last executing test programs: 6m38.123324572s ago: executing program 0 (id=1): r0 = socket$inet6(0xa, 0x5, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000340)=0x7ffffff9, 0x4) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000013000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f00000000c0)=0x10001) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) ptrace(0x11, r9) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xbd7}], 0x1c) 6m37.296067848s ago: executing program 0 (id=11): r0 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f0000000140)='\x00', 0x1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x7, 0x80000000}, {0x7fff, 0x8000000000000000, 0xf04a}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0xfffffffd, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x3, 0x0, 0x8, 0x3}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x21, 0x0) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r2, 0x5, 0x2001) openat(0xffffffffffffffff, 0x0, 0x183002, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001540), 0x2) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="a9dbe9656b82d2b81cf4af40aa4a6705f5833ed7720b5d09cc042a9e3c67f6217d2c2585c177d08d74507820ea430fd643223d1db30b79d8a67dc730203c692f7a19b75fcdfd91d8588507cab2ac64", 0x4f}], 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 6m36.352937842s ago: executing program 0 (id=14): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @dev}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRESDEC], 0x0) sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}]}}}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x993e270b58c2d2b5, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) 6m31.216620184s ago: executing program 0 (id=29): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf001, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xdd33, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x67, 0xad, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "fe1e524f"}]}}, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r0, 0x10, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000008) socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f00000000c0)='\x8d\x00', 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x119000, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000000901030000000000000000020000020c00029919d2b5071665505a0480080001400000c8c9c82adefb94e294e682c714a6655d64979837295da45efc68ae52f8bbc0d369691f38b92468b235"], 0x28}, 0x1, 0x0, 0x0, 0x4051}, 0x8044) mount_setattr(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/../file0\x00', 0x8100, &(0x7f0000000340)={0x100072, 0x80, 0x20000, {r3}}, 0x20) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0xd0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {}, 0x1d, 0x3, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x0, 0x1, 0x3], 0x2}, {0xffffffffffffffff, [0x1, 0xb2cc575b459b5b33, 0x3, 0x2, 0x2]}}}}, {{@ip={@broadcast, @broadcast, 0xffffffff, 0x0, 'wlan0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x3, 0x50}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010900, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 6m16.042281909s ago: executing program 32 (id=29): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf001, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xdd33, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x67, 0xad, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "fe1e524f"}]}}, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r0, 0x10, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000008) socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f00000000c0)='\x8d\x00', 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x119000, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000000901030000000000000000020000020c00029919d2b5071665505a0480080001400000c8c9c82adefb94e294e682c714a6655d64979837295da45efc68ae52f8bbc0d369691f38b92468b235"], 0x28}, 0x1, 0x0, 0x0, 0x4051}, 0x8044) mount_setattr(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/../file0\x00', 0x8100, &(0x7f0000000340)={0x100072, 0x80, 0x20000, {r3}}, 0x20) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0xd0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {}, 0x1d, 0x3, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x0, 0x1, 0x3], 0x2}, {0xffffffffffffffff, [0x1, 0xb2cc575b459b5b33, 0x3, 0x2, 0x2]}}}}, {{@ip={@broadcast, @broadcast, 0xffffffff, 0x0, 'wlan0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x3, 0x50}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010900, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 59.982634634s ago: executing program 1 (id=1016): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff"]) 59.599888624s ago: executing program 1 (id=1018): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 59.388137368s ago: executing program 1 (id=1022): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000300)={0x1d, r5}, 0x10) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000000), 0x2) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 57.71278983s ago: executing program 1 (id=1024): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x32, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000008000000141000"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fadvise64(r2, 0x1, 0x40, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a80), 0x2002, 0x0) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000b00)={0x4, &(0x7f0000000ac0)=[{0x8, 0x0, 0x0, 0x8}, {0xa, 0x40, 0xab, 0x8}, {0x1e, 0x9, 0x2, 0x3cbb}, {0x823, 0x1, 0x10, 0x7ff}]}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x10}, {0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd8}, {0xeeee0000, 0xdddd5000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfc}, {0xdddd0000, 0x0, 0xf, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {}, {0x0, 0x0, 0xd, 0xfe, 0x0, 0x0, 0x0, 0x0, 0xfe}, {0xd4ac0b8eca0a816f, 0xeeee8000, 0x0, 0x0, 0x0, 0x1, 0x3, 0xa, 0xfe}, {}, {0x10000}, 0xddf8ffdb, 0x0, 0xdddd0000, 0x140030, 0xb, 0xd01, 0x0, [0x0, 0x2, 0x7]}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mkdirat(r7, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r8 = creat(&(0x7f0000000580)='./file0/file0\x00', 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000640)={&(0x7f0000004000)={[{&(0x7f00000006c0)="a7591019b2c339731987fa188b7f58cd48b525c8673c86ead2a9e8ebb01b21cefc084bef09a0e8402892fff71073ceff9fc520849133287e94e7ba9b3ad4a05f1ef2f4014270a876549a8deed4799adae3050a8f4792ba171cc3551dfb831bc39ceab66bb83f54f52a1e1b3f9dbae76be110216aebd6ef98956f1fb814adbdcb86f14e5a40fc2aaab49c234e75aae63f88087b03907854db19d46e1f821c25f8b2078a92b22e3ec1979c06cf2901e160abf84f569346d332387e833f1f6f60fbcecb8e", 0xc3, 0x3}, {&(0x7f0000000600)="0e81c45ffeff", 0x6, 0x1}, {&(0x7f0000002080)="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", 0x1000, 0x3}, {&(0x7f00000007c0)="d92a6ded4df5675291fb80bec8798851d72559f029199f8c8bbc507acfc37f86f8c1656869db9673168b53166bea93c3e165563a2541611dd3b6a6d130bc2f3363fb3a6eead1eddec64f24f79c0776f6ef57d5bed5134c837c410a3b6ad373779126ccf4cbc8d260f20e21c2c860d38688520d16957873cf762ed7fc215a979cf320fba525087795e8e8a62faedab8d4fdce40ebec6570fd4d9fa1d90d15582e0db6830b1c6632c0b6b46eec7de829cbb61dbf525e7eed910973a75385835e1683e5431b11f66fddc62575e3ac53d81439c19b636c3e4de80f19d90ca726c5c81e9cdf9528f59177c75f597f5c3ae752c9d683d72acd", 0xf6, 0x2}, {&(0x7f00000008c0)="c7f025703a849dd4ffdefd4f7e39c98b22e5532da9f2af8c3e47fcc362409c943446f3ae6c1c2b632fc506092cd12d98e93d8e7def70681d4d14ce96c23819a438f7b20a5f0ddf39bc255ee4045b0e27a5c81e68207aaa5b75d05d698bb1c886ae1a99e2e12de75b4cd9e1bce162b2c958227ac60d458dd4ac98ef98c2a299ab16968f93807977f912f0f899094073d084f44f433c6447a2f126942e39c4bcb075460c816be3a81ef42d39a0df16cae87639a18a081130fdef249a6bd33c47e5e65e15d715e3dcba358097b0b6a1ee1dff6a01cffa6952e5bd876b5604976f586301c55bc64917b66bd63e33f9eb0cd235e022481e", 0xf5, 0x1}, {&(0x7f00000009c0)="f59b14c18d8ee4272d8e87a43fca21faa58b7d4c0b06416732c6762e12dc58364cbbcd49a50326c179d246cdfe3742385315fcbe4fe05c10b76b20d6f9c832b447f0a1e2e5e81776ff260a1163ecf7b91da5898d0d460f290026b5ec1f4b880500cf360cb515e1fded70511c3205391a5dd3748a0cfbcc73e7082a5b8ca5e139c21a87e32fe9db00ea37eb0503ac355d8c7cedc9b8c1db95", 0x98, 0x3}]}, 0xffffffffffffff45, 0x2}, 0x1) linkat(r1, &(0x7f0000000540)='./file0\x00', r8, &(0x7f00000005c0)='./file0/file0\x00', 0x3400) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r7, &(0x7f0000000140)='./file0/file0\x00', 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ppoll(&(0x7f0000000b80)=[{r9}, {r2, 0x444}, {0xffffffffffffffff, 0x4}, {r6, 0x410}, {0xffffffffffffffff, 0x4}, {r5, 0x408}, {}, {r5, 0x4}], 0x8, &(0x7f0000000bc0)={0x0, 0x3938700}, &(0x7f0000000c00)={[0x3]}, 0x8) r10 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendto(r10, &(0x7f0000000440)="6e6ba669c60c31fb07dfd2910a83abb7f4fb4d72970c7d2a667316fa67b2a829a21b2672eb9a2f8dd8539e6bdb54d4dc1f3e8a9fccffced2841db099b8fa13552b3d2be8bfa5310772a54e63e4c64fc9bc3c86e559fcedba5a19ade7e00e4b8e73546453", 0x64, 0x10010, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r9}, &(0x7f0000000680), &(0x7f00000001c0)=r1, 0x11}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="7620000046000000760000000000000027000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 57.290973984s ago: executing program 1 (id=1029): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x40000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) shutdown(r3, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0xffff, 0x6, {0xffffffffffffffff}, {0xee00}, 0x7ce, 0xc6}) ptrace$ARCH_GET_GS(0x1e, r4, &(0x7f0000000280), 0x1004) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x80000006}]}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 56.66406397s ago: executing program 1 (id=1036): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000800)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r7}, 0x18) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r8, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a82000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x72e3, 0x0, &(0x7f00000002c0), 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getdents(r2, &(0x7f0000000100)=""/155, 0x9b) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file1\x00') write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000000000000400000000000000000000000000000000000000000003800010000000000000003000000000000000000000000000000040000000000000000000000000000000208"], 0x105) close(r0) 55.503371682s ago: executing program 33 (id=1036): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000800)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r7}, 0x18) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r8, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000a82000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x72e3, 0x0, &(0x7f00000002c0), 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getdents(r2, &(0x7f0000000100)=""/155, 0x9b) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file1\x00') write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000000000000400000000000000000000000000000000000000000003800010000000000000003000000000000000000000000000000040000000000000000000000000000000208"], 0x105) close(r0) 19.889198666s ago: executing program 4 (id=1158): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x48, &(0x7f0000000040)={@empty, @local, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@x25={0x805, {0x2, 0x9, 0xf1, "0e9f350461822ee89353c8fd8e4b9a34c89a1bbed26f511a9651f1292d5373905dbb24f5dbeeb9e75c0c98d392378532e3e77d"}}}}, &(0x7f0000000100)={0x1, 0x3, [0x740, 0xa55, 0xf8c, 0x23]}) r1 = getpgrp(0x0) r2 = geteuid() sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0x10, 0x13, 0x1}, 0x10}, {&(0x7f00000010c0)={0x12a8, 0x29, 0x200, 0x70bd2d, 0x25dfdbff, "", [@nested={0x1040, 0x29, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @pid=r1}, @typed={0x14, 0x132, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x4, 0xce}, @nested={0x4, 0xb}, @typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x41}, @generic="b4b1eff1e705579e1802e003ec9adfefa07ae5a890f4f210a01940eac7d1e3798fd2de00ff5cd38efb9478c6141263676d39fd71a7d60828e2cd28d567ceff1fa46f2045d1a65b89645d571d01b80fee379b2a4ba8bc681851ec944e7fd9fc173035bc45790504c4e619d9fc432ab4d8a0e46dd5c61335e978933aeb7aa52630f88fd42474450ff856a85a1a8a854520232076ee64fd26805f61ef53f9366689d8de2e7ba804a18dca984f066349716abb5e38eb60f9e0bf9fb4a09878b837cdcf1bb735835ec910a45e2476d3581e14595014bdb008f9bb02b07027f242e6af1fa614528389b3f5a2ca9aeeb2c737b345670233683b18d1368160a9f7888b8dfe4de591bd894bfce884f7cc0b77dce117576a9f8b47b536d33a1e82197ae3e451fea7d34f1c469d5532c9d7d5ee838eef0e1fea2ecbba8aaca33fe6c97e6083d3b6a607d643931d21ec74bf79c899b110e2018f776ff3373b6f3f19d7b347fe5f83ed774785f077b786f1f6d1adc28f6bf9324b911439cd5f01d8ac6b94444b2a920d9a2939a393a59c8815d9348d833c9063665cf978f2e0d3d12725054e02bcc7c1e6465b3ad31f8745495203db2e9e530653dd3f85c4f0b8290d84270798707ba8295aac010d2ac05474129a5ebb8129ea0873d367afa3cc20edb5fefc12f3f8a3a8dba8eb00176a031a1c0ce63a4ab4ec32aba5fb4847fc6bd679ebabcd43e06ba8c2fa9c975e8d9fbf10faf22c71fdde8752745f0388c53592244118b720c53678916a8805c9da60431287be736c35cbff9470136ea4caa78222b88020c27a59ccc45686db62ff8c102a406f76095182108570dad0b257f9d47a57a84d62ffd3e994cf0e0c3a1c722bb3b7a3e779452b7e6c39959090f871b8c7b427516149f932a864a23562d7c7edbecffcb1852704b57032618661cd72efe4d95331f25dd5340db783dd4f37f0d2df35f4859de6126aa2af748cc0b4d6c4224f1a0c635a998058e2036cdec9b46c383900a77ddd516e3c909579a064abce1939ca574b554e5e4e83ccbe58fee7aa72fa1e1f326ae607a602294a6206befc518295be18792f94374c32c6e19603cf20ea55672b7ccbcba1a2b93c4cfe25177847c8c147283362e61b850361ac3c08ea435671083483e7808a268ab639025385f836de1981884f884866b5383eb95a495a6cc687c5aec207dc28bc5dc2a88399b6cd6dc4eee33f99d06dc354a923044c5739c0a5cd9f5f304a05e146599f8ca6969cf4e521197a9ab2d6ebc35acf47a74b43165f813427fd63ee4fd8a1be916b1f53cf682b2fdbf8034f8272d68cecb87e8b6314f3ec4da300efbe4c8f51c886263453088b5d59f093262b13b1aaa772e4de860596a62a9492af636db67520017c842a3a8b777ba7e0233a16297a8502a6bc07e7aebcaa58c675ac912a250cb0c0fcdbe7f4512d63e1d548d2a85010ff2db133121fcc0dd3bd10227f0aa487f72783c5e2d3a52578a2afe3fca07238b1d60249eb3231a6354dcb28d0819af207e6554a6aabdd5e8f6c8b3df5b9541e606b32819205b333f48491adb2a4143345f527afa6f26d70bca374864afc81b87e8be23f6ba27535b4f9d4f688893b4746650f5985dc4530cab84fcebca79cb1136409082ab020aeebad217bb66adcf1ff286b0691b94df97e833e504e65b2e9d2db965c20eb3bb44cd3d401d96bab074360cbee63e7dc811db10d29dbbfba0480290dad993409c9938624b7248469725c9a3540cffec94e8e36c8113b35a434f0fd2e0a523f40e7ad0966840888195f5f56d7af64bde2ca62dba4c5e482fd0442a4469ac1f95ef4ddd76d95fca86c72601a39158eac9f25efd729efec3477dcc1f7cf00a23442e2b60d1c4f48a86e8c717b2d4e9f39917f29010b2426b72c0ced260688b451b38360b8b7ee44b3b6a5a1f52a4bfac29aeb80274b7243b573341d9b5c522b72be0e1376e0c0856f13fa00474d2a689e055c5139fc36a3c592268a9cd6178d08c3c6bbf0430608befa21aa4a42238ab200a9f6516359b96fc5264c6beef3cb407c55d5a6409b13f7e94c9fa0485a4a032ad585ba9629abfc70f75f7d2171bb03470ccb229253827b4b609b1c1ef2ceb3afa47c6a72e711f3cb11bd9fb195c10326c6b17d86a1b3f9c7105443cd9735821a38ebfd8bd85a9574d1ddeabaeba2510b86ca529af054354b832b76f74f261f534f8703038046a750df573ea03fab34d633b89f3b97a6625478584522098b19afeac2d9483279c32e71322e8215fc5ce4ea469fae9d4e4bc4dccdea01ed7c067f16643501899694c4b5d252293d6ac7cf6ea9914aca7de73d6a5ca1613f26d19837b1c259dc60f8a8c5d00390385c99453aa91c61cdb83db7990ddfe641c26a675232472e38bf5cdd5a8dddcbd4293ee6f42d87fe15fecea30b1b741b94e638b139f84a2d8a9894b067d781dfb4fdc039dfce59b01fb2e643b65c6ed6a74d013411c51bf14efb1e2c5fc5a52549a3ef619b519ee52851eee4cb3929a6424e0ffda44aefced50666e399ebea9fed827136670cbffe6543059db832a9d91ed37fd22837d87b76b00f3acbad392491832fe9e6d5abba2705b019ac798d7e703e7482646a80b176cc4a974475874f7548cc015df3285d51ba92228dc70adde7d3df2646c5ea6592204c5007801384c2e7dbfa5ceed1cbfe32030724d00c68b8e909edbe46d28036fef4c3fe612ba1037369b44e44cd12a185cf841941fe513072ed196f3cb5418784e44aa4bf13679b9276eec70bea3572ec75027f50b728c697c329661b78fa42ca7103c1a678c74707a547c4afd90ab3faac8fb1ae25ab4753021c8a18cb8f53e4450dce52338664b010c7f0020821f90df640d7a907c9affba49858edb4f79f9817153136271d7183ca64d34b8a8be1cdf0b282393345eaf1ad46bb21a2e8aa62b4fdfc35531a94211b8c9d4bca2bfef1fc70d5e7cc2cf24433d465504792cc1ad0c2d74c2a224074643b34e2f0226470935aeb88421e85f76305ec5a7f01b8e62f63007881f58038df65f19860dbb9c86bcf7b7d7863abe13a2a825ff25112a582e25e63714b14edbf3da55e81692699536c1c4484352d1d235477278dff8b64b340b648c4144e8c56d75f0feb528fd348c1178fc101e4a1118d52fd0c73cc06b02bd4d27af5928e6631d2f76643772908db5f6207b7ed199fdcf88608b56aaba2715fb43f5e08e0993cc6a77a9847919cdf1aad387449cf1762fa373041e156eb51cdb475dcf2ede298c5dfeccaf56e3b2230a552bc03aa34035d1d791524767d578a0418e842aa2a8c1515d1c19b91a66a596b0cfa6796562d51b93d19271d1d5b357b0c15d0e2a6cf2604356fe4baff9cfb00f26d714f71088524b0c629ca532d45d62730a0f62dca11ac59e545be83e896aa519fc9000b089dc914d78bc902377db5a20ae6daca20002d191957c3bf2f5bece1e289897024a7260ff836703098e2a394f97dfa1f8048a085dfba1d874108c126abe82eb29c9d4a747e72db234f412b1483e9c09c6d7b24c90aa6cf0ed5fce13a33de9c7b2577a5789d416bec063d8b040b2b57cded21c698aa3a3a30bcb25e066fd0f5f908797be8021d2cdb419f2e15d307bfbddf6de46da32d56586aa185dd3c73b51749b43ed92e946771fcc8a96c99c4a9f1f9b336272c10d0052f06afb0603b44c6b5a5e1a425a5e19e74bd8df270aa775d462f5ada37271d5df4053d44bc11747afebcdafbd508fbcf31d3231d64f03cb3445410b09193197cd566791b11224e3de9ebb3940347f9bb801ee9c4e6c1e58ca85467f512c88839d81e49e1954e1aaf307147c0e6342885967b850e2256edc4a40698487468c9cb1c2025c119f0e1ff0bdac8a13ec5ea8187b98ab7a6e4c893a335fe252e46deab9fcdba8ebf6523eb1ecd6d76dbaf29b16c386e2c4e209ed92183f90e9e3694d8084bc2c031294eab4515afc6240fee7be705767354fb26cd591864cd78d566edf2d06030fa75194c10dc7a5839aadd822d3c1c7a6fcadae7e9401a8151579d43d15ed0615ab26386ea7fbbeb92d8b24265e3460db840d4818c5d1f79ecb641c0b822f6023b3fc2da587e609bbc8d126e2ba97a1a37a9f30c3fdda8a5f143431e00d625e0210e25401062cd26d407117107da7f615dbc4dda53febd743094ee6415ec2ae42c7d1712de6291811c30e6e36f532b5eb177f4e9d534a7b7a5a034c481966ef28071c8f64ac8b65e723ebbf610f2475662101eab10b833ade7fc49d317310b2a80a6efd0316c49d5b1f74815295470c4759a3044eb4ce787cd9e6f580d581a50b5d790c2814792f1450f672cbaabdfbb3e2b48cef3e59b8e8041962f83a82b225c83aec36aa38ce24053f8b52f1ee4e319ba1187c834a684fe09b8b37e0e774f590c46ff5f8fb9b7c3bd44a3805c62dc8cb18051a7b0186626cd086ff4c3e9b5deae3addfa084521971892835fe738ca0afafda1483deb03c812e67d10b086b68eedc03cc17eb7d73959b440e6a942bea4caff1ef34689fa36a40c4077b68adf9da182027f34a3e31a11326221a2de9b8fa4db5d42383dc9a8398edbe8ad98e87026f1f2a6b0307cbfa1706597a5b4d2e3bd250d4b5a7848f28bbb915d8a0d5978b04e0897c34c36f5e0b8caf101f6f2eb6533982598615c9d3931203472350513904961b5320dcdbbf52405d492673ca7a39b34c91a9006590eda834de06df9ac1f2b54a8bb87d9546bc21ee90d5fd206241751f869c9bb281eff9883e9ada3493ca52f5435ab813428bb25ebec3ac56ff7e66782589e57ee57954cef431c9405da5dc56757763c751548ef746b373eb1047b94f55fd5bdf7fd058553bf17323f23470d7ec29525ada69514ba2c2bf68168d4aa7ddc00092ed69c869fb70b9d710850e99eaf321cd2e8e67123bdc4432071230f5f9fae8f995cd2eb8517a51adb517e33dba2d4f957baa7b98463c7d091633331d04e5522bf03bf703bbc85d5e008fd356f19804c4f03fdc26cdceb6b15c58ba10755387dcae344cdb71ce6226f037811fab6197e8d841da17460d1e77c07791e965ceab26defbaa59c4285e8ae6f9ae6fd807903451505eb759536cf09cbcb3b0cdb696ed69d3eda50f538df79f6f548be423e7bb3703428ecf3ae223d7a80917c3cbc7920a380c87e053df09dffba67af1549e366558450f8cefe5ac04da851ab02e5f77e0c44cb979f8e93c15fc7e63882411611f0b235a337a330ed50ab0f422447942e66591322317c8502c86734393693c3c6727a1de20293974ef15af89ab71659e9db57db350d73a2f15b4e1d18a5c145a82cdf31d2bde1af15d8f2c770c7a69c0c3d37b76a0b1a56bd52a0f4af88268e7b7443a61a7e7b2a9fe027f17cf813b6f15b437479f6bc880d98c80ad5aa38528ffd46667096b775c64a61ba4a3780c1b71b5f064f0d48410d6dfa20cec6d9aa53de55514a501569a5d37ce54075c86b8f01a7637583eeae8058d363ff59125f4f8e682fdb47e82345ac8e1ae1209fdcb4e491699b21f9c1b286db36c48909786e44a8545be642e49339348481401ca3f241d8d13065c7aa7aeca2510d33dc3962402a2ed9f77194b8d9b1c050013d6a351088361e50daed6c9380ff45eda57bbce98b44005df7ec7de830ea8dd88e811b5bbf6a60ff979971acb7c14f10f48b6e31cbcb476c4c24a76def447cee62b842aeb132f1eaf020d35ce5708906ec5443a152f1e496019cbe92fd1ed0b092546518fbe25d251bec33f0"]}, @typed={0x5, 0x114, 0x0, 0x0, @str='\x00'}, @generic="61e9cc7d15b092c7457e3c5d1e31d77c5fd5e46916dddaa5409fcb6f23e999ad134e900dd025f572a309ecfec1c2176e8cc4134061ef04740bf9dab837d6dd42935b1f4bc16a5827bdbe89d1fb9e2c61d28605c96c0975c92ca47193ae3c776828e94597e0cef0542d1f3104fa4362b8f72c4e676735d1754527ae2d76a2b2d7a01b7b2311d7ea8bad216f028e7cf0db6a38742acd731867ed25fd3c0166c61e3db1094a3d4e94ec3750e000d7bbf5", @generic="b8385e5a57e71afd63c434077298b2fc636bd5000e846e5427c6be0474a9f5e3546a941ade717e6c2795d09a1bba9cb47423611b046425c73755647358c7e035dee4f1bd6ade8de8647db708fec2f7b30275a6e02b38494ec0cd6cc8e2fe8e93bc895fc5c56bba0cee0403ba3d15b41740f0836d9b2c46354f5495b2650df1b9690f89fac5d6999585e41278b473b2003d09fceafc9c3c16cf85f08a66db89f9cbb5033731a2887808c151", @nested={0x10, 0x69, 0x0, 0x1, [@nested={0x4, 0xd0}, @typed={0x8, 0x59, 0x0, 0x0, @uid=r2}]}, @generic, @nested={0xad, 0x36, 0x0, 0x1, [@typed={0x8, 0xd8, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xb4}, @generic="0cef8d22e1cd20bcd1201c7aad36af72dc1e0009d443896c0b96a16e69b3c3e1d65adc6ab9e7352ea42904283a84312b02a544818772f27eb1153a4c560545e1b5d21a4d98ec9510540fe3e68eb4874a95dd7b8a2e16964f3774714377308dc3fa6fc2cb8799278dcaae30240b90afc184a67a7f9822502b96f4f158fdde67a6fbd6f11f2b2e2a6505ffe6e9177d09d417", @typed={0x8, 0x104, 0x0, 0x0, @u32=0x9}, @nested={0x4, 0x147}]}, @nested={0x2c, 0xa8, 0x0, 0x1, [@generic="39b41da541ecf0ec54578290bb95210507a3a44e8804baa2bb18cdbc112169e4d45e28739b04c059"]}, @typed={0x5, 0xce, 0x0, 0x0, @str='\x00'}]}, 0x12a8}], 0x2, 0x0, 0x0, 0xc081}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf50009058402"], &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000640)=@lang_id={0x4}}, {0x4, &(0x7f0000000580)=@string={0x4, 0x3, "e351"}}, {0x0, 0x0}, {0x0, 0x0}]}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) socket$nl_generic(0x10, 0x3, 0x10) 15.726264891s ago: executing program 4 (id=1173): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5603, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f00000004c0)="3f6c00c2231bc4cb500170870800", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000)=0x6e, 0x80000) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = epoll_create1(0x80000) epoll_wait(r5, &(0x7f0000000240)=[{}], 0x1, 0x7ff) ppoll(&(0x7f0000000080)=[{r5, 0x8201}], 0x1, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) getegid() 14.752047876s ago: executing program 4 (id=1175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setreuid(0xee00, 0xee01) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x2, @private}], 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX]) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='omfs\x00', 0x0, 0x0) 13.552154663s ago: executing program 4 (id=1178): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x32, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000008000000141000"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507000015300000d60600000ee6ff80bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fadvise64(r1, 0x1, 0x40, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a80), 0x2002, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000b00)={0x4, &(0x7f0000000ac0)=[{0x8, 0x0, 0x0, 0x8}, {0xa, 0x40, 0xab, 0x8}, {0x1e, 0x9, 0x2, 0x3cbb}, {0x823, 0x1, 0x10, 0x7ff}]}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x10}, {0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd8}, {0xeeee0000, 0xdddd5000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfc}, {0xdddd0000, 0x0, 0xf, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {}, {0x0, 0x0, 0xd, 0xfe, 0x0, 0x0, 0x0, 0x0, 0xfe}, {0xd4ac0b8eca0a816f, 0xeeee8000, 0x0, 0x0, 0x0, 0x1, 0x3, 0xa, 0xfe}, {}, {0x10000}, 0xddf8ffdb, 0x0, 0xdddd0000, 0x140030, 0xb, 0xd01, 0x0, [0x0, 0x2, 0x7]}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mkdirat(r6, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r7 = creat(&(0x7f0000000580)='./file0/file0\x00', 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000640)={&(0x7f0000004000)={[{&(0x7f00000006c0)="a7591019b2c339731987fa188b7f58cd48b525c8673c86ead2a9e8ebb01b21cefc084bef09a0e8402892fff71073ceff9fc520849133287e94e7ba9b3ad4a05f1ef2f4014270a876549a8deed4799adae3050a8f4792ba171cc3551dfb831bc39ceab66bb83f54f52a1e1b3f9dbae76be110216aebd6ef98956f1fb814adbdcb86f14e5a40fc2aaab49c234e75aae63f88087b03907854db19d46e1f821c25f8b2078a92b22e3ec1979c06cf2901e160abf84f569346d332387e833f1f6f60fbcecb8e", 0xc3, 0x3}, {&(0x7f0000000600)="0e81c45ffeff", 0x6, 0x1}, {&(0x7f0000002080)="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", 0x1000, 0x3}, {&(0x7f00000007c0)="d92a6ded4df5675291fb80bec8798851d72559f029199f8c8bbc507acfc37f86f8c1656869db9673168b53166bea93c3e165563a2541611dd3b6a6d130bc2f3363fb3a6eead1eddec64f24f79c0776f6ef57d5bed5134c837c410a3b6ad373779126ccf4cbc8d260f20e21c2c860d38688520d16957873cf762ed7fc215a979cf320fba525087795e8e8a62faedab8d4fdce40ebec6570fd4d9fa1d90d15582e0db6830b1c6632c0b6b46eec7de829cbb61dbf525e7eed910973a75385835e1683e5431b11f66fddc62575e3ac53d81439c19b636c3e4de80f19d90ca726c5c81e9cdf9528f59177c75f597f5c3ae752c9d683d72acd", 0xf6, 0x2}, {&(0x7f00000008c0)="c7f025703a849dd4ffdefd4f7e39c98b22e5532da9f2af8c3e47fcc362409c943446f3ae6c1c2b632fc506092cd12d98e93d8e7def70681d4d14ce96c23819a438f7b20a5f0ddf39bc255ee4045b0e27a5c81e68207aaa5b75d05d698bb1c886ae1a99e2e12de75b4cd9e1bce162b2c958227ac60d458dd4ac98ef98c2a299ab16968f93807977f912f0f899094073d084f44f433c6447a2f126942e39c4bcb075460c816be3a81ef42d39a0df16cae87639a18a081130fdef249a6bd33c47e5e65e15d715e3dcba358097b0b6a1ee1dff6a01cffa6952e5bd876b5604976f586301c55bc64917b66bd63e33f9eb0cd235e022481e", 0xf5, 0x1}, {&(0x7f00000009c0)="f59b14c18d8ee4272d8e87a43fca21faa58b7d4c0b06416732c6762e12dc58364cbbcd49a50326c179d246cdfe3742385315fcbe4fe05c10b76b20d6f9c832b447f0a1e2e5e81776ff260a1163ecf7b91da5898d0d460f290026b5ec1f4b880500cf360cb515e1fded70511c3205391a5dd3748a0cfbcc73e7082a5b8ca5e139c21a87e32fe9db00ea37eb0503ac355d8c7cedc9b8c1db95", 0x98, 0x3}]}, 0xffffffffffffff45, 0x2}, 0x1) linkat(r0, &(0x7f0000000540)='./file0\x00', r7, &(0x7f00000005c0)='./file0/file0\x00', 0x3400) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r6, &(0x7f0000000140)='./file0/file0\x00', 0x0) 11.182472694s ago: executing program 2 (id=1183): setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) ioctl$SIOCGETSGCNT(r7, 0x89e1, &(0x7f0000000000)={@broadcast, @rand_addr=0x64010100}) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) socket$inet6(0xa, 0x800, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 11.18191077s ago: executing program 4 (id=1184): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x9080}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) fallocate(r3, 0x0, 0x0, 0x3) close(r1) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setscheduler(0x0, 0x292fa3d1a561d28e, &(0x7f0000000200)=0x4000002) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r6, 0xc048aeca, &(0x7f0000000200)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202840, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) r9 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35ca60864160af36514001ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d493080000000000002100000e4509c5bbcd72c6c95300"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r7, 0xc008ae05, &(0x7f0000000240)=""/4082) 10.376071987s ago: executing program 4 (id=1186): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') writev(r2, &(0x7f0000000f40)=[{&(0x7f0000000b00)="d6858cbb6d560b2c", 0x8}], 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100002080000000", @ANYRES32=r2, @ANYBLOB="8000"/20, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="050000000100"/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000100000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400000ffe0000000000000000", @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) 10.375600067s ago: executing program 2 (id=1187): unshare(0x22020600) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000540)={@my=0x0, 0x2}) setuid(0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0x4140, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x4108}, {0x1c, 0x17, {0x9, 0x2, @l2={'eth', 0x3a, 'macvlan1\x00'}}}}}, 0x38}}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000001c0)={&(0x7f0000000780)={{@hyper}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) r6 = syz_clone3(&(0x7f00000004c0)={0x200000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x25}, &(0x7f00000003c0)=""/181, 0xb5, &(0x7f0000000300)=""/50, &(0x7f0000000480)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) sched_setscheduler(r6, 0x5, &(0x7f0000000080)=0x7) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4048aecb, &(0x7f0000000080)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r10, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x54}}, 0x40) r11 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r11, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r11, &(0x7f00000000c0), 0x2) read(r11, &(0x7f0000000100)=""/85, 0x55) write$USERIO_CMD_SEND_INTERRUPT(r11, &(0x7f00000001c0)={0x2, 0x8}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r11, &(0x7f0000000340)={0x2, 0x4}, 0x2) ppoll(&(0x7f0000000200)=[{r0, 0x4100}], 0x1, 0x0, 0x0, 0x0) 10.134600855s ago: executing program 34 (id=1186): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') writev(r2, &(0x7f0000000f40)=[{&(0x7f0000000b00)="d6858cbb6d560b2c", 0x8}], 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100002080000000", @ANYRES32=r2, @ANYBLOB="8000"/20, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="050000000100"/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000100000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400000ffe0000000000000000", @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) 9.220643154s ago: executing program 2 (id=1192): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66962000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYRES64=0x0], &(0x7f0000000000)='GPL\x00', 0x3, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r1, 0x89f0, &(0x7f00000000c0)={0x2, 0xb7f3, 0x0, 0x0, 0x16, "bb5dee00"}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000cf754461e419e07300000300"/32], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r5, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x209400) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r9 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000566504204e080110f9330102030109021b00012100000009040000014a90c20009050431"], 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000840)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={r10, 0x6, 0x20}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x1, 0x1) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002800000018010000786c6c2500000000002020207b1af8ff00000000bfa10000000000f907010000f8ffffffb702000008000000b703000000000000850000007b0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) 6.622339066s ago: executing program 3 (id=1197): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) msgsnd(0x0, &(0x7f0000000700)=ANY=[@ANYRES64=r0], 0x175, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) (async) ioctl$SNAPSHOT_UNFREEZE(r4, 0x3314) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xa0001f98, 0xb, 0x0, &(0x7f0000000440)="85f17444c5a569f1e21b08", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) (async) ioctl$BINDER_FREEZE(r1, 0x400c620e, 0x0) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x40000002) (async) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000000270f52e2a803b9010e79164ad9ffc57797d36032fb444d58fc9784495c8e2307bad023185a494e7c5e038d0fd76746170957b1d2f70c3ead268d220327a310a50fc57ed39e0a848fce33d87123b58f06330602ec14aa0995f6e9c945332f159064c51c455f8f3421d54ea7024eb798cd0d50599cf5dd6e6315493fc269dd200", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0) (async) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000100)=0x0) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x308, 0x220, 0x0, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg0\x00', 'nicvf0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="cd88a56e0a2e", @dev, @broadcast}}}, {{@arp={@remote, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gretap0\x00', 'veth0_to_team\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @remote, @local}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) syz_open_procfs(r7, &(0x7f00000001c0)='net/ip6_mr_cache\x00') getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) 6.015060116s ago: executing program 5 (id=1198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x10b942, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r1, 0x0, 0x4000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r4 = socket$inet6(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784004000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, 0xffffffffffffffff, 0x0) lsm_set_self_attr(0x68, &(0x7f00000010c0)={0x6d, 0x8000000000000000, 0x20}, 0x20, 0x0) 5.956104181s ago: executing program 3 (id=1199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) read(r4, &(0x7f00000000c0)=""/226, 0xe2) 5.595551446s ago: executing program 6 (id=1200): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206010100000000000000000a00000005000400000000000900020073797a32000000001400078008001340ffffffff08000640000000000500050002000000050001000600000013000300686173683a6e65742c6966616365000040"], 0x60}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, 0x0) capget(0x0, &(0x7f0000000180)={0x0, 0x5, 0x7}) 4.997590813s ago: executing program 2 (id=1201): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000040)="cb", 0xfffffdef) connect$llc(r1, &(0x7f0000000080)={0x1a, 0x336, 0x7f, 0xf5, 0x8}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x280200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="000000000000003299b8f276dc75584a8d87d907005858367d61f49e1639a48f614a54a8192c2876b7f843cd3a3c07288fa0f1e28983b5cdc2e29b6e", 0x3c, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x2, @local, 0xac6}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 4.908001268s ago: executing program 5 (id=1202): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xd, 0x6, 0x67, 0x5}, {0x7, 0xc, 0x7f}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000580)={0x0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000009c0)=0xe, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x11\x00'}]}, 0x1c}}, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000003c0)={r2}) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)={r2, 0x3, r6, 0x4}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r8 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r8, &(0x7f0000000280), 0x6400, 0x4000, &(0x7f0000000380)={0x2, 0x4e24, @remote}, 0x10) r9 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x9}}}, 0x24}}, 0x0) recvmsg$can_raw(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/16, 0x10}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x2}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) 4.700641007s ago: executing program 3 (id=1203): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) readv(r0, &(0x7f00000027c0)=[{&(0x7f0000000480)=""/86, 0x56}], 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000280)={0x4000001, 0x4}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000000)='cpu.weight\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="0000000a20000000000a01030000000000000000010000000900010073797a300000000034000000030a01020000000000000000010000000900030073797a32000000000900010073797a30000000000800054000000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r10, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fe00}], 0x1, 0x0, 0x0, 0x2b) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = gettid() sched_setscheduler(r11, 0x26cf682b737d05cc, &(0x7f0000000100)) 4.6328712s ago: executing program 6 (id=1204): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x40000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1700000055002f03020000000000000007"], 0x38}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0) shutdown(r2, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0xffff, 0x6, {0xffffffffffffffff}, {0xee00}, 0x7ce, 0xc6}) ptrace$ARCH_GET_GS(0x1e, r3, &(0x7f0000000280), 0x1004) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x80000006}]}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.519996128s ago: executing program 5 (id=1205): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) listen(r3, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4$tipc(r3, &(0x7f0000000040), &(0x7f0000000200)=0x10, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) creat(&(0x7f0000000340)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0, @ANYBLOB="0100000075705f69a55b", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004340)={0x2020}, 0x2020) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x34, r7, 0x1, 0x0, 0x0, {0x3e}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 3.449376929s ago: executing program 2 (id=1206): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x37}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0xfa, 0x70, 0x10, 0x8, 0x413, 0x6023, 0xb636, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbf, 0x0, 0x1, 0x7a, 0x9e, 0xc0, 0x0, [], [{{0x9, 0x5, 0x82}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, r2) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x0, 0x2a}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.367255985s ago: executing program 6 (id=1207): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x40000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1700000055002f03020000000000000007"], 0x38}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0) shutdown(r2, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0xffff, 0x6, {0xffffffffffffffff}, {0xee00}, 0x7ce, 0xc6}) ptrace$ARCH_GET_GS(0x1e, r3, &(0x7f0000000280), 0x1004) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e000000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x80000006}]}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.267355125s ago: executing program 3 (id=1208): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x19) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000081100010000000000000000000000000a"], 0x28}}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000740)={'erspan0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(r0, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.usage_all\x00', 0x100002, 0x0) fsopen(&(0x7f00000001c0)='romfs\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x5a, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb81000000000d0000000000000000ec7ab49f42266b558197758939c3a67064eb2413deb6d588b1535d303e902f5348321b2aa24fcea65492091e651e6c1d305344df8c4753433e00000000000000"], 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3, 0x400}, &(0x7f0000000340), &(0x7f0000000080)) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x40000002, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000600000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 2.431426166s ago: executing program 6 (id=1209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000001100)=[{{&(0x7f0000000280)=@qipcrtr, 0x80, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/20, 0x14}, {&(0x7f00000001c0)=""/25, 0x19}, {&(0x7f0000001200)=""/235, 0xeb}, {&(0x7f0000000540)=""/243, 0xf3}, {&(0x7f0000000640)=""/230, 0xe6}], 0x5, &(0x7f0000000740)=""/133, 0x85}, 0x8}, {{&(0x7f0000000800)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000880)=""/168, 0xa8}, {&(0x7f0000000940)=""/176, 0xb0}, {&(0x7f0000000300)=""/30, 0x1e}, {&(0x7f0000000a00)=""/18, 0x12}, {&(0x7f0000000ac0)=""/150, 0x96}], 0x5, &(0x7f0000000c00)=""/157, 0x9d}, 0xff}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/106, 0x6a}, {&(0x7f0000000d40)=""/92, 0x5c}, {&(0x7f0000000dc0)=""/26, 0x1a}, {&(0x7f0000000e00)=""/102, 0x66}], 0x4}, 0xb38}, {{&(0x7f0000000ec0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f40)=""/148, 0x94}], 0x1, &(0x7f0000001040)=""/145, 0x91}, 0x7}], 0x4, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2c0000001e00431b000000000000000007000000", @ANYBLOB], 0x2c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r3 = fsopen(&(0x7f0000000180)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r6 = dup(r5) r7 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r7, 0xee72) sendfile(r5, r7, 0x0, 0x8000fffffffe) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = dup3(r6, r8, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x1b) getsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) bind$inet(r4, &(0x7f0000002680)={0x2, 0x0, @local}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 2.324121138s ago: executing program 5 (id=1210): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r1) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001e000000080004000000000008000100", @ANYBLOB="e4fa5760"], 0x24}}, 0x0) iopl(0x3) futex(&(0x7f0000002100), 0x4, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0xc08c5335, &(0x7f0000000180)={0x0, 0x80, 0xfffffffd}) finit_module(r5, &(0x7f0000000000)='\x00', 0x3) recvmmsg(r0, &(0x7f0000001d40), 0x0, 0xe84b0b3f4b241d6a, 0x0) 2.144988297s ago: executing program 3 (id=1211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x10b942, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r3, 0x0, 0x4000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r6 = socket$inet6(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784004000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, 0xffffffffffffffff, 0x0) lsm_set_self_attr(0x68, &(0x7f00000010c0)={0x6d, 0x8000000000000000, 0x20}, 0x20, 0x0) 1.896933602s ago: executing program 5 (id=1212): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000000180), 0x400000000000077, 0x0) r6 = socket$kcm(0x10, 0x100000000002, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f00000000c0), 0xfffffc8f) write$binfmt_elf64(r7, &(0x7f0000000a80)=ANY=[], 0x6df) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r8 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r8, 0x4, &(0x7f0000000080)='&$%[\\++H%\'!-.\xdd+){!+u\x00', &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000001c0)=r0, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 928.399927ms ago: executing program 6 (id=1213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, 0x0, 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) read(r4, &(0x7f00000000c0)=""/226, 0xe2) 603.898969ms ago: executing program 3 (id=1214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f50014060000000000000000000000ffff64010101fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000002090780003"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x80, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x80}}, 0x800) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1cc, 0x12) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x24102}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r3, 0x47f6, 0xbacc, 0x0, 0x0, 0x0) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000400)={0x8533, 0x0, 0x3012, 0xff, 0xffffffff, 0x2, 0xc, 0x1}) 320.883753ms ago: executing program 5 (id=1215): socket(0x2b, 0x80801, 0x1) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) r1 = timerfd_create(0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) r3 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000040)=0x20f, 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x3, 0x1}, 0xc) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = fanotify_init(0xf00, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fanotify_mark(r5, 0x105, 0x4800002c, r6, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) r8 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) read$FUSE(r5, &(0x7f0000002f00)={0x2020}, 0x2020) r9 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x0, 0x1000}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x1201}}) io_uring_enter(r9, 0x47f6, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r4, &(0x7f0000000040)={0x20000000}) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0xf) ioctl$UI_DEV_CREATE(r4, 0x5501) 55.255181ms ago: executing program 6 (id=1216): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff"]) 0s ago: executing program 2 (id=1217): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) readv(r0, &(0x7f00000027c0)=[{&(0x7f0000000480)=""/86, 0x56}], 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000280)={0x4000001, 0x4}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000000)='cpu.weight\x00', 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="0000000a20000000000a01030000000000000000010000000900010073797a300000000034000000030a01020000000000000000010000000900030073797a32000000000900010073797a30000000000800054000000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r10, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fe00}], 0x1, 0x0, 0x0, 0x2b) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = gettid() sched_setscheduler(r11, 0x26cf682b737d05cc, &(0x7f0000000100)) kernel console output (not intermixed with test programs): e 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 208.291308][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 208.334969][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 208.362228][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 208.411733][ T5926] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 208.434768][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 208.456370][ T7886] netlink: 'syz.4.405': attribute type 2 has an invalid length. [ 208.464063][ T7886] netlink: 'syz.4.405': attribute type 8 has an invalid length. [ 208.471703][ T7886] netlink: 132 bytes leftover after parsing attributes in process `syz.4.405'. [ 208.524757][ T5926] usb 2-1: Product: syz [ 208.545289][ T5926] usb 2-1: Manufacturer: syz [ 208.560757][ T5926] usb 2-1: SerialNumber: syz [ 208.581459][ T5926] usb 2-1: config 0 descriptor?? [ 209.244940][ T5926] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 209.253821][ T5926] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 209.702519][ T7905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.412'. [ 209.740114][ T7908] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 209.741699][ T7905] ipt_rpfilter: unknown options [ 210.270449][ T5925] usb 2-1: USB disconnect, device number 9 [ 211.386142][ T7935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'. [ 211.433216][ T7935] netlink: 'syz.4.420': attribute type 11 has an invalid length. [ 211.545670][ T7935] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.554830][ T7935] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.563606][ T7935] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.572532][ T7935] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.694767][ T7935] vxlan0: entered promiscuous mode [ 213.473851][ T7958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.426'. [ 213.507052][ T7958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.426'. [ 213.537529][ T7958] netlink: 'syz.4.426': attribute type 6 has an invalid length. [ 213.622404][ T5925] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 213.782325][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 213.810481][ T5925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.843531][ T5925] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 213.872319][ T5925] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 213.916936][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.954489][ T5925] usb 2-1: config 0 descriptor?? [ 213.970750][ T7956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.425'. [ 217.824710][ T836] usb 2-1: USB disconnect, device number 10 [ 218.293484][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.5.438'. [ 218.304158][ T8003] virtio-fs: tag <(null)> not found [ 222.445660][ T8034] fuse: Bad value for 'fd' [ 222.979050][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 223.013783][ T8044] netlink: 60 bytes leftover after parsing attributes in process `syz.1.450'. [ 223.962137][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 223.994720][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.006543][ T25] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 225.012137][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 225.032301][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.884817][ T25] usb 5-1: config 0 descriptor?? [ 225.890153][ T25] usb 5-1: can't set config #0, error -71 [ 225.901087][ T25] usb 5-1: USB disconnect, device number 8 [ 226.025173][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.457'. [ 227.780391][ T8090] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 227.787306][ T8090] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 227.802360][ T8090] vhci_hcd vhci_hcd.0: Device attached [ 227.882404][ T8091] vhci_hcd: connection closed [ 227.892924][ T3466] vhci_hcd: stop threads [ 227.913257][ T3466] vhci_hcd: release socket [ 227.950108][ T3466] vhci_hcd: disconnect device [ 227.958819][ T8097] netlink: 36 bytes leftover after parsing attributes in process `syz.5.465'. [ 227.982302][ T9] vhci_hcd: vhci_device speed not set [ 227.992616][ T8097] netlink: 16 bytes leftover after parsing attributes in process `syz.5.465'. [ 228.002348][ T8097] netlink: 36 bytes leftover after parsing attributes in process `syz.5.465'. [ 228.011479][ T8097] netlink: 36 bytes leftover after parsing attributes in process `syz.5.465'. [ 229.979709][ T836] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 229.992637][ T8098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.464'. [ 230.011875][ T8098] virtio-fs: tag <(null)> not found [ 230.152404][ T836] usb 5-1: Using ep0 maxpacket: 32 [ 230.164979][ T836] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.177529][ T836] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.209017][ T836] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 230.237474][ T836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.269839][ T836] usb 5-1: config 0 descriptor?? [ 232.156219][ T9] usb 5-1: USB disconnect, device number 9 [ 234.334642][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 234.572248][ T5849] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 234.621090][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 234.632675][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.650178][ T9] usb 5-1: Product: syz [ 234.656376][ T9] usb 5-1: Manufacturer: syz [ 234.661171][ T9] usb 5-1: SerialNumber: syz [ 235.362201][ T5849] usb 6-1: Using ep0 maxpacket: 32 [ 235.369531][ T5849] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.458125][ T5849] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 235.485352][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 235.492516][ T9] r8152-cfgselector 5-1: config 0 descriptor?? [ 235.624910][ T5849] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 235.637072][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.989005][ T5849] usb 6-1: config 0 descriptor?? [ 238.062409][ T836] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 238.084864][ T8219] netlink: 'syz.2.494': attribute type 2 has an invalid length. [ 238.092641][ T8219] netlink: 'syz.2.494': attribute type 8 has an invalid length. [ 238.100287][ T8219] netlink: 132 bytes leftover after parsing attributes in process `syz.2.494'. [ 238.244077][ T836] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.271618][ T836] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 238.300922][ T836] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 238.338644][ T836] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.369881][ T836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.402934][ T836] usb 2-1: Product: syz [ 238.418022][ T836] usb 2-1: Manufacturer: syz [ 238.432532][ T836] usb 2-1: SerialNumber: syz [ 238.769761][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 238.776468][ T9] r8152-cfgselector 5-1: bad CDC descriptors [ 238.786170][ T9] r8152-cfgselector 5-1: USB disconnect, device number 10 [ 240.263050][ T8233] netlink: 'syz.3.498': attribute type 2 has an invalid length. [ 240.270746][ T8233] netlink: 'syz.3.498': attribute type 8 has an invalid length. [ 240.278447][ T8233] netlink: 132 bytes leftover after parsing attributes in process `syz.3.498'. [ 240.348751][ T5849] usb 6-1: USB disconnect, device number 5 [ 240.861601][ T836] cdc_ncm 2-1:1.0: bind() failure [ 240.912625][ T836] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 240.946213][ T836] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 240.957302][ T836] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 240.979561][ T836] usb 2-1: USB disconnect, device number 11 [ 241.103030][ T5895] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 241.228378][ T8245] netlink: 'syz.3.502': attribute type 2 has an invalid length. [ 241.236788][ T8245] netlink: 'syz.3.502': attribute type 8 has an invalid length. [ 241.244797][ T8245] netlink: 132 bytes leftover after parsing attributes in process `syz.3.502'. [ 241.861379][ T8238] netlink: 'syz.2.500': attribute type 2 has an invalid length. [ 241.869168][ T8238] netlink: 'syz.2.500': attribute type 8 has an invalid length. [ 241.876845][ T8238] netlink: 132 bytes leftover after parsing attributes in process `syz.2.500'. [ 241.951167][ T5895] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 242.192143][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.239147][ T5895] usb 5-1: Product: syz [ 242.252459][ T5895] usb 5-1: Manufacturer: syz [ 242.264347][ T5895] usb 5-1: SerialNumber: syz [ 242.295668][ T5895] r8152-cfgselector 5-1: Unknown version 0x0000 [ 242.302252][ T5895] r8152-cfgselector 5-1: config 0 descriptor?? [ 243.423629][ T5895] r8152-cfgselector 5-1: Unknown version 0x0000 [ 243.430117][ T5895] r8152-cfgselector 5-1: bad CDC descriptors [ 243.446128][ T5895] r8152-cfgselector 5-1: USB disconnect, device number 11 [ 243.672699][ T5893] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 243.982170][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 244.012211][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.039517][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 244.067048][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 244.107691][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 244.131187][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 244.164650][ T5893] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 244.173921][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 244.182949][ T5893] usb 3-1: Product: syz [ 244.187258][ T5893] usb 3-1: Manufacturer: syz [ 244.199289][ T5893] usb 3-1: SerialNumber: syz [ 244.233302][ T5893] usb 3-1: config 0 descriptor?? [ 244.762865][ T5893] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 244.839441][ T5893] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 246.748776][ T5893] usb 3-1: USB disconnect, device number 13 [ 247.142534][ T5923] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 247.292210][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 247.307985][ T5923] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.320539][ T5923] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 247.335348][ T5923] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 247.358107][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.478845][ T5923] usb 6-1: config 0 descriptor?? [ 248.402518][ T5923] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 248.562198][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 249.385515][ T5923] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.397018][ T5923] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 249.409310][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 249.420418][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 249.432363][ T5923] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 249.472961][ T5923] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 249.492253][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 249.500581][ T5923] usb 5-1: Product: syz [ 249.505489][ T5923] usb 5-1: Manufacturer: syz [ 249.510194][ T5923] usb 5-1: SerialNumber: syz [ 249.519010][ T5923] usb 5-1: config 0 descriptor?? [ 250.032538][ T5923] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 250.052457][ T5923] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 250.416635][ T8311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 250.428893][ T8311] virtio-fs: tag <(null)> not found [ 250.696884][ T5849] usb 6-1: USB disconnect, device number 6 [ 250.933571][ T836] usb 5-1: USB disconnect, device number 12 [ 251.637449][ T8334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.520'. [ 252.802214][ T5923] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 252.856770][ T8362] tmpfs: Unknown parameter 'inodetRr' [ 252.925082][ T8365] batadv_slave_1: entered promiscuous mode [ 252.945611][ T8365] batadv_slave_1: left promiscuous mode [ 252.952596][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 252.969862][ T5923] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.991285][ T5923] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 253.125647][ T5923] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 253.134969][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.156918][ T5923] usb 4-1: config 0 descriptor?? [ 254.188225][ T8378] tipc: Started in network mode [ 254.193280][ T8378] tipc: Node identity fffffeff, cluster identity 7 [ 254.199945][ T8378] tipc: Node number set to 4294967039 [ 256.086504][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.093001][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.101247][ T1294] cfttyS3 selects TX queue 0, but real number of TX queues is 0 [ 256.172239][ T5923] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 256.322151][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 256.332375][ T5923] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.343429][ T5923] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 256.355707][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 256.377169][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 256.397688][ T5923] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 256.462961][ T5923] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 256.474817][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 256.503578][ T5923] usb 5-1: Product: syz [ 256.513846][ T5923] usb 5-1: Manufacturer: syz [ 256.523892][ T5923] usb 5-1: SerialNumber: syz [ 256.580958][ T5923] usb 5-1: config 0 descriptor?? [ 256.792858][ T8399] netlink: 'syz.2.546': attribute type 2 has an invalid length. [ 256.829762][ T8399] netlink: 'syz.2.546': attribute type 8 has an invalid length. [ 256.837855][ T8399] netlink: 132 bytes leftover after parsing attributes in process `syz.2.546'. [ 257.164426][ T5923] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 257.178996][ T5923] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 257.645117][ T8404] netlink: 'syz.5.547': attribute type 2 has an invalid length. [ 257.653292][ T8404] netlink: 'syz.5.547': attribute type 8 has an invalid length. [ 257.661159][ T8404] netlink: 132 bytes leftover after parsing attributes in process `syz.5.547'. [ 258.204520][ T5895] usb 4-1: USB disconnect, device number 10 [ 258.343954][ T836] usb 5-1: USB disconnect, device number 13 [ 261.132241][ T836] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 261.402199][ T836] usb 5-1: Using ep0 maxpacket: 32 [ 261.409401][ T836] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.419698][ T836] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 261.559606][ T8455] netlink: 'syz.2.561': attribute type 2 has an invalid length. [ 261.567646][ T8455] netlink: 'syz.2.561': attribute type 8 has an invalid length. [ 261.575765][ T8455] netlink: 132 bytes leftover after parsing attributes in process `syz.2.561'. [ 261.704371][ T836] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 261.722629][ T836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.743030][ T836] usb 5-1: config 0 descriptor?? [ 262.316764][ T8469] netlink: 'syz.5.567': attribute type 1 has an invalid length. [ 262.324746][ T8469] netlink: 56 bytes leftover after parsing attributes in process `syz.5.567'. [ 264.359523][ T8488] netlink: 'syz.3.572': attribute type 2 has an invalid length. [ 264.367471][ T8488] netlink: 'syz.3.572': attribute type 8 has an invalid length. [ 264.375431][ T8488] netlink: 132 bytes leftover after parsing attributes in process `syz.3.572'. [ 264.649352][ T8492] netlink: 60 bytes leftover after parsing attributes in process `syz.1.571'. [ 264.677261][ T8501] FAULT_INJECTION: forcing a failure. [ 264.677261][ T8501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.822804][ T8501] CPU: 1 UID: 0 PID: 8501 Comm: syz.3.575 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 264.833094][ T8501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 264.843154][ T8501] Call Trace: [ 264.846461][ T8501] [ 264.849410][ T8501] dump_stack_lvl+0x241/0x360 [ 264.854079][ T8501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.859264][ T8501] ? __pfx__printk+0x10/0x10 [ 264.863854][ T8501] should_fail_ex+0x3b0/0x4e0 [ 264.868535][ T8501] _copy_from_user+0x2f/0xc0 [ 264.873117][ T8501] snd_rawmidi_kernel_write1+0x376/0x5f0 [ 264.878779][ T8501] snd_rawmidi_write+0x5b3/0xb70 [ 264.883740][ T8501] ? mark_lock+0x9a/0x360 [ 264.888089][ T8501] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 264.893563][ T8501] ? __pfx_default_wake_function+0x10/0x10 [ 264.899642][ T8501] ? bpf_lsm_file_permission+0x9/0x10 [ 264.905017][ T8501] ? security_file_permission+0x74/0x280 [ 264.911083][ T8501] ? rw_verify_area+0x1c3/0x6f0 [ 264.915933][ T8501] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 264.921388][ T8501] vfs_write+0x2a3/0xd30 [ 264.925641][ T8501] ? __pfx_vfs_write+0x10/0x10 [ 264.930407][ T8501] ? __fget_files+0x2a/0x410 [ 264.934996][ T8501] ? __fget_files+0x395/0x410 [ 264.939672][ T8501] ? __fget_files+0x2a/0x410 [ 264.944273][ T8501] ksys_write+0x18f/0x2b0 [ 264.948713][ T8501] ? __pfx_ksys_write+0x10/0x10 [ 264.953591][ T8501] ? do_syscall_64+0x100/0x230 [ 264.958370][ T8501] ? do_syscall_64+0xb6/0x230 [ 264.963063][ T8501] do_syscall_64+0xf3/0x230 [ 264.967594][ T8501] ? clear_bhb_loop+0x35/0x90 [ 264.972286][ T8501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.978184][ T8501] RIP: 0033:0x7fcdf8180809 [ 264.982600][ T8501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.002226][ T8501] RSP: 002b:00007fcdf8fa6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 265.010651][ T8501] RAX: ffffffffffffffda RBX: 00007fcdf8345fa0 RCX: 00007fcdf8180809 [ 265.018625][ T8501] RDX: 00000000fffffd2c RSI: 0000000020000000 RDI: 0000000000000004 [ 265.026590][ T8501] RBP: 00007fcdf8fa60a0 R08: 0000000000000000 R09: 0000000000000000 [ 265.034559][ T8501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.042528][ T8501] R13: 0000000000000000 R14: 00007fcdf8345fa0 R15: 00007fff5db85498 [ 265.050516][ T8501] [ 265.819656][ T836] usb 5-1: USB disconnect, device number 14 [ 265.892273][ T29] audit: type=1326 audit(1732877533.789:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8515 comm="syz.2.579" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f88580809 code=0x0 [ 265.913080][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.236479][ T836] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 266.531233][ T8531] netlink: 'syz.4.585': attribute type 2 has an invalid length. [ 266.539180][ T8531] netlink: 'syz.4.585': attribute type 8 has an invalid length. [ 266.547196][ T8531] netlink: 132 bytes leftover after parsing attributes in process `syz.4.585'. [ 266.847802][ T836] usb 3-1: Using ep0 maxpacket: 32 [ 266.902682][ T836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 266.923705][ T836] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 266.933072][ T836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.977631][ T836] usb 3-1: Product: syz [ 267.000336][ T836] usb 3-1: Manufacturer: syz [ 267.019150][ T836] usb 3-1: SerialNumber: syz [ 267.056558][ T836] usb 3-1: config 0 descriptor?? [ 267.123272][ T836] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 267.414162][ T5849] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 267.483021][ T5895] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 267.517566][ T8517] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.572216][ T5849] usb 2-1: Using ep0 maxpacket: 32 [ 267.579137][ T5849] usb 2-1: config 33 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 267.629407][ T5849] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 267.638944][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 267.665635][ T5895] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.696771][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.726588][ T5895] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 267.756449][ T5849] usb 2-1: Product: syz [ 267.774675][ T5849] usb 2-1: Manufacturer: syz [ 267.785464][ T5895] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 267.805119][ T5849] usb 2-1: SerialNumber: syz [ 267.828200][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.857306][ T5895] usb 6-1: config 0 descriptor?? [ 268.212474][ T6387] usb 3-1: Failed to submit usb control message: -110 [ 268.219708][ T6387] usb 3-1: unable to send the bmi data to the device: -110 [ 268.227298][ T6387] usb 3-1: unable to get target info from device [ 268.242720][ T6387] usb 3-1: could not get target info (-110) [ 268.255377][ T6387] usb 3-1: could not probe fw (-110) [ 269.346064][ T5893] usb 3-1: USB disconnect, device number 14 [ 270.240546][ T836] usb 2-1: USB disconnect, device number 12 [ 270.573501][ T8577] netlink: 'syz.2.599': attribute type 2 has an invalid length. [ 270.581562][ T8577] netlink: 'syz.2.599': attribute type 8 has an invalid length. [ 270.589539][ T8577] netlink: 132 bytes leftover after parsing attributes in process `syz.2.599'. [ 271.033445][ T29] audit: type=1804 audit(1732877538.929:75): pid=8584 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.601" name="/newroot/132/bus/bus" dev="overlay" ino=731 res=1 errno=0 [ 271.060252][ T8584] Invalid ELF header magic: != ELF [ 272.551778][ T5895] usb 6-1: USB disconnect, device number 7 [ 272.960759][ T8611] fuse: Bad value for 'fd' [ 273.292404][ T836] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 273.452238][ T836] usb 4-1: Using ep0 maxpacket: 32 [ 273.459000][ T836] usb 4-1: config 33 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 273.484831][ T836] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 273.501996][ T836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.511033][ T836] usb 4-1: Product: syz [ 273.521811][ T836] usb 4-1: Manufacturer: syz [ 273.526709][ T836] usb 4-1: SerialNumber: syz [ 274.981612][ T8627] netlink: 'syz.4.614': attribute type 2 has an invalid length. [ 274.989702][ T8627] netlink: 'syz.4.614': attribute type 8 has an invalid length. [ 274.998406][ T8627] netlink: 132 bytes leftover after parsing attributes in process `syz.4.614'. [ 275.803083][ T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 275.972246][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 275.981448][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.000362][ T25] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 276.011869][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 276.029575][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.107993][ T5893] usb 4-1: USB disconnect, device number 11 [ 276.126656][ T25] usb 2-1: config 0 descriptor?? [ 278.819908][ T8676] netlink: 'syz.5.631': attribute type 2 has an invalid length. [ 278.828180][ T8676] netlink: 'syz.5.631': attribute type 8 has an invalid length. [ 278.836107][ T8676] netlink: 132 bytes leftover after parsing attributes in process `syz.5.631'. [ 279.562241][ T8691] netlink: 60 bytes leftover after parsing attributes in process `syz.2.637'. [ 279.568443][ T5895] usb 2-1: USB disconnect, device number 13 [ 279.712274][ T5893] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 279.805722][ T8698] fuse: Bad value for 'fd' [ 279.872228][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 279.904512][ T5893] usb 6-1: config 33 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 279.915913][ T5893] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 280.002099][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.010150][ T5893] usb 6-1: Product: syz [ 280.025682][ T5893] usb 6-1: Manufacturer: syz [ 280.042349][ T5893] usb 6-1: SerialNumber: syz [ 282.102921][ T8718] netlink: 'syz.2.644': attribute type 2 has an invalid length. [ 282.110727][ T8718] netlink: 'syz.2.644': attribute type 8 has an invalid length. [ 282.119204][ T8718] netlink: 132 bytes leftover after parsing attributes in process `syz.2.644'. [ 282.489927][ T5849] usb 6-1: USB disconnect, device number 8 [ 282.964987][ T8742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.652'. [ 282.990472][ T8742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.652'. [ 283.506368][ T8748] fuse: Bad value for 'fd' [ 286.108307][ T8760] netlink: 60 bytes leftover after parsing attributes in process `syz.3.657'. [ 287.464081][ T8770] netlink: 'syz.4.659': attribute type 2 has an invalid length. [ 287.471939][ T8770] netlink: 'syz.4.659': attribute type 8 has an invalid length. [ 287.479764][ T8770] netlink: 132 bytes leftover after parsing attributes in process `syz.4.659'. [ 287.509349][ T8779] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 287.519793][ T8779] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 287.732218][ T836] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 288.126581][ T836] usb 4-1: Using ep0 maxpacket: 32 [ 288.134583][ T836] usb 4-1: config 33 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 288.150430][ T836] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 288.160270][ T836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.170752][ T836] usb 4-1: Product: syz [ 288.175687][ T836] usb 4-1: Manufacturer: syz [ 288.181857][ T836] usb 4-1: SerialNumber: syz [ 290.406896][ T8803] input: syz0 as /devices/virtual/input/input15 [ 290.456878][ T5849] usb 4-1: USB disconnect, device number 12 [ 292.277403][ T8834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.674'. [ 292.289483][ T8834] virtio-fs: tag <(null)> not found [ 293.147619][ T29] audit: type=1326 audit(1732877561.019:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 293.169066][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.247809][ T8848] netlink: 'syz.1.680': attribute type 2 has an invalid length. [ 293.256125][ T8848] netlink: 'syz.1.680': attribute type 8 has an invalid length. [ 293.264132][ T8848] netlink: 132 bytes leftover after parsing attributes in process `syz.1.680'. [ 293.502256][ T29] audit: type=1326 audit(1732877561.039:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 293.722695][ T29] audit: type=1326 audit(1732877561.049:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 293.912546][ T29] audit: type=1326 audit(1732877561.049:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 293.944097][ T29] audit: type=1326 audit(1732877561.049:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 294.036487][ T29] audit: type=1326 audit(1732877561.049:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 294.156738][ T29] audit: type=1326 audit(1732877561.169:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 294.292242][ T29] audit: type=1326 audit(1732877561.169:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 294.782547][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 294.992509][ T29] audit: type=1326 audit(1732877561.269:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 295.068828][ T29] audit: type=1326 audit(1732877561.769:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8843 comm="syz.4.679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 295.292238][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 295.301399][ T25] usb 2-1: config 33 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 295.400411][ T25] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 295.468838][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.859775][ T25] usb 2-1: Product: syz [ 295.878427][ T25] usb 2-1: Manufacturer: syz [ 295.891789][ T25] usb 2-1: SerialNumber: syz [ 299.004737][ T836] usb 2-1: USB disconnect, device number 14 [ 299.055099][ T4855] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 299.582198][ T4855] usb 3-1: Using ep0 maxpacket: 32 [ 300.610066][ T4855] usb 3-1: device descriptor read/all, error -61 [ 300.670404][ T8905] netlink: 'syz.1.692': attribute type 2 has an invalid length. [ 300.678317][ T8905] netlink: 'syz.1.692': attribute type 8 has an invalid length. [ 300.686202][ T8905] netlink: 132 bytes leftover after parsing attributes in process `syz.1.692'. [ 300.891076][ T4855] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 301.296797][ T8909] netlink: 'syz.3.695': attribute type 2 has an invalid length. [ 301.304939][ T8909] netlink: 'syz.3.695': attribute type 8 has an invalid length. [ 301.306142][ T8907] netlink: 60 bytes leftover after parsing attributes in process `syz.5.693'. [ 301.322190][ T8909] netlink: 132 bytes leftover after parsing attributes in process `syz.3.695'. [ 301.384676][ T4855] usb 3-1: device descriptor read/64, error -71 [ 301.511283][ T4855] usb usb3-port1: attempt power cycle [ 302.447542][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.703'. [ 302.458535][ T8936] virtio-fs: tag <(null)> not found [ 303.080404][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 303.795704][ T4855] usb usb3-port1: Cannot enable. Maybe the USB cable is bad? [ 304.192486][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 304.232395][ T25] usb 4-1: config 33 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 304.243528][ T4855] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 304.267665][ T25] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 304.277590][ T4855] usb 3-1: device descriptor read/8, error -71 [ 304.293704][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.361242][ T25] usb 4-1: Product: syz [ 304.399463][ T4855] usb usb3-port1: unable to enumerate USB device [ 304.527149][ T25] usb 4-1: Manufacturer: syz [ 304.547873][ T25] usb 4-1: SerialNumber: syz [ 304.969124][ T8951] netlink: 'syz.5.708': attribute type 2 has an invalid length. [ 304.982113][ T25] usb 4-1: USB disconnect, device number 13 [ 305.032193][ T8951] netlink: 'syz.5.708': attribute type 8 has an invalid length. [ 305.041781][ T8951] netlink: 132 bytes leftover after parsing attributes in process `syz.5.708'. [ 305.318973][ T8959] netlink: 'syz.2.709': attribute type 2 has an invalid length. [ 305.351413][ T8959] netlink: 'syz.2.709': attribute type 8 has an invalid length. [ 306.179186][ T8959] netlink: 132 bytes leftover after parsing attributes in process `syz.2.709'. [ 306.185308][ T8958] netlink: 60 bytes leftover after parsing attributes in process `syz.4.710'. [ 306.644679][ T8976] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 306.654733][ T8976] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 307.960049][ T8987] IPVS: Error joining to the multicast group [ 307.983747][ T8989] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 307.990461][ T8989] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 308.252346][ T5895] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 308.332423][ T836] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 308.442923][ T5895] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.482452][ T836] usb 4-1: device descriptor read/64, error -71 [ 308.660208][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 308.685579][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 308.699268][ T5895] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 308.711479][ T5895] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 308.723462][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.743819][ T5895] usb 2-1: Product: syz [ 308.758812][ T5895] usb 2-1: Manufacturer: syz [ 308.764203][ T5895] usb 2-1: SerialNumber: syz [ 308.770665][ T5895] usb 2-1: config 0 descriptor?? [ 308.779879][ T5895] usb 2-1: ucan: probing device on interface #0 [ 308.786447][ T5895] usb 2-1: ucan: invalid endpoint configuration [ 308.800866][ T5895] usb 2-1: ucan: probe failed; try to update the device firmware [ 308.902361][ T836] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 309.335838][ T836] usb 4-1: device descriptor read/64, error -71 [ 309.461097][ T836] usb usb4-port1: attempt power cycle [ 309.766786][ T5895] usb 2-1: USB disconnect, device number 15 [ 309.822596][ T836] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 309.876438][ T836] usb 4-1: device descriptor read/8, error -71 [ 310.059809][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 310.059827][ T29] audit: type=1326 audit(1732877577.949:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9013 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 310.135456][ T29] audit: type=1326 audit(1732877577.949:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9013 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 310.157075][ T836] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 310.165553][ T29] audit: type=1326 audit(1732877577.949:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9013 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 310.188810][ T836] usb 4-1: device descriptor read/8, error -71 [ 310.196814][ T29] audit: type=1326 audit(1732877577.949:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9013 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 310.222873][ T29] audit: type=1326 audit(1732877577.959:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9013 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 310.245916][ T29] audit: type=1326 audit(1732877577.959:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9013 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4aad7f170 code=0x7ffc0000 [ 310.273288][ T29] audit: type=1326 audit(1732877577.959:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9013 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 310.320383][ T836] usb usb4-port1: unable to enumerate USB device [ 310.507005][ T29] audit: type=1326 audit(1732877577.959:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9013 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 310.531318][ T29] audit: type=1326 audit(1732877577.959:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9013 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 311.374837][ T29] audit: type=1326 audit(1732877578.029:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9013 comm="syz.4.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 312.104193][ T9022] netlink: 60 bytes leftover after parsing attributes in process `syz.1.727'. [ 313.273718][ T9041] virtio-fs: tag <(null)> not found [ 313.621027][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.5.731'. [ 315.336756][ T9059] netlink: 'syz.1.736': attribute type 2 has an invalid length. [ 315.344666][ T9059] netlink: 'syz.1.736': attribute type 8 has an invalid length. [ 315.355956][ T9059] netlink: 132 bytes leftover after parsing attributes in process `syz.1.736'. [ 315.995254][ T9068] netlink: 'syz.3.738': attribute type 2 has an invalid length. [ 316.035647][ T9068] netlink: 'syz.3.738': attribute type 8 has an invalid length. [ 316.072276][ T9068] netlink: 132 bytes leftover after parsing attributes in process `syz.3.738'. [ 316.682306][ T5895] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 317.522146][ T5895] usb 2-1: device descriptor read/64, error -71 [ 317.528991][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.535344][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.762406][ T5895] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 317.924470][ T5895] usb 2-1: device descriptor read/64, error -71 [ 318.056398][ T5895] usb usb2-port1: attempt power cycle [ 318.116331][ T9091] netlink: 60 bytes leftover after parsing attributes in process `syz.5.743'. [ 318.412356][ T5895] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 318.444294][ T5895] usb 2-1: device descriptor read/8, error -71 [ 318.692382][ T5895] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 318.790971][ T5895] usb 2-1: device descriptor read/8, error -71 [ 319.970670][ T5895] usb usb2-port1: unable to enumerate USB device [ 321.690483][ T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 321.748852][ T9129] netlink: 'syz.1.751': attribute type 2 has an invalid length. [ 321.795513][ T9129] netlink: 'syz.1.751': attribute type 8 has an invalid length. [ 321.817545][ T9129] netlink: 132 bytes leftover after parsing attributes in process `syz.1.751'. [ 321.842313][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 321.856464][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.042302][ T8] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.054448][ T8] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 322.064150][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.072587][ T9135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.753'. [ 322.074426][ T8] usb 6-1: config 0 descriptor?? [ 322.088170][ T9135] virtio-fs: tag <(null)> not found [ 324.578344][ T9156] netlink: 60 bytes leftover after parsing attributes in process `syz.4.758'. [ 325.678844][ T9170] infiniband syz2: set down [ 325.698183][ T9170] infiniband syz2: added ipvlan1 [ 325.741501][ T9170] RDS/IB: syz2: added [ 325.748726][ T9170] smc: adding ib device syz2 with port count 1 [ 325.756105][ T9170] smc: ib device syz2 port 1 has pnetid [ 326.297032][ T5893] usb 6-1: USB disconnect, device number 9 [ 326.830667][ T9189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.766'. [ 326.841285][ T9189] virtio-fs: tag <(null)> not found [ 329.372487][ T9206] netlink: 60 bytes leftover after parsing attributes in process `syz.5.772'. [ 329.634445][ T9170] syz.2.761 (9170) used greatest stack depth: 18512 bytes left [ 330.455155][ T836] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 330.743387][ T5895] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 332.345343][ T836] usb 3-1: Using ep0 maxpacket: 32 [ 332.364683][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 332.386943][ T836] usb 3-1: config 33 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 332.407035][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.441236][ T5895] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 332.470935][ T5895] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 332.481560][ T836] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 332.501633][ T836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.509893][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.524371][ T836] usb 3-1: Product: syz [ 332.533710][ T5895] usb 4-1: config 0 descriptor?? [ 332.538809][ T836] usb 3-1: Manufacturer: syz [ 332.546224][ T836] usb 3-1: SerialNumber: syz [ 333.181776][ T9257] netlink: 60 bytes leftover after parsing attributes in process `syz.1.786'. [ 334.529360][ T836] usb 3-1: USB disconnect, device number 19 [ 334.774253][ T9273] fuse: Bad value for 'fd' [ 335.689449][ T8] usb 4-1: USB disconnect, device number 18 [ 337.751304][ T9296] netlink: 'syz.1.796': attribute type 2 has an invalid length. [ 338.542199][ T9296] netlink: 'syz.1.796': attribute type 8 has an invalid length. [ 338.550048][ T9296] netlink: 132 bytes leftover after parsing attributes in process `syz.1.796'. [ 338.904821][ T9313] netlink: 60 bytes leftover after parsing attributes in process `syz.5.801'. [ 338.990791][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 340.502479][ T8] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 340.672338][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 340.992148][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 341.056019][ T8] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 341.063369][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.065845][ T8] usb 6-1: config 0 has no interface number 0 [ 341.098124][ T8] usb 6-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=bf.0a [ 341.342610][ T25] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 341.372410][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 341.372437][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.422189][ T8] usb 6-1: Product: syz [ 341.552228][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.556178][ T8] usb 6-1: Manufacturer: syz [ 341.582730][ T25] usb 5-1: config 0 descriptor?? [ 342.256067][ T8] usb 6-1: SerialNumber: syz [ 342.262811][ T8] usb 6-1: config 0 descriptor?? [ 342.278289][ T8] gspca_main: t613-2.14.0 probing 17a1:0128 [ 342.793467][ T8] gspca_t613: unknown sensor 0000 [ 342.799075][ T8] t613 6-1:0.196: probe with driver t613 failed with error -22 [ 343.153229][ T836] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 343.322559][ T836] usb 4-1: Using ep0 maxpacket: 8 [ 343.365343][ T836] usb 4-1: config 0 has no interfaces? [ 343.419641][ T836] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 343.439295][ T836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 343.449499][ T836] usb 4-1: Product: syz [ 343.453954][ T836] usb 4-1: Manufacturer: syz [ 343.458673][ T836] usb 4-1: SerialNumber: syz [ 343.468129][ T836] usb 4-1: config 0 descriptor?? [ 343.741288][ T9348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.811'. [ 343.789645][ T9350] virtio-fs: tag <(null)> not found [ 344.451675][ T836] usb 6-1: USB disconnect, device number 10 [ 344.710616][ T836] usb 5-1: USB disconnect, device number 15 [ 345.097563][ T9360] omfs: Invalid superblock (0) [ 345.719462][ T5925] usb 4-1: USB disconnect, device number 19 [ 346.682802][ T5893] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 347.130493][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 347.154715][ T5893] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.336907][ T5893] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 347.366555][ T5893] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 347.421050][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.437437][ T5893] usb 6-1: config 0 descriptor?? [ 347.917660][ T9392] netlink: 'syz.3.821': attribute type 2 has an invalid length. [ 347.929856][ T9392] netlink: 'syz.3.821': attribute type 8 has an invalid length. [ 347.939644][ T9392] netlink: 132 bytes leftover after parsing attributes in process `syz.3.821'. [ 348.298228][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.823'. [ 348.308349][ T9398] virtio-fs: tag <(null)> not found [ 349.845200][ T9414] omfs: Invalid superblock (0) [ 350.704414][ T8] usb 6-1: USB disconnect, device number 11 [ 353.273525][ T9437] netlink: 'syz.4.831': attribute type 2 has an invalid length. [ 353.352436][ T9437] netlink: 'syz.4.831': attribute type 8 has an invalid length. [ 353.388899][ T9437] netlink: 132 bytes leftover after parsing attributes in process `syz.4.831'. [ 353.662698][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.5.835'. [ 353.672769][ T9450] virtio-fs: tag <(null)> not found [ 355.252406][ T836] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 355.432752][ T836] usb 2-1: Using ep0 maxpacket: 32 [ 355.460099][ T836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.488861][ T836] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 355.499850][ T836] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 355.510959][ T836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.521683][ T836] usb 2-1: config 0 descriptor?? [ 355.550389][ T9474] bond0: entered allmulticast mode [ 355.845544][ T9481] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 355.915309][ T9481] PKCS7: Only support pkcs7_signedData type [ 356.777433][ T9495] FAULT_INJECTION: forcing a failure. [ 356.777433][ T9495] name failslab, interval 1, probability 0, space 0, times 0 [ 356.790441][ T9495] CPU: 0 UID: 0 PID: 9495 Comm: syz.5.847 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 356.800706][ T9495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 356.810774][ T9495] Call Trace: [ 356.814045][ T9495] [ 356.816977][ T9495] dump_stack_lvl+0x241/0x360 [ 356.821685][ T9495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.826897][ T9495] ? __pfx__printk+0x10/0x10 [ 356.831485][ T9495] ? unwind_get_return_address+0x4d/0x90 [ 356.837121][ T9495] ? arch_stack_walk+0xfd/0x150 [ 356.841977][ T9495] should_fail_ex+0x3b0/0x4e0 [ 356.846658][ T9495] should_failslab+0xac/0x100 [ 356.851413][ T9495] ? radix_tree_node_alloc+0x8b/0x3c0 [ 356.856797][ T9495] kmem_cache_alloc_noprof+0x70/0x380 [ 356.862173][ T9495] radix_tree_node_alloc+0x8b/0x3c0 [ 356.867368][ T9495] idr_get_free+0x296/0xab0 [ 356.871871][ T9495] idr_alloc_u32+0x195/0x330 [ 356.876460][ T9495] ? __pfx_idr_alloc_u32+0x10/0x10 [ 356.881587][ T9495] ? __pfx_lock_acquire+0x10/0x10 [ 356.886621][ T9495] idr_alloc_cyclic+0x106/0x300 [ 356.891470][ T9495] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 356.896831][ T9495] ? __radix_tree_preload+0x71c/0x860 [ 356.902195][ T9495] ? __radix_tree_preload+0x80/0x860 [ 356.907467][ T9495] ? btf_new_fd+0x654/0xd30 [ 356.911958][ T9495] btf_new_fd+0x673/0xd30 [ 356.916287][ T9495] ? __pfx_btf_new_fd+0x10/0x10 [ 356.921133][ T9495] ? bpf_btf_load+0xcf/0x1a0 [ 356.925717][ T9495] __sys_bpf+0x6ef/0x810 [ 356.929946][ T9495] ? __pfx___sys_bpf+0x10/0x10 [ 356.934703][ T9495] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 356.940761][ T9495] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 356.947086][ T9495] ? do_syscall_64+0x100/0x230 [ 356.951858][ T9495] __x64_sys_bpf+0x7c/0x90 [ 356.956272][ T9495] do_syscall_64+0xf3/0x230 [ 356.960760][ T9495] ? clear_bhb_loop+0x35/0x90 [ 356.965426][ T9495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.971309][ T9495] RIP: 0033:0x7fd5aad80809 [ 356.975716][ T9495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.995409][ T9495] RSP: 002b:00007fd5a8bf6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 357.003843][ T9495] RAX: ffffffffffffffda RBX: 00007fd5aaf45fa0 RCX: 00007fd5aad80809 [ 357.011840][ T9495] RDX: 0000000000000020 RSI: 0000000020000140 RDI: 0000000000000012 [ 357.019800][ T9495] RBP: 00007fd5a8bf60a0 R08: 0000000000000000 R09: 0000000000000000 [ 357.027764][ T9495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 357.035740][ T9495] R13: 0000000000000001 R14: 00007fd5aaf45fa0 R15: 00007ffe98914ff8 [ 357.043743][ T9495] [ 358.550174][ T836] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 358.785816][ T836] usb 4-1: Using ep0 maxpacket: 8 [ 358.987695][ T836] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 359.214251][ T836] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 359.223761][ T836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.233909][ T836] usb 4-1: Product: syz [ 359.244049][ T836] usb 4-1: Manufacturer: syz [ 359.249281][ T836] usb 4-1: SerialNumber: syz [ 359.257373][ T836] usb 4-1: config 0 descriptor?? [ 359.287979][ T836] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 359.506784][ T8] usb 2-1: USB disconnect, device number 20 [ 360.432802][ T836] gspca_zc3xx: reg_w_i err -71 [ 360.952184][ T5925] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 361.060982][ T836] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 361.103078][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 361.130874][ T836] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 361.139335][ T5925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.141446][ T836] usb 4-1: USB disconnect, device number 20 [ 361.453668][ T5925] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 361.495667][ T5925] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 361.523778][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.567713][ T5925] usb 6-1: config 0 descriptor?? [ 361.751385][ T836] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 362.680196][ T9561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.867'. [ 362.740841][ T9562] netlink: 60 bytes leftover after parsing attributes in process `syz.4.868'. [ 362.862400][ T5925] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 363.188559][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 363.813993][ T5925] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.824689][ T5925] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.837181][ T5925] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 363.847064][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.858088][ T5925] usb 2-1: Product: syz [ 363.862825][ T5925] usb 2-1: Manufacturer: syz [ 363.867862][ T5925] usb 2-1: SerialNumber: syz [ 364.040444][ T9572] overlay: Unknown parameter 'obj_type' [ 364.105896][ T9553] binder: 9549:9553 ioctl c0189372 200002c0 returned -22 [ 366.292666][ T5925] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 366.309217][ T5925] usb 2-1: USB disconnect, device number 21 [ 366.702818][ T5849] usb 6-1: USB disconnect, device number 12 [ 370.821786][ T9605] netlink: 60 bytes leftover after parsing attributes in process `syz.3.881'. [ 370.942117][ T9642] VFS: could not find a valid V7 on nullb0. [ 372.096265][ T5925] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 372.837272][ T9639] netlink: 80 bytes leftover after parsing attributes in process `syz.2.889'. [ 373.072342][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 373.111202][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.131159][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.151325][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.187896][ T5925] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 373.211228][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.233171][ T5925] usb 5-1: config 0 descriptor?? [ 373.264256][ T9663] fuse: Bad value for 'fd' [ 373.364824][ T9664] netlink: 60 bytes leftover after parsing attributes in process `syz.1.896'. [ 374.777275][ T5925] usbhid 5-1:0.0: can't add hid device: -71 [ 374.789670][ T5925] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 374.854382][ T5925] usb 5-1: USB disconnect, device number 16 [ 375.055677][ T9682] netlink: 60 bytes leftover after parsing attributes in process `syz.4.902'. [ 375.223144][ T5893] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 375.472486][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 375.491117][ T5893] usb 4-1: config 0 has an invalid interface number: 172 but max is 2 [ 375.519269][ T5893] usb 4-1: config 0 has an invalid interface number: 195 but max is 2 [ 375.583704][ T5893] usb 4-1: config 0 has no interface number 1 [ 375.592792][ T5893] usb 4-1: config 0 has no interface number 2 [ 375.667216][ T5893] usb 4-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=47.83 [ 375.712240][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.743928][ T5893] usb 4-1: Product: syz [ 375.760879][ T5893] usb 4-1: Manufacturer: syz [ 375.769813][ T5893] usb 4-1: SerialNumber: syz [ 375.790638][ T5893] usb 4-1: config 0 descriptor?? [ 375.814265][ T5893] usb 4-1: selecting invalid altsetting 1 [ 375.845238][ T5893] usb 4-1: Could not set interface, error -22 [ 376.403096][ T9706] fuse: Bad value for 'fd' [ 377.774789][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 377.787974][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 377.849379][ T9723] ceph: No mds server is up or the cluster is laggy [ 378.350910][ T9729] netlink: 'syz.5.912': attribute type 2 has an invalid length. [ 378.359376][ T9729] netlink: 'syz.5.912': attribute type 8 has an invalid length. [ 378.367414][ T9729] netlink: 132 bytes leftover after parsing attributes in process `syz.5.912'. [ 378.447201][ T5893] usb 4-1: USB disconnect, device number 22 [ 378.835576][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.841897][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.890942][ T9740] netlink: 60 bytes leftover after parsing attributes in process `syz.4.917'. [ 381.972448][ T5849] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 382.048877][ T9754] veth1_to_team: entered promiscuous mode [ 382.056971][ T9754] batadv0: entered promiscuous mode [ 382.063133][ T9754] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 382.074508][ T9754] Cannot create hsr debugfs directory [ 382.156906][ T5849] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 382.174221][ T5849] usb 6-1: New USB device found, idVendor=04d5, idProduct=0001, bcdDevice= 0.00 [ 382.183599][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.435277][ T5893] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 382.511553][ T5849] usb 6-1: config 0 descriptor?? [ 382.558434][ T5849] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 382.592171][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 382.607725][ T5893] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 382.657881][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.760345][ T5893] usb 5-1: config 0 descriptor?? [ 383.558642][ T5893] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 383.657635][ T5893] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 383.669258][ T5893] asix 5-1:0.0: probe with driver asix failed with error -71 [ 383.723327][ T9773] fuse: Bad value for 'fd' [ 383.873786][ T5893] usb 5-1: USB disconnect, device number 17 [ 385.099847][ T25] usb 6-1: USB disconnect, device number 13 [ 385.189930][ T9788] netlink: 60 bytes leftover after parsing attributes in process `syz.3.931'. [ 388.132767][ T5893] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 388.282142][ T5893] usb 4-1: Using ep0 maxpacket: 8 [ 388.292712][ T5893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.327518][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.548225][ T9835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.947'. [ 388.603870][ T5893] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 388.613092][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 388.621329][ T5893] usb 4-1: Product: syz [ 388.625690][ T5893] usb 4-1: Manufacturer: syz [ 388.630383][ T5893] usb 4-1: SerialNumber: syz [ 388.681021][ T5893] usb 4-1: config 0 descriptor?? [ 388.724705][ T9838] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 388.725436][ T5893] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 388.752748][ T5893] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 388.763811][ T5893] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 389.718561][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'. [ 389.822921][ T5893] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 390.400835][ T25] usb 4-1: USB disconnect, device number 23 [ 390.594207][ T5893] usb 6-1: config index 0 descriptor too short (expected 61202, got 18) [ 390.602991][ T5893] usb 6-1: config 0 has an invalid interface number: 124 but max is 0 [ 390.614773][ T5893] usb 6-1: config 0 has no interface number 0 [ 390.633406][ T5893] usb 6-1: New USB device found, idVendor=0403, idProduct=f06a, bcdDevice=30.00 [ 390.643012][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.680469][ T5893] usb 6-1: Product: syz [ 390.711691][ T5893] usb 6-1: Manufacturer: syz [ 390.740323][ T5893] usb 6-1: SerialNumber: syz [ 390.787784][ T5893] usb 6-1: config 0 descriptor?? [ 390.906606][ T9859] netlink: 'syz.1.953': attribute type 2 has an invalid length. [ 390.917843][ T9859] netlink: 'syz.1.953': attribute type 8 has an invalid length. [ 390.926126][ T9859] netlink: 132 bytes leftover after parsing attributes in process `syz.1.953'. [ 391.075591][ T5893] ftdi_sio 6-1:0.124: FTDI USB Serial Device converter detected [ 391.149580][ T5893] usb 6-1: Detected FT2232HP [ 391.198147][ T5893] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 391.250791][ T5893] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 391.327844][ T5893] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 391.348619][ T5893] usb 6-1: USB disconnect, device number 14 [ 391.372557][ T5893] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 391.393113][ T5893] ftdi_sio 6-1:0.124: device disconnected [ 391.612438][ T5925] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 391.903477][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 392.041577][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.103536][ T9871] netlink: 60 bytes leftover after parsing attributes in process `syz.1.960'. [ 392.128404][ T5925] usb 4-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 392.149166][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.164349][ T5925] usb 4-1: config 0 descriptor?? [ 393.308568][ T5925] input: HID 0458:5014 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5014.0007/input/input16 [ 393.488100][ T9865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.512980][ T9865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.686301][ T5925] kye 0003:0458:5014.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5014] on usb-dummy_hcd.3-1/input0 [ 394.242190][ T5925] usb 4-1: USB disconnect, device number 24 [ 395.322547][ T836] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 396.157789][ T836] usb 5-1: Using ep0 maxpacket: 16 [ 396.172365][ T836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.183391][ T836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.195503][ T836] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 396.208511][ T836] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 396.217798][ T836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.259580][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.969'. [ 396.273389][ T9919] virtio-fs: tag <(null)> not found [ 396.395054][ T836] usb 5-1: config 0 descriptor?? [ 396.892854][ T836] usbhid 5-1:0.0: can't add hid device: -71 [ 396.898846][ T836] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 396.975327][ T836] usb 5-1: USB disconnect, device number 18 [ 397.146332][ T9917] netlink: 'syz.2.970': attribute type 2 has an invalid length. [ 397.154191][ T9917] netlink: 'syz.2.970': attribute type 8 has an invalid length. [ 397.161849][ T9917] netlink: 132 bytes leftover after parsing attributes in process `syz.2.970'. [ 398.116688][ T9934] openvswitch: netlink: Actions may not be safe on all matching packets [ 400.289869][ T9962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.307712][ T9962] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 400.692294][ T836] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 400.922360][ T9974] netlink: 'syz.1.988': attribute type 2 has an invalid length. [ 400.931153][ T9974] netlink: 'syz.1.988': attribute type 8 has an invalid length. [ 400.939078][ T9974] netlink: 132 bytes leftover after parsing attributes in process `syz.1.988'. [ 401.137151][ T9977] netlink: 'syz.2.986': attribute type 2 has an invalid length. [ 401.147975][ T9977] netlink: 'syz.2.986': attribute type 8 has an invalid length. [ 401.161647][ T836] usb 6-1: not running at top speed; connect to a high speed hub [ 401.169576][ T9977] netlink: 132 bytes leftover after parsing attributes in process `syz.2.986'. [ 401.182524][ T836] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 401.195614][ T836] usb 6-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.40 [ 401.205073][ T836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.232015][ T836] usb 6-1: Product: 츧腦伕ℽ೜恬渆龝鰥ᴔ襼쏍｝媖ἷ앾⯄힪슅㭱䘆ꈎ౜뛔㳏␱낕淢ֱ爻ꉧ茠冘ꗾ⏟ [ 401.247586][ T836] usb 6-1: Manufacturer: 鄝閧䃅ང꼄戍渉ᝪ韻옅옠徃ₐ㲚㮩㯫孎ꓣἽ禁䊒衦뫚ɳ䄀䇑颜桴◕巒깍겗餹↖Ⓗ傛ീ贊᷂襤䅃ਢὛⶆ燉⡖䘚稏ꤿ湌到 [ 401.288138][ T836] usb 6-1: SerialNumber: 陉㹘偒끔甪䛝쨲뿅鴋惹궬余펝菞ሂ䥅㝷眞轚ᵊ㣾ඬאּ尀껐꬗뜨ﯦ狓玮җ䨺乄㘱鑋ꔍ掋뷿늹퉿눐沧㵄駈孺༂뫳럁 [ 401.292189][ T5925] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 401.317419][ T9968] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 401.492167][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 401.500850][ T5925] usb 4-1: too many configurations: 16, using maximum allowed: 8 [ 401.512826][ T9991] FAULT_INJECTION: forcing a failure. [ 401.512826][ T9991] name failslab, interval 1, probability 0, space 0, times 0 [ 401.527448][ T5925] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 401.535481][ T5925] usb 4-1: can't read configurations, error -61 [ 401.544211][ T9991] CPU: 1 UID: 0 PID: 9991 Comm: syz.1.993 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 401.554478][ T9991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 401.564535][ T9991] Call Trace: [ 401.567820][ T9991] [ 401.570755][ T9991] dump_stack_lvl+0x241/0x360 [ 401.575449][ T9991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.580646][ T9991] ? __pfx__printk+0x10/0x10 [ 401.585240][ T9991] ? fs_reclaim_acquire+0x93/0x130 [ 401.590354][ T9991] ? __pfx___might_resched+0x10/0x10 [ 401.595646][ T9991] should_fail_ex+0x3b0/0x4e0 [ 401.600326][ T9991] should_failslab+0xac/0x100 [ 401.605002][ T9991] __kmalloc_noprof+0xdd/0x4c0 [ 401.609766][ T9991] ? kstrtouint_from_user+0x128/0x190 [ 401.615137][ T9991] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 401.620880][ T9991] tomoyo_realpath_from_path+0xcf/0x5e0 [ 401.626431][ T9991] tomoyo_path_number_perm+0x236/0x860 [ 401.631883][ T9991] ? __lock_acquire+0x1397/0x2100 [ 401.636905][ T9991] ? tomoyo_path_number_perm+0x206/0x860 [ 401.642544][ T9991] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 401.648549][ T9991] ? __fget_files+0x2a/0x410 [ 401.653150][ T9991] ? __fget_files+0x2a/0x410 [ 401.657738][ T9991] security_file_ioctl+0xc6/0x2a0 [ 401.662760][ T9991] __se_sys_ioctl+0x46/0x170 [ 401.667353][ T9991] do_syscall_64+0xf3/0x230 [ 401.671861][ T9991] ? clear_bhb_loop+0x35/0x90 [ 401.676543][ T9991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.682435][ T9991] RIP: 0033:0x7ff4d5780809 [ 401.686849][ T9991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.706456][ T9991] RSP: 002b:00007ff4d35f6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.714877][ T9991] RAX: ffffffffffffffda RBX: 00007ff4d5945fa0 RCX: 00007ff4d5780809 [ 401.722849][ T9991] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 401.730826][ T9991] RBP: 00007ff4d35f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 401.738965][ T9991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.746931][ T9991] R13: 0000000000000000 R14: 00007ff4d5945fa0 R15: 00007ffe4d971b28 [ 401.754908][ T9991] [ 401.757943][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.769534][ T9991] ERROR: Out of memory at tomoyo_realpath_from_path. [ 401.779837][ T836] usbhid 6-1:1.0: can't add hid device: -71 [ 401.786479][ T836] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 401.795811][ T836] usb 6-1: USB disconnect, device number 15 [ 401.932248][ T5925] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 403.355922][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 403.396493][ T5925] usb 4-1: too many configurations: 16, using maximum allowed: 8 [ 403.406523][ T5925] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 403.420567][ T5925] usb 4-1: can't read configurations, error -61 [ 403.430178][ T5925] usb usb4-port1: attempt power cycle [ 404.969165][T10031] netlink: 'syz.4.1001': attribute type 2 has an invalid length. [ 404.977314][T10031] netlink: 'syz.4.1001': attribute type 8 has an invalid length. [ 404.985447][T10031] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1001'. [ 405.695725][T10044] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1005'. [ 405.722613][ T5923] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 406.518773][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 406.682219][ T5849] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 406.702468][ T5923] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 407.662224][ T5923] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 407.673628][ T5849] usb 2-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 407.682950][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.701482][ T5923] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 407.722019][ T5849] usb 2-1: config 0 descriptor?? [ 407.729795][ T5849] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 407.932542][T10042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.953974][T10042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.978177][ T5849] pwc: Failed to set LED on/off time (-71) [ 407.999782][ T5849] pwc: send_video_command error -71 [ 408.032140][ T5849] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 408.059806][ T5923] usb 5-1: config 1 has no interface number 0 [ 408.066069][ T5923] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 408.072333][ T5849] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 408.077015][ T5923] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 408.099261][ T5923] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 408.108566][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.123581][ T5923] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 408.137547][ T5849] usb 2-1: USB disconnect, device number 22 [ 408.405730][ T5923] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 409.000311][ T5849] usb 5-1: USB disconnect, device number 19 [ 409.016407][ T5849] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 409.064669][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 409.064687][ T29] audit: type=1326 audit(1732877676.969:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10062 comm="syz.3.1011" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcdf8180809 code=0x0 [ 409.342242][T10070] rose0: entered allmulticast mode [ 409.349145][T10070] bond0: (slave rose0): Enslaving as an active interface with an up link [ 409.358054][T10068] netlink: 'syz.1.1013': attribute type 1 has an invalid length. [ 409.366694][T10068] netlink: 'syz.1.1013': attribute type 2 has an invalid length. [ 409.815911][T10073] netlink: 'syz.2.1014': attribute type 2 has an invalid length. [ 409.823878][T10073] netlink: 'syz.2.1014': attribute type 8 has an invalid length. [ 409.831720][T10073] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1014'. [ 412.032201][ T29] audit: type=1326 audit(1732877679.929:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10100 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d5780809 code=0x7ffc0000 [ 412.053806][ C0] vkms_vblank_simulate: vblank timer overrun [ 412.084480][ T29] audit: type=1326 audit(1732877679.929:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10100 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d5780809 code=0x7ffc0000 [ 412.106062][ C0] vkms_vblank_simulate: vblank timer overrun [ 412.176113][T10110] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 412.199655][ T29] audit: type=1326 audit(1732877679.979:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10100 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff4d5780809 code=0x7ffc0000 [ 412.221170][ C0] vkms_vblank_simulate: vblank timer overrun [ 412.288418][ T29] audit: type=1326 audit(1732877679.979:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10100 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d5780809 code=0x7ffc0000 [ 412.377628][ T29] audit: type=1326 audit(1732877679.979:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10100 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d5780809 code=0x7ffc0000 [ 412.420618][ T29] audit: type=1326 audit(1732877679.979:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10100 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7ff4d5780809 code=0x7ffc0000 [ 412.494858][ T29] audit: type=1326 audit(1732877679.979:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10100 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d5780809 code=0x7ffc0000 [ 412.518314][ C0] vkms_vblank_simulate: vblank timer overrun [ 412.567107][ T29] audit: type=1326 audit(1732877679.979:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10100 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d5780809 code=0x7ffc0000 [ 412.588674][ C0] vkms_vblank_simulate: vblank timer overrun [ 412.597554][ T29] audit: type=1326 audit(1732877679.979:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10100 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4d5780809 code=0x7ffc0000 [ 412.619089][ C0] vkms_vblank_simulate: vblank timer overrun [ 412.677345][T10119] ======================================================= [ 412.677345][T10119] WARNING: The mand mount option has been deprecated and [ 412.677345][T10119] and is ignored by this kernel. Remove the mand [ 412.677345][T10119] option from the mount to silence this warning. [ 412.677345][T10119] ======================================================= [ 412.712237][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.554626][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 414.560217][T10155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.570537][T10155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.570783][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 414.588862][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 414.609041][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 414.626614][ T5861] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 414.634768][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 414.792232][ T836] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 415.178343][ T836] usb 6-1: config 0 interface 0 has no altsetting 0 [ 415.232917][ T836] usb 6-1: New USB device found, idVendor=0e41, idProduct=4150, bcdDevice=1f.c8 [ 415.318654][ T836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.329763][ T836] usb 6-1: config 0 descriptor?? [ 415.339844][ T836] snd_usb_toneport 6-1:0.0: Line 6 POD Studio UX1 found [ 415.378624][ T5849] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 415.406304][T10163] netlink: 'syz.3.1046': attribute type 2 has an invalid length. [ 415.414227][T10163] netlink: 'syz.3.1046': attribute type 8 has an invalid length. [ 415.421976][T10163] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1046'. [ 415.539634][ T836] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 415.547457][ T836] snd_usb_toneport 6-1:0.0: Line 6 POD Studio UX1 now disconnected [ 415.557180][ T836] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 415.572174][ T5849] usb 5-1: Invalid ep0 maxpacket: 64 [ 415.581116][T10153] chnl_net:caif_netlink_parms(): no params data found [ 415.677076][T10153] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.690874][T10153] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.699367][T10153] bridge_slave_0: entered allmulticast mode [ 415.708429][T10153] bridge_slave_0: entered promiscuous mode [ 415.716729][T10153] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.722544][ T5849] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 415.724199][T10153] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.738754][T10153] bridge_slave_1: entered allmulticast mode [ 415.745811][T10153] bridge_slave_1: entered promiscuous mode [ 415.773356][T10153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.784984][T10153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.826094][T10148] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1042'. [ 415.829145][T10153] team0: Port device team_slave_0 added [ 415.844381][T10153] team0: Port device team_slave_1 added [ 415.861159][T10153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.868346][T10153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.892727][ T5849] usb 5-1: Invalid ep0 maxpacket: 64 [ 415.895168][T10153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.900038][ T5849] usb usb5-port1: attempt power cycle [ 415.913436][T10153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.917094][ T836] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 415.933260][T10153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.959800][T10153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.970647][ T5895] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 415.998805][T10153] hsr_slave_0: entered promiscuous mode [ 416.008509][T10153] hsr_slave_1: entered promiscuous mode [ 416.015931][T10153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.023996][T10153] Cannot create hsr debugfs directory [ 416.085673][ T836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 416.102872][ T836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.113977][ T836] usb 3-1: New USB device found, idVendor=22ed, idProduct=1010, bcdDevice= 0.00 [ 416.123296][ T836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.134569][ T836] usb 3-1: config 0 descriptor?? [ 416.147466][ T5895] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 416.156646][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.165104][ T5895] usb 4-1: Product: syz [ 416.169327][ T5895] usb 4-1: Manufacturer: syz [ 416.174071][ T5895] usb 4-1: SerialNumber: syz [ 416.180299][T10153] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 416.185453][ T5895] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 416.201405][T10153] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 416.204789][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 416.223047][T10153] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 416.234540][T10153] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 416.259963][T10153] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.267991][T10153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.275438][T10153] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.282325][ T5849] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 416.282576][T10153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.309906][ T5849] usb 5-1: Invalid ep0 maxpacket: 64 [ 416.348546][T10153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.368484][ T3511] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.380421][ T3511] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.415804][T10180] usb 6-1: USB disconnect, device number 16 [ 416.427714][T10153] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.461342][ T6360] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.468549][ T6360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.482346][ T5849] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 416.493962][ T6387] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.501116][ T6387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.522592][ T5849] usb 5-1: Invalid ep0 maxpacket: 64 [ 416.528660][ T5849] usb usb5-port1: unable to enumerate USB device [ 416.563453][ T836] hid-generic 0003:22ED:1010.0008: unknown main item tag 0x0 [ 416.582965][ T836] hid-generic 0003:22ED:1010.0008: hidraw0: USB HID v10.00 Device [HID 22ed:1010] on usb-dummy_hcd.2-1/input0 [ 416.672192][ T5861] Bluetooth: hci1: command tx timeout [ 416.843891][ T836] usb 4-1: USB disconnect, device number 29 [ 416.921439][T10180] usb 3-1: USB disconnect, device number 20 [ 417.016647][T10153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.454203][ T4855] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 417.663120][ T4855] usb 6-1: Using ep0 maxpacket: 8 [ 417.738296][ T4855] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.746445][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 417.755743][ T9] ath9k_htc: Failed to initialize the device [ 417.762821][ T836] usb 4-1: ath9k_htc: USB layer deinitialized [ 417.797657][ T4855] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 417.811223][ T4855] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 417.830759][ T4855] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 417.852479][ T4855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 417.860628][ T4855] usb 6-1: Product: syz [ 417.889298][ T4855] usb 6-1: Manufacturer: syz [ 417.900322][ T4855] usb 6-1: SerialNumber: syz [ 417.908202][ T4855] usb 6-1: config 0 descriptor?? [ 417.928767][ T4855] radio-si470x 6-1:0.0: could not find interrupt in endpoint [ 417.945493][ T4855] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 418.102386][ T4855] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 418.105119][T10153] veth0_vlan: entered promiscuous mode [ 418.204582][T10153] veth1_vlan: entered promiscuous mode [ 418.304415][T10153] veth0_macvtap: entered promiscuous mode [ 418.574714][T10153] veth1_macvtap: entered promiscuous mode [ 418.753432][ T5861] Bluetooth: hci1: command tx timeout [ 418.828923][T10153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.860476][T10153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.886406][T10153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.909637][T10153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.943262][T10153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.969767][T10153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.011377][T10153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.034752][T10153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.064431][T10153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.097148][T10153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.120789][T10153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.139251][T10153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.162969][T10153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.184011][T10153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.206158][T10153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.219848][T10153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.230496][T10153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.241679][T10153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.260230][T10153] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.272980][T10153] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.288877][T10153] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.300111][T10153] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.355833][ T4855] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 419.560269][ T4855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 419.599394][ T6360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.606342][T10228] netlink: 'syz.3.1061': attribute type 2 has an invalid length. [ 419.615161][T10228] netlink: 'syz.3.1061': attribute type 8 has an invalid length. [ 419.615346][ T4855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.633450][T10228] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1061'. [ 419.635251][ T6360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.740565][ T4855] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 419.816055][ T4855] usb 3-1: New USB device found, idVendor=045e, idProduct=83da, bcdDevice= 0.2c [ 419.928946][ T4855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.955492][ T4855] usb 3-1: config 0 descriptor?? [ 419.960575][ T5925] usb 6-1: USB disconnect, device number 17 [ 420.133844][T10233] netlink: 'syz.4.1062': attribute type 2 has an invalid length. [ 420.141848][T10233] netlink: 'syz.4.1062': attribute type 8 has an invalid length. [ 420.149833][T10233] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1062'. [ 420.235275][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.303048][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.624371][T10218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.637695][T10218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.851813][ T5861] Bluetooth: hci1: command tx timeout [ 420.901922][T10243] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1065'. [ 420.937638][ T4855] hid-generic 0003:045E:83DA.0009: unknown main item tag 0x0 [ 420.945666][ T4855] hid-generic 0003:045E:83DA.0009: unknown main item tag 0x0 [ 420.986247][ T4855] hid-generic 0003:045E:83DA.0009: unknown main item tag 0x0 [ 421.012816][T10244] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1037'. [ 421.015296][ T4855] hid-generic 0003:045E:83DA.0009: unbalanced collection at end of report description [ 421.045442][ T4855] hid-generic 0003:045E:83DA.0009: probe with driver hid-generic failed with error -22 [ 421.235651][T10253] VFS: could not find a valid V7 on nullb0. [ 421.979275][ T836] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 422.018262][ T5849] usb 3-1: USB disconnect, device number 21 [ 422.062191][ T4855] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 422.142750][ T836] usb 5-1: Using ep0 maxpacket: 8 [ 422.152678][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 422.152696][ T29] audit: type=1107 audit(1732877690.049:162): pid=10259 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 422.174111][ T836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.186354][ T836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.197288][ T836] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 422.210182][ T836] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 422.212244][ T4855] usb 4-1: Using ep0 maxpacket: 32 [ 422.220092][ T836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.234627][ T836] usb 5-1: config 0 descriptor?? [ 422.236122][ T4855] usb 4-1: config 33 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 422.258223][ T4855] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 422.267623][ T4855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.276356][ T4855] usb 4-1: Product: syz [ 422.280709][ T4855] usb 4-1: Manufacturer: syz [ 422.286878][ T4855] usb 4-1: SerialNumber: syz [ 422.312261][ T5925] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 422.463046][ T5925] usb 7-1: Using ep0 maxpacket: 16 [ 422.470038][ T5925] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 422.478393][ T5925] usb 7-1: config 0 has no interface number 0 [ 422.484777][ T5925] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 240, changing to 11 [ 422.496064][ T5925] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 9790, setting to 1024 [ 422.530788][ T5925] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 422.540155][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 422.554933][ T5925] usb 7-1: Product: syz [ 422.560594][ T5925] usb 7-1: SerialNumber: syz [ 422.572914][ T5925] usb 7-1: config 0 descriptor?? [ 422.582368][T10257] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 422.598110][ T5925] cm109 7-1:0.8: invalid payload size 1024, expected 4 [ 422.609370][ T5925] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input18 [ 422.812690][ C1] cm109 7-1:0.8: cm109_urb_irq_callback: urb status -71 [ 422.901151][T10266] netlink: 'syz.2.1073': attribute type 2 has an invalid length. [ 422.909399][T10266] netlink: 'syz.2.1073': attribute type 8 has an invalid length. [ 422.912201][ T5861] Bluetooth: hci1: command tx timeout [ 422.943133][T10266] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1073'. [ 423.068202][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 423.076066][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 423.083766][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 423.090985][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 423.098207][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 423.105408][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 423.112659][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 423.119836][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 423.127033][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 423.134771][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 423.255569][ T5923] usb 7-1: USB disconnect, device number 2 [ 423.255661][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 423.294562][ T5923] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 424.552127][ T836] usbhid 5-1:0.0: can't add hid device: -71 [ 424.614980][ T836] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 424.751119][ T836] usb 5-1: USB disconnect, device number 24 [ 424.814059][ T8] usb 4-1: USB disconnect, device number 30 [ 424.815373][T10275] netlink: 'syz.2.1075': attribute type 2 has an invalid length. [ 424.832349][T10275] netlink: 'syz.2.1075': attribute type 8 has an invalid length. [ 424.840259][T10275] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1075'. [ 425.531871][T10291] delete_channel: no stack [ 427.253973][T10306] netlink: 'syz.5.1085': attribute type 2 has an invalid length. [ 427.261765][T10306] netlink: 'syz.5.1085': attribute type 8 has an invalid length. [ 427.270225][T10306] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1085'. [ 428.380928][ T836] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 428.735374][ T836] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 428.745061][ T836] usb 7-1: config 0 has no interface number 0 [ 428.755404][ T836] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 428.777238][T10329] netlink: 'syz.2.1090': attribute type 2 has an invalid length. [ 428.785442][ T836] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 428.797511][T10329] netlink: 'syz.2.1090': attribute type 8 has an invalid length. [ 428.809156][T10329] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1090'. [ 428.873409][ T836] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 429.063441][ T836] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 429.144573][ T836] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 429.159482][T10336] netlink: 'syz.3.1093': attribute type 1 has an invalid length. [ 429.170929][ T836] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 429.180386][T10336] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1093'. [ 429.204999][ T836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.226777][ T836] usb 7-1: config 0 descriptor?? [ 429.241537][T10314] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 429.258145][ T836] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 430.332804][ T836] usb 7-1: USB disconnect, device number 3 [ 430.345091][ T836] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 431.190614][T10382] FAULT_INJECTION: forcing a failure. [ 431.190614][T10382] name failslab, interval 1, probability 0, space 0, times 0 [ 431.204401][T10382] CPU: 1 UID: 0 PID: 10382 Comm: syz.2.1106 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 431.214856][T10382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 431.224944][T10382] Call Trace: [ 431.228422][T10382] [ 431.231362][T10382] dump_stack_lvl+0x241/0x360 [ 431.236153][T10382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.241372][T10382] ? __pfx__printk+0x10/0x10 [ 431.245983][T10382] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 431.251978][T10382] ? __pfx___might_resched+0x10/0x10 [ 431.257285][T10382] should_fail_ex+0x3b0/0x4e0 [ 431.261990][T10382] should_failslab+0xac/0x100 [ 431.266687][T10382] kmem_cache_alloc_node_noprof+0x77/0x380 [ 431.272515][T10382] ? __alloc_skb+0x1c3/0x440 [ 431.277123][T10382] __alloc_skb+0x1c3/0x440 [ 431.281557][T10382] ? __pfx___alloc_skb+0x10/0x10 [ 431.286502][T10382] ? kasan_check_range+0x18e/0x290 [ 431.291632][T10382] netlink_dump+0x239/0xe10 [ 431.296162][T10382] ? __pfx_netlink_dump+0x10/0x10 [ 431.301219][T10382] ? __asan_memset+0x23/0x50 [ 431.305827][T10382] ? genl_start+0x4ae/0x6d0 [ 431.310354][T10382] __netlink_dump_start+0x5a2/0x790 [ 431.315595][T10382] genl_rcv_msg+0x88c/0xec0 [ 431.320126][T10382] ? __pfx_genl_rcv_msg+0x10/0x10 [ 431.325171][T10382] ? mark_lock+0x9a/0x360 [ 431.329536][T10382] ? __pfx_genl_start+0x10/0x10 [ 431.334409][T10382] ? __pfx_genl_dumpit+0x10/0x10 [ 431.339361][T10382] ? __pfx_genl_done+0x10/0x10 [ 431.344148][T10382] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 431.350505][T10382] ? irqentry_exit+0x63/0x90 [ 431.355104][T10382] ? lockdep_hardirqs_on+0x99/0x150 [ 431.360320][T10382] ? __pfx_batadv_orig_dump+0x10/0x10 [ 431.365736][T10382] netlink_rcv_skb+0x1e3/0x430 [ 431.370521][T10382] ? __pfx_genl_rcv_msg+0x10/0x10 [ 431.375563][T10382] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 431.380874][T10382] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 431.386366][T10382] genl_rcv+0x28/0x40 [ 431.390373][T10382] netlink_unicast+0x7f6/0x990 [ 431.395166][T10382] ? __pfx_netlink_unicast+0x10/0x10 [ 431.400465][T10382] ? __virt_addr_valid+0x183/0x530 [ 431.405595][T10382] ? __check_object_size+0x48e/0x900 [ 431.410896][T10382] netlink_sendmsg+0x8e4/0xcb0 [ 431.415694][T10382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.421002][T10382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.426299][T10382] __sock_sendmsg+0x221/0x270 [ 431.431008][T10382] sock_sendmsg+0x134/0x200 [ 431.435540][T10382] ? __pfx_sock_sendmsg+0x10/0x10 [ 431.440681][T10382] ? __schedule+0x1803/0x4be0 [ 431.445375][T10382] ? do_syscall_64+0xf3/0x230 [ 431.450078][T10382] ? iov_iter_bvec+0x4e/0x180 [ 431.454772][T10382] splice_to_socket+0xa10/0x10b0 [ 431.459748][T10382] ? __pfx_splice_to_socket+0x10/0x10 [ 431.465160][T10382] ? irqentry_exit+0x63/0x90 [ 431.469769][T10382] ? lockdep_hardirqs_on+0x99/0x150 [ 431.475001][T10382] ? splice_direct_to_actor+0x53e/0xc80 [ 431.480563][T10382] ? file_start_write+0x35/0x250 [ 431.485516][T10382] ? __pfx_splice_to_socket+0x10/0x10 [ 431.490901][T10382] direct_splice_actor+0x11b/0x220 [ 431.496034][T10382] splice_direct_to_actor+0x586/0xc80 [ 431.501432][T10382] ? __pfx_direct_splice_actor+0x10/0x10 [ 431.507075][T10382] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 431.512988][T10382] ? do_splice_direct+0x26c/0x3e0 [ 431.518037][T10382] ? __pfx_direct_splice_actor+0x10/0x10 [ 431.523691][T10382] do_splice_direct+0x289/0x3e0 [ 431.528544][T10382] ? __pfx_do_splice_direct+0x10/0x10 [ 431.533911][T10382] ? __fget_files+0x2a/0x410 [ 431.538498][T10382] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 431.544387][T10382] ? bpf_lsm_file_permission+0x9/0x10 [ 431.549757][T10382] ? security_file_permission+0x74/0x280 [ 431.555388][T10382] ? rw_verify_area+0x1c3/0x6f0 [ 431.560241][T10382] do_sendfile+0x564/0x8a0 [ 431.564668][T10382] ? __pfx_do_sendfile+0x10/0x10 [ 431.569610][T10382] ? __fget_files+0x2a/0x410 [ 431.574209][T10382] __se_sys_sendfile64+0x17c/0x1e0 [ 431.579321][T10382] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 431.584954][T10382] ? do_syscall_64+0x100/0x230 [ 431.589716][T10382] ? do_syscall_64+0xb6/0x230 [ 431.594387][T10382] do_syscall_64+0xf3/0x230 [ 431.598887][T10382] ? clear_bhb_loop+0x35/0x90 [ 431.603571][T10382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.609458][T10382] RIP: 0033:0x7f7f88580809 [ 431.613869][T10382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.633563][T10382] RSP: 002b:00007f7f8945e058 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 431.641974][T10382] RAX: ffffffffffffffda RBX: 00007f7f88745fa0 RCX: 00007f7f88580809 [ 431.649946][T10382] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000c [ 431.657914][T10382] RBP: 00007f7f8945e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 431.665881][T10382] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000002 [ 431.673861][T10382] R13: 0000000000000000 R14: 00007f7f88745fa0 R15: 00007ffd871eca48 [ 431.681847][T10382] [ 432.315865][T10392] netlink: 'syz.3.1107': attribute type 2 has an invalid length. [ 432.323846][T10392] netlink: 'syz.3.1107': attribute type 8 has an invalid length. [ 432.331651][T10392] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1107'. [ 433.404273][T10400] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1111'. [ 433.480695][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1111'. [ 433.518518][T10402] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1110'. [ 433.539770][T10390] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 433.812744][T10401] bond0: (slave bond_slave_0): Releasing backup interface [ 435.412396][ T5893] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 435.929984][ T5893] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 435.961689][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.981364][ T5893] usb 6-1: Product: syz [ 435.995415][ T5893] usb 6-1: Manufacturer: syz [ 436.000741][ T5893] usb 6-1: SerialNumber: syz [ 436.016493][ T5893] usb 6-1: config 0 descriptor?? [ 436.351984][ T5893] hso 6-1:0.0: Failed to find BULK IN ep [ 436.363366][ T5893] usb-storage 6-1:0.0: USB Mass Storage device detected [ 437.142268][T10418] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1116'. [ 437.201527][ T5893] usb 6-1: USB disconnect, device number 18 [ 437.444474][T10451] netlink: 'syz.6.1126': attribute type 19 has an invalid length. [ 439.421291][T10472] netlink: 'syz.3.1127': attribute type 2 has an invalid length. [ 439.430256][T10472] netlink: 'syz.3.1127': attribute type 8 has an invalid length. [ 439.438223][T10472] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1127'. [ 440.309493][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.316080][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.944686][T10495] syz.4.1136 (10495) used greatest stack depth: 18488 bytes left [ 442.360552][T10507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1139'. [ 442.370593][T10507] virtio-fs: tag <(null)> not found [ 445.177485][ T5925] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 445.209388][T10506] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1138'. [ 445.342708][T10533] netlink: 'syz.2.1146': attribute type 10 has an invalid length. [ 445.582249][ T5925] usb 7-1: Using ep0 maxpacket: 16 [ 445.590907][ T5925] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.613292][ T5925] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.631865][ T5925] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 445.648294][ T5925] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.223269][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1146'. [ 446.255617][ T5925] usb 7-1: config 0 descriptor?? [ 446.436142][ T5925] pxrc 7-1:0.0: Could not find endpoint [ 446.444473][ T5925] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 446.810012][T10533] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 446.963622][T10540] bond0: (slave bridge0): Releasing backup interface [ 447.002284][ T836] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 447.157186][T10557] netlink: 'syz.3.1149': attribute type 27 has an invalid length. [ 447.165971][T10557] netlink: 'syz.3.1149': attribute type 3 has an invalid length. [ 447.174111][T10557] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1149'. [ 447.187362][ T5925] usb 7-1: USB disconnect, device number 4 [ 447.260372][T10559] program syz.3.1149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 447.269800][ T836] usb 5-1: Using ep0 maxpacket: 16 [ 447.280983][ T836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.292550][ T836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.304710][ T836] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 447.314750][ T836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.344436][ T836] usb 5-1: config 0 descriptor?? [ 448.413717][ T836] corsair 0003:1B1C:1B02.000A: unknown main item tag 0x0 [ 448.420833][ T836] corsair 0003:1B1C:1B02.000A: unknown main item tag 0x0 [ 448.428024][ T836] corsair 0003:1B1C:1B02.000A: unknown main item tag 0x0 [ 448.435321][ T836] corsair 0003:1B1C:1B02.000A: unknown main item tag 0x0 [ 448.442445][ T836] corsair 0003:1B1C:1B02.000A: unknown main item tag 0x0 [ 448.453089][ T836] corsair 0003:1B1C:1B02.000A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 448.471570][ T836] corsair 0003:1B1C:1B02.000A: Read invalid backlight brightness: d3. [ 448.681575][ T5893] usb 5-1: USB disconnect, device number 25 [ 448.872299][T10576] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1154'. [ 448.894868][T10576] virtio-fs: tag <(null)> not found [ 450.461245][T10594] netlink: 'syz.6.1159': attribute type 2 has an invalid length. [ 451.254801][ T836] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 451.393229][T10594] netlink: 'syz.6.1159': attribute type 8 has an invalid length. [ 451.552228][T10594] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1159'. [ 451.872194][ T836] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 451.880518][ T836] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 451.889036][ T836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 451.898237][ T836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 451.908339][ T836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 451.927118][T10606] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 452.111113][T10620] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 452.124676][T10619] IPVS: stopping master sync thread 10620 ... [ 452.178759][ T836] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 452.188156][ T836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.202625][T10619] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1165'. [ 452.230171][ T836] usb 5-1: Manufacturer: 凣 [ 452.238513][ T836] usb 5-1: config 0 descriptor?? [ 452.244106][T10619] sctp: [Deprecated]: syz.5.1165 (pid 10619) Use of struct sctp_assoc_value in delayed_ack socket option. [ 452.244106][T10619] Use struct sctp_sack_info instead [ 452.282422][ T836] hub 5-1:0.0: bad descriptor, ignoring hub [ 452.288448][ T836] hub 5-1:0.0: probe with driver hub failed with error -5 [ 452.307029][ T836] input: 凣 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input19 [ 452.674926][ T8] usb 5-1: USB disconnect, device number 26 [ 452.705218][T10629] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1169'. [ 452.715240][T10629] virtio-fs: tag <(null)> not found [ 453.021358][T10632] omfs: Invalid superblock (0) [ 456.172229][ T29] audit: type=1326 audit(1732877724.069:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10666 comm="syz.4.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 456.333514][ T29] audit: type=1326 audit(1732877724.069:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10666 comm="syz.4.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 456.355436][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.364525][ T29] audit: type=1326 audit(1732877724.069:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10666 comm="syz.4.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 456.392115][ T29] audit: type=1326 audit(1732877724.069:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10666 comm="syz.4.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 458.532261][ T29] audit: type=1326 audit(1732877724.109:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10666 comm="syz.4.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 458.583919][ T29] audit: type=1326 audit(1732877724.109:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10666 comm="syz.4.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 458.633523][T10686] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1180'. [ 458.643600][T10686] virtio-fs: tag <(null)> not found [ 458.733786][ T29] audit: type=1326 audit(1732877724.109:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10666 comm="syz.4.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 458.755381][ C0] vkms_vblank_simulate: vblank timer overrun [ 458.833174][ T29] audit: type=1326 audit(1732877724.109:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10666 comm="syz.4.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 458.884272][ T29] audit: type=1326 audit(1732877724.109:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10666 comm="syz.4.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 458.924109][ T29] audit: type=1326 audit(1732877724.109:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10666 comm="syz.4.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4aad80809 code=0x7ffc0000 [ 460.046192][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 460.060915][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 460.147684][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 460.161430][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 460.987843][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 460.999991][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 461.685598][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 461.685623][ T29] audit: type=1326 audit(1732877729.579:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10728 comm="syz.5.1193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5aad80809 code=0x0 [ 461.714014][ T5849] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 462.513904][T10708] chnl_net:caif_netlink_parms(): no params data found [ 462.754472][T10708] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.761782][T10708] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.770200][T10708] bridge_slave_0: entered allmulticast mode [ 462.780689][T10708] bridge_slave_0: entered promiscuous mode [ 462.791772][T10708] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.799584][T10708] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.833749][T10708] bridge_slave_1: entered allmulticast mode [ 462.840942][T10708] bridge_slave_1: entered promiscuous mode [ 462.862192][ T5849] usb 3-1: Using ep0 maxpacket: 32 [ 462.869170][ T5849] usb 3-1: config 33 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 462.877502][T10746] fuse: Bad value for 'fd' [ 462.912481][ T5849] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 462.921616][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.929782][ T5849] usb 3-1: Product: syz [ 462.934143][ T5849] usb 3-1: Manufacturer: syz [ 462.938799][ T5849] usb 3-1: SerialNumber: syz [ 463.082672][ T54] Bluetooth: hci2: command tx timeout [ 463.099406][T10746] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1196'. [ 463.113907][T10708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.127713][T10753] random: crng reseeded on system resumption [ 463.185274][T10751] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1195'. [ 463.211711][T10751] virtio-fs: tag <(null)> not found [ 463.476734][T10708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.639158][T10708] team0: Port device team_slave_0 added [ 463.648170][T10708] team0: Port device team_slave_1 added [ 463.682480][T10708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.692337][T10708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.718962][T10708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.741569][T10708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.758129][T10708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.794672][T10708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.867648][T10708] hsr_slave_0: entered promiscuous mode [ 463.933520][T10708] hsr_slave_1: entered promiscuous mode [ 464.041285][T10708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.049184][T10708] Cannot create hsr debugfs directory [ 464.421222][T10708] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 464.434445][T10708] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 464.448658][T10708] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 464.458326][T10708] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 464.532980][T10708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.566332][T10708] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.605971][ T5923] usb 3-1: USB disconnect, device number 22 [ 464.697461][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.704694][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.744049][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.751190][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.836340][T10708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 465.160743][ T54] Bluetooth: hci2: command tx timeout [ 465.351131][T10785] netlink: 'syz.6.1204': attribute type 2 has an invalid length. [ 465.359360][T10785] netlink: 'syz.6.1204': attribute type 8 has an invalid length. [ 465.369523][T10785] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1204'. [ 465.597237][ T29] audit: type=1326 audit(1732877733.499:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10766 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5aad80809 code=0x7fc00000 [ 466.032408][ T29] audit: type=1326 audit(1732877733.499:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10766 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd5aad80809 code=0x7fc00000 [ 466.132207][ T29] audit: type=1326 audit(1732877733.499:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10766 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5aad80809 code=0x7fc00000 [ 466.169689][T10708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.178656][ T29] audit: type=1326 audit(1732877733.499:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10766 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5aad80809 code=0x7fc00000 [ 466.202373][ T29] audit: type=1326 audit(1732877733.499:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10766 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5aad80809 code=0x7fc00000 [ 466.320673][ T29] audit: type=1326 audit(1732877733.499:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10766 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5aad80809 code=0x7fc00000 [ 466.331202][T10796] fuse: Bad value for 'fd' [ 466.351590][ T29] audit: type=1326 audit(1732877733.499:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10766 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5aad80809 code=0x7fc00000 [ 466.600831][ T5849] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 466.649559][ T29] audit: type=1326 audit(1732877733.499:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10766 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5aad80809 code=0x7fc00000 [ 466.782081][T10801] netlink: 'syz.6.1207': attribute type 2 has an invalid length. [ 466.790005][T10801] netlink: 'syz.6.1207': attribute type 8 has an invalid length. [ 466.801687][T10801] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1207'. [ 466.962243][ T5849] usb 3-1: Using ep0 maxpacket: 8 [ 466.969249][ T5849] usb 3-1: config 0 has an invalid interface number: 191 but max is 0 [ 466.977690][ T5849] usb 3-1: config 0 has no interface number 0 [ 466.984054][ T5849] usb 3-1: config 0 interface 191 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 466.996202][ T29] audit: type=1326 audit(1732877733.499:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10766 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5aad80809 code=0x7fc00000 [ 467.022170][ T29] audit: type=1326 audit(1732877733.499:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10766 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5aad80809 code=0x7fc00000 [ 467.044134][ T29] audit: type=1326 audit(1732877733.499:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10766 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5aad80809 code=0x7fc00000 [ 467.065941][ T29] audit: type=1326 audit(1732877733.499:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10766 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5aad80809 code=0x7fc00000 [ 467.087483][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.093929][ T29] audit: type=1326 audit(1732877733.499:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10766 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5aad80809 code=0x7fc00000 [ 467.116361][ T29] audit: type=1326 audit(1732877733.499:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10766 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5aad80809 code=0x7fc00000 [ 467.137900][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.144790][ T29] audit: type=1326 audit(1732877733.499:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10766 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5aad80809 code=0x7fc00000 [ 467.166700][ T29] audit: type=1326 audit(1732877733.499:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10766 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5aad80809 code=0x7fc00000 [ 467.188246][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.194427][ T29] audit: type=1326 audit(1732877733.499:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10766 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5aad80809 code=0x7fc00000 [ 467.216729][ T29] audit: type=1326 audit(1732877733.499:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10766 comm="syz.5.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5aad80809 code=0x7fc00000 [ 467.238361][ C0] vkms_vblank_simulate: vblank timer overrun [ 467.242249][ T54] Bluetooth: hci2: command tx timeout [ 467.330070][ T5849] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=b6.36 [ 467.339606][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.352082][ T5849] usb 3-1: Product: syz [ 467.356328][ T5849] usb 3-1: Manufacturer: syz [ 467.360938][ T5849] usb 3-1: SerialNumber: syz [ 467.375299][ T5849] usb 3-1: config 0 descriptor?? [ 467.388792][ T5849] em28xx 3-1:0.191: New device syz syz @ 480 Mbps (0413:6023, interface 191, class 191) [ 467.401919][ T5849] em28xx 3-1:0.191: Video interface 191 found: [ 467.543639][T10808] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1209'. [ 467.554120][T10808] virtio-fs: tag <(null)> not found [ 467.805885][ T5849] em28xx 3-1:0.191: unknown em28xx chip ID (39) [ 468.085767][ T5849] em28xx 3-1:0.191: failed to trigger read from i2c address 0xa0 (error=-5) [ 468.131572][ T5849] em28xx 3-1:0.191: board has no eeprom [ 469.005175][ T5849] em28xx 3-1:0.191: Identified as Leadtek Winfast USB II (card=7) [ 469.013427][ T5849] em28xx 3-1:0.191: analog set to bulk mode. [ 469.020744][ T836] em28xx 3-1:0.191: Registering V4L2 extension [ 469.034917][ T5849] usb 3-1: USB disconnect, device number 23 [ 469.041722][ T5849] em28xx 3-1:0.191: Disconnecting em28xx [ 469.052688][T10708] veth0_vlan: entered promiscuous mode [ 469.320036][T10708] veth1_vlan: entered promiscuous mode [ 469.342857][ T54] Bluetooth: hci2: command tx timeout [ 469.401186][T10708] veth0_macvtap: entered promiscuous mode [ 469.412830][T10708] veth1_macvtap: entered promiscuous mode [ 469.427949][T10708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.438518][T10708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.448421][T10708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.459637][T10708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.470340][T10708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.481361][T10708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.491350][T10708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.501875][T10708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.511785][T10708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.522395][T10708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.533414][T10708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.595489][T10837] pim6reg527: entered allmulticast mode [ 574.622067][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 574.629279][ C1] rcu: 0-...!: (1 GPs behind) idle=cacc/1/0x4000000000000000 softirq=35136/35138 fqs=2 [ 574.640473][ C1] rcu: (detected by 1, t=10502 jiffies, g=32177, q=548 ncpus=2) [ 574.648219][ C1] Sending NMI from CPU 1 to CPUs 0: [ 574.648264][ C0] NMI backtrace for cpu 0 [ 574.648277][ C0] CPU: 0 UID: 0 PID: 10837 Comm: syz.5.1215 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 574.648297][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 574.648308][ C0] RIP: 0010:debug_object_activate+0x438/0x580 [ 574.648339][ C0] Code: 09 00 00 00 00 66 43 c7 44 2e 0d 00 00 43 c6 44 2e 0f 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 c0 00 00 00 0f 85 41 01 00 00 <89> d8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 [ 574.648353][ C0] RSP: 0018:ffffc90000007be0 EFLAGS: 00000046 [ 574.648369][ C0] RAX: e715f4337d369a00 RBX: 0000000000000000 RCX: 0000000000010003 [ 574.648381][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 [ 574.648396][ C0] RBP: ffffc90000007cf8 R08: ffffffff9a69d9eb R09: 1ffffffff34d3b3d [ 574.648408][ C0] R10: dffffc0000000000 R11: fffffbfff34d3b3e R12: ffff888033bba278 [ 574.648421][ C0] R13: 1ffff92000000f84 R14: dffffc0000000000 R15: ffff888033bba268 [ 574.648434][ C0] FS: 00007fd5a8bf66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 574.648449][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.648460][ C0] CR2: 000000110c40a339 CR3: 0000000029c0c000 CR4: 00000000003526f0 [ 574.648474][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 574.648484][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 574.648495][ C0] Call Trace: [ 574.648501][ C0] [ 574.648510][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 574.648532][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 574.648552][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 574.648570][ C0] ? nmi_handle+0x2a/0x5a0 [ 574.648595][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 574.648617][ C0] ? nmi_handle+0x14f/0x5a0 [ 574.648634][ C0] ? nmi_handle+0x2a/0x5a0 [ 574.648652][ C0] ? debug_object_activate+0x438/0x580 [ 574.648674][ C0] ? default_do_nmi+0x63/0x160 [ 574.648694][ C0] ? exc_nmi+0x123/0x1f0 [ 574.648713][ C0] ? end_repeat_nmi+0xf/0x53 [ 574.648737][ C0] ? debug_object_activate+0x438/0x580 [ 574.648760][ C0] ? debug_object_activate+0x438/0x580 [ 574.648784][ C0] ? debug_object_activate+0x438/0x580 [ 574.648807][ C0] [ 574.648812][ C0] [ 574.648821][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 574.648843][ C0] ? advance_sched+0xa02/0xca0 [ 574.648865][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 574.648888][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 574.648913][ C0] enqueue_hrtimer+0x30/0x3c0 [ 574.648935][ C0] __hrtimer_run_queues+0x6cb/0xd30 [ 574.648964][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 574.648984][ C0] ? handle_softirqs+0x7e0/0x9b0 [ 574.649006][ C0] ? read_tsc+0x9/0x20 [ 574.649026][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 574.649047][ C0] hrtimer_interrupt+0x403/0xa40 [ 574.649078][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 574.649098][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 574.649120][ C0] [ 574.649125][ C0] [ 574.649131][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 574.649150][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 574.649174][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 9e ba 29 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 03 10 90 f5 65 8b 05 84 f1 2f 74 85 c0 74 43 48 c7 04 24 0e 36 [ 574.649187][ C0] RSP: 0018:ffffc9000484f920 EFLAGS: 00000206 [ 574.649201][ C0] RAX: e715f4337d369a00 RBX: 1ffff92000909f28 RCX: ffffffff8171934a [ 574.649213][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0ad980 RDI: 0000000000000001 [ 574.649225][ C0] RBP: ffffc9000484f9b0 R08: ffffffff942ee887 R09: 1ffffffff285dd10 [ 574.649237][ C0] R10: dffffc0000000000 R11: fffffbfff285dd11 R12: dffffc0000000000 [ 574.649249][ C0] R13: 1ffff92000909f24 R14: ffffc9000484f940 R15: 0000000000000246 [ 574.649265][ C0] ? mark_lock+0x9a/0x360 [ 574.649286][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 574.649311][ C0] ? read_tsc+0x9/0x20 [ 574.649335][ C0] clock_was_set+0x686/0x810 [ 574.649358][ C0] ? __pfx_clock_was_set+0x10/0x10 [ 574.649377][ C0] ? timekeeping_inject_offset+0x3b7/0x520 [ 574.649398][ C0] ? timekeeping_update_from_shadow+0x308/0x3b0 [ 574.649415][ C0] timekeeping_inject_offset+0x3d2/0x520 [ 574.649434][ C0] ? __pfx_timekeeping_inject_offset+0x10/0x10 [ 574.649450][ C0] ? __pfx_add_device_randomness+0x10/0x10 [ 574.649469][ C0] ? bpf_lsm_capable+0x9/0x10 [ 574.649487][ C0] do_adjtimex+0x5b1/0xb10 [ 574.649505][ C0] ? __pfx_do_adjtimex+0x10/0x10 [ 574.649522][ C0] ? __pfx___might_resched+0x10/0x10 [ 574.649544][ C0] ? __might_fault+0xaa/0x120 [ 574.649564][ C0] ? __pfx_lock_release+0x10/0x10 [ 574.649585][ C0] ? __might_fault+0xc6/0x120 [ 574.649607][ C0] __x64_sys_clock_adjtime+0x1e1/0x290 [ 574.649624][ C0] ? __pfx___x64_sys_clock_adjtime+0x10/0x10 [ 574.649652][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 574.649670][ C0] ? do_syscall_64+0x100/0x230 [ 574.649687][ C0] ? do_syscall_64+0xb6/0x230 [ 574.649704][ C0] do_syscall_64+0xf3/0x230 [ 574.649720][ C0] ? clear_bhb_loop+0x35/0x90 [ 574.649739][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.649757][ C0] RIP: 0033:0x7fd5aad80809 [ 574.649772][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.649785][ C0] RSP: 002b:00007fd5a8bf6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 574.649801][ C0] RAX: ffffffffffffffda RBX: 00007fd5aaf45fa0 RCX: 00007fd5aad80809 [ 574.649813][ C0] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000000 [ 574.649823][ C0] RBP: 00007fd5aadf393e R08: 0000000000000000 R09: 0000000000000000 [ 574.649833][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.649843][ C0] R13: 0000000000000000 R14: 00007fd5aaf45fa0 R15: 00007ffe98914ff8 [ 574.649862][ C0] [ 574.650250][ C1] rcu: rcu_preempt kthread starved for 10498 jiffies! g32177 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 575.241603][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 575.251592][ C1] rcu: RCU grace-period kthread stack dump: [ 575.257483][ C1] task:rcu_preempt state:R running task stack:25104 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 575.269251][ C1] Call Trace: [ 575.272538][ C1] [ 575.275484][ C1] __schedule+0x17fb/0x4be0 [ 575.280036][ C1] ? __pfx___schedule+0x10/0x10 [ 575.284910][ C1] ? __pfx_lock_release+0x10/0x10 [ 575.289956][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 575.296297][ C1] ? schedule+0x90/0x320 [ 575.300560][ C1] schedule+0x14b/0x320 [ 575.304743][ C1] schedule_timeout+0x15a/0x290 [ 575.309612][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 575.315006][ C1] ? __pfx_process_timeout+0x10/0x10 [ 575.320313][ C1] ? prepare_to_swait_event+0x330/0x350 [ 575.325961][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 575.330822][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 575.336230][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 575.342484][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 575.347778][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 575.353693][ C1] ? finish_swait+0xd4/0x1e0 [ 575.358294][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 575.362900][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 575.368117][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 575.374033][ C1] ? __kthread_parkme+0x169/0x1d0 [ 575.379077][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 575.384289][ C1] kthread+0x2f0/0x390 [ 575.388372][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 575.393583][ C1] ? __pfx_kthread+0x10/0x10 [ 575.398188][ C1] ret_from_fork+0x4b/0x80 [ 575.402615][ C1] ? __pfx_kthread+0x10/0x10 [ 575.407218][ C1] ret_from_fork_asm+0x1a/0x30 [ 575.412012][ C1] [ 575.415038][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 575.421368][ C1] CPU: 1 UID: 0 PID: 3466 Comm: kworker/u8:7 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 575.431874][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 575.441941][ C1] Workqueue: events_unbound toggle_allocation_gate [ 575.448461][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x70 [ 575.454626][ C1] Code: 80 d4 03 00 65 8b 15 f0 f2 6d 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 <83> fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc [ 575.474246][ C1] RSP: 0018:ffffc9000d4e76d8 EFLAGS: 00000246 [ 575.480326][ C1] RAX: ffffffff8189fc8b RBX: 1ffff110170c8c65 RCX: ffff8880319e5a00 [ 575.488317][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 575.496292][ C1] RBP: ffffc9000d4e78e0 R08: ffffffff8189fc5a R09: 1ffffffff285dd10 [ 575.504270][ C1] R10: dffffc0000000000 R11: fffffbfff285dd11 R12: dffffc0000000000 [ 575.512337][ C1] R13: ffff8880b8646328 R14: ffff8880b873f940 R15: 0000000000000000 [ 575.520313][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 575.529250][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 575.535850][ C1] CR2: 00007f7f892756c0 CR3: 000000000e738000 CR4: 00000000003526f0 [ 575.543831][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 575.551809][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 575.559790][ C1] Call Trace: [ 575.563095][ C1] [ 575.565946][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 575.572298][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 575.577957][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 575.583787][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 575.590047][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 575.595528][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 575.601191][ C1] ? update_process_times+0x242/0x2f0 [ 575.606575][ C1] ? tick_nohz_handler+0x37c/0x500 [ 575.611709][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 575.617186][ C1] ? __hrtimer_run_queues+0x551/0xd30 [ 575.622590][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 575.628321][ C1] ? handle_softirqs+0x7e0/0x9b0 [ 575.633277][ C1] ? read_tsc+0x9/0x20 [ 575.637360][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 575.643444][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 575.648592][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 575.654769][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 575.660590][ C1] [ 575.663538][ C1] [ 575.666477][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 575.672648][ C1] ? smp_call_function_many_cond+0x19da/0x2c60 [ 575.678908][ C1] ? smp_call_function_many_cond+0x1a0b/0x2c60 [ 575.685077][ C1] ? __sanitizer_cov_trace_pc+0x37/0x70 [ 575.690633][ C1] smp_call_function_many_cond+0x1a0b/0x2c60 [ 575.696641][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 575.701688][ C1] ? __pfx___text_poke+0x10/0x10 [ 575.706637][ C1] ? process_scheduled_works+0x976/0x1840 [ 575.712382][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 575.718722][ C1] ? __pfx___might_resched+0x10/0x10 [ 575.724023][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 575.729939][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 575.734978][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 575.740106][ C1] text_poke_bp_batch+0x352/0xb30 [ 575.745148][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 575.751573][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 575.757746][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 575.763316][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 575.769577][ C1] ? process_scheduled_works+0x976/0x1840 [ 575.775314][ C1] text_poke_finish+0x30/0x50 [ 575.780002][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 575.785996][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 575.791933][ C1] static_key_enable+0x1a/0x20 [ 575.796711][ C1] toggle_allocation_gate+0xbc/0x260 [ 575.802005][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 575.807911][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 575.814264][ C1] process_scheduled_works+0xa66/0x1840 [ 575.819860][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 575.825867][ C1] ? assign_work+0x364/0x3d0 [ 575.830478][ C1] worker_thread+0x870/0xd30 [ 575.835093][ C1] ? __kthread_parkme+0x169/0x1d0 [ 575.840140][ C1] ? __pfx_worker_thread+0x10/0x10 [ 575.845264][ C1] kthread+0x2f0/0x390 [ 575.849342][ C1] ? __pfx_worker_thread+0x10/0x10 [ 575.854462][ C1] ? __pfx_kthread+0x10/0x10 [ 575.859062][ C1] ret_from_fork+0x4b/0x80 [ 575.863486][ C1] ? __pfx_kthread+0x10/0x10 [ 575.868094][ C1] ret_from_fork_asm+0x1a/0x30 [ 575.872890][ C1]