] name failslab, interval 1, probability 0, space 0, times 0 [ 277.381029][ T8950] CPU: 0 UID: 0 PID: 8950 Comm: syz.5.704 Not tainted 6.12.0-rc6-syzkaller-00225-g50643bbc9eb6 #0 [ 277.391662][ T8950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 277.401715][ T8950] Call Trace: [ 277.404991][ T8950] [ 277.407922][ T8950] dump_stack_lvl+0x241/0x360 [ 277.412602][ T8950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.417797][ T8950] ? __pfx__printk+0x10/0x10 [ 277.422390][ T8950] ? fs_reclaim_acquire+0x93/0x130 [ 277.427497][ T8950] ? __pfx___might_resched+0x10/0x10 [ 277.432776][ T8950] should_fail_ex+0x3b0/0x4e0 [ 277.437447][ T8950] ? tomoyo_encode+0x26f/0x540 [ 277.442220][ T8950] should_failslab+0xac/0x100 [ 277.446931][ T8950] ? tomoyo_encode+0x26f/0x540 [ 277.451690][ T8950] __kmalloc_noprof+0xd8/0x400 [ 277.456448][ T8950] tomoyo_encode+0x26f/0x540 [ 277.461058][ T8950] tomoyo_mount_permission+0x356/0xb80 [ 277.466521][ T8950] ? stack_depot_save_flags+0x29/0x830 [ 277.471973][ T8950] ? tomoyo_mount_permission+0x295/0xb80 [ 277.477617][ T8950] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 277.483636][ T8950] ? hook_sb_mount+0x122/0x390 [ 277.488404][ T8950] ? security_sb_mount+0x22/0x2f0 [ 277.493422][ T8950] security_sb_mount+0xe0/0x2f0 [ 277.498267][ T8950] path_mount+0xb9/0xfa0 [ 277.502501][ T8950] ? kmem_cache_free+0x1a2/0x420 [ 277.507429][ T8950] ? user_path_at+0x44/0x60 [ 277.511928][ T8950] __se_sys_mount+0x2d6/0x3c0 [ 277.516613][ T8950] ? __pfx___se_sys_mount+0x10/0x10 [ 277.521806][ T8950] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 277.528129][ T8950] ? __irq_exit_rcu+0x100/0x1c0 [ 277.532972][ T8950] ? __x64_sys_mount+0x20/0xc0 [ 277.537728][ T8950] do_syscall_64+0xf3/0x230 [ 277.542222][ T8950] ? clear_bhb_loop+0x35/0x90 [ 277.546890][ T8950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.552784][ T8950] RIP: 0033:0x7f868eb7e719 [ 277.557210][ T8950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.576806][ T8950] RSP: 002b:00007f868f90f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 277.585213][ T8950] RAX: ffffffffffffffda RBX: 00007f868ed36058 RCX: 00007f868eb7e719 [ 277.593174][ T8950] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000000 [ 277.601134][ T8950] RBP: 00007f868f90f090 R08: 0000000020001040 R09: 0000000000000000 [ 277.609095][ T8950] R10: 0000000002204c3b R11: 0000000000000246 R12: 0000000000000001 [ 277.617058][ T8950] R13: 0000000000000000 R14: 00007f868ed36058 R15: 00007ffe47e6d708 [ 277.625049][ T8950] [ 277.688444][ T8953] netlink: 'syz.0.706': attribute type 13 has an invalid length. [ 278.237553][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 278.243781][ T5832] usb 3-1: too many configurations: 255, using maximum allowed: 8 [ 278.381757][ T5846] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 278.684526][ T5832] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 278.693965][ T5846] usb 4-1: Using ep0 maxpacket: 16 [ 278.706363][ T5846] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 278.735975][ T5832] usb 3-1: can't read configurations, error -61 [ 278.747272][ T5846] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 278.773765][ T5832] usb usb3-port1: attempt power cycle [ 278.782664][ T5846] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 279.266168][ T5832] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 279.336330][ T5846] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.462272][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.475748][ T5832] usb 3-1: device descriptor read/8, error -71 [ 279.487249][ T5846] usb 4-1: Product: syz [ 279.501667][ T5846] usb 4-1: Manufacturer: syz [ 279.513196][ T5846] usb 4-1: SerialNumber: syz [ 280.421660][ T5846] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 281.099217][ T29] audit: type=1326 audit(1731141854.953:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8990 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5957e719 code=0x7ffc0000 [ 281.120772][ T29] audit: type=1326 audit(1731141854.953:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8990 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5957e719 code=0x7ffc0000 [ 281.142863][ T29] audit: type=1326 audit(1731141854.963:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8990 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7eff5957e719 code=0x7ffc0000 [ 281.166276][ T29] audit: type=1326 audit(1731141854.963:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8990 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7eff5957e753 code=0x7ffc0000 [ 281.187717][ T29] audit: type=1326 audit(1731141854.963:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8990 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7eff5957e753 code=0x7ffc0000 [ 281.209062][ T29] audit: type=1326 audit(1731141854.963:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8990 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5957e719 code=0x7ffc0000 [ 281.230584][ T29] audit: type=1326 audit(1731141854.963:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8990 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5957e719 code=0x7ffc0000 [ 281.252691][ T29] audit: type=1326 audit(1731141854.963:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8990 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7eff5957e719 code=0x7ffc0000 [ 281.274365][ T29] audit: type=1326 audit(1731141854.963:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8990 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff5957e719 code=0x7ffc0000 [ 281.295870][ T29] audit: type=1326 audit(1731141854.963:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8990 comm="syz.1.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7eff5957e719 code=0x7ffc0000 [ 281.523883][ T8995] nbd: illegal input index -1 [ 282.050786][ T5846] usb 4-1: USB disconnect, device number 25 [ 283.855888][ T9017] netlink: 'syz.2.717': attribute type 13 has an invalid length. [ 283.956214][ T9008] sp0: Synchronizing with TNC [ 284.215419][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.933910][ T9038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.724'. [ 286.251255][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 286.251311][ T29] audit: type=1326 audit(1731141859.493:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9045 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 286.349515][ T29] audit: type=1326 audit(1731141860.123:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9045 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 286.377471][ T29] audit: type=1326 audit(1731141860.123:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9045 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 286.398998][ T29] audit: type=1326 audit(1731141860.123:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9045 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 286.420804][ T29] audit: type=1326 audit(1731141860.123:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9045 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 286.442390][ T29] audit: type=1326 audit(1731141860.123:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9045 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 286.464128][ T29] audit: type=1326 audit(1731141860.123:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9045 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 286.486020][ T29] audit: type=1326 audit(1731141860.123:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9045 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 286.508044][ T29] audit: type=1326 audit(1731141860.123:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9045 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 286.514065][ T5832] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 286.530224][ T29] audit: type=1326 audit(1731141860.123:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9045 comm="syz.5.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f868eb7e719 code=0x7ffc0000 [ 287.144834][ T5832] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 287.165544][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.200590][ T5832] usb 4-1: Product: syz [ 287.204972][ T5832] usb 4-1: Manufacturer: syz [ 287.210006][ T5832] usb 4-1: SerialNumber: syz [ 287.707585][ T9067] fuse: Unknown parameter 'grou' [ 287.938804][ T5832] usb 4-1: config 0 descriptor?? [ 288.307347][ T5829] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 288.536709][ T5829] usb 6-1: Using ep0 maxpacket: 32 [ 288.714999][ T5829] usb 6-1: config 0 has an invalid interface number: 205 but max is 0 [ 288.723351][ T5829] usb 6-1: config 0 has no interface number 0 [ 288.732313][ T5829] usb 6-1: config 0 interface 205 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 288.753144][ T5829] usb 6-1: New USB device found, idVendor=0079, idProduct=245b, bcdDevice=85.be [ 288.803059][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.805715][ T5832] usb 4-1: USB disconnect, device number 26 [ 288.886888][ T5829] usb 6-1: Product: syz [ 288.891959][ T5829] usb 6-1: Manufacturer: syz [ 288.896593][ T5829] usb 6-1: SerialNumber: syz [ 288.903173][ T9080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.738'. [ 288.933887][ T5829] usb 6-1: config 0 descriptor?? [ 288.950183][ T9080] netlink: 60 bytes leftover after parsing attributes in process `syz.1.738'. [ 288.999734][ T9080] IPv6: sit1: Disabled Multicast RS [ 289.960381][ T5829] usb 6-1: USB disconnect, device number 15 [ 291.218408][ T9133] netlink: 16 bytes leftover after parsing attributes in process `syz.5.750'. [ 291.246826][ T9135] pimreg: entered allmulticast mode [ 291.252351][ T5846] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 291.301292][ T9138] pimreg: left allmulticast mode [ 291.643345][ T5846] usb 4-1: Using ep0 maxpacket: 8 [ 291.687741][ T5846] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 291.698794][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.175044][ T5846] usb 4-1: Product: syz [ 292.179270][ T5846] usb 4-1: Manufacturer: syz [ 292.184016][ T5846] usb 4-1: SerialNumber: syz [ 292.192772][ T5846] usb 4-1: config 0 descriptor?? [ 292.265016][ T9151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.575803][ T9161] fuse: Unknown parameter 'grou' [ 292.668074][ T9157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.689662][ T9157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.714973][ T9125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.736401][ T9125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.908826][ T5846] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 292.919322][ T5846] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 292.953557][ T5846] usb 4-1: USB disconnect, device number 27 [ 294.600864][ T5829] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 294.680926][ T5909] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 294.780868][ T5829] usb 2-1: Using ep0 maxpacket: 8 [ 294.834385][ T5829] usb 2-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 294.844774][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.859020][ T5829] usb 2-1: Product: syz [ 294.863445][ T5829] usb 2-1: Manufacturer: syz [ 294.869225][ T5829] usb 2-1: SerialNumber: syz [ 294.885872][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 294.929144][ T5909] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 294.964990][ T5909] usb 3-1: config 0 has no interface number 0 [ 295.016580][ T5829] usb 2-1: config 0 descriptor?? [ 295.044619][ T5909] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 295.083975][ T5829] gspca_main: spca500-2.14.0 probing 046d:0900 [ 295.090260][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.143782][ T5909] usb 3-1: Product: syz [ 295.150704][ T5909] usb 3-1: Manufacturer: syz [ 295.155844][ T5909] usb 3-1: SerialNumber: syz [ 295.177989][ T5909] usb 3-1: config 0 descriptor?? [ 295.186948][ T5909] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 295.199033][ T9198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.208799][ T9200] netlink: 'syz.3.766': attribute type 4 has an invalid length. [ 295.225445][ T9198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.275585][ T9186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.289779][ T9186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.302207][ T5829] gspca_spca500: reg write: error -71 [ 295.312736][ T5829] gspca_spca500: reg write: error -71 [ 295.321913][ T5829] gspca_spca500: reg write: error -71 [ 295.327953][ T5829] gspca_spca500: reg write: error -71 [ 295.334452][ T5829] gspca_spca500: reg write: error -71 [ 295.340218][ T5829] gspca_spca500: reg write: error -71 [ 295.346949][ T5829] gspca_spca500: reg write: error -71 [ 295.353035][ T5829] gspca_spca500: reg write: error -71 [ 295.358657][ T5829] gspca_spca500: reg write: error -71 [ 295.364611][ T5829] gspca_spca500: reg write: error -71 [ 295.370288][ T5829] gspca_spca500: reg write: error -71 [ 295.376853][ T5829] gspca_spca500: reg write: error -71 [ 295.383346][ T5829] gspca_spca500: reg write: error -71 [ 295.393139][ T5909] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 295.403080][ T5829] gspca_spca500: reg write: error -71 [ 295.415303][ T5909] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 295.429234][ T5829] usb 2-1: USB disconnect, device number 12 [ 295.470705][ T5922] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 295.594602][ T9183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.605438][ T9183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.631245][ T5922] usb 6-1: Using ep0 maxpacket: 16 [ 295.662057][ T5922] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.674499][ T5922] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 295.691799][ T5922] usb 6-1: config 1 has no interface number 1 [ 295.699646][ T5922] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 295.854121][ T5922] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 295.865126][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 295.873085][ T5922] usb 6-1: config 1 interface 2 has no altsetting 0 [ 295.876193][ T5846] usb 3-1: USB disconnect, device number 18 [ 295.881831][ T5922] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 295.895344][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.910953][ T5922] usb 6-1: Product: syz [ 295.915208][ T5922] usb 6-1: Manufacturer: syz [ 295.915957][ T5846] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 295.919807][ T5922] usb 6-1: SerialNumber: syz [ 296.005155][ T5846] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 296.046359][ T5846] quatech2 3-1:0.51: device disconnected [ 296.152089][ T5922] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 296.162081][ T5922] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 296.190983][ T5922] usb 6-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 296.225350][ T5922] usb 6-1: selecting invalid altsetting 0 [ 296.282319][ T5922] usb 6-1: USB disconnect, device number 16 [ 297.263678][ T9031] udevd[9031]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.936196][ T9228] random: crng reseeded on system resumption [ 299.525835][ T9246] fuse: Bad value for 'fd' [ 299.880958][ T5846] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 300.160637][ T5846] usb 6-1: Using ep0 maxpacket: 32 [ 300.167355][ T5846] usb 6-1: config 0 has an invalid interface number: 205 but max is 0 [ 300.176509][ T5846] usb 6-1: config 0 has no interface number 0 [ 300.182867][ T5846] usb 6-1: config 0 interface 205 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 300.196482][ T5846] usb 6-1: New USB device found, idVendor=0079, idProduct=245b, bcdDevice=85.be [ 300.971641][ T5846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.979724][ T5846] usb 6-1: Product: syz [ 300.984278][ T5846] usb 6-1: Manufacturer: syz [ 300.988919][ T5846] usb 6-1: SerialNumber: syz [ 300.996215][ T5846] usb 6-1: config 0 descriptor?? [ 301.145636][ T9273] binder: BINDER_SET_CONTEXT_MGR already set [ 301.153657][ T9273] binder: 9266:9273 ioctl 4018620d 200001c0 returned -16 [ 301.198513][ T9273] 9pnet_fd: Insufficient options for proto=fd [ 301.251757][ T5846] usb 6-1: USB disconnect, device number 17 [ 301.253613][ T9276] binder: 9266:9276 ioctl c0189376 20000000 returned -22 [ 303.310819][ T5832] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 303.355186][ T9322] netlink: 25 bytes leftover after parsing attributes in process `syz.0.802'. [ 303.440686][ T9322] netlink: 'syz.0.802': attribute type 4 has an invalid length. [ 303.650323][ T9331] netlink: 'syz.0.804': attribute type 4 has an invalid length. [ 303.836579][ T5832] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 303.854313][ T5882] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 303.918187][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.057308][ T5832] usb 6-1: config 0 descriptor?? [ 304.254978][ T5882] usb 2-1: too many configurations: 21, using maximum allowed: 8 [ 304.403770][ T5882] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 304.413191][ T5882] usb 2-1: can't read configurations, error -61 [ 304.560934][ T5882] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 304.615542][ T9345] sch_tbf: peakrate 64 is lower than or equals to rate 4294967295 ! [ 304.624992][ T9300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.644845][ T9300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.667175][ T5832] [drm:udl_init] *ERROR* Selecting channel failed [ 304.688517][ T5832] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 304.712692][ T5832] [drm] Initialized udl on minor 2 [ 304.737305][ T5832] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 304.751211][ T5882] usb 2-1: too many configurations: 21, using maximum allowed: 8 [ 304.760855][ T5882] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 304.768435][ T5882] usb 2-1: can't read configurations, error -61 [ 304.780372][ T5832] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 304.789038][ T5882] usb usb2-port1: attempt power cycle [ 304.799707][ T5881] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 304.814387][ T5832] usb 6-1: USB disconnect, device number 18 [ 304.822686][ T5881] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 305.288725][ T5882] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 305.323153][ T5882] usb 2-1: too many configurations: 21, using maximum allowed: 8 [ 305.341173][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'. [ 305.350829][ T9353] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 305.360374][ T9353] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 305.370852][ T5882] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 305.378452][ T5882] usb 2-1: can't read configurations, error -61 [ 305.530732][ T5882] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 305.581866][ T5882] usb 2-1: too many configurations: 21, using maximum allowed: 8 [ 305.595025][ T5882] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 305.616486][ T5882] usb 2-1: can't read configurations, error -61 [ 306.269639][ T5882] usb usb2-port1: unable to enumerate USB device [ 310.271363][ T9380] netlink: 24 bytes leftover after parsing attributes in process `syz.5.818'. [ 310.280402][ T9380] netlink: 348 bytes leftover after parsing attributes in process `syz.5.818'. [ 311.067488][ T9387] netlink: 16 bytes leftover after parsing attributes in process `syz.5.823'. [ 311.091534][ T9388] smb3: Unknown parameter ' ' [ 311.991076][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.825'. [ 311.999928][ T9400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.007452][ T9400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.084857][ T9400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.092731][ T9400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.467937][ T9423] dvmrp1: entered allmulticast mode [ 313.488913][ T9423] dvmrp5: entered allmulticast mode [ 313.541084][ T9423] dvmrp1: left allmulticast mode [ 313.546137][ T9423] dvmrp5: left allmulticast mode [ 313.590340][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.833'. [ 313.620804][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.832'. [ 313.629619][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.832'. [ 313.666676][ T9424] geneve2: entered promiscuous mode [ 313.688379][ T9424] geneve2: entered allmulticast mode [ 314.810657][ T5832] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 315.630610][ T5832] usb 3-1: Using ep0 maxpacket: 8 [ 315.653833][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 315.672367][ T9445] FAULT_INJECTION: forcing a failure. [ 315.672367][ T9445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.677954][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 315.686336][ T9445] CPU: 1 UID: 0 PID: 9445 Comm: syz.0.839 Not tainted 6.12.0-rc6-syzkaller-00225-g50643bbc9eb6 #0 [ 315.705790][ T9445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 315.715846][ T9445] Call Trace: [ 315.719120][ T9445] [ 315.722047][ T9445] dump_stack_lvl+0x241/0x360 [ 315.726730][ T9445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.731929][ T9445] ? __pfx__printk+0x10/0x10 [ 315.736521][ T9445] ? snprintf+0xda/0x120 [ 315.740768][ T9445] should_fail_ex+0x3b0/0x4e0 [ 315.745447][ T9445] _copy_to_user+0x31/0xb0 [ 315.749868][ T9445] simple_read_from_buffer+0xca/0x150 [ 315.755244][ T9445] proc_fail_nth_read+0x1e9/0x250 [ 315.760274][ T9445] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.765822][ T9445] ? rw_verify_area+0x55e/0x6f0 [ 315.770673][ T9445] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 315.776220][ T9445] vfs_read+0x1fc/0xb70 [ 315.780374][ T9445] ? fdget_pos+0x24e/0x320 [ 315.784791][ T9445] ? __pfx_vfs_read+0x10/0x10 [ 315.789470][ T9445] ? __fget_files+0x3f3/0x470 [ 315.794155][ T9445] ? fdget_pos+0x24e/0x320 [ 315.798580][ T9445] ksys_read+0x183/0x2b0 [ 315.802910][ T9445] ? __pfx_ksys_read+0x10/0x10 [ 315.807674][ T9445] ? do_syscall_64+0x100/0x230 [ 315.812439][ T9445] ? do_syscall_64+0xb6/0x230 [ 315.817116][ T9445] do_syscall_64+0xf3/0x230 [ 315.821615][ T9445] ? clear_bhb_loop+0x35/0x90 [ 315.826293][ T9445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.832187][ T9445] RIP: 0033:0x7fee9f37d15c [ 315.836598][ T9445] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 315.856199][ T9445] RSP: 002b:00007feea00a9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 315.864615][ T9445] RAX: ffffffffffffffda RBX: 00007fee9f535f80 RCX: 00007fee9f37d15c [ 315.872617][ T9445] RDX: 000000000000000f RSI: 00007feea00a90a0 RDI: 0000000000000004 [ 315.880586][ T9445] RBP: 00007feea00a9090 R08: 0000000000000000 R09: 0000000000000000 [ 315.888553][ T9445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 315.896518][ T9445] R13: 0000000000000000 R14: 00007fee9f535f80 R15: 00007fff98bcafa8 [ 315.904604][ T9445] [ 315.910734][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 315.931389][ T9447] x_tables: duplicate underflow at hook 1 [ 315.984313][ T5832] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=93.e8 [ 315.993634][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.002258][ T5832] usb 3-1: Product: syz [ 316.006454][ T5832] usb 3-1: Manufacturer: syz [ 316.011141][ T5832] usb 3-1: SerialNumber: syz [ 316.061973][ T5832] usb 3-1: config 0 descriptor?? [ 316.552809][ T5832] usbtest 3-1:0.0: couldn't get endpoints, -22 [ 316.559077][ T5832] usbtest 3-1:0.0: probe with driver usbtest failed with error -22 [ 316.602089][ T5832] usb 3-1: USB disconnect, device number 19 [ 317.455056][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.462540][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.273988][ T5829] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 318.542657][ T5829] usb 4-1: Using ep0 maxpacket: 32 [ 318.659193][ T5829] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 318.668694][ T5829] usb 4-1: config 0 has no interface number 0 [ 318.685407][ T5829] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 318.686953][ T9510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.860'. [ 318.701902][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.713472][ T5829] usb 4-1: Product: syz [ 318.717671][ T5829] usb 4-1: Manufacturer: syz [ 318.727519][ T5829] usb 4-1: SerialNumber: syz [ 318.769706][ T5829] usb 4-1: config 0 descriptor?? [ 318.806897][ T5829] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 319.008243][ T5829] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 319.600159][ T5829] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 319.781325][ T9465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.874305][ T9465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.445356][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 320.460230][ T5829] usb 4-1: USB disconnect, device number 28 [ 320.473199][ T5829] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 320.491124][ T5829] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 320.502824][ T5829] quatech2 4-1:0.51: device disconnected [ 320.609261][ T9539] FAULT_INJECTION: forcing a failure. [ 320.609261][ T9539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.644762][ T9538] bridge0: port 3(vlan2) entered blocking state [ 320.652095][ T9538] bridge0: port 3(vlan2) entered disabled state [ 320.653334][ T9539] CPU: 1 UID: 0 PID: 9539 Comm: syz.2.866 Not tainted 6.12.0-rc6-syzkaller-00225-g50643bbc9eb6 #0 [ 320.658503][ T9538] vlan2: entered allmulticast mode [ 320.668921][ T9539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 320.668938][ T9539] Call Trace: [ 320.668946][ T9539] [ 320.668955][ T9539] dump_stack_lvl+0x241/0x360 [ 320.668985][ T9539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.669007][ T9539] ? __pfx__printk+0x10/0x10 [ 320.669029][ T9539] ? __pfx_lock_release+0x10/0x10 [ 320.669060][ T9539] should_fail_ex+0x3b0/0x4e0 [ 320.714530][ T9539] _copy_from_user+0x2f/0xc0 [ 320.719156][ T9539] copy_msghdr_from_user+0xae/0x680 [ 320.724384][ T9539] ? __pfx___might_resched+0x10/0x10 [ 320.729699][ T9539] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 320.735530][ T9539] ? rcu_is_watching+0x15/0xb0 [ 320.740319][ T9539] ? __might_fault+0xaa/0x120 [ 320.745012][ T9539] do_recvmmsg+0x3f9/0xad0 [ 320.749465][ T9539] ? __pfx_do_recvmmsg+0x10/0x10 [ 320.754451][ T9539] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 320.760369][ T9539] ? ksys_write+0x229/0x2b0 [ 320.764903][ T9539] ? __pfx_lock_release+0x10/0x10 [ 320.769970][ T9539] ? vfs_write+0x730/0xd30 [ 320.774425][ T9539] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 320.780443][ T9539] __x64_sys_recvmmsg+0x199/0x250 [ 320.785471][ T9539] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 320.791012][ T9539] ? do_syscall_64+0x100/0x230 [ 320.795771][ T9539] ? do_syscall_64+0xb6/0x230 [ 320.800439][ T9539] do_syscall_64+0xf3/0x230 [ 320.805031][ T9539] ? clear_bhb_loop+0x35/0x90 [ 320.809729][ T9539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.815635][ T9539] RIP: 0033:0x7fa5fa97e719 [ 320.820043][ T9539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.839658][ T9539] RSP: 002b:00007fa5fb6f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 320.848077][ T9539] RAX: ffffffffffffffda RBX: 00007fa5fab35f80 RCX: 00007fa5fa97e719 [ 320.856052][ T9539] RDX: 000000000400023c RSI: 00000000200055c0 RDI: 0000000000000006 [ 320.864023][ T9539] RBP: 00007fa5fb6f6090 R08: 0000000000000000 R09: 0000000000000000 [ 320.871999][ T9539] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 320.879983][ T9539] R13: 0000000000000000 R14: 00007fa5fab35f80 R15: 00007ffece8b7e88 [ 320.887978][ T9539] [ 320.898296][ T9538] vlan2: left allmulticast mode [ 320.967474][ T9540] netlink: 48 bytes leftover after parsing attributes in process `syz.0.867'. [ 320.978654][ T9540] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 321.031306][ T5846] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 321.162114][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.872'. [ 321.571411][ T5846] usb 6-1: Using ep0 maxpacket: 8 [ 322.072742][ T5846] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.090058][ T5846] usb 6-1: config 0 has no interfaces? [ 322.095677][ T5846] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 322.113196][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.161578][ T5846] usb 6-1: config 0 descriptor?? [ 322.249855][ T9565] random: crng reseeded on system resumption [ 323.351137][ T9573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.359795][ T9573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.391781][ T9542] netlink: 'syz.5.868': attribute type 1 has an invalid length. [ 323.632956][ T5832] usb 6-1: USB disconnect, device number 19 [ 326.074908][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.881'. [ 326.868170][ T9601] random: crng reseeded on system resumption [ 328.691665][ T5846] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 329.181363][ T5846] usb 6-1: Using ep0 maxpacket: 8 [ 329.192891][ T5846] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.207737][ T5846] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.218954][ T5846] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 329.232438][ T5846] usb 6-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 329.245861][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.937700][ T5846] usb 6-1: config 0 descriptor?? [ 330.125574][ T5846] usbhid 6-1:0.0: can't add hid device: -71 [ 330.134395][ T5846] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 330.196927][ T5846] usb 6-1: USB disconnect, device number 20 [ 330.319639][ T9652] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.896'. [ 332.013365][ T9678] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 332.021228][ T9678] #PF: supervisor instruction fetch in kernel mode [ 332.027738][ T9678] #PF: error_code(0x0010) - not-present page [ 332.033724][ T9678] PGD 800000007f302067 P4D 800000007f302067 PUD 7b1d8067 PMD 0 [ 332.041420][ T9678] Oops: Oops: 0010 [#1] PREEMPT SMP KASAN PTI [ 332.047503][ T9678] CPU: 0 UID: 0 PID: 9678 Comm: syz.0.903 Not tainted 6.12.0-rc6-syzkaller-00225-g50643bbc9eb6 #0 [ 332.058102][ T9678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 332.068177][ T9678] RIP: 0010:0x0 [ 332.071664][ T9678] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 332.079053][ T9678] RSP: 0018:ffffc9000348f8d8 EFLAGS: 00010283 [ 332.085149][ T9678] RAX: ffffffff81cdcebc RBX: 0000000000000000 RCX: 0000000000040000 [ 332.093142][ T9678] RDX: ffffc9000c811000 RSI: ffffea000173dc80 RDI: ffff888029c55880 [ 332.101142][ T9678] RBP: ffffc9000348f990 R08: ffffffff81cdce86 R09: 1ffffd40002e7b90 [ 332.109145][ T9678] R10: dffffc0000000000 R11: 0000000000000000 R12: 1ffffd40002e7b90 [ 332.114696][ T5879] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 332.117208][ T9678] R13: ffffea000173dc80 R14: ffffc9000348f920 R15: 1ffffd40002e7b91 [ 332.132736][ T9678] FS: 00007fee9d7f66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 332.141666][ T9678] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.148256][ T9678] CR2: ffffffffffffffd6 CR3: 0000000061782000 CR4: 00000000003526f0 [ 332.156237][ T9678] DR0: 0000000000000621 DR1: 0000000000000000 DR2: 0000000000000000 [ 332.164211][ T9678] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 332.172180][ T9678] Call Trace: [ 332.175461][ T9678] [ 332.178389][ T9678] ? __die_body+0x5f/0xb0 [ 332.182717][ T9678] ? page_fault_oops+0x8e4/0xcc0 [ 332.187666][ T9678] ? __pfx_page_fault_oops+0x10/0x10 [ 332.192959][ T9678] ? __pfx_lock_acquire+0x10/0x10 [ 332.197997][ T9678] ? __folio_batch_add_and_move+0x81a/0xf00 [ 332.203896][ T9678] ? __pfx_lock_release+0x10/0x10 [ 332.208920][ T9678] ? rcu_is_watching+0x15/0xb0 [ 332.213694][ T9678] ? rcu_is_watching+0x15/0xb0 [ 332.218461][ T9678] ? is_errata93+0xbe/0x260 [ 332.222965][ T9678] ? exc_page_fault+0x5ed/0x8c0 [ 332.227840][ T9678] ? asm_exc_page_fault+0x26/0x30 [ 332.232862][ T9678] ? filemap_read_folio+0x106/0x630 [ 332.238059][ T9678] ? filemap_read_folio+0x13c/0x630 [ 332.243254][ T9678] filemap_read_folio+0x14b/0x630 [ 332.248291][ T9678] ? __pfx_filemap_read_folio+0x10/0x10 [ 332.253844][ T9678] ? __filemap_get_folio+0x949/0xbd0 [ 332.259137][ T9678] do_read_cache_folio+0x3f5/0x850 [ 332.264257][ T9678] freader_get_folio+0x57a/0xb50 [ 332.269201][ T9678] freader_fetch+0x9d/0x650 [ 332.273707][ T9678] ? mt_find+0x2a9/0x920 [ 332.278037][ T9678] __build_id_parse+0x188/0x8a0 [ 332.282901][ T9678] ? __pfx___build_id_parse+0x10/0x10 [ 332.288280][ T9678] ? __might_fault+0xc6/0x120 [ 332.292964][ T9678] procfs_procmap_ioctl+0xcf5/0x1600 [ 332.298248][ T9678] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 332.303973][ T9678] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 332.309685][ T9678] __se_sys_ioctl+0xf9/0x170 [ 332.314279][ T9678] do_syscall_64+0xf3/0x230 [ 332.318788][ T9678] ? clear_bhb_loop+0x35/0x90 [ 332.323460][ T9678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.329346][ T9678] RIP: 0033:0x7fee9f37e719 [ 332.333754][ T9678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.353356][ T9678] RSP: 002b:00007fee9d7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.361767][ T9678] RAX: ffffffffffffffda RBX: 00007fee9f536058 RCX: 00007fee9f37e719 [ 332.369729][ T9678] RDX: 0000000020000180 RSI: 00000000c0686611 RDI: 000000000000000b [ 332.377692][ T9678] RBP: 00007fee9f3f139e R08: 0000000000000000 R09: 0000000000000000 [ 332.385662][ T9678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.393624][ T9678] R13: 0000000000000000 R14: 00007fee9f536058 R15: 00007fff98bcafa8 [ 332.401594][ T9678] [ 332.404603][ T9678] Modules linked in: [ 332.408678][ T9678] CR2: 0000000000000000 [ 332.412825][ T9678] ---[ end trace 0000000000000000 ]--- [ 332.418273][ T9678] RIP: 0010:0x0 [ 332.421729][ T9678] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 332.429080][ T9678] RSP: 0018:ffffc9000348f8d8 EFLAGS: 00010283 [ 332.435140][ T9678] RAX: ffffffff81cdcebc RBX: 0000000000000000 RCX: 0000000000040000 [ 332.443111][ T9678] RDX: ffffc9000c811000 RSI: ffffea000173dc80 RDI: ffff888029c55880 [ 332.451079][ T9678] RBP: ffffc9000348f990 R08: ffffffff81cdce86 R09: 1ffffd40002e7b90 [ 332.459042][ T9678] R10: dffffc0000000000 R11: 0000000000000000 R12: 1ffffd40002e7b90 [ 332.467006][ T9678] R13: ffffea000173dc80 R14: ffffc9000348f920 R15: 1ffffd40002e7b91 [ 332.474975][ T9678] FS: 00007fee9d7f66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 332.483899][ T9678] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.490476][ T9678] CR2: ffffffffffffffd6 CR3: 0000000061782000 CR4: 00000000003526f0 [ 332.498447][ T9678] DR0: 0000000000000621 DR1: 0000000000000000 DR2: 0000000000000000 [ 332.506411][ T9678] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 332.514379][ T9678] Kernel panic - not syncing: Fatal exception [ 332.520679][ T9678] Kernel Offset: disabled [ 332.524987][ T9678] Rebooting in 86400 seconds..