last executing test programs: 2m56.23562338s ago: executing program 3 (id=2659): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0xc80, 0x400, 0x1000, 0x400, 0x0, 0x100, 0x18, 0x2, {0xf, 0x6}, {0x8, 0x5}, {0x0, 0xf4f}, {0x9, 0xffffffff, 0x1}, 0x1, 0x10, 0xfffffffa, 0x5, 0x1, 0x5, 0xe289, 0x1, 0x8, 0xe, 0x9, 0x12, 0x2, 0x200, 0x0, 0x6}) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="b9000000000000", @ANYRES64], 0xb8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}]}}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f00000006c0)="099e", 0x2}], 0x1) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=ANY=[], 0x2c}}, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) 2m54.396489166s ago: executing program 3 (id=2667): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r5}) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, r6) landlock_restrict_self(r4, 0x0) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r8 = socket$netlink(0x10, 0x3, 0x9) setsockopt$inet_buf(r7, 0x0, 0x2f, &(0x7f0000000500)="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", 0x1000) connect$netlink(r8, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff}, 0xc) 2m53.096568279s ago: executing program 3 (id=2669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0xd, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24000004) (fail_nth: 5) 2m52.540330388s ago: executing program 3 (id=2671): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0b080510"], 0xe) getpid() r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) connect(r0, &(0x7f0000000080)=@un=@abs, 0x80) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0xac}]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = fanotify_init(0x0, 0x1) r5 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r4, 0x641, 0x4800003a, r5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 2m50.99501991s ago: executing program 3 (id=2674): r0 = socket(0x2c, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000001040)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f00000011c0)="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", 0x10b9}, {&(0x7f00000010c0)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e79cfac437787602035c39b838059f96bd206d4776368ed2a92432e5af71c5ade5950595f35f1b9cc973b7f047775b8855145c58df01fb28b0ad3435360c52f4cccf113c9cd0f8b390", 0x5e}], 0x10000115, &(0x7f00000010c0)}, 0xc900) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0) r6 = syz_io_uring_setup(0x364d, &(0x7f0000000180)={0x0, 0xd25d, 0x13900}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x244}}) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000040)=0x2cc, 0x4) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/crash_elfcorehdr_size', 0x20000, 0x20) read$FUSE(r9, &(0x7f0000003700)={0x2020}, 0x2020) 2m45.3125622s ago: executing program 3 (id=2691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x52d35ce30131f272}) socket(0xa, 0x3, 0x3a) socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB], 0x14) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sync() r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000380)={0x1, @vbi={0x2, 0x9, 0x1, 0xa0363159, [0x3, 0xffff], [0x3, 0x4], 0x1}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}}, 0x40) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28f100000d9295e279589dbadcfc418ef314040029bdf000fedbdf257000000008003e0005000000"], 0x28}, 0x1, 0x0, 0x0, 0x30000040}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000414010007000000fedbdf250800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2m28.379815007s ago: executing program 32 (id=2691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x52d35ce30131f272}) socket(0xa, 0x3, 0x3a) socket$kcm(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB], 0x14) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sync() r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000380)={0x1, @vbi={0x2, 0x9, 0x1, 0xa0363159, [0x3, 0xffff], [0x3, 0x4], 0x1}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}}, 0x40) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28f100000d9295e279589dbadcfc418ef314040029bdf000fedbdf257000000008003e0005000000"], 0x28}, 0x1, 0x0, 0x0, 0x30000040}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000414010007000000fedbdf250800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 13.113589486s ago: executing program 0 (id=3046): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x2b, @remote, 0x13, 0x3, 'wrr\x00', 0x1, 0x4, 0x6b}, 0x2c) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) listen(r2, 0x4) setsockopt$sock_attach_bpf(r2, 0x10d, 0xa, &(0x7f0000000000), 0x4) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd(0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"73dc1c1590c3f3f0f380aef1838d0e97", 0x0, 0x0, {0xa384, 0xd}, {0x8, 0x17b3}, 0x98, [0x101, 0x2, 0x1000, 0x0, 0x7, 0x6, 0x1, 0x1, 0xc, 0xd, 0x0, 0x94, 0x6, 0x5, 0x101, 0xb]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f00000001c0), &(0x7f0000000200), 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xa76, 0x47}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x180}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000001240)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @multicast2, 0x1, 0xffffffff}}}, {{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x8f7084bcb4e933bd}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 11.47494713s ago: executing program 0 (id=3051): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000300), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', 0x0) 9.987710487s ago: executing program 0 (id=3053): socket$inet_sctp(0x2, 0x1, 0x84) setresgid(0xee00, 0xee01, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) listen(r2, 0x4) setsockopt$sock_attach_bpf(r2, 0x10d, 0xa, &(0x7f0000000000), 0x4) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f0000000080), &(0x7f00000000c0), 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000180)="01010101", 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"73dc1c1590c3f3f0f380aef1838d0e97", 0x0, 0x0, {0xa384, 0xd}, {0x8, 0x17b3}, 0x98, [0x101, 0x2, 0x1000, 0x0, 0x7, 0x6, 0x1, 0x1, 0xc, 0xd, 0x0, 0x94, 0x6, 0x5, 0x101, 0xb]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) close(0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xa76, 0x47}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x180}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000001240)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @multicast2, 0x1, 0xffffffff}}}, {{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x8f7084bcb4e933bd}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 9.986885501s ago: executing program 1 (id=3054): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x2b, 0x0, 0x400000) write(r3, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000000000000000000000800020040000000", 0x24) msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r4, 0x0, 0x8800, &(0x7f0000000000)={0x280078, 0x70, 0x120000}, 0x20) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) clock_adjtime(0x5, &(0x7f0000000240)={0x4, 0xfffffffffffffffd, 0x4, 0x6, 0x400, 0x627700ab, 0x1ff, 0x9, 0xd65e, 0x6, 0xa2, 0xa1b, 0x58ed, 0x1, 0x8, 0x5, 0x7f, 0x3, 0x3, 0x8, 0x3, 0x1, 0x400, 0x3, 0x9, 0x3}) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f00000004c0)={0x6, 0x0, "5a77bd038786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500031681905db88235f8a5447dd2a2fd6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd500800000000000000e4a62fb73c33424b437bb192c9b06ea6ed04983fe5c5ca033dfce0a82577ef14eee5e6be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b394de70400d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca147df97db"}) 8.37467779s ago: executing program 1 (id=3055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="2c00000002090102000000000000000001000004180002001400018008000100ffff07000900020064010101"], 0x2c}, 0x1, 0x0, 0x0, 0x20008810}, 0x44) 8.258917382s ago: executing program 0 (id=3056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r6, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) lseek(r3, 0xc6c3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x50, 0x0, 0x9, 0x801, 0x0, 0x0, {0x1}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x2404c051}, 0x8000) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x14, r9, 0x1, 0x1, 0x0, {0x2, 0x2, 0x2}}, 0x14}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) 8.227766315s ago: executing program 2 (id=3057): openat$ppp(0xffffffffffffff9c, 0x0, 0x20101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) r4 = dup(r3) sendmsg$nl_netfilter(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000040}, 0x888) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b2b, &(0x7f0000000040)={'wlan0\x00'}) 8.01787392s ago: executing program 1 (id=3059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='sched_switch\x00', r3, 0x0, 0x1000000000}, 0x18) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="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", 0xfffffffffffffeb2, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000c899f7370a00000000000063018200000000009500000000009100"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, &(0x7f0000001480)) chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd2b, 0x0, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x3, 0x1, {@in6_addr=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6.905936271s ago: executing program 2 (id=3060): rmdir(&(0x7f0000000000)='.\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000200)={0x0, 0x10000, 0x2}) setgroups(0x4000000000000190, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x29d5, &(0x7f0000000100)={0x0, 0x9255}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0xfffffffc, 0x109140) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x41) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x80000000, 0x0, 0x0, 0x2, [], [0x2, 0x0, 0x4020, 0x4], [0x8, 0x1ff, 0x6, 0xfffffffd], [0x0, 0x1, 0x200000000000a40b]}) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 5.215662356s ago: executing program 2 (id=3062): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0xfffffffffffffd62) r1 = gettid() r2 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc03064ca, &(0x7f00000002c0)={0x0, 0x0, 0x5, 0x0, 0x6}) r4 = syz_open_procfs(r1, &(0x7f0000000040)='net/packet\x00') read$FUSE(r4, &(0x7f0000002340)={0x2020}, 0x2020) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000000)={0xc}, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000240)=0x7, 0xa) 5.102996709s ago: executing program 5 (id=3063): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', 0x0) 4.982439887s ago: executing program 2 (id=3064): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000008000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=0x0, @ANYRES8], 0x50) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x2, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x6, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x1, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x9, 0x5, 0xcff, 0x0, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x7, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0xffff, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x4, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x1fffc000, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x7, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x6, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x9, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0x1, 0xb, 0x0, 0xfffffff3, 0x8, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x100, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x80000001, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x6, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x5, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0x9, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x1, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x6, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0xffffff12, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x9, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) flistxattr(r3, &(0x7f00000024c0)=""/65, 0x41) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001200010200"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x4048014}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1115000, 0x0, 0x0, 0x2}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.981952775s ago: executing program 5 (id=3065): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) socket$netlink(0x10, 0x3, 0x0) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000540)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x4, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x6, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x10000, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x1000007, 0x103, 0x2, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x5, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x80010002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0x6, 0x4, 0x4, 0x8000, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1006, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0xf, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xfc], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x8, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x1, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x8004, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x2, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x10000000, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x5, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000003, 0x5, 0x8, 0xffffffff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0x9]}, 0x45c) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x4d0, 0xf0, 0x310, 0xffffffff, 0x220, 0xf0, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffff00]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, @ipv4=@dev={0xac, 0x14, 0x14, 0x3e}, @gre_key=0x7, @port=0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x530) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) 4.947006719s ago: executing program 4 (id=3066): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='fib6_table_lookup\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0xf00, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) 4.058243645s ago: executing program 5 (id=3067): socket$inet_sctp(0x2, 0x1, 0x84) setresgid(0xee00, 0xee01, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) listen(r2, 0x4) setsockopt$sock_attach_bpf(r2, 0x10d, 0xa, &(0x7f0000000000), 0x4) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f0000000080), &(0x7f00000000c0), 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f0000000180)="01010101", 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"73dc1c1590c3f3f0f380aef1838d0e97", 0x0, 0x0, {0xa384, 0xd}, {0x8, 0x17b3}, 0x98, [0x101, 0x2, 0x1000, 0x0, 0x7, 0x6, 0x1, 0x1, 0xc, 0xd, 0x0, 0x94, 0x6, 0x5, 0x101, 0xb]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) close(0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xa76, 0x47}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x180}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000001240)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @multicast2, 0x1, 0xffffffff}}}, {{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x8f7084bcb4e933bd}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 0x0, 0x0, {@mac=@remote}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 3.985577739s ago: executing program 2 (id=3068): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d80402f0000000000001090224000100000000090400000103010000092100000001220b00090581", @ANYRES8], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x33, 0x1, 0x70bd2a, 0x25dbdbff, {0x1}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x14, 0x33, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x28804}, 0x40000) alarm(0xfff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) 3.860260596s ago: executing program 4 (id=3069): syz_io_uring_setup(0xe3f, 0x0, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) socket$kcm(0x2, 0x0, 0x106) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00'}, 0x10) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r7, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x800000000000001) syz_io_uring_submit(r0, r1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @private=0xa010101}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x488402, 0x0) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000000300)=@mmap={0x5, 0x3, 0x4, 0x10000, 0x1000, {}, {0x5, 0x1, 0x5, 0x4, 0x0, 0x7, "867ffe4f"}, 0x1ff, 0x1, {}, 0x80, 0x0, r10}) 3.834979951s ago: executing program 0 (id=3070): recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x12000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) semget$private(0x0, 0x1, 0x555) semtimedop(0x0, &(0x7f0000000280), 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='cifs\x00', 0x0, &(0x7f0000000080)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f8-\xf6\xa4 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18,\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce%\b#s\x05\x00\x00\xc0\x03\x84\x0e\xc3\x0e\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05NT\xaa_\x9f\xda8\xc8\xc6\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\x1b\xf3\xfe\xe1s1r\xcb\xbc9\x19#3k\xd4#r\x9e=C\xd6k\xf8\xb9S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88X\xfe\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdc\xc7p\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]') r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f00000002c0)=@e={0xff, 0xb, 0x0, 0x0, @generic}) r7 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000072c0)='memory.pressure\x00', 0x2, 0x0) r8 = geteuid() stat(&(0x7f0000007300)='./file0\x00', &(0x7f0000007340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000007740)='./file0\x00', &(0x7f0000007780)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000007800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000078c0)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000340)="4f7c7b4085a31ecd7ca4fe5e40213696008e9a2df1d2494172682e51ab9d7d049db700343c0b769d18a34c3ab68bb176c838c9d0228da30a9377b0796b2bc031e1950e0b50cf6c6be08f4b1772e275", 0x4f}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="e07b6dc0a680b54cb0a035fa417d361d7e50fc441bafbf8f424afe751725464d097088d712b53bc5e14cc6b4f73c8798d268c41ab8d6de5be96dd8701a2a6e1fe8e8c9e961c9f9d1c9e503242c6cc6014f22c622afa37787ed531f34520c9beaa6e45f50033810520f169229e1bf1d88c9baf48b9d2568455f23d508216926ce5a2ef03ac06a2a92ecae62907fcaedbd8318b0918f49c5c32914df802b50d2e10b1d58668b7b0ad46b329d457e64d6b61c79574b2ff78219a985c69027d0084c2ea2858c6b35d8af87ce258c5b180b8a4cfbd67357797736676fd98564941d3123336c3c7d0d", 0xe6}], 0x3, &(0x7f0000001780)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1, r3, r3]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x90, 0x4008800}}, {{&(0x7f0000001840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001980)=[{&(0x7f00000018c0)="c9003b8430cfa25c431a359ca785a4d4a596baaf6238b9d503d9a169786c0003268ab9c60bcca5", 0x27}, {&(0x7f0000001900)="71f3d9ec1065e899f3a4ebdad91771a6403551321e74a19f8adee7f85b502d43ede38431b09521fbe1fdbf69c8a1ab9c7e4aa4192a3113573b80130fb16c39d97f3e2d43f5d932ef57efb3a52768c60fbad3b1ae7b45b67439bf0d8656ad11b15d892a9758295ae93ea3d0bd5550425466d484febadd", 0x76}], 0x2, 0x0, 0x0, 0x14}}, {{&(0x7f00000019c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001a40)="b0c89b1ff25696899e0e55df562dd33232952e88f8149ac77ab7eb2369b4ed32c701c751d243640e93fd5c", 0x2b}, {&(0x7f0000001a80)="eada01eae447723aa7e625c4317111380641529721b21ff24f96eac741fd8ce1c1cb0ae0b7ec95bc919dc012582c1c", 0x2f}, {&(0x7f0000001ac0)="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", 0xfb}, {&(0x7f0000001bc0)="81fc2d5cbcaa247cb7e289c4b6a29165fac177c353f737ac42e0313b9d91e7300a980d4236ff804dc6258dd7df01e3056122bd58cedece634d57903e96ad62247666aaa5ea98752341e854360ee25fa861ff4cd71f2b59ed3590204aa5b5bf07818157f8ad4c431f2a5b29d8ec678d45", 0x70}], 0x4, &(0x7f0000001e40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x10044011}}, {{&(0x7f0000001ec0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000003140)=[{&(0x7f0000001f40)="1c73842604292a90d9000f6f7b53419fba83b1b115355b54a77c04105bb574c3bcd8fce59b6bf628b0ac8a73b4d70381044f6ae784b2aef8aa49def0076fd1fc2895a7351bc55193847a63", 0x4b}, {&(0x7f0000001fc0)="8b35f426b6adb2888098f19af2ba7d7ad563928474b5ca22eaec2dd45c0aa59b012320f6deb1fba5de9265b17a7849f20127b692302d4ec930d456527868b4213458a71e2e99aff40bafa250ac34e0dbf7041a227d4fb501f767c9d811b818284ae8ea3844547dacd4b3903e303ca672fa465562e2c3203a350a0ef7e8f55e41d4db8563f6c4f3266faba2b2219de8b00487422b0f0c5bfc5a5ed00aa55acb15e8a0f2806f1c795e74157702f674c49f996e535936e0c11b2a11cc86c0ddeb83963eec70075429460ef0226d20300f4c910b1f3fc98571dae4c15ae4d0dda2bf71a9bb204682f6bddccf43a3a42627a263bda6", 0xf3}, {&(0x7f00000020c0)="2522a8c5f00680de4e80c4f5f90786dd7bada1a5635362916c31f83b284be55355fc0db7c42ca0bdcf33678ca2344c687ffd2512784e1ae11fa99622594902cefbce6b7435751c0a5bc6eb90c920b9146e6bcc8d048a64dbf6e3", 0x5a}, {&(0x7f0000002140)="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", 0x1000}], 0x4, &(0x7f0000003680)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r2, r0, r4, r3]}}, @rights={{0x30, 0x1, 0x1, [r2, r0, r3, 0xffffffffffffffff, r1, r2, r4, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r4, r2, r4, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r3, r0, r3]}}], 0x158}}, {{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000003800)="cf3fb0fe8b419594654e43cad2f38dfd69987bbd27361460e5d62f961dfe656b72942f5322d73eb8b23593086b2f975014612ee3a7f5a44fe20901cb7ae5ce433774713e52c1113ee8e4136d9c4b9ea9da9b9dbf0871ed6a2d28b423074d13d6873007af2e895baf5001e757464f2d61e5d5dd7d35129d7c3c372684581b2f54f7900941cf0eedc30038d97e2dc42e51b8dd6929776559f28e097b86cb97520a8a5fdff26fc8bd07af", 0xa9}, {&(0x7f00000038c0)="5ea4331e6846811211de29d50e586e03d76b0d697f922fbae7a043e17de4245e2c1003ead16cf9925c91378e07ff61468d0c7fcc399203469a4b9b4e169441ac52fe8dac5e5883ed5b87275b41f5a10a367106a3e9e7f6a1329611d89e0b9bdaaf14c3413aedff68bceade33e7b42896d509468464b09ae61ab7ec27be20c228ca45d6d973cf1fab9e7d20a6944857", 0x8f}, {&(0x7f0000003980)="9b0ecfa914be22cd3ff05b7f314a2f0b0ffcadb7f4996e525f6518de4303915426d37ee8f3b0", 0x26}], 0x3, &(0x7f0000003a40)=[@rights={{0x18, 0x1, 0x1, [r1, r4]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x50, 0x4001}}, {{&(0x7f0000003ac0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003d80)=[{&(0x7f0000003b40)="6c7917d229f95f9405f0d2009fe1c4241cd91cb7294082d6cb712afdd0bdeef96ac079b980cd0eac36906ba83c40d1399e804f2277f61504854f854407e105ee19e3c76dd282e6354ca09083b4c6dacf502dae5398", 0x55}, {&(0x7f0000003bc0)="2bd2025c1cba71258db72d7298e12cd18024c64a03f97a6afa9ecec49c5d539e9d671dee0fdce4dc1e07e0859ea8e094556595", 0x33}, {&(0x7f0000003c00)="1b5ce87cc63f599d0926b8d4e4824d0f57670992de3a205ef1f75918b5df3b5db680db04e7c5b45ba915f61f51906cfaa61be6b2", 0x34}, {&(0x7f0000003c80)="f7a55c576af59f3e47abdb7ed031473414581d8c328c005b1878a6b4915eb49b58d1777af223bbaa33b02ac26a5e267e0a879ea51692f07216c2a1d3987597144798ed278ac6150b4f4e80dec82867d31151a5e33351b8d67c5ef937b95559ee4fc5daf2fbc6228edafebd08588479f2594c3b7164e22485a56a489ef772de2cf27de19bd85a10a3e6d475b6d7eb7710be1145da7fbff9ca36d8ecad7a02bdac06bf939e383b82ef4b7458c6d099aa57bc3f58e1840e98b6fc8bd7fc322cd6c4fea3e0aa1d33568113227e27ba56f619df553292e211f463902177e410d80734faa83f97bf77ce6943b189fe1b6b7d", 0xef}], 0x4, &(0x7f0000006040)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x4000}}, {{&(0x7f00000060c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007200)=[{&(0x7f0000006140)="b15928b06a9e2f3f2691061cd91f9c8eab502adda77878ae090400fd3e96e266363107ada693f114d2e33dc97c121afef286a6d34a898fcce61af40781039854c00c1fcff8fd462d7d6abf573bfb2af5d2b618b79e56fffdeca2947e0ff8e2b360bbc040643c3effeceaea5d499270134f7b3a0cb5fec322b96c7259ad0af72c0d", 0x81}, {&(0x7f0000006200)="74b33a06da81926eb7cbd16686a18a2500b904160974244749f430fd3be888f4c1f62973b7140174a28ab7fe84850fea84437ab0bf5de03ad6479f1157443620b602e041021010651e2de2c2c8361fb12af40cfc2dffa7635a3e99c384cce3f46fc5aa085c2738e1894257580dd965d4ddffc8b920efabeaf8081399bc85dfe345ef482e9f5cbfad9d241c8a4b1d0230b0e4e81185b3eac747e332f11d372e7ae2641b16323dc0a01a26823781abd1ffb222cbccb0a388d174eb31cb20e77d7fed500c4ef6c4beb7ddeb11e8cf8c8dc66c86c2ea98f344d77b023724712879dee728d5c8f7a655affe538125f73f42f8460f75cecf49a763853f28333a971fec930cd926f1cf5e01310bb39b894ff6c154c6b81b147fe8265d162e851430ac14ed6883c9eb361c54ab6487ee902f0a1fa745958ea4c73d69f0cce90e7913ffe0e2bfb5d4c9bf612b9e7bf93e95b0110337d09f4a1be1c8fda1855fb1385d5ed4ff61a3337dcb7f1348798b7d4b46ee20d9fced7c66d61117f2ceac901f5a2168b036eceffcee23b92ed8c0097252bacb973e42256a1cc28245dac8d796ddef30b33fd6acee1e952d5dfd922b6389b249df9a0c7765d585279953e85bb02828d55a7d98acd471acfbb7c13d1148cb2995ceeea09b38d18148d1be6cc241f73cf8659bc5e87b9f101df71891e2749b0621565fd6deccf7a49346e1bab857feede98b382447b10c122376a03e1ab9e06a6a7523d8c041e5d7df04ca6074a7a81eeebf9bf43585d3d62422870b003b2de74a6aec666f6c80b42c4d8d18e7aa51706f5be54582798f2486fc60df398ab420b4dfa5e16e403c190f3596a8067f43d386b672d77accad4f80c873ebe652c2835f8e0377aca8a213c9077976c666d33bb016036fa491674bb4a2aacd31152e44a5ab2ae6ab4cdd28fa01ceea174da87270ce777f45367a81e1b0279d900db58e1924c03c03ab9581f06bf6c116f7467d210f89a3699f9db60e69f0abf53516fc05d52236b89c805ca404ca5bfa9627ae6f84161c3ff7f87f1e6ced49b8e04428ecdc4ead4b9c656657002909ae1aa315e8857175081b8d98bebac9193c6329fea00c5705d4eb39de870fa86b5f02375f58bb8171cf85ff9db4cb15b22f00346f8a7481868d28caab52265aab7c28b50bce7240b55d16c130b380cfb30f27ed49b77ed0b414cb21f2aac624941ad0aaa1b4c0b8ccd23d9f3d4a1ae93132567604284d6e8debf9b4d4ac96f7f80016ffd670c712cd63e3c5f6bf2e8e6706f671f3e2f5ac92146ccfd13b808cb94645140f276460ffb06bad08c775fa0c80c85fabaa416dc19b26fe78236610d8d5ed6c8a8e7ac7f4bacf2ba8ca69f6740d5ce667561dfc06093fb0b5a9dd1681ca4f567eac3cc11233a7c03a8b7dc4d3cd4c51f346adc73c865cba7bc4f834c4e095cf74dc2cb2fb9b693193c45592546c37ccecf58392e9dbdea0b43111a225ca648bfe581da403d946973596494db9b42a2ccd2e465c1caaa106476e7337d8f4273d2cd5263a6a012c38e7a26ab83d20172fd6622e491e8255ba5476943a870b0e14d7d5efa3186521de44684a043f4efb3b1417d799790db8147e42157a5ed9db7465c4c341a313bfd0d8f634a1f7342efe4a415d2d8139e398f1444c4676125867e04fc83b2e0ba49156ce9c60c543fb66c9eecc46ce40ed84bd3e5e1e008cc39be5621d18e78d48757f419652f62b9870cb1892f2749d5de3f4b043e0bddae197977d5a8da197718b645754aa4897f994fb29d7226d5e10cfba3b5967dc2176bfc1c1be2d0c7201dd9b2ceb96c5d19524e8999d69b6a730eb22ffba17a84cb3b4edfb7f26fb887994af1e22bc975ae06091d47b535d9f5aa33c3961a54750dcd99b5244629c14a22024b35cbdf0b83950290924d38506679290e7cb736657c32d175cd4a4513a0fed780f40ad76eb340db4e32cf477039f00655410b66342855b94d0994968fe0d55c94957c7aa5f0d4bffda454aceccdd6a23ff51e01e20ea3acdbd81128a98fb134c7113ff569dffa21e5f207c4ff92c963b1cf3307b96ee9c1a8aa799190cdf2bcfd72890505703c8c332d0ab03e1421d2215388f530d2b6fe1922a5f55586254a2233fabe7b44bd47a8d2aeca20d6643c7e5e30df08dac08bb608ad7d3d80c1997303565e8a481226a032e80c833717901023cc46cb33e1fb26360912386d2d9b58cf52f2405331a0b0bf7852f3b392e3e8c35a387e7b05e0dcd958d87045f942ebafe357393a1cf1f491981e9f8cf1ee41de8209d8588ad2d56bc1f6fef38fa56e67a20e09e23b0239aeebd802fdac41f89b16577db773366d28830cebe9bd596aea1ca6a8e6e5389da2cb6f30a0454c43d8130bcd29c3a212614af4bfa05c50c8db78e00364fc09cfb06a094df52508ae0ac9b0a65b1d6770d0238e270d771ff8621327e76d203b3f22320a6d1215d6de45286692bcb688c877474bec2b21b1456b72fc4810b75b03fc0ac9938f15498ef69b5bd3f1c2c2342c858f8469fbc116346a951ecf475f688a65917c05dc958f54e36f2ab406784871c160e11a8f0ba985533f0042409384455d52e806ac78af86cb30a059dca986699981ca1c69e8692367d3a817bac88e4ef03ec98d419d08822da56e9536391dd7726f4ead56b4ad0b3adf233aa7046cabf73c69fda5af911fd236d935310aca2c0ea46f9c48ae2414649bf583c0807e225e5cf2861d70ef753e81b47670aa5ce3dc8ca962a280820fa71e8f523c64445fa9ab6b38d95add8011ee5c463661d71a057daa4cdca5fca8e23863f7266baa4027a3c82713dc6103c857504d266d34d3c8c1eb327eaa7c5acfde67776cb42d2d142419c2dd51a6536d54faebbd83232524b44944c3dc6abefc052bce13a8b44be185225dddad90494c2403f890fff9d21c065f6eb2ca180859e8df573049955321ff8502ecb06f227a8401b74059c62a4ab2e91d40ceac9a3546856da1757c2533ba683e48e836a9f270be689370c12bbc2dbf9b16b4a05ed0a7fd80bbd67bf5d40596563d76e87941f6130535cd4a75be3fa997990e6ef412228a0ad5e1ca427f0258028031618e4ce306fb649d59d70adea2fbc90910d2cc67cbc168754bf4f26c09ab50f46f14198f770a3501c01656989eeaee47c27f9e1bc087587000b2e2087b568ec53103006fefd72d93842d4d039d75707eb67dba713e3575b41000330962208ec2828f568d082b197f257821d3d46613963d1f3370c9f6f58d438d2e72b96e4d61d7346f926049359488e7ca1882997dc61fb37123812423d0222bdc89187545810f407eeca595d008c0ecaf1e2aa6b4221be22ec2a4c9024455c0f3de31fe66dfc547e61938482fe59201a4b82453ff6f1ca14f013ff5b80bfb36bd38338c20960983ce0b5c03f904583d66b5102561e6fc3ba852485398ba02a7d8a646461038853a34b27c66b45c5b53d4492ec1eae954c961f4fab1c3f2ec5a05c45bf498d18b3e883b0d020a764cbe543119606ffdff99f33cba1e1e91adc742c096448a8f67a4a66740f192129c1f575194c3f4b2d9a59f05e3a0579bb5e28a3f89aaf66ff3f50f6ee7bedfc297fc8cec7c14b100c229ade5ef348f6ddecf138d1cadc0e1264efd8fc6f058cc97490ad8bf86143a1ac96cc39996b4dfd4a08b923fa675ded9d80ac170b79168a3eafdc7cb971fb1dbdf1ed654125a0d25e500b8e108085a85893719ae524c25797a853d2305cad18eb15d11e75bf0e4218386c715f2019fa858c54309d0f5b1ee073d1c96e65648ae637cad529c4d9e577a3cfbc7fce5c11976cfba0988bd6ee45d5ab1c39714bcd2ca70ba102ddc30718f0e3c7767aa2193574a105d9e32851e9887c55f72b939306bd685bbc8d8767c20b3fa9756d7486741900641efdb69176c06ec582f42f98379c7307216e35c550b21bf6414f556312688a601584db172b0c13d2b52b41732c06cdb2050242bc79a689687cd091024eba924e014365f742557b267fae58360b46ace171f70698f8941762f4e5b554d2b294caab72a48fd11b41917a0153c4c84594906e66ba168d6e46fe84a69a241325c17017d917f7547b8d51ef49e3579b909f100a3df8fb2a7fd3eab7067a205fe53bd5b1ce079cbeb9c196083b81143298c56772da117edca805581ec7765892d40224332950e7af69857928c2f01b3383964730bdd033fd82b9ca02a66d9f4b8d3b90240037e321647229076d6c6d2d2688a1615aa2dbbdbd0bb418008c2bcfe673289a4cd20a3e2e5c42ff93dc3841f93e859eaa9ee00e0124d226867d833b82c43a736733ea0294440715f0e5a2fa31b8367c54b2a1b78851d21c4244f55cafb79dd3ad670da1bdb7206e7bb08aa181863330eb5e416b6e5edf6f28a4d28172babbfa9320c88e6eae63a13f134faec210cfd0252e02b87413dc40e1019214be34107e6b9039df5b35074995b3bcbff184b5b80db703e98c4d572dfe5c4847748c0f1697076d8bd70acc4bfba827b62c1ed441ffcb52a578dcbbfd65291f95deb0d0e08864502db824beca1ae53349803a434ad4fbae37bbf795f9ad6a49afa51e7b6bf31568db5155e927b0bf58b41cacb14f33424f1c8ed5d24a2067f2f9825625b1bc79824e8e867a1a7c8b72639abc9ced73324aad0debdc105ca473a43c99d6107499e3b6b91d5e447253a92b4624c617366e4cdbe65cbb82b8091a169c379219a4a59c2a33de48fdafd54ab3c40a732a5a152a18e1662c8ee30225a4a1e5a531e77cd501da34e1d39fc0dc6ef579dc2a3058717aa964f0b3f7a325b838222653ac3c590ecb47c90882542d99e2713912c0270adf68c4b1d8da970177514085f91d04f95964b2cd068635688ef355fe061d2fff02a339ffb200507ad94bf6ca47e58f9c6ee70957bd5029f165296e1e369a9ff1bf73b7a964643ff8590bf0511d61cb4f2ac50ce7dfdd0506d94eb528b964ef3fe7af3b0cf0a1d01e3df0f25d7f57cf0008dd24dd0dcb359a8abfe9c9ffc23a552b53e6a54190d41d4665bef0c53e5ae1b33387139f0078d8f73a83ca93e1a797666f832005b1129f3767d749c64f1a90b14e0f6328ef2537419f3d98edbb80635935e8f64989dba53126eca5bffd655359752366c06b1b431ee226834fd0c78bd626ad5b685122fb5f332fec445e1b5b06bfb179e098999d56716e9e7a064df4e2609d630c4c77b0dc507f44e77acdc9c79789332d89653882fd857071575f7068b74322f5ab58b6da48ae509127e5be6db007db3ec54ffe3dea1bc6f075e8471182c44a38bee33eaf9939ed8ac7d47e4df47b013f1821fee9ddc1a95ed465b4db781c3ae63c254c7a665eccc0c1d27b16f27c870899c8874a5bc4345d4ba97579e599224336ebca793a8fca526312680e5012b0bf26c31e9d81a808c4c0ec929caac981c10a49277d15b6efbea84a83e8bc59abd0c409c7bce418267c089e361f86205a8490e11fba98c4ee55663ecef1e0b00273d4fb3e3feec3d919f1481261445234c365dfc080b8b937f8e9b47e44f484f1cdbbfb4e4283f94723b2aaf641627b3431eab2b0398d03874320a27727c0a99b13e2972a75e7c3aa9ffca4e6aa2ec317162fae0ada68a2b657ee2c604a9d9817c1b587c7ac5425d880ea986067d2a0bad2e2ea08365f106f732ccef712594bcccc8deb7c2020d34cadb2d1b4e711a654dcd61998502963bac663cebe198e4523c01ba4b33fcf6465e9f0c0d41e50f12e875814a2d241250b19ece8175c", 0x1000}], 0x2, &(0x7f0000001500)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="bf5454ffc9164814b56c81a21e140acd00000000"], 0x58, 0x20000000}}, {{&(0x7f0000007440)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000007700)=[{&(0x7f00000074c0)="cab4807a08ffa6077de713145e8157e5a9ca770c8e405db84401f346244669240346c71ad1c97b011a712dc13de1bebdb34675d54716be96c389", 0x3a}, {&(0x7f0000007500)="a8d69966a1f7c17f56ea46e8678fa726c5a170251ec19ba5131c25865b0bb5d915c233c679593e0f1ea243474955514950a559ada9adbb2a9751b72f0eee0332a6f1b0291f656541926ccf116736e6267aa6c133788f696060ba12c3949323ecd485a99aee1af89c03e7c7ed1414b35c83db91eaab56dc9c118a44a1767b1bcfdf5800b31da3069b79a9b44df9bf86a689aeb7f43cc83edaf0875458951a02f2c2c897cc", 0xa4}, {&(0x7f00000075c0)="aea2060ee1b7efd047e7ef5f165c7eef29c98a625381472a058e8b6ccec251c2d405a0c4c76092b06923fc453e33cbe4639c191dd2863161148be9392923eb393a6915ab724825d66e12288dd1985a1b857413b5deb3cd478d0d068543102ff7336f6b0382d6ee780e", 0x69}, {&(0x7f0000007640)="07f672147b219d0d6213e50e52c92c599e4b53dcd95d53328677112cafe80bb02e584ab9c7982672760bf059a34bdba43ea59b2d9636939590a8b667b04e25ff2ae07e8540779e5f193a63debfd2ee483460fa09e283f772d361ac5128340af891871c48f4d8aaaac38a662031602e0283cfdb3cc72624f198e89d51d4cfc1078fe83c4d0e934755abf00a25a3edc908bf4a518f", 0x94}], 0x4, &(0x7f0000007880)=[@cred={{0x1c, 0x1, 0x2, {0x0, r10, r11}}}], 0x20, 0x44}}], 0x8, 0x4) semop(0x0, &(0x7f0000000000)=[{0x0, 0xddde}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)) 3.300323066s ago: executing program 5 (id=3071): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) creat(0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000040)={0x1a, 0x4, 0x2, 0x1, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$sock(r1, &(0x7f00000034c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) prlimit64(r2, 0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800"], 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080841}, 0x44) 3.128249507s ago: executing program 1 (id=3072): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) fchdir(0xffffffffffffffff) creat(0x0, 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {0x0, 0x2}, 0x35, [0x4346, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x2], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4]}, 0x45c) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000380)={0x2, {0x82, 0x7, 0x3, 0x8001}}) 2.902850158s ago: executing program 4 (id=3073): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002680)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xf, 0x13}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x8004}]}}]}, 0x3c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x14f8d, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x100, @loopback}, 0x1c) (fail_nth: 5) 2.835001133s ago: executing program 5 (id=3074): socket(0x27, 0xa, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x400, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000005, 0x4000010, r2, 0x4c1e1000) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) write$proc_mixer(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='DIGITAL2 \'Master Capture\' 00000000000000000000\nMIC \'Synth\' 00000000000000000000\nPHONEIN\nOGAIN\nTREBLE \'Synth '], 0xdf) dup3(r4, r3, 0x0) 2.148511923s ago: executing program 4 (id=3075): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', 0x0) 2.129288443s ago: executing program 1 (id=3076): syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x8000) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000580)="e3e039700cb727921d709a0b53a17a8c3132eba9f529c929d5c51db1", 0x1c, 0x24000010, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_format(0xffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) syslog(0xa, &(0x7f00000001c0)=""/14, 0xe) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @loopback, 0x80000c}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000003180)='sched_switch\x00', r2, 0x0, 0x80000000000000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB='#ayz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$afs(&(0x7f0000000040)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1, 0x0, 0xd}, 0x18) sendfile(r0, r1, 0x0, 0x1000004) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') 2.06666767s ago: executing program 4 (id=3077): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) socket$netlink(0x10, 0x3, 0x0) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000540)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x4, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x6, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x10000, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x1000007, 0x103, 0x2, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x5, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x80010002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0x6, 0x4, 0x4, 0x8000, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1006, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0xf, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xfc], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x8, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x1, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x8004, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x2, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x10000000, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x5, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000003, 0x5, 0x8, 0xffffffff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0x9]}, 0x45c) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x4d0, 0xf0, 0x310, 0xffffffff, 0x220, 0xf0, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffff00]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, @ipv4=@dev={0xac, 0x14, 0x14, 0x3e}, @gre_key=0x7, @port=0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x530) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) 1.098231969s ago: executing program 4 (id=3078): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$vcsu(0xffffffffffffff9c, 0x0, 0x4000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x400000}, &(0x7f0000000100), 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="2c00000002090102000000000000000001000004180002001400018008000100ffff07000900020064010101"], 0x2c}, 0x1, 0x0, 0x0, 0x20008810}, 0x44) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) 1.089413134s ago: executing program 2 (id=3079): r0 = socket(0x2c, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xc900) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0) r5 = syz_io_uring_setup(0x364d, &(0x7f0000000180)={0x0, 0xd25d, 0x13900}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x244}}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000040)=0x2cc, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/crash_elfcorehdr_size', 0x20000, 0x20) 1.008405187s ago: executing program 5 (id=3080): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x6) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r6, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) lseek(r3, 0xc6c3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x50, 0x0, 0x9, 0x801, 0x0, 0x0, {0x1}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x2404c051}, 0x8000) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x14, r9, 0x1, 0x1, 0x0, {0x2, 0x2, 0x2}}, 0x14}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) 58.329228ms ago: executing program 1 (id=3081): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103018100092100c1000122010009058103ff"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x14, r2, 0xb01, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x709ee32257da3bbc}, 0x20000008) 0s ago: executing program 0 (id=3082): inotify_init1(0x800) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f0000000040)=':-.-\x00', 0x5, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000001300)='jffs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x82000) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) kernel console output (not intermixed with test programs): 382][ T8001] usb 3-1: Manufacturer: syz [ 1021.364107][ T8001] usb 3-1: SerialNumber: syz [ 1022.389725][T15782] overlay: ./file0 is not a directory [ 1022.870527][ T8001] usb 3-1: USB disconnect, device number 46 [ 1023.290399][T15747] udevd[15747]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1023.307859][ T29] audit: type=1800 audit(1739946743.461:551): pid=15818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2446" name="/" dev="9p" ino=2 res=0 errno=0 [ 1023.332411][T15820] netlink: 90 bytes leftover after parsing attributes in process `syz.1.2447'. [ 1023.497993][T15824] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1023.798289][T15828] netlink: 'syz.4.2450': attribute type 1 has an invalid length. [ 1023.821019][T15828] netlink: 'syz.4.2450': attribute type 2 has an invalid length. [ 1024.448368][T15833] netlink: 'syz.1.2452': attribute type 1 has an invalid length. [ 1024.456543][T15833] netlink: 'syz.1.2452': attribute type 2 has an invalid length. [ 1025.131983][T12775] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 1026.518867][T15856] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2459'. [ 1026.937058][T15861] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 1027.009993][T15864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2460'. [ 1027.027552][T15864] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1027.703645][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 1028.295857][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 1028.310540][T15870] ceph: No mds server is up or the cluster is laggy [ 1028.449639][T15877] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 1029.908467][T15886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2463'. [ 1029.929658][T15886] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1032.332087][T15914] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 1032.489371][T15916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2473'. [ 1032.513271][T15916] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1034.595091][T15935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2479'. [ 1034.768400][T15933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2479'. [ 1035.906220][T15953] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 1038.856535][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2486'. [ 1038.867295][T15953] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1038.875265][T12775] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 1040.718681][T15980] FAULT_INJECTION: forcing a failure. [ 1040.718681][T15980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1040.798478][T15980] CPU: 0 UID: 0 PID: 15980 Comm: syz.2.2493 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1040.798507][T15980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1040.798517][T15980] Call Trace: [ 1040.798523][T15980] [ 1040.798531][T15980] dump_stack_lvl+0x16c/0x1f0 [ 1040.798558][T15980] should_fail_ex+0x50a/0x650 [ 1040.798588][T15980] _copy_from_iter+0x2a1/0x1560 [ 1040.798609][T15980] ? trace_lock_acquire+0x14e/0x1f0 [ 1040.798631][T15980] ? __alloc_skb+0x1fe/0x380 [ 1040.798654][T15980] ? __pfx__copy_from_iter+0x10/0x10 [ 1040.798671][T15980] ? __virt_addr_valid+0x1a4/0x590 [ 1040.798701][T15980] ? __virt_addr_valid+0x5e/0x590 [ 1040.798720][T15980] ? __phys_addr_symbol+0x30/0x80 [ 1040.798738][T15980] ? __check_object_size+0x488/0x710 [ 1040.798763][T15980] netlink_sendmsg+0x813/0xd70 [ 1040.798791][T15980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1040.798822][T15980] ____sys_sendmsg+0xaaf/0xc90 [ 1040.798842][T15980] ? copy_msghdr_from_user+0x10b/0x160 [ 1040.798865][T15980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1040.798897][T15980] ___sys_sendmsg+0x135/0x1e0 [ 1040.798921][T15980] ? __pfx____sys_sendmsg+0x10/0x10 [ 1040.798955][T15980] ? __pfx_lock_release+0x10/0x10 [ 1040.798979][T15980] ? trace_lock_acquire+0x14e/0x1f0 [ 1040.799008][T15980] ? __fget_files+0x206/0x3a0 [ 1040.799033][T15980] __sys_sendmsg+0x16e/0x220 [ 1040.799057][T15980] ? __pfx___sys_sendmsg+0x10/0x10 [ 1040.799098][T15980] do_syscall_64+0xcd/0x250 [ 1040.799122][T15980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.799146][T15980] RIP: 0033:0x7f274cb8cde9 [ 1040.799161][T15980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1040.799183][T15980] RSP: 002b:00007f274a9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1040.799201][T15980] RAX: ffffffffffffffda RBX: 00007f274cda5fa0 RCX: 00007f274cb8cde9 [ 1040.799214][T15980] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000000000000004 [ 1040.799225][T15980] RBP: 00007f274a9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1040.799237][T15980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1040.799248][T15980] R13: 0000000000000000 R14: 00007f274cda5fa0 R15: 00007fffc3fd1f18 [ 1040.799272][T15980] [ 1041.077661][T15961] netlink: 'syz.0.2487': attribute type 1 has an invalid length. [ 1041.088636][T15961] netlink: 'syz.0.2487': attribute type 2 has an invalid length. [ 1042.065679][T12775] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 1043.300668][T16004] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 1043.755998][T16017] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 1044.307193][T16018] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65315 sclass=netlink_tcpdiag_socket pid=16018 comm=syz.2.2502 [ 1045.419692][T16025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2504'. [ 1045.556399][T16025] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1045.683297][T16027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2501'. [ 1046.327910][T16021] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1048.273599][T16051] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=16051 comm=syz.4.2512 [ 1049.746601][ T8001] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1051.189228][ T8001] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.307178][ T8001] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1052.313833][ T8001] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1052.413194][ T8001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.428036][ T8001] usb 3-1: config 0 descriptor?? [ 1052.443929][ T8001] usb 3-1: can't set config #0, error -71 [ 1052.471608][ T8001] usb 3-1: USB disconnect, device number 47 [ 1052.614255][ T5911] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 1053.803083][ T5911] usb 4-1: config index 0 descriptor too short (expected 5668, got 36) [ 1053.822278][ T5911] usb 4-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 1053.835580][ T5911] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 1054.450694][ T5911] usb 4-1: config 3 has no interface number 0 [ 1054.466663][ T5911] usb 4-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1054.478606][ T5911] usb 4-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1054.494118][ T5911] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1054.504430][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.515847][ T5911] usb 4-1: Product: syz [ 1054.526844][ T5911] usb 4-1: Manufacturer: syz [ 1054.552700][ T5911] usb 4-1: SerialNumber: syz [ 1054.619646][ T5911] usb 4-1: can't set config #3, error -71 [ 1054.628500][T16097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2526'. [ 1054.641176][ T5911] usb 4-1: USB disconnect, device number 47 [ 1054.650970][T16097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2526'. [ 1054.699079][T16097] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2526'. [ 1054.871197][T16097] nbd0: detected capacity change from 0 to 256 [ 1054.939834][T16107] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=16107 comm=syz.2.2525 [ 1054.966290][T12775] block nbd0: Receive control failed (result -104) [ 1055.158858][ T5911] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1055.436589][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 1055.453628][ T5911] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.467634][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 1055.468600][ T8001] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1055.479792][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 1886, setting to 64 [ 1055.498970][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1056.232820][ T5911] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1056.247441][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.248999][T16115] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.2530'. [ 1056.257527][ T5911] usb 4-1: Product: syz [ 1056.268974][ T5911] usb 4-1: Manufacturer: syz [ 1056.292289][ T5911] usb 4-1: SerialNumber: syz [ 1056.303973][ T8001] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1056.323844][ T8001] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1056.325087][ T5911] usb 4-1: config 0 descriptor?? [ 1056.383468][ T5911] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1056.388008][ T8001] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1056.414731][ T8001] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1056.429209][ T8001] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1056.438784][ T8001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.449930][ T8001] usb 1-1: config 0 descriptor?? [ 1056.457364][T16102] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1056.850996][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1056.857414][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.171023][ T8001] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 1057.207881][ T8001] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 1057.285153][ T8001] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1057.289318][T12775] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 1057.308825][ T1201] usb 4-1: USB disconnect, device number 48 [ 1057.315106][T10662] usb 4-1: Failed to read usb control message: -71 [ 1057.344333][T10662] usb 4-1: Unable to read the bmi data from the device: -71 [ 1057.492820][T10662] usb 4-1: unable to get target info from device [ 1058.240611][T10662] usb 4-1: could not get target info (-71) [ 1058.246598][T10662] usb 4-1: could not probe fw (-71) [ 1059.071902][T16146] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 1059.092674][T16146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2537'. [ 1059.104047][T16146] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1060.254768][T13678] usb 1-1: USB disconnect, device number 60 [ 1061.477849][T16171] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.2544'. [ 1061.686907][T16180] netlink: 'syz.0.2545': attribute type 1 has an invalid length. [ 1061.694825][T16180] netlink: 'syz.0.2545': attribute type 2 has an invalid length. [ 1063.015331][T16191] netlink: 'syz.3.2542': attribute type 1 has an invalid length. [ 1063.023140][T16191] netlink: 'syz.3.2542': attribute type 2 has an invalid length. [ 1063.804446][T16204] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 1063.933372][T16205] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 1064.481483][T16207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2551'. [ 1064.555192][T16207] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1066.756106][T16224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2556'. [ 1068.768561][T13678] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1069.038107][T16247] netlink: 'syz.1.2559': attribute type 1 has an invalid length. [ 1069.045920][T16247] netlink: 'syz.1.2559': attribute type 2 has an invalid length. [ 1069.227327][T13678] usb 1-1: Using ep0 maxpacket: 32 [ 1069.550418][T13678] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.569922][T13678] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 1070.005972][T13678] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 1886, setting to 64 [ 1070.020167][T13678] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1070.046602][T13678] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1070.065520][T13678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.082527][T13678] usb 1-1: Product: syz [ 1070.093640][T13678] usb 1-1: Manufacturer: syz [ 1070.120115][T13678] usb 1-1: SerialNumber: syz [ 1070.153935][T13678] usb 1-1: config 0 descriptor?? [ 1070.449539][T13678] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1070.500097][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 1070.514529][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 1070.586008][T16259] ceph: No mds server is up or the cluster is laggy [ 1071.204602][ T8001] usb 1-1: USB disconnect, device number 61 [ 1071.223105][ T2959] usb 1-1: Failed to read usb control message: -71 [ 1071.243635][ T2959] usb 1-1: Unable to read the bmi data from the device: -71 [ 1071.259001][ T2959] usb 1-1: unable to get target info from device [ 1071.266865][ T2959] usb 1-1: could not get target info (-71) [ 1071.276576][ T2959] usb 1-1: could not probe fw (-71) [ 1071.379028][T16270] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 1072.014090][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2569'. [ 1072.049209][T16273] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1072.185632][ T29] audit: type=1400 audit(1739946789.183:552): avc: denied { create } for pid=16276 comm="syz.1.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1072.251111][ T29] audit: type=1400 audit(1739946789.183:553): avc: denied { getopt } for pid=16276 comm="syz.1.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1072.315378][ T29] audit: type=1400 audit(1739946789.183:554): avc: denied { write } for pid=16276 comm="syz.1.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1072.595483][T16291] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.2572'. [ 1074.062326][T16304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2575'. [ 1074.078567][T16303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2576'. [ 1074.497839][ T8001] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1074.616257][T16322] netlink: 'syz.1.2577': attribute type 1 has an invalid length. [ 1074.624100][T16322] netlink: 'syz.1.2577': attribute type 2 has an invalid length. [ 1074.862951][ T8001] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1074.870238][T16326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2581'. [ 1074.889117][ T8001] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1074.940773][ T8001] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1074.953851][ T8001] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1074.963096][ T8001] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.971246][ T8001] usb 1-1: Product: syz [ 1074.975538][ T8001] usb 1-1: Manufacturer: syz [ 1074.984653][ T8001] usb 1-1: SerialNumber: syz [ 1074.993003][ T8001] usb 1-1: config 0 descriptor?? [ 1075.000064][T16313] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1075.010972][T16313] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1075.042041][ T8001] usb 1-1: ucan: probing device on interface #0 [ 1075.481405][ T5920] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1075.656138][ T5920] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1075.695423][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.703502][ T5920] usb 3-1: Product: syz [ 1075.723016][ T5920] usb 3-1: Manufacturer: syz [ 1075.728518][ T8001] ucan 1-1:0.0: probe with driver ucan failed with error -22 [ 1075.754679][ T5920] usb 3-1: SerialNumber: syz [ 1075.770976][ T5920] usb 3-1: config 0 descriptor?? [ 1075.787456][ T5920] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 048 [ 1075.810294][ T29] audit: type=1400 audit(1739946792.570:555): avc: denied { read } for pid=16335 comm="syz.4.2585" dev="sockfs" ino=40950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1075.852392][T16336] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 1076.058694][T13678] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1076.240488][T13678] usb 4-1: Using ep0 maxpacket: 32 [ 1076.250580][T13678] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.271819][T13678] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 1076.308161][T13678] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 1886, setting to 64 [ 1076.338140][T13678] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1076.375477][T13678] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1076.394989][T13678] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.417805][T13678] usb 4-1: Product: syz [ 1076.431124][T13678] usb 4-1: Manufacturer: syz [ 1076.442553][T13678] usb 4-1: SerialNumber: syz [ 1076.457092][T13678] usb 4-1: config 0 descriptor?? [ 1076.497245][T13678] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1076.512306][ T5920] i2c i2c-1: connected i2c-tiny-usb device [ 1076.634579][T16344] netlink: 'syz.4.2587': attribute type 1 has an invalid length. [ 1076.652730][T16344] netlink: 'syz.4.2587': attribute type 2 has an invalid length. [ 1076.751571][T13678] usb 3-1: USB disconnect, device number 48 [ 1076.910176][T13949] usb 4-1: Failed to read usb control message: -71 [ 1076.918487][ T5911] usb 4-1: USB disconnect, device number 49 [ 1076.927960][T13949] usb 4-1: Unable to read the bmi data from the device: -71 [ 1076.938374][T13949] usb 4-1: unable to get target info from device [ 1076.944733][T13949] usb 4-1: could not get target info (-71) [ 1076.950667][T13949] usb 4-1: could not probe fw (-71) [ 1077.297195][T16352] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.2589'. [ 1078.150054][T13678] usb 1-1: USB disconnect, device number 62 [ 1078.274599][T12775] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 1078.603431][T16366] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=16366 comm=syz.0.2591 [ 1079.179825][T16367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2592'. [ 1079.303682][T16364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2592'. [ 1079.393470][T16373] overlay: ./file0 is not a directory [ 1079.410507][T16374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2596'. [ 1080.164812][T16388] netlink: 'syz.4.2597': attribute type 1 has an invalid length. [ 1080.179695][T16391] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 1080.391402][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2599'. [ 1080.402961][T16391] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1080.458078][T16388] netlink: 'syz.4.2597': attribute type 2 has an invalid length. [ 1080.557883][T12775] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 1082.112612][T16412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2605'. [ 1083.796708][T16422] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=16422 comm=syz.1.2607 [ 1084.848549][T16433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2610'. [ 1084.854069][T16432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2611'. [ 1084.867063][ T29] audit: type=1400 audit(1739946801.026:556): avc: denied { write } for pid=16431 comm="syz.2.2611" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1084.904179][T16432] netlink: 'syz.2.2611': attribute type 2 has an invalid length. [ 1085.102985][ T8001] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1085.164242][T12775] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 1085.387750][ T8001] usb 4-1: Using ep0 maxpacket: 32 [ 1086.038960][ T8001] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1086.070772][ T8001] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 1086.241239][ T8001] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.378449][ T8001] usb 4-1: config 128 has 2 interfaces, different from the descriptor's value: 4 [ 1086.466662][ T8001] usb 4-1: config 128 has no interface number 0 [ 1086.482183][ T8001] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 1086.528309][ T8001] usb 4-1: config 128 interface 127 has no altsetting 0 [ 1086.546173][ T8001] usb 4-1: config 128 interface 1 has no altsetting 0 [ 1086.574047][ T8001] usb 4-1: language id specifier not provided by device, defaulting to English [ 1086.585628][ T8001] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1086.604305][ T8001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.825815][ T8001] usb 4-1: Product: syz [ 1086.854625][ T8001] usb 4-1: Manufacturer: syz [ 1086.871926][ T8001] usb 4-1: SerialNumber: syz [ 1086.923827][T16428] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1086.941972][ T5920] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1087.144901][ T5920] usb 3-1: device descriptor read/64, error -71 [ 1087.158807][T16428] overlay: ./file0 is not a directory [ 1087.476476][ T5920] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1087.562558][ T8001] usb 4-1: USB disconnect, device number 50 [ 1087.589027][T16081] udevd[16081]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1087.636795][ T41] block nbd0: Possible stuck request ffff8880266de000: control (read@0,4096B). Runtime 30 seconds [ 1087.757021][ T5920] usb 3-1: device descriptor read/64, error -71 [ 1087.873718][ T5920] usb usb3-port1: attempt power cycle [ 1088.288954][ T5920] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1088.365219][ T5920] usb 3-1: device descriptor read/8, error -71 [ 1088.674611][ T5920] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1088.695699][ T5920] usb 3-1: device descriptor read/8, error -71 [ 1088.814201][ T5920] usb usb3-port1: unable to enumerate USB device [ 1089.066143][T12775] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 1089.611233][ T5920] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1090.568925][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1090.658879][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1090.722112][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1090.886477][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1090.904598][ T5920] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1090.915369][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.917492][T16498] netlink: 'syz.0.2625': attribute type 1 has an invalid length. [ 1090.930287][ T5920] usb 5-1: config 0 descriptor?? [ 1091.510470][T16484] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1091.665707][T16498] netlink: 'syz.0.2625': attribute type 2 has an invalid length. [ 1092.173427][ T5920] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 1092.189719][ T5920] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 1092.203345][ T5920] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1092.259024][ T8001] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1092.436663][ T8001] usb 4-1: Using ep0 maxpacket: 32 [ 1092.449206][ T8001] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1092.469004][ T8001] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 1092.479516][ T8001] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.489816][ T8001] usb 4-1: config 128 has 2 interfaces, different from the descriptor's value: 4 [ 1092.505069][ T8001] usb 4-1: config 128 has no interface number 0 [ 1092.527323][ T8001] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 1092.539068][ T8001] usb 4-1: config 128 interface 127 has no altsetting 0 [ 1092.551605][ T8001] usb 4-1: config 128 interface 1 has no altsetting 0 [ 1092.563254][ T8001] usb 4-1: language id specifier not provided by device, defaulting to English [ 1092.577790][ T8001] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1092.590524][ T8001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.599758][ T8001] usb 4-1: Product: syz [ 1092.603945][ T8001] usb 4-1: Manufacturer: syz [ 1092.619559][ T8001] usb 4-1: SerialNumber: syz [ 1092.633601][T16510] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1092.863444][T16510] overlay: ./file0 is not a directory [ 1092.891525][ T8001] usb 4-1: USB disconnect, device number 51 [ 1093.068146][T16081] udevd[16081]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1093.791364][T16528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2638'. [ 1094.803351][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2638'. [ 1094.867295][T12775] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 1095.689140][ T5911] usb 5-1: USB disconnect, device number 73 [ 1095.954463][T16542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2643'. [ 1097.094005][T16554] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 1097.151415][T13678] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1097.210309][T16555] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=16555 comm=syz.1.2642 [ 1097.552902][T13678] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1097.961109][T13678] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1098.123633][T16556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2646'. [ 1098.187808][T13678] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1098.205065][T13678] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1098.380766][T13678] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1098.402072][T13678] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.079181][T16554] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1099.120149][T13678] usb 1-1: config 0 descriptor?? [ 1099.133502][T16549] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1099.244369][T13678] usbhid 1-1:0.0: can't add hid device: -71 [ 1099.266070][T13678] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1099.403626][T13678] usb 1-1: USB disconnect, device number 63 [ 1099.404286][T16571] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 1100.722895][T16571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2651'. [ 1100.741994][T16571] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1100.946103][T12775] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 1104.664308][ T29] audit: type=1800 audit(1739946819.556:557): pid=16610 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2659" name="/" dev="9p" ino=2 res=0 errno=0 [ 1106.443400][ T5911] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1107.368080][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1107.416306][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1107.448367][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1107.473700][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1107.515255][ T5911] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1107.525984][T16639] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 1107.556936][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.609268][ T5911] usb 5-1: config 0 descriptor?? [ 1107.637132][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2668'. [ 1107.657907][T16614] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1107.683694][T16640] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1107.705703][T16642] FAULT_INJECTION: forcing a failure. [ 1107.705703][T16642] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.793332][T16642] CPU: 0 UID: 0 PID: 16642 Comm: syz.3.2669 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1107.793362][T16642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1107.793374][T16642] Call Trace: [ 1107.793380][T16642] [ 1107.793388][T16642] dump_stack_lvl+0x16c/0x1f0 [ 1107.793419][T16642] should_fail_ex+0x50a/0x650 [ 1107.793450][T16642] should_failslab+0xc2/0x120 [ 1107.793472][T16642] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1107.793501][T16642] ? skb_clone+0x190/0x3f0 [ 1107.793530][T16642] skb_clone+0x190/0x3f0 [ 1107.793555][T16642] netlink_deliver_tap+0xabd/0xd30 [ 1107.793584][T16642] netlink_unicast+0x5e1/0x7f0 [ 1107.793610][T16642] ? __pfx_netlink_unicast+0x10/0x10 [ 1107.793641][T16642] netlink_sendmsg+0x8b8/0xd70 [ 1107.793668][T16642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.793702][T16642] ____sys_sendmsg+0xaaf/0xc90 [ 1107.793721][T16642] ? copy_msghdr_from_user+0x10b/0x160 [ 1107.793744][T16642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1107.793776][T16642] ___sys_sendmsg+0x135/0x1e0 [ 1107.793802][T16642] ? __pfx____sys_sendmsg+0x10/0x10 [ 1107.793837][T16642] ? __pfx_lock_release+0x10/0x10 [ 1107.793861][T16642] ? trace_lock_acquire+0x14e/0x1f0 [ 1107.793892][T16642] ? __fget_files+0x206/0x3a0 [ 1107.793918][T16642] __sys_sendmsg+0x16e/0x220 [ 1107.793942][T16642] ? __pfx___sys_sendmsg+0x10/0x10 [ 1107.793983][T16642] do_syscall_64+0xcd/0x250 [ 1107.794008][T16642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.794033][T16642] RIP: 0033:0x7fe0e578cde9 [ 1107.794048][T16642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1107.794065][T16642] RSP: 002b:00007fe0e666b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1107.794084][T16642] RAX: ffffffffffffffda RBX: 00007fe0e59a5fa0 RCX: 00007fe0e578cde9 [ 1107.794096][T16642] RDX: 0000000024000004 RSI: 0000400000000180 RDI: 0000000000000003 [ 1107.794108][T16642] RBP: 00007fe0e666b090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.794120][T16642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.794131][T16642] R13: 0000000000000000 R14: 00007fe0e59a5fa0 R15: 00007ffcdcda75e8 [ 1107.794157][T16642] [ 1108.013933][ C0] vkms_vblank_simulate: vblank timer overrun [ 1108.072972][ T5911] usbhid 5-1:0.0: can't add hid device: -71 [ 1108.592361][ T5911] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1108.607808][T12775] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 1108.617124][ T5911] usb 5-1: USB disconnect, device number 74 [ 1111.223319][T16674] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 1111.315074][T16676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2678'. [ 1112.775319][T16688] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.2680'. [ 1115.051258][ T29] audit: type=1400 audit(1739946829.275:558): avc: denied { map } for pid=16711 comm="syz.1.2687" path="socket:[43667]" dev="sockfs" ino=43667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1115.869823][T16724] netlink: 'syz.1.2689': attribute type 1 has an invalid length. [ 1115.877666][T16724] netlink: 'syz.1.2689': attribute type 2 has an invalid length. [ 1116.339254][ T29] audit: type=1800 audit(1739946830.481:559): pid=16722 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2690" name="/" dev="9p" ino=2 res=0 errno=0 [ 1117.131382][T16732] siw: device registration error -23 [ 1118.111271][T16744] netlink: 'syz.1.2694': attribute type 1 has an invalid length. [ 1118.119112][T16744] netlink: 'syz.1.2694': attribute type 2 has an invalid length. [ 1118.913630][ T5911] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1119.211585][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 1119.371488][ T5911] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 1119.383046][ T5911] usb 5-1: config 0 has no interface number 0 [ 1119.392244][ T5911] usb 5-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.404978][ T5911] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1119.416021][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.424758][ T5911] usb 5-1: Product: syz [ 1119.450153][ T5911] usb 5-1: Manufacturer: syz [ 1119.467922][ T5911] usb 5-1: SerialNumber: syz [ 1119.478639][ T5911] usb 5-1: config 0 descriptor?? [ 1119.617334][ T5911] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1119.726229][T16758] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=16758 comm=syz.2.2698 [ 1119.794496][ T41] block nbd0: Possible stuck request ffff8880266de000: control (read@0,4096B). Runtime 60 seconds [ 1120.606752][ T5833] usb 5-1: USB disconnect, device number 75 [ 1120.613337][ T1164] usb 5-1: Failed to submit usb control message: -71 [ 1120.622396][ T1164] usb 5-1: unable to send the bmi data to the device: -71 [ 1120.634264][ T1164] usb 5-1: unable to get target info from device [ 1120.791670][T16767] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 1121.300626][ T1164] usb 5-1: could not get target info (-71) [ 1121.306638][ T1164] usb 5-1: could not probe fw (-71) [ 1122.541813][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1122.548711][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.866596][T12775] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 1124.791127][T16803] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=16803 comm=syz.4.2711 [ 1126.072446][T16811] evm: overlay not supported [ 1128.545594][T16839] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=16839 comm=syz.4.2723 [ 1131.279428][ T29] audit: type=1400 audit(1739946844.456:560): avc: denied { ioctl } for pid=16868 comm="syz.0.2731" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1131.400995][T16874] netlink: 'syz.2.2729': attribute type 1 has an invalid length. [ 1131.408876][T16874] netlink: 'syz.2.2729': attribute type 2 has an invalid length. [ 1132.026577][ T29] audit: type=1400 audit(1739946845.158:561): avc: denied { bind } for pid=16868 comm="syz.0.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1132.217711][ T29] audit: type=1400 audit(1739946845.317:562): avc: denied { setopt } for pid=16868 comm="syz.0.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1132.905170][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1132.921199][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1132.931070][T16896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2740'. [ 1133.787012][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1133.799059][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1133.806406][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1133.813604][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1133.967594][T16890] lo speed is unknown, defaulting to 1000 [ 1134.380450][T16890] chnl_net:caif_netlink_parms(): no params data found [ 1134.939400][T16919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2744'. [ 1135.221795][T16890] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.245637][T16890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.253076][T16890] bridge_slave_0: entered allmulticast mode [ 1135.260077][T16890] bridge_slave_0: entered promiscuous mode [ 1135.275073][T16890] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.282241][T16890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.294434][T16890] bridge_slave_1: entered allmulticast mode [ 1135.305490][T16890] bridge_slave_1: entered promiscuous mode [ 1135.501041][T16890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.528837][T16890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1135.611637][T16890] team0: Port device team_slave_0 added [ 1135.628933][T16890] team0: Port device team_slave_1 added [ 1135.714620][T16890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1135.732443][T16890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.797696][T16890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1135.822175][T16890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1135.829154][T16890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1135.860133][T16890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1135.942794][ T1201] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1136.034864][T12775] Bluetooth: hci5: command tx timeout [ 1136.246054][ T1201] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1136.374118][ T1201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1136.418718][ T1201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1136.451817][ T1201] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1136.454489][T16890] hsr_slave_0: entered promiscuous mode [ 1136.476293][T16890] hsr_slave_1: entered promiscuous mode [ 1136.484605][T16890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1136.487523][ T1201] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1136.496426][T16890] Cannot create hsr debugfs directory [ 1136.514180][ T1201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.538015][ T1201] usb 5-1: config 0 descriptor?? [ 1136.545412][T16929] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1137.037206][T16943] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 1138.320809][T12775] Bluetooth: hci5: command tx timeout [ 1138.663540][ T1201] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 1138.746424][ T1201] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 1138.781362][ T1201] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1138.790704][T16890] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1138.995528][T16890] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1139.041664][T16890] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1139.061824][T16890] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1139.139788][T16890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1139.155683][T16890] 8021q: adding VLAN 0 to HW filter on device team0 [ 1139.177530][ T7085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.184651][ T7085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1139.212063][ T7085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.219152][ T7085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1139.343652][T16890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1139.350734][ T5911] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1139.486839][T16890] veth0_vlan: entered promiscuous mode [ 1139.496222][T16890] veth1_vlan: entered promiscuous mode [ 1139.525779][T16890] veth0_macvtap: entered promiscuous mode [ 1139.534584][T16890] veth1_macvtap: entered promiscuous mode [ 1139.546826][T16890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1139.550238][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 1139.557579][T16890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.570625][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1139.574004][T16890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1139.581536][ T5911] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 1139.591377][T16890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.609742][T16890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1139.620612][T16890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.620875][ T5911] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.631590][T16890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1139.649070][ T5911] usb 3-1: config 128 has 2 interfaces, different from the descriptor's value: 4 [ 1139.653611][T16890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.663024][ T5911] usb 3-1: config 128 has no interface number 0 [ 1139.678260][ T5911] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 1139.694935][ T5911] usb 3-1: config 128 interface 127 has no altsetting 0 [ 1139.699179][T16890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1139.709716][ T5911] usb 3-1: config 128 interface 1 has no altsetting 0 [ 1139.737064][T16890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.751043][ T5911] usb 3-1: language id specifier not provided by device, defaulting to English [ 1139.762335][T16890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.773534][ T5911] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1139.784947][T16890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.787463][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.805796][T16890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.816320][ T5911] usb 3-1: Product: syz [ 1139.825711][ T5911] usb 3-1: Manufacturer: syz [ 1139.831082][ T5911] usb 3-1: SerialNumber: syz [ 1139.833376][T16890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.838381][T16957] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1139.864698][T16890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.889205][T16890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1139.904240][T16890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1139.922675][T16890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1139.968267][T16972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2755'. [ 1140.071303][T16972] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1140.077134][T16890] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.233813][T16890] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.343664][T16890] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.392239][T16957] overlay: ./file0 is not a directory [ 1140.400893][T16890] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.481848][T12775] Bluetooth: hci5: command tx timeout [ 1140.505416][ T5911] usb 3-1: USB disconnect, device number 53 [ 1140.934729][ T1546] usb 5-1: USB disconnect, device number 76 [ 1141.376784][T16081] udevd[16081]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1141.843990][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.878088][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.925873][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.966784][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.088627][T16990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2761'. [ 1142.295154][ T29] audit: type=1400 audit(1739946854.661:563): avc: denied { mounton } for pid=16890 comm="syz-executor" path="/root/syzkaller.jVt5HY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1143.321767][T12775] Bluetooth: hci5: command tx timeout [ 1143.859054][ T29] audit: type=1400 audit(1739946855.718:564): avc: denied { mount } for pid=16890 comm="syz-executor" name="/" dev="gadgetfs" ino=6813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1143.985188][ T29] audit: type=1400 audit(1739946856.336:565): avc: denied { mounton } for pid=16890 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1144.159129][T16989] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1149.524637][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1149.534178][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1149.562022][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1149.589271][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1149.600697][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1149.608980][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1149.802615][T17062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2779'. [ 1149.878937][T17062] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1150.303846][ T5911] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1150.385426][T17052] lo speed is unknown, defaulting to 1000 [ 1150.506004][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1150.585491][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1150.609290][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1150.671853][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1150.723953][ T5911] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1150.733374][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.762922][ T5911] usb 3-1: config 0 descriptor?? [ 1150.774440][T17054] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1150.998586][ T1164] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1151.042703][ T1164] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.099870][T17052] chnl_net:caif_netlink_parms(): no params data found [ 1151.174207][ T1164] bridge0: port 3(netdevsim2) entered disabled state [ 1151.254808][ T1164] netdevsim netdevsim1 netdevsim2 (unregistering): left allmulticast mode [ 1151.258963][ T5911] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 1151.263991][ T1164] netdevsim netdevsim1 netdevsim2 (unregistering): left promiscuous mode [ 1151.279733][ T1164] bridge0: port 3(netdevsim2) entered disabled state [ 1151.389497][ T1164] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1151.396796][ T5911] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 1151.421532][ T1164] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.770159][T12775] Bluetooth: hci6: command tx timeout [ 1151.782876][ T5911] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1151.947193][ T41] block nbd0: Possible stuck request ffff8880266de000: control (read@0,4096B). Runtime 90 seconds [ 1152.012456][ T1164] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1152.056327][ T1164] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.087950][T17052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.304585][T17052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.312989][T17052] bridge_slave_0: entered allmulticast mode [ 1152.352850][T17052] bridge_slave_0: entered promiscuous mode [ 1152.593540][T17052] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.600640][T17052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.947526][T17052] bridge_slave_1: entered allmulticast mode [ 1152.955855][T17052] bridge_slave_1: entered promiscuous mode [ 1152.977880][T13678] usb 3-1: USB disconnect, device number 54 [ 1153.094508][ T1164] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1153.117240][ T1164] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.118364][T17105] FAULT_INJECTION: forcing a failure. [ 1153.118364][T17105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1153.235188][T17105] CPU: 1 UID: 0 PID: 17105 Comm: syz.2.2788 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1153.235215][T17105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1153.235226][T17105] Call Trace: [ 1153.235232][T17105] [ 1153.235240][T17105] dump_stack_lvl+0x16c/0x1f0 [ 1153.235265][T17105] should_fail_ex+0x50a/0x650 [ 1153.235296][T17105] _copy_from_iter+0x2a1/0x1560 [ 1153.235315][T17105] ? trace_lock_acquire+0x14e/0x1f0 [ 1153.235337][T17105] ? __alloc_skb+0x1fe/0x380 [ 1153.235360][T17105] ? __pfx__copy_from_iter+0x10/0x10 [ 1153.235376][T17105] ? __virt_addr_valid+0x1a4/0x590 [ 1153.235399][T17105] ? __virt_addr_valid+0x5e/0x590 [ 1153.235417][T17105] ? __phys_addr_symbol+0x30/0x80 [ 1153.235434][T17105] ? __check_object_size+0x488/0x710 [ 1153.235460][T17105] netlink_sendmsg+0x813/0xd70 [ 1153.235487][T17105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1153.235518][T17105] ____sys_sendmsg+0xaaf/0xc90 [ 1153.235535][T17105] ? copy_msghdr_from_user+0x10b/0x160 [ 1153.235558][T17105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1153.235588][T17105] ___sys_sendmsg+0x135/0x1e0 [ 1153.235613][T17105] ? __pfx____sys_sendmsg+0x10/0x10 [ 1153.235647][T17105] ? __pfx_lock_release+0x10/0x10 [ 1153.235671][T17105] ? trace_lock_acquire+0x14e/0x1f0 [ 1153.235701][T17105] ? __fget_files+0x206/0x3a0 [ 1153.235732][T17105] __sys_sendmsg+0x16e/0x220 [ 1153.235756][T17105] ? __pfx___sys_sendmsg+0x10/0x10 [ 1153.235797][T17105] do_syscall_64+0xcd/0x250 [ 1153.235821][T17105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.235844][T17105] RIP: 0033:0x7f274cb8cde9 [ 1153.235860][T17105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1153.235878][T17105] RSP: 002b:00007f274a9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1153.235896][T17105] RAX: ffffffffffffffda RBX: 00007f274cda5fa0 RCX: 00007f274cb8cde9 [ 1153.235908][T17105] RDX: 0000000004000000 RSI: 0000400000000280 RDI: 0000000000000003 [ 1153.235920][T17105] RBP: 00007f274a9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1153.235931][T17105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1153.235942][T17105] R13: 0000000000000000 R14: 00007f274cda5fa0 R15: 00007fffc3fd1f18 [ 1153.235966][T17105] [ 1154.420775][T12775] Bluetooth: hci6: command tx timeout [ 1154.433499][T17052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1154.454919][T17052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1154.811883][T17119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2790'. [ 1155.424110][T17052] team0: Port device team_slave_0 added [ 1155.489132][T17052] team0: Port device team_slave_1 added [ 1156.518243][T17052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.534333][T17052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.568283][T17052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.595660][T17052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.614289][T17052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.653069][T17052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.665789][T12775] Bluetooth: hci6: command tx timeout [ 1156.815779][ T1164] bridge_slave_1: left allmulticast mode [ 1156.821772][ T1164] bridge_slave_1: left promiscuous mode [ 1156.833390][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.845183][ T1164] bridge_slave_0: left allmulticast mode [ 1156.852004][ T1164] bridge_slave_0: left promiscuous mode [ 1156.878100][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.920781][T17136] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 1157.418602][ T1164] bridge0: left allmulticast mode [ 1157.423720][ T1164] bridge0: left promiscuous mode [ 1158.438719][T17148] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=17148 comm=syz.4.2796 [ 1159.241188][T12775] Bluetooth: hci6: command tx timeout [ 1159.336786][T17150] netlink: 'syz.2.2797': attribute type 1 has an invalid length. [ 1159.345114][T17150] netlink: 'syz.2.2797': attribute type 2 has an invalid length. [ 1160.290089][ T5194] udevd[5194]: worker [16103] /devices/virtual/block/nbd0 is taking a long time [ 1161.823550][T17161] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 1164.037532][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2802'. [ 1164.167288][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1164.220323][T17171] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1164.296409][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1164.385650][ T1164] bond0 (unregistering): Released all slaves [ 1164.462515][T17052] hsr_slave_0: entered promiscuous mode [ 1164.468705][T17052] hsr_slave_1: entered promiscuous mode [ 1164.475728][T17052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1164.483619][T17052] Cannot create hsr debugfs directory [ 1164.993924][T13678] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1165.331938][T13678] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1165.453132][T13678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 29030, setting to 64 [ 1165.516356][T13678] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1165.560482][T13678] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1165.570700][T13678] usb 5-1: Manufacturer: syz [ 1165.623054][T13678] usb 5-1: config 0 descriptor?? [ 1165.752865][T13678] rc_core: IR keymap rc-hauppauge not found [ 1165.767743][T13678] Registered IR keymap rc-empty [ 1166.186334][T13678] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1166.250661][T13678] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input69 [ 1166.383127][T17201] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.2808'. [ 1167.128096][ T8001] usb 5-1: USB disconnect, device number 77 [ 1167.607346][ T1164] hsr_slave_0: left promiscuous mode [ 1167.616152][ T1164] hsr_slave_1: left promiscuous mode [ 1167.622004][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1167.629808][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1167.652525][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1167.669276][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1167.692641][ T1164] veth1_macvtap: left promiscuous mode [ 1167.699122][ T1164] veth0_macvtap: left promiscuous mode [ 1167.705442][ T1164] veth1_vlan: left promiscuous mode [ 1167.711386][ T1164] veth0_vlan: left promiscuous mode [ 1167.784085][T17014] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1168.117331][T17014] usb 1-1: Using ep0 maxpacket: 16 [ 1168.178408][T17014] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.359186][T17014] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1168.665141][T17237] netlink: 1280 bytes leftover after parsing attributes in process `syz.5.2813'. [ 1168.674942][T17014] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1168.684403][T17014] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.702487][T17014] usb 1-1: config 0 descriptor?? [ 1168.974489][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2814'. [ 1169.075808][T17244] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1169.220773][T17014] hid-picolcd 0003:04D8:F002.000D: unknown main item tag 0x0 [ 1169.254718][T17014] hid-picolcd 0003:04D8:F002.000D: unknown main item tag 0x0 [ 1169.295123][T17014] hid-picolcd 0003:04D8:F002.000D: unknown main item tag 0x0 [ 1169.310688][T17014] hid-picolcd 0003:04D8:F002.000D: unknown main item tag 0x0 [ 1169.320690][T17014] hid-picolcd 0003:04D8:F002.000D: unknown main item tag 0x0 [ 1169.330643][T17014] hid-picolcd 0003:04D8:F002.000D: unknown main item tag 0x0 [ 1169.340750][T17014] hid-picolcd 0003:04D8:F002.000D: unknown main item tag 0x0 [ 1169.351084][T17014] hid-picolcd 0003:04D8:F002.000D: unknown main item tag 0x0 [ 1169.358972][T17014] hid-picolcd 0003:04D8:F002.000D: unknown main item tag 0x0 [ 1169.376576][T17014] hid-picolcd 0003:04D8:F002.000D: unknown main item tag 0x0 [ 1169.386251][T17014] hid-picolcd 0003:04D8:F002.000D: unknown main item tag 0x0 [ 1169.520966][T17014] hid-picolcd 0003:04D8:F002.000D: No report with id 0xf4 found [ 1169.529606][T17014] hid-picolcd 0003:04D8:F002.000D: No report with id 0xf3 found [ 1169.551329][T17014] usb 1-1: USB disconnect, device number 64 [ 1169.676154][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 1169.719188][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 1170.121781][T17247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2815'. [ 1170.281517][T17248] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1170.815050][T17255] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=17255 comm=syz.0.2817 [ 1171.642528][T17259] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2819'. [ 1171.651951][T17259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2819'. [ 1171.826949][T17257] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2819'. [ 1171.835987][T17257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2819'. [ 1171.927751][T17265] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 1173.987607][T17052] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1174.906277][T17052] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1175.587713][T17052] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1175.659937][T17052] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1176.129785][ T1164] IPVS: stop unused estimator thread 0... [ 1176.324172][T17307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2829'. [ 1176.464186][T17307] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1176.999781][ T1201] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1177.061023][T17311] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2832'. [ 1177.070415][T17311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2832'. [ 1177.080795][T17311] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2832'. [ 1177.090117][T17311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2832'. [ 1177.104420][T17052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.236846][T17052] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.278974][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.286132][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1177.329958][ T1201] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1177.343107][ T1201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1177.377220][ T1201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1177.547367][ T1201] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1177.822650][T10662] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.829748][T10662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1177.892215][ T1201] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1177.926970][ T1201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.056938][ T8001] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1178.077165][ T1201] usb 5-1: config 0 descriptor?? [ 1178.085111][T17310] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1178.159851][T17052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1178.208004][T17052] veth0_vlan: entered promiscuous mode [ 1178.221142][T17329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2836'. [ 1178.244976][T17052] veth1_vlan: entered promiscuous mode [ 1178.307950][T17052] veth0_macvtap: entered promiscuous mode [ 1178.333320][T17052] veth1_macvtap: entered promiscuous mode [ 1178.378630][ T8001] usb 3-1: Using ep0 maxpacket: 16 [ 1178.387259][ T8001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1178.394421][T17052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.398446][ T8001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1178.418606][ T8001] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1178.427827][ T8001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.453017][ T8001] usb 3-1: config 0 descriptor?? [ 1178.557319][T17052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.606788][ T1201] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 1178.615155][T17052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.795390][ T1201] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 1178.891005][T17052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.909125][ T1201] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1178.913281][T17052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.939395][T17052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.009249][T17052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.025592][T17052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.138989][T17052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1179.151729][ T8001] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 1179.159875][ T8001] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 1179.167347][ T8001] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 1179.176644][ T8001] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 1179.184176][ T8001] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 1179.192825][T17052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.203361][ T8001] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 1179.210757][ T8001] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 1179.218477][T17052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.228686][T17052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.239541][ T8001] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 1179.255149][ T8001] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 1179.265830][T17052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.281481][ T8001] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 1179.304412][T17052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.336461][ T8001] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 1179.464562][T17052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.565664][ T8001] hid-picolcd 0003:04D8:F002.000F: No report with id 0xf4 found [ 1179.574109][T17052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.612095][ T8001] hid-picolcd 0003:04D8:F002.000F: No report with id 0xf3 found [ 1179.660659][T17052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.689464][ T8001] usb 3-1: USB disconnect, device number 55 [ 1179.837742][T17052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1179.965926][T17335] bridge0: port 3(netdevsim2) entered blocking state [ 1179.976756][T17335] bridge0: port 3(netdevsim2) entered disabled state [ 1179.998573][T17335] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 1180.007699][T17335] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 1180.015532][T17335] bridge0: port 3(netdevsim2) entered blocking state [ 1180.019607][ T5911] usb 5-1: USB disconnect, device number 78 [ 1180.022315][T17335] bridge0: port 3(netdevsim2) entered forwarding state [ 1180.641974][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 1180.651080][T17052] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.661962][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 1180.669240][T17052] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.679021][T17052] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.689637][T17052] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.736529][T17343] ceph: No mds server is up or the cluster is laggy [ 1180.910312][T17349] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 1181.003485][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.027994][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1181.115816][T13949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.152535][T13949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1181.208037][T17356] FAULT_INJECTION: forcing a failure. [ 1181.208037][T17356] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.267847][T17356] CPU: 1 UID: 0 PID: 17356 Comm: syz.2.2843 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1181.267877][T17356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1181.267888][T17356] Call Trace: [ 1181.267894][T17356] [ 1181.267902][T17356] dump_stack_lvl+0x16c/0x1f0 [ 1181.267928][T17356] should_fail_ex+0x50a/0x650 [ 1181.267954][T17356] ? __pfx_lock_release+0x10/0x10 [ 1181.267983][T17356] should_failslab+0xc2/0x120 [ 1181.268005][T17356] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1181.268025][T17356] ? skb_clone+0x190/0x3f0 [ 1181.268052][T17356] skb_clone+0x190/0x3f0 [ 1181.268077][T17356] ip6_finish_output2+0x14db/0x20a0 [ 1181.268108][T17356] ip6_finish_output+0x3f9/0x1360 [ 1181.268132][T17356] ip6_output+0x1f8/0x540 [ 1181.268152][T17356] ? __pfx_ip6_output+0x10/0x10 [ 1181.268174][T17356] ip6_local_out+0xcd/0x4a0 [ 1181.268202][T17356] ip6_send_skb+0x112/0x460 [ 1181.268224][T17356] ip6_push_pending_frames+0xe0/0x110 [ 1181.268247][T17356] rawv6_sendmsg+0x2f95/0x4610 [ 1181.268264][T17356] ? avc_has_perm_noaudit+0x119/0x3a0 [ 1181.268294][T17356] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1181.268313][T17356] ? avc_has_perm_noaudit+0x143/0x3a0 [ 1181.268335][T17356] ? avc_has_perm+0x11b/0x1c0 [ 1181.268354][T17356] ? __pfx_avc_has_perm+0x10/0x10 [ 1181.268401][T17356] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1181.268421][T17356] ? inet_sendmsg+0x119/0x140 [ 1181.268445][T17356] inet_sendmsg+0x119/0x140 [ 1181.268469][T17356] __sys_sendto+0x42a/0x4f0 [ 1181.268492][T17356] ? __pfx___sys_sendto+0x10/0x10 [ 1181.268539][T17356] ? ksys_write+0x1ba/0x250 [ 1181.268566][T17356] ? __pfx_ksys_write+0x10/0x10 [ 1181.268595][T17356] __x64_sys_sendto+0xe0/0x1c0 [ 1181.268616][T17356] ? do_syscall_64+0x91/0x250 [ 1181.268637][T17356] ? lockdep_hardirqs_on+0x7c/0x110 [ 1181.268657][T17356] do_syscall_64+0xcd/0x250 [ 1181.268680][T17356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1181.268704][T17356] RIP: 0033:0x7f274cb8cde9 [ 1181.268719][T17356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1181.268738][T17356] RSP: 002b:00007f274a9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1181.268756][T17356] RAX: ffffffffffffffda RBX: 00007f274cda5fa0 RCX: 00007f274cb8cde9 [ 1181.268769][T17356] RDX: 0000000000000016 RSI: 0000400000000300 RDI: 0000000000000003 [ 1181.268780][T17356] RBP: 00007f274a9f6090 R08: 0000000000000000 R09: fffffffffffffdfd [ 1181.268793][T17356] R10: 0000000000003b00 R11: 0000000000000246 R12: 0000000000000001 [ 1181.268805][T17356] R13: 0000000000000000 R14: 00007f274cda5fa0 R15: 00007fffc3fd1f18 [ 1181.268836][T17356] [ 1181.607404][T17362] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=17362 comm=syz.5.2842 [ 1182.733802][T17373] FAULT_INJECTION: forcing a failure. [ 1182.733802][T17373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1182.747120][T17373] CPU: 1 UID: 0 PID: 17373 Comm: syz.2.2847 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1182.747144][T17373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1182.747155][T17373] Call Trace: [ 1182.747161][T17373] [ 1182.747169][T17373] dump_stack_lvl+0x16c/0x1f0 [ 1182.747196][T17373] should_fail_ex+0x50a/0x650 [ 1182.747225][T17373] _copy_from_iter+0x2a1/0x1560 [ 1182.747246][T17373] ? trace_lock_acquire+0x14e/0x1f0 [ 1182.747268][T17373] ? __alloc_skb+0x1fe/0x380 [ 1182.747291][T17373] ? __pfx__copy_from_iter+0x10/0x10 [ 1182.747311][T17373] ? __virt_addr_valid+0x1a4/0x590 [ 1182.747336][T17373] ? __virt_addr_valid+0x5e/0x590 [ 1182.747355][T17373] ? __phys_addr_symbol+0x30/0x80 [ 1182.747373][T17373] ? __check_object_size+0x488/0x710 [ 1182.747399][T17373] netlink_sendmsg+0x813/0xd70 [ 1182.747431][T17373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1182.747463][T17373] ____sys_sendmsg+0xaaf/0xc90 [ 1182.747481][T17373] ? copy_msghdr_from_user+0x10b/0x160 [ 1182.747505][T17373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1182.747536][T17373] ___sys_sendmsg+0x135/0x1e0 [ 1182.747561][T17373] ? __pfx____sys_sendmsg+0x10/0x10 [ 1182.747595][T17373] ? __pfx_lock_release+0x10/0x10 [ 1182.747619][T17373] ? trace_lock_acquire+0x14e/0x1f0 [ 1182.747649][T17373] ? __fget_files+0x206/0x3a0 [ 1182.747673][T17373] __sys_sendmsg+0x16e/0x220 [ 1182.747697][T17373] ? __pfx___sys_sendmsg+0x10/0x10 [ 1182.747738][T17373] do_syscall_64+0xcd/0x250 [ 1182.747762][T17373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.747787][T17373] RIP: 0033:0x7f274cb8cde9 [ 1182.747802][T17373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1182.747820][T17373] RSP: 002b:00007f274a9b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1182.747838][T17373] RAX: ffffffffffffffda RBX: 00007f274cda6160 RCX: 00007f274cb8cde9 [ 1182.747851][T17373] RDX: 0000000000040000 RSI: 0000400000000e80 RDI: 0000000000000003 [ 1182.747863][T17373] RBP: 00007f274a9b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.747875][T17373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.747886][T17373] R13: 0000000000000000 R14: 00007f274cda6160 R15: 00007fffc3fd1f18 [ 1182.747912][T17373] [ 1183.447754][ T29] audit: type=1800 audit(1739946893.247:566): pid=17372 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2769" name="/" dev="9p" ino=2 res=0 errno=0 [ 1184.504565][ T41] block nbd0: Possible stuck request ffff8880266de000: control (read@0,4096B). Runtime 120 seconds [ 1185.263454][ T8001] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1185.463505][ T8001] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1186.179197][ T8001] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1186.190856][ T8001] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1186.226808][ T8001] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1186.274650][ T8001] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1186.293600][ T8001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.419981][ T8001] usb 6-1: config 0 descriptor?? [ 1186.425596][T17382] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1187.058093][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 1187.193316][T17395] ceph: No mds server is up or the cluster is laggy [ 1187.276656][T17402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2853'. [ 1187.351314][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 1187.460941][ T8001] plantronics 0003:047F:FFFF.0010: unknown main item tag 0xd [ 1187.492695][ T8001] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 1187.510910][ T8001] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1187.929321][T17412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2857'. [ 1187.938877][T17412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2857'. [ 1187.948471][T17412] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2857'. [ 1188.880268][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1188.886987][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1189.449376][ T5911] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 1190.277619][T17436] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 1190.298477][ T5911] usb 6-1: device descriptor read/64, error -71 [ 1190.388935][T17438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2860'. [ 1190.500257][T17438] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1190.560484][T16973] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1190.653914][ T5911] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 1190.671674][ T5911] usb 6-1: device reset changed ep0 maxpacket size! [ 1190.682278][ T1546] usb 6-1: USB disconnect, device number 2 [ 1190.833143][T16973] usb 5-1: Using ep0 maxpacket: 32 [ 1190.846801][T16973] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1190.867998][T16973] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 1190.878210][T16973] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.897585][ T1546] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1190.913929][T16973] usb 5-1: config 128 has 2 interfaces, different from the descriptor's value: 4 [ 1191.020544][T16973] usb 5-1: config 128 has no interface number 0 [ 1191.062200][T16973] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 1191.143168][T17014] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1191.143330][T16973] usb 5-1: config 128 interface 127 has no altsetting 0 [ 1191.297094][ T1546] usb 6-1: Using ep0 maxpacket: 16 [ 1191.302315][T16973] usb 5-1: config 128 interface 1 has no altsetting 0 [ 1191.316106][ T1546] usb 6-1: config 0 has an invalid interface number: 68 but max is 0 [ 1191.324358][ T1546] usb 6-1: config 0 has no interface number 0 [ 1191.331881][T16973] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1191.341106][T16973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.349281][ T1546] usb 6-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.371432][T16973] usb 5-1: Product: syz [ 1191.375902][T16973] usb 5-1: Manufacturer: syz [ 1191.381148][T16973] usb 5-1: SerialNumber: syz [ 1191.390745][T17432] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1191.410780][ T1546] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1191.426028][ T1546] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.435537][ T1546] usb 6-1: Product: syz [ 1191.439781][ T1546] usb 6-1: Manufacturer: syz [ 1191.454735][ T1546] usb 6-1: SerialNumber: syz [ 1191.468574][ T1546] usb 6-1: config 0 descriptor?? [ 1191.481353][T17014] usb 3-1: Using ep0 maxpacket: 8 [ 1191.492333][ T1546] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1191.493209][T17014] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 1191.922017][T17432] overlay: ./file0 is not a directory [ 1191.944790][T17014] usb 3-1: config 0 has no interface number 0 [ 1191.965324][T17014] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1191.982969][T16973] usb 5-1: USB disconnect, device number 79 [ 1192.052422][T17014] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1192.088714][T17014] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 48, changing to 9 [ 1192.115947][T17014] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8437, setting to 1024 [ 1192.148017][T17014] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1192.191967][T16081] udevd[16081]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1192.203636][T17014] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1192.218582][T17014] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.231851][T17014] usb 3-1: Product: syz [ 1192.240590][T17014] usb 3-1: Manufacturer: syz [ 1192.251980][T17014] usb 3-1: SerialNumber: syz [ 1192.300236][T17014] usb 3-1: config 0 descriptor?? [ 1192.338424][ T5877] usb 6-1: USB disconnect, device number 3 [ 1192.351207][T13949] usb 6-1: Failed to submit usb control message: -71 [ 1192.360929][T13949] usb 6-1: unable to send the bmi data to the device: -71 [ 1192.377439][T13949] usb 6-1: unable to get target info from device [ 1192.390880][T13949] usb 6-1: could not get target info (-71) [ 1192.402397][T13949] usb 6-1: could not probe fw (-71) [ 1193.286756][T17014] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 1193.309450][T17014] usb 3-1: USB disconnect, device number 56 [ 1193.598693][T17472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2868'. [ 1193.608095][T17472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2868'. [ 1193.617365][T17472] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2868'. [ 1193.670817][T17467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2868'. [ 1193.684913][T17467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2868'. [ 1193.693949][T17467] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2868'. [ 1193.922702][ T1546] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1193.967750][ T29] audit: type=1800 audit(1739946903.096:567): pid=17478 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2875" name="/" dev="9p" ino=2 res=0 errno=0 [ 1194.106793][ T1546] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1194.131765][ T1546] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1194.155352][ T1546] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1194.179201][ T1546] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1194.211188][ T1546] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1194.220249][ T1546] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.284425][ T1546] usb 2-1: config 0 descriptor?? [ 1194.300731][T17470] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1195.142808][ T1546] plantronics 0003:047F:FFFF.0011: unknown main item tag 0xd [ 1195.183353][ T1546] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 1195.227546][ T1546] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1197.627563][T17014] usb 2-1: USB disconnect, device number 50 [ 1198.274283][ T29] audit: type=1400 audit(1739946907.128:568): avc: denied { mounton } for pid=17512 comm="syz.0.2882" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1198.310332][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2882'. [ 1198.321275][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2882'. [ 1198.435297][T17525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2884'. [ 1198.444426][T17525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2884'. [ 1199.294695][T17534] FAULT_INJECTION: forcing a failure. [ 1199.294695][T17534] name failslab, interval 1, probability 0, space 0, times 0 [ 1199.307479][T17534] CPU: 1 UID: 0 PID: 17534 Comm: syz.0.2885 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1199.307493][T17534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1199.307500][T17534] Call Trace: [ 1199.307504][T17534] [ 1199.307508][T17534] dump_stack_lvl+0x16c/0x1f0 [ 1199.307526][T17534] should_fail_ex+0x50a/0x650 [ 1199.307542][T17534] ? fs_reclaim_acquire+0xae/0x150 [ 1199.307558][T17534] ? tomoyo_realpath_from_path+0xb9/0x720 [ 1199.307574][T17534] should_failslab+0xc2/0x120 [ 1199.307586][T17534] __kmalloc_noprof+0xcb/0x510 [ 1199.307597][T17534] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1199.307615][T17534] tomoyo_realpath_from_path+0xb9/0x720 [ 1199.307629][T17534] ? tomoyo_path_number_perm+0x235/0x590 [ 1199.307643][T17534] ? tomoyo_path_number_perm+0x235/0x590 [ 1199.307657][T17534] tomoyo_path_number_perm+0x248/0x590 [ 1199.307669][T17534] ? tomoyo_path_number_perm+0x235/0x590 [ 1199.307683][T17534] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1199.307709][T17534] ? __pfx_lock_release+0x10/0x10 [ 1199.307723][T17534] ? trace_lock_acquire+0x14e/0x1f0 [ 1199.307744][T17534] ? lock_acquire+0x2f/0xb0 [ 1199.307763][T17534] ? __fget_files+0x40/0x3a0 [ 1199.307776][T17534] ? __fget_files+0x206/0x3a0 [ 1199.307788][T17534] security_file_ioctl+0x9b/0x240 [ 1199.307812][T17534] __x64_sys_ioctl+0xb7/0x200 [ 1199.307837][T17534] do_syscall_64+0xcd/0x250 [ 1199.307860][T17534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.307878][T17534] RIP: 0033:0x7f84bd98cde9 [ 1199.307888][T17534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1199.307898][T17534] RSP: 002b:00007f84bb7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1199.307909][T17534] RAX: ffffffffffffffda RBX: 00007f84bdba5fa0 RCX: 00007f84bd98cde9 [ 1199.307916][T17534] RDX: 0000400000000240 RSI: 00000000c0d05605 RDI: 0000000000000005 [ 1199.307923][T17534] RBP: 00007f84bb7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1199.307929][T17534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1199.307935][T17534] R13: 0000000000000000 R14: 00007f84bdba5fa0 R15: 00007ffe704dff78 [ 1199.307949][T17534] [ 1199.307954][T17534] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1199.577792][ T29] audit: type=1800 audit(1739946908.344:569): pid=17533 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2886" name="/" dev="9p" ino=2 res=0 errno=0 [ 1202.039049][T17560] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=17560 comm=syz.0.2892 [ 1203.778637][T17577] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1203.789510][T17577] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1204.958332][T17577] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1205.018949][T17577] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1205.051990][T17577] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1205.080973][T17577] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1205.279447][T17577] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1205.299805][T17577] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1205.906539][T17577] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1205.906945][T12775] Bluetooth: hci0: command 0x0406 tx timeout [ 1205.930829][T17577] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1206.099629][T17577] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1206.146028][T17577] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1206.170925][T17577] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1206.752902][T17577] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1207.079971][T17615] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=17615 comm=syz.2.2908 [ 1207.189817][T12775] Bluetooth: hci1: command 0x0406 tx timeout [ 1207.275310][T12775] Bluetooth: hci2: command 0x0406 tx timeout [ 1207.448309][T12775] Bluetooth: hci3: command 0x0406 tx timeout [ 1208.045355][T12775] Bluetooth: hci5: command 0x0c1a tx timeout [ 1208.130396][T12775] Bluetooth: hci0: command 0x0406 tx timeout [ 1208.301454][T12775] Bluetooth: hci6: command 0x0c1a tx timeout [ 1208.705695][T17624] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 1209.413997][T12775] Bluetooth: hci1: command 0x0406 tx timeout [ 1209.967650][T12775] Bluetooth: hci2: command 0x0406 tx timeout [ 1209.973852][T12775] Bluetooth: hci3: command 0x0406 tx timeout [ 1210.279308][ T53] Bluetooth: hci5: command 0x0c1a tx timeout [ 1210.376982][T17637] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=17637 comm=syz.4.2912 [ 1210.624150][ T53] Bluetooth: hci6: command 0x0c1a tx timeout [ 1210.906312][T17635] __nla_validate_parse: 5 callbacks suppressed [ 1210.906347][T17635] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2913'. [ 1210.991004][T17643] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2914'. [ 1211.463670][T17650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=17650 comm=syz.0.2917 [ 1212.376488][T17652] ceph: No mds server is up or the cluster is laggy [ 1212.384513][ T8001] libceph: connect (1)[c::]:6789 error -101 [ 1212.492301][ T53] Bluetooth: hci5: command 0x0c1a tx timeout [ 1212.525140][ T8001] libceph: mon0 (1)[c::]:6789 connect error [ 1213.042198][ T53] Bluetooth: hci6: command 0x0c1a tx timeout [ 1213.505988][T17673] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=17673 comm=syz.2.2920 [ 1215.881231][ T5877] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1216.056500][ T5877] usb 6-1: Using ep0 maxpacket: 16 [ 1216.072207][ T5877] usb 6-1: config 0 has an invalid interface number: 68 but max is 0 [ 1216.080846][ T5877] usb 6-1: config 0 has no interface number 0 [ 1216.090294][ T5877] usb 6-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.104171][ T5877] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1216.734540][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.742662][ T5877] usb 6-1: Product: syz [ 1216.746844][ T5877] usb 6-1: Manufacturer: syz [ 1216.751525][ T5877] usb 6-1: SerialNumber: syz [ 1216.790610][ T5877] usb 6-1: config 0 descriptor?? [ 1216.867267][ T5877] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1217.085343][ T41] block nbd0: Possible stuck request ffff8880266de000: control (read@0,4096B). Runtime 150 seconds [ 1217.220534][T17705] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=17705 comm=syz.2.2929 [ 1217.995694][T10662] usb 6-1: Failed to submit usb control message: -110 [ 1218.031391][T10662] usb 6-1: unable to send the bmi data to the device: -110 [ 1218.139934][T17014] usb 6-1: USB disconnect, device number 4 [ 1218.238912][T10662] usb 6-1: unable to get target info from device [ 1218.286582][T10662] usb 6-1: could not get target info (-110) [ 1218.538879][T10662] usb 6-1: could not probe fw (-110) [ 1219.228798][T17736] autofs: Unknown parameter '0x0000000000000000' [ 1219.563210][T17742] netlink: 'syz.2.2936': attribute type 1 has an invalid length. [ 1219.571117][T17742] netlink: 'syz.2.2936': attribute type 2 has an invalid length. [ 1222.881138][T17769] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=17769 comm=syz.5.2943 [ 1223.594457][T17770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2944'. [ 1224.678703][T17779] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 1224.842782][T17780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2947'. [ 1224.898296][T17780] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1224.908476][T17780] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1224.917421][T17780] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1224.926340][T17780] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1224.948013][T17780] vxlan0: entered promiscuous mode [ 1224.953300][T17780] vxlan0: entered allmulticast mode [ 1225.053758][T17780] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1225.506340][T17785] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=17785 comm=syz.4.2948 [ 1226.248750][ T29] audit: type=1400 audit(1739946933.282:570): avc: denied { write } for pid=17787 comm="syz.5.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1226.328430][ T29] audit: type=1400 audit(1739946933.291:571): avc: denied { read } for pid=17787 comm="syz.5.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1226.593265][T16973] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1226.828439][T16973] usb 3-1: Using ep0 maxpacket: 32 [ 1226.888442][T16973] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1227.301035][T16973] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 1227.415307][T16973] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.489206][T16973] usb 3-1: config 128 has 2 interfaces, different from the descriptor's value: 4 [ 1227.533876][T16973] usb 3-1: config 128 has no interface number 0 [ 1227.540818][T16973] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 1227.590363][T16973] usb 3-1: config 128 interface 127 has no altsetting 0 [ 1227.844159][T17808] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=17808 comm=syz.1.2955 [ 1228.580935][T16973] usb 3-1: config 128 interface 1 has no altsetting 0 [ 1229.257945][T16973] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1229.281426][T16973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.533072][T16973] usb 3-1: Product: syz [ 1229.537419][T16973] usb 3-1: Manufacturer: syz [ 1229.542126][T16973] usb 3-1: SerialNumber: syz [ 1230.044953][T16973] usb 3-1: can't set config #128, error -71 [ 1230.059471][T16973] usb 3-1: USB disconnect, device number 57 [ 1230.738080][ T5877] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1231.008631][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 1231.221907][ T5877] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1231.232628][ T5877] usb 2-1: config 0 has no interface number 0 [ 1231.256412][ T5877] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1231.520114][T17841] netlink: 'syz.0.2963': attribute type 1 has an invalid length. [ 1232.283657][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.291743][ T5877] usb 2-1: Product: syz [ 1232.295908][ T5877] usb 2-1: Manufacturer: syz [ 1232.300507][ T5877] usb 2-1: SerialNumber: syz [ 1232.323877][ T5877] usb 2-1: config 0 descriptor?? [ 1232.483845][T17850] FAULT_INJECTION: forcing a failure. [ 1232.483845][T17850] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.515761][T17850] CPU: 0 UID: 0 PID: 17850 Comm: syz.5.2966 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1232.515789][T17850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1232.515808][T17850] Call Trace: [ 1232.515814][T17850] [ 1232.515825][T17850] dump_stack_lvl+0x16c/0x1f0 [ 1232.515853][T17850] should_fail_ex+0x50a/0x650 [ 1232.515884][T17850] should_failslab+0xc2/0x120 [ 1232.515907][T17850] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1232.515928][T17850] ? skb_clone+0x190/0x3f0 [ 1232.515957][T17850] skb_clone+0x190/0x3f0 [ 1232.515981][T17850] netlink_deliver_tap+0xabd/0xd30 [ 1232.516009][T17850] netlink_unicast+0x5e1/0x7f0 [ 1232.516036][T17850] ? __pfx_netlink_unicast+0x10/0x10 [ 1232.516068][T17850] netlink_sendmsg+0x8b8/0xd70 [ 1232.516095][T17850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1232.516128][T17850] ____sys_sendmsg+0xaaf/0xc90 [ 1232.516148][T17850] ? copy_msghdr_from_user+0x10b/0x160 [ 1232.516172][T17850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1232.516205][T17850] ___sys_sendmsg+0x135/0x1e0 [ 1232.516229][T17850] ? __pfx____sys_sendmsg+0x10/0x10 [ 1232.516264][T17850] ? __pfx_lock_release+0x10/0x10 [ 1232.516288][T17850] ? trace_lock_acquire+0x14e/0x1f0 [ 1232.516320][T17850] ? __fget_files+0x206/0x3a0 [ 1232.516346][T17850] __sys_sendmsg+0x16e/0x220 [ 1232.516370][T17850] ? __pfx___sys_sendmsg+0x10/0x10 [ 1232.516413][T17850] do_syscall_64+0xcd/0x250 [ 1232.516436][T17850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.516462][T17850] RIP: 0033:0x7f08a438cde9 [ 1232.516479][T17850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1232.516497][T17850] RSP: 002b:00007f08a51c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1232.516517][T17850] RAX: ffffffffffffffda RBX: 00007f08a45a5fa0 RCX: 00007f08a438cde9 [ 1232.516531][T17850] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1232.516543][T17850] RBP: 00007f08a51c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1232.516554][T17850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1232.516565][T17850] R13: 0000000000000000 R14: 00007f08a45a5fa0 R15: 00007ffdc6d145b8 [ 1232.516592][T17850] [ 1232.563591][ T5877] usb 2-1: USB disconnect, device number 51 [ 1232.567406][ C0] vkms_vblank_simulate: vblank timer overrun [ 1233.181248][T17860] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=17860 comm=syz.5.2968 [ 1234.745253][T17872] netlink: 'syz.0.2969': attribute type 1 has an invalid length. [ 1234.753112][T17872] netlink: 'syz.0.2969': attribute type 2 has an invalid length. [ 1235.265080][T17874] netlink: 'syz.1.2970': attribute type 1 has an invalid length. [ 1235.296429][T17874] netlink: 'syz.1.2970': attribute type 2 has an invalid length. [ 1236.759914][T17888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2975'. [ 1238.765596][T17908] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=17908 comm=syz.2.2981 [ 1238.999575][ T29] audit: type=1400 audit(1739946945.208:572): avc: denied { load_policy } for pid=17901 comm="syz.4.2980" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1239.012739][T17904] SELinux: ebitmap start bit (2800863661) is not a multiple of the map unit size (64) [ 1239.036016][T17904] SELinux: failed to load policy [ 1239.250800][ T29] audit: type=1400 audit(1739946945.442:573): avc: denied { listen } for pid=17901 comm="syz.4.2980" lport=37173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1239.306028][T17910] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.2982'. [ 1239.327391][T17910] openvswitch: netlink: Flow actions attr not present in new flow. [ 1239.464566][ T29] audit: type=1400 audit(1739946945.573:574): avc: denied { accept } for pid=17901 comm="syz.4.2980" lport=37173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1240.818629][T17941] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 1241.505887][T17941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2987'. [ 1241.518067][T17941] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1243.081110][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1243.095544][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1243.114065][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1243.124234][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1243.133237][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1243.140519][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1243.400178][T17968] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=17968 comm=syz.5.2994 [ 1244.010035][T17963] lo speed is unknown, defaulting to 1000 [ 1244.442526][T17976] netlink: 'syz.4.2995': attribute type 1 has an invalid length. [ 1244.450364][T17976] netlink: 'syz.4.2995': attribute type 2 has an invalid length. [ 1244.591876][T17963] chnl_net:caif_netlink_parms(): no params data found [ 1244.758430][T17963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.768330][T17963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.775578][T17963] bridge_slave_0: entered allmulticast mode [ 1244.782643][T17963] bridge_slave_0: entered promiscuous mode [ 1244.790727][T17963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.797975][T17963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1244.805832][T17963] bridge_slave_1: entered allmulticast mode [ 1244.813473][T17963] bridge_slave_1: entered promiscuous mode [ 1244.868877][T17982] netlink: 1280 bytes leftover after parsing attributes in process `syz.5.2998'. [ 1244.881195][T17963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1244.890535][T17982] openvswitch: netlink: Flow actions attr not present in new flow. [ 1244.897724][T17963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1244.951146][T17963] team0: Port device team_slave_0 added [ 1244.958669][T17963] team0: Port device team_slave_1 added [ 1245.003164][T17963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1245.010139][T17963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1245.036067][ C1] vkms_vblank_simulate: vblank timer overrun [ 1245.042711][T17014] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1245.074691][T17963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1245.124264][T17963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1245.147150][T17963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1245.192325][T17963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1245.215713][T17998] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 1245.242545][T17963] hsr_slave_0: entered promiscuous mode [ 1245.261782][T17963] hsr_slave_1: entered promiscuous mode [ 1245.268892][T17963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1245.282792][T17963] Cannot create hsr debugfs directory [ 1245.398281][T17999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3001'. [ 1245.402045][T17014] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.423877][T17014] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1245.429347][T17999] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1245.445851][ T53] Bluetooth: hci4: command tx timeout [ 1245.462461][T17014] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1245.472076][T17014] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.502481][T17014] usb 1-1: config 0 descriptor?? [ 1246.005823][T17991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.046409][T17991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.430629][T17963] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1246.474513][T17963] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.653762][ T53] Bluetooth: hci4: command tx timeout [ 1247.925878][T17963] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1247.942874][T17963] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.182541][T17963] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1248.193147][T17963] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.334863][T17963] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1248.349327][T17963] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.477593][ T5911] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 1248.719567][T17963] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1248.729391][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1248.747854][T17963] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1248.761427][T17963] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1248.774302][T17963] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1248.806979][ T5911] usb 5-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 1248.819598][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.845126][ T5911] usb 5-1: config 0 descriptor?? [ 1248.963629][T18024] FAULT_INJECTION: forcing a failure. [ 1248.963629][T18024] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.993807][T18024] CPU: 0 UID: 0 PID: 18024 Comm: syz.5.3008 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1248.993833][T18024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1248.993844][T18024] Call Trace: [ 1248.993851][T18024] [ 1248.993858][T18024] dump_stack_lvl+0x16c/0x1f0 [ 1248.993887][T18024] should_fail_ex+0x50a/0x650 [ 1248.993913][T18024] ? fs_reclaim_acquire+0xae/0x150 [ 1248.993940][T18024] should_failslab+0xc2/0x120 [ 1248.993961][T18024] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 1248.993979][T18024] ? __up_read+0x1fb/0x760 [ 1248.994004][T18024] ? __alloc_skb+0x2b1/0x380 [ 1248.994029][T18024] __alloc_skb+0x2b1/0x380 [ 1248.994050][T18024] ? __pfx___alloc_skb+0x10/0x10 [ 1248.994081][T18024] netlink_ack+0x15f/0xb80 [ 1248.994103][T18024] ? __pfx___lock_acquire+0x10/0x10 [ 1248.994125][T18024] ? hlock_class+0x4e/0x130 [ 1248.994149][T18024] rdma_nl_rcv_skb.constprop.0.isra.0+0x346/0x450 [ 1248.994176][T18024] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1248.994214][T18024] ? netlink_deliver_tap+0x1ae/0xd30 [ 1248.994240][T18024] netlink_unicast+0x53c/0x7f0 [ 1248.994265][T18024] ? __pfx_netlink_unicast+0x10/0x10 [ 1248.994295][T18024] netlink_sendmsg+0x8b8/0xd70 [ 1248.994327][T18024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1248.994359][T18024] ____sys_sendmsg+0xaaf/0xc90 [ 1248.994377][T18024] ? copy_msghdr_from_user+0x10b/0x160 [ 1248.994401][T18024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1248.994430][T18024] ___sys_sendmsg+0x135/0x1e0 [ 1248.994454][T18024] ? __pfx____sys_sendmsg+0x10/0x10 [ 1248.994487][T18024] ? __pfx_lock_release+0x10/0x10 [ 1248.994510][T18024] ? trace_lock_acquire+0x14e/0x1f0 [ 1248.994538][T18024] ? __fget_files+0x206/0x3a0 [ 1248.994562][T18024] __sys_sendmsg+0x16e/0x220 [ 1248.994585][T18024] ? __pfx___sys_sendmsg+0x10/0x10 [ 1248.994625][T18024] do_syscall_64+0xcd/0x250 [ 1248.994648][T18024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.994672][T18024] RIP: 0033:0x7f08a438cde9 [ 1248.994688][T18024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1248.994706][T18024] RSP: 002b:00007f08a51c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1248.994724][T18024] RAX: ffffffffffffffda RBX: 00007f08a45a5fa0 RCX: 00007f08a438cde9 [ 1248.994737][T18024] RDX: 000000000000c094 RSI: 0000400000000200 RDI: 0000000000000007 [ 1248.994749][T18024] RBP: 00007f08a51c4090 R08: 0000000000000000 R09: 0000000000000000 [ 1248.994761][T18024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1248.994773][T18024] R13: 0000000000000000 R14: 00007f08a45a5fa0 R15: 00007ffdc6d145b8 [ 1248.994798][T18024] [ 1249.026284][T17014] usbhid 1-1:0.0: can't add hid device: -71 [ 1249.155075][T17014] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1249.306389][T17963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1249.340571][T17963] 8021q: adding VLAN 0 to HW filter on device team0 [ 1249.351562][T18027] sd 0:0:1:0: device reset [ 1249.411402][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.418597][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.482455][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.489587][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.850215][ T41] block nbd0: Possible stuck request ffff8880266de000: control (read@0,4096B). Runtime 180 seconds [ 1249.882291][ T53] Bluetooth: hci4: command tx timeout [ 1249.899190][ T5911] cypress 0003:04B4:ED81.0012: unknown main item tag 0x0 [ 1249.941224][T17014] usb 1-1: USB disconnect, device number 65 [ 1249.994156][ T5911] cypress 0003:04B4:ED81.0012: unknown main item tag 0x0 [ 1250.065669][ T5911] cypress 0003:04B4:ED81.0012: unknown main item tag 0x0 [ 1250.133595][ T5911] cypress 0003:04B4:ED81.0012: unknown main item tag 0x0 [ 1250.205980][ T5911] cypress 0003:04B4:ED81.0012: unknown main item tag 0x0 [ 1250.250545][ T5911] cypress 0003:04B4:ED81.0012: hidraw0: USB HID v0.00 Device [HID 04b4:ed81] on usb-dummy_hcd.4-1/input0 [ 1250.362134][ T5911] usb 5-1: USB disconnect, device number 80 [ 1250.579615][T17963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.711827][T18049] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.3010'. [ 1250.743875][T18049] openvswitch: netlink: Flow actions attr not present in new flow. [ 1252.090895][ T53] Bluetooth: hci4: command tx timeout [ 1252.504901][T17963] veth0_vlan: entered promiscuous mode [ 1252.563523][T17963] veth1_vlan: entered promiscuous mode [ 1252.669091][T17963] veth0_macvtap: entered promiscuous mode [ 1252.707320][T17963] veth1_macvtap: entered promiscuous mode [ 1253.509472][T17963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1253.547932][T17963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.574036][T17963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1253.586297][T17963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.597572][T17963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1253.608493][T17963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.618607][T17963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1253.637023][T17963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.654932][ T5194] udevd[5194]: worker [16103] /devices/virtual/block/nbd0 timeout; kill it [ 1253.685396][ T5194] udevd[5194]: seq 16041 '/devices/virtual/block/nbd0' killed [ 1253.698069][T17963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1253.745438][T17963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.787790][ T29] audit: type=1400 audit(1739946959.052:575): avc: denied { setattr } for pid=18070 comm="syz.1.3014" path="/proc/107/net/ip6_mr_vif" dev="proc" ino=4026534261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1253.817415][T17963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1253.854153][T17963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.888569][T17963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.908867][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1253.916039][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1253.931374][T17963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.966755][T17963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.989454][T17963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1254.010739][T17963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.042210][T17963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1254.102054][T17963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.156288][T17963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1254.191898][T17963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.210876][T17963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1254.253453][T17963] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.278710][T17963] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.308971][T17963] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.336933][T17963] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.548514][T13949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.580070][T13949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.642364][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.681423][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.387522][ T29] audit: type=1400 audit(1739946960.530:576): avc: denied { write } for pid=18106 comm="syz.5.3017" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1255.783514][T18113] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 1256.235377][T18118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3019'. [ 1256.263967][T18118] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1256.925785][T18127] netlink: 'syz.1.3021': attribute type 1 has an invalid length. [ 1257.084400][T18127] netlink: 'syz.1.3021': attribute type 2 has an invalid length. [ 1258.629691][ T1546] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1258.804016][ T1546] usb 1-1: Using ep0 maxpacket: 16 [ 1258.846466][ T1546] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1258.902716][ T1546] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1258.996357][ T1546] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1259.017861][ T1546] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.049561][ T1546] usb 1-1: config 0 descriptor?? [ 1259.909086][ T1546] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 1259.945177][ T1546] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 1259.973810][ T1546] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 1260.012204][ T1546] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 1260.036464][ T1546] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 1260.054687][ T1546] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 1260.073105][ T1546] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 1260.083759][ T1546] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 1260.114353][ T1546] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 1260.160522][ T1546] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 1260.239253][ T1546] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 1260.472207][ T5920] libceph: connect (1)[c::]:6789 error -101 [ 1260.903188][T18151] ceph: No mds server is up or the cluster is laggy [ 1260.910282][ T1546] hid-picolcd 0003:04D8:F002.0013: No report with id 0xf4 found [ 1260.931412][ T5920] libceph: mon0 (1)[c::]:6789 connect error [ 1260.949773][ T1546] hid-picolcd 0003:04D8:F002.0013: No report with id 0xf3 found [ 1261.038624][ T1546] usb 1-1: USB disconnect, device number 66 [ 1261.695598][T18169] 9pnet_fd: Insufficient options for proto=fd [ 1261.710825][ T29] audit: type=1400 audit(1739946966.386:577): avc: denied { create } for pid=18161 comm="syz.4.3031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1262.311171][T18172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3033'. [ 1262.417398][T18172] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1264.533124][ T29] audit: type=1400 audit(1739946969.098:578): avc: denied { connect } for pid=18191 comm="syz.1.3039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1264.645728][T18202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3040'. [ 1264.674429][T18202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3040'. [ 1264.746339][T18204] netlink: 'syz.0.3038': attribute type 1 has an invalid length. [ 1264.820247][T18204] netlink: 'syz.0.3038': attribute type 2 has an invalid length. [ 1264.864401][T18203] autofs: Bad value for 'fd' [ 1265.011740][T18214] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 1265.786572][ T5911] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1265.867013][T18217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3042'. [ 1265.879889][T18217] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1265.966623][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 1265.977579][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.992773][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 1266.024435][ T5911] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1266.071161][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1266.099928][ T5911] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1266.114919][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.123453][ T5911] usb 2-1: Product: syz [ 1266.127948][ T5911] usb 2-1: Manufacturer: syz [ 1266.132561][ T5911] usb 2-1: SerialNumber: syz [ 1266.160690][ T5911] usb 2-1: config 0 descriptor?? [ 1266.166723][T18210] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1266.181497][ T5911] mcba_usb 2-1:0.0: Can't find endpoints [ 1266.785270][T18241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3044'. [ 1266.834046][T18241] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1266.842944][T18241] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1266.851850][T18241] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1266.860763][T18241] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1266.871078][T18241] vxlan0: entered promiscuous mode [ 1266.876725][T18241] vxlan0: entered allmulticast mode [ 1266.971646][T18241] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1267.645028][ T5911] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1267.744828][T17014] usb 2-1: USB disconnect, device number 52 [ 1267.852703][T18248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3046'. [ 1268.007340][T18248] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1268.080367][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 1268.100552][ T5911] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 1268.122608][ T5911] usb 3-1: config 0 has no interface number 0 [ 1268.133124][ T5911] usb 3-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1268.164322][ T5911] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1268.211746][ T53] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 1268.222281][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.237496][ T5911] usb 3-1: Product: syz [ 1268.241679][ T5911] usb 3-1: Manufacturer: syz [ 1268.247222][ T5911] usb 3-1: SerialNumber: syz [ 1268.298037][ T5911] usb 3-1: config 0 descriptor?? [ 1268.965708][ T5911] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1270.252856][ T35] usb 3-1: Failed to submit usb control message: -110 [ 1270.270340][ T35] usb 3-1: unable to send the bmi data to the device: -110 [ 1270.336405][ T35] usb 3-1: unable to get target info from device [ 1270.646067][ T35] usb 3-1: could not get target info (-110) [ 1270.652871][ T35] usb 3-1: could not probe fw (-110) [ 1272.285060][T18275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3053'. [ 1272.295029][T18275] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1272.324516][ T5911] usb 3-1: USB disconnect, device number 58 [ 1272.414712][T18282] netlink: 'syz.1.3055': attribute type 1 has an invalid length. [ 1272.897414][T18292] netlink: 'syz.0.3056': attribute type 1 has an invalid length. [ 1273.667593][T18292] netlink: 'syz.0.3056': attribute type 2 has an invalid length. [ 1276.798134][T18326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3067'. [ 1276.850195][T18326] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1277.125958][T13678] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1277.354885][T18329] autofs: Unknown parameter '0x0000000000000000' [ 1277.373530][T13678] usb 3-1: Using ep0 maxpacket: 16 [ 1277.402740][T13678] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1277.413944][T13678] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1277.432868][T18335] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 1277.447930][T13678] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1277.566469][T18338] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3071'. [ 1277.661546][T13678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.690714][T13678] usb 3-1: config 0 descriptor?? [ 1277.733257][T18337] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3071'. [ 1278.359965][T13678] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 1278.387532][T13678] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 1278.416892][T13678] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 1278.457604][T13678] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 1278.506856][T13678] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 1278.525261][T13678] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 1278.536083][T13678] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 1278.553303][T13678] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 1278.592356][T13678] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 1278.613207][T13678] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 1278.631819][T13678] hid-picolcd 0003:04D8:F002.0014: unknown main item tag 0x0 [ 1278.712447][T13678] hid-picolcd 0003:04D8:F002.0014: No report with id 0xf4 found [ 1278.735324][T13678] hid-picolcd 0003:04D8:F002.0014: No report with id 0xf3 found [ 1278.755414][T13678] usb 3-1: USB disconnect, device number 59 [ 1280.116218][T18370] netlink: 'syz.4.3078': attribute type 1 has an invalid length. [ 1280.578213][ T30] INFO: task syz.3.2691:16732 blocked for more than 143 seconds. [ 1280.606786][ T30] Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1280.619790][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1280.640756][ T30] task:syz.3.2691 state:D stack:26464 pid:16732 tgid:16731 ppid:5823 task_flags:0x400140 flags:0x00004004 [ 1280.663797][ T30] Call Trace: [ 1280.668210][ T30] [ 1280.675804][ T30] __schedule+0xf43/0x5890 [ 1280.681645][T18373] netlink: 'syz.5.3080': attribute type 1 has an invalid length. [ 1280.685440][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1280.700869][ T30] ? __pfx___schedule+0x10/0x10 [ 1280.705754][ T30] ? schedule+0x298/0x350 [ 1280.714272][ T30] ? __pfx_lock_release+0x10/0x10 [ 1280.719340][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1280.735898][ T30] ? lock_acquire+0x2f/0xb0 [ 1280.746669][ T30] ? schedule+0x1fd/0x350 [ 1280.751049][ T30] schedule+0xe7/0x350 [ 1280.757725][T18373] netlink: 'syz.5.3080': attribute type 2 has an invalid length. [ 1280.771433][ T30] schedule_preempt_disabled+0x13/0x30 [ 1280.783896][ T30] __mutex_lock+0x6bd/0xb10 [ 1280.788489][ T30] ? sync_bdevs+0xfd/0x360 [ 1280.823106][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1280.832466][ T30] ? sync_bdevs+0xc7/0x360 [ 1280.836934][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 1280.868289][ T30] ? iput+0xd3/0x890 [ 1280.878044][ T30] ? sync_bdevs+0xfd/0x360 [ 1280.898644][ T30] sync_bdevs+0xfd/0x360 [ 1280.911297][ T30] ksys_sync+0xb3/0x150 [ 1280.930250][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 1280.971256][ T30] ? __pfx_ksys_read+0x10/0x10 [ 1281.014180][ T30] ? do_syscall_64+0x91/0x250 [ 1281.019034][ T30] __do_sys_sync+0xe/0x20 [ 1281.023441][ T30] do_syscall_64+0xcd/0x250 [ 1281.028027][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.034106][ T30] RIP: 0033:0x7fe0e578cde9 [ 1281.039596][ T30] RSP: 002b:00007fe0e666b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1281.048171][ T30] RAX: ffffffffffffffda RBX: 00007fe0e59a5fa0 RCX: 00007fe0e578cde9 [ 1281.056259][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1281.065663][ T30] RBP: 00007fe0e59a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1281.073785][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1281.081827][ T30] R13: 0000000000000000 R14: 00007fe0e59a5fa0 R15: 00007ffcdcda75e8 [ 1281.100722][ T30] [ 1281.230022][ T30] [ 1281.230022][ T30] Showing all locks held in the system: [ 1281.405519][ T30] 1 lock held by khungtaskd/30: [ 1281.509329][ T30] #0: ffffffff8e1bcc80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 1281.648236][ T30] 2 locks held by kworker/u8:8/2959: [ 1281.655494][ T30] 2 locks held by getty/5579: [ 1281.664149][ T30] #0: ffff8880368ba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1281.676229][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 1281.687277][ T30] 1 lock held by syz-executor/5824: [ 1281.693386][ T30] #0: ffffffff8e1c80f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 [ 1281.703536][ T30] 1 lock held by udevd/16103: [ 1281.708221][ T30] #0: ffff888025fcb4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 [ 1281.730805][ T30] 1 lock held by syz.3.2691/16732: [ 1281.757070][ T30] #0: ffff888025fcb4c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 1281.766625][ T30] 6 locks held by kworker/1:0/17014: [ 1281.781536][ T30] 1 lock held by syz.2.3079/18366: [ 1281.798986][ T30] 1 lock held by syz.5.3080/18369: [ 1281.805480][ T30] [ 1281.807834][ T30] ============================================= [ 1281.807834][ T30] [ 1281.820835][ T30] NMI backtrace for cpu 1 [ 1281.820849][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1281.820869][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1281.820880][ T30] Call Trace: [ 1281.820886][ T30] [ 1281.820894][ T30] dump_stack_lvl+0x116/0x1f0 [ 1281.820921][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1281.820948][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1281.820981][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1281.821009][ T30] watchdog+0xf62/0x12b0 [ 1281.821040][ T30] ? __pfx_watchdog+0x10/0x10 [ 1281.821063][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1281.821085][ T30] ? __kthread_parkme+0x148/0x220 [ 1281.821105][ T30] ? __pfx_watchdog+0x10/0x10 [ 1281.821131][ T30] kthread+0x3af/0x750 [ 1281.821152][ T30] ? __pfx_kthread+0x10/0x10 [ 1281.821179][ T30] ? __pfx_kthread+0x10/0x10 [ 1281.821201][ T30] ret_from_fork+0x45/0x80 [ 1281.821222][ T30] ? __pfx_kthread+0x10/0x10 [ 1281.821243][ T30] ret_from_fork_asm+0x1a/0x30 [ 1281.821276][ T30] [ 1281.821283][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1281.934928][ C0] NMI backtrace for cpu 0 [ 1281.934942][ C0] CPU: 0 UID: 0 PID: 18366 Comm: syz.2.3079 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1281.934963][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1281.934978][ C0] RIP: 0010:__lock_acquire+0x15e4/0x3c40 [ 1281.935009][ C0] Code: c3 48 c1 e8 2d 49 89 c4 48 8d 04 c5 20 ac a7 96 48 89 c2 48 89 44 24 08 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 <0f> 85 16 26 00 00 48 bd 00 00 00 00 00 fc ff df 4c 8b 34 24 4a 8b [ 1281.935026][ C0] RSP: 0018:ffffc90003d57800 EFLAGS: 00000046 [ 1281.935041][ C0] RAX: dffffc0000000000 RBX: 255fd69911439148 RCX: ffffffff8195b4ce [ 1281.935053][ C0] RDX: 1ffffffff2d8d0d9 RSI: 0000000000000008 RDI: ffffffff96ec2cf8 [ 1281.935066][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2dd859f [ 1281.935077][ C0] R10: ffffffff96ec2cff R11: 0000000000000000 R12: 000000000003db55 [ 1281.935089][ C0] R13: ffff88802eee8000 R14: 0000000000000005 R15: ffff88802eee8af0 [ 1281.935101][ C0] FS: 00007fb6111616c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1281.935119][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1281.935131][ C0] CR2: 00007f6c25979178 CR3: 000000004c208000 CR4: 00000000003526f0 [ 1281.935143][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1281.935153][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1281.935165][ C0] Call Trace: [ 1281.935171][ C0] [ 1281.935178][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1281.935207][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1281.935231][ C0] ? nmi_handle+0x1ac/0x5d0 [ 1281.935257][ C0] ? __lock_acquire+0x15e4/0x3c40 [ 1281.935282][ C0] ? default_do_nmi+0x6a/0x160 [ 1281.935308][ C0] ? exc_nmi+0x170/0x1e0 [ 1281.935333][ C0] ? end_repeat_nmi+0xf/0x53 [ 1281.935360][ C0] ? hlock_class+0x4e/0x130 [ 1281.935382][ C0] ? __lock_acquire+0x15e4/0x3c40 [ 1281.935407][ C0] ? __lock_acquire+0x15e4/0x3c40 [ 1281.935432][ C0] ? __lock_acquire+0x15e4/0x3c40 [ 1281.935457][ C0] [ 1281.935463][ C0] [ 1281.935473][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1281.935498][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1281.935527][ C0] lock_acquire.part.0+0x11b/0x380 [ 1281.935552][ C0] ? __might_fault+0xe3/0x190 [ 1281.935575][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1281.935619][ C0] ? rcu_is_watching+0x12/0xc0 [ 1281.935638][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 1281.935659][ C0] ? __might_fault+0xe3/0x190 [ 1281.935680][ C0] ? lock_acquire+0x2f/0xb0 [ 1281.935702][ C0] ? __might_fault+0xe3/0x190 [ 1281.935723][ C0] ? __might_fault+0xe3/0x190 [ 1281.935744][ C0] __might_fault+0x11b/0x190 [ 1281.935765][ C0] ? __might_fault+0xe3/0x190 [ 1281.935786][ C0] _copy_from_user+0x29/0xd0 [ 1281.935804][ C0] copy_msghdr_from_user+0x99/0x160 [ 1281.935830][ C0] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1281.935857][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1281.935884][ C0] ___sys_recvmsg+0xdc/0x1a0 [ 1281.935906][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1281.935930][ C0] ? find_held_lock+0x2d/0x110 [ 1281.935954][ C0] ? __pfx___might_resched+0x10/0x10 [ 1281.935985][ C0] ? __might_fault+0xe3/0x190 [ 1281.936007][ C0] do_recvmmsg+0x2f8/0x740 [ 1281.936032][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1281.936055][ C0] ? find_held_lock+0x2d/0x110 [ 1281.936075][ C0] ? do_futex+0x123/0x350 [ 1281.936102][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 1281.936124][ C0] __x64_sys_recvmmsg+0x239/0x290 [ 1281.936151][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1281.936179][ C0] do_syscall_64+0xcd/0x250 [ 1281.936201][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.936225][ C0] RIP: 0033:0x7fb61038cde9 [ 1281.936238][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1281.936256][ C0] RSP: 002b:00007fb611161038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1281.936271][ C0] RAX: ffffffffffffffda RBX: 00007fb6105a5fa0 RCX: 00007fb61038cde9 [ 1281.936283][ C0] RDX: 0000000000010106 RSI: 00004000000000c0 RDI: 0000000000000004 [ 1281.936295][ C0] RBP: 00007fb61040e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1281.936306][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1281.936317][ C0] R13: 0000000000000000 R14: 00007fb6105a5fa0 R15: 00007fffddf3c068 [ 1281.936334][ C0] [ 1281.940472][ T41] block nbd0: Possible stuck request ffff8880266de000: control (read@0,4096B). Runtime 210 seconds [ 1281.943115][T17014] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1282.181634][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1282.181651][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1282.181673][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1282.181684][ T30] Call Trace: [ 1282.181691][ T30] [ 1282.181700][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1282.181725][ T30] panic+0x71d/0x800 [ 1282.181746][ T30] ? __pfx_panic+0x10/0x10 [ 1282.181765][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1282.181791][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1282.181814][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1282.181838][ T30] ? watchdog+0xdcc/0x12b0 [ 1282.181864][ T30] ? watchdog+0xdbf/0x12b0 [ 1282.181891][ T30] watchdog+0xddd/0x12b0 [ 1282.181920][ T30] ? __pfx_watchdog+0x10/0x10 [ 1282.181949][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1282.181970][ T30] ? __kthread_parkme+0x148/0x220 [ 1282.181989][ T30] ? __pfx_watchdog+0x10/0x10 [ 1282.182014][ T30] kthread+0x3af/0x750 [ 1282.182036][ T30] ? __pfx_kthread+0x10/0x10 [ 1282.182060][ T30] ? __pfx_kthread+0x10/0x10 [ 1282.182082][ T30] ret_from_fork+0x45/0x80 [ 1282.182104][ T30] ? __pfx_kthread+0x10/0x10 [ 1282.182125][ T30] ret_from_fork_asm+0x1a/0x30 [ 1282.182155][ T30] [ 1282.182485][ T30] Kernel Offset: disabled