last executing test programs: 12m31.531999653s ago: executing program 4 (id=1432): epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) unshare(0x20050880) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x2, 0x70bd25, 0x25dfdbfe}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) (fail_nth: 2) 12m30.473228372s ago: executing program 4 (id=1434): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547e514b984cc9c89b9b7d4e", 0x0, 0x10, 0x0, 0x6900, 0x0, 0x0, 0x0, 0x4}, 0x50) 12m29.792072545s ago: executing program 4 (id=1436): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)={0x2, {0x7, 0x6, 0x1, 0xf85}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x0, 0x7ff, 0x101) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000100003040000ffffffa10000e0ff0400", @ANYRES32=0x0, @ANYBLOB="00030000011800002c0012800b00010062726964676500001c00028008000500010000000500250000000000050029000000000008000a00", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 12m28.996018168s ago: executing program 4 (id=1439): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) cachestat(r0, &(0x7f0000000040)={0x1f00, 0x1f}, &(0x7f0000000080), 0x0) r1 = syz_clone(0x42100080, &(0x7f0000000040)="35c64d093c", 0x5, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="5d134fb97c0b397c35c1f09f3b1959e17c5f4942af7eede1df8ccf0004a5643c39db6f8941460124a010fcd56aa0f4eda86a5fd1d4204d7436a5da22b6a2c5a6bc13ba6da840896ab17ec60ffb28961b4159b9aa97f64270f6273dcf63594745ef20c2ed104567f7f0b8219505eb4cad743dd9bca2fc9ca63d0f8f924d6f3b572d345e6129e08857b418db2426ba64787020f64ede1c7161eec1e0dddb48e482c1a65c08e2c3fe1834036c2f4920e5f933ac776c8266db4eb8cd39") sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6583) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x18}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000240)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12m27.246499601s ago: executing program 4 (id=1448): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04050714056406040c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x20) 12m26.387056726s ago: executing program 4 (id=1457): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000002200)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x6, 0x0, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@dev}, {@private}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f00000001c0)=0x7, 0x4) 12m25.566950066s ago: executing program 32 (id=1457): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000002200)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x6, 0x0, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@dev}, {@private}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f00000001c0)=0x7, 0x4) 12m19.29982155s ago: executing program 1 (id=1483): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000075000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x100010, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e000085000000820000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x0, 0x9}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x7}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'sit0\x00', @ifru_settings={0x4, 0x0, @te1=0x0}}) ioctl$sock_netdev_private(r7, 0x89f3, &(0x7f0000000000)) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r6, 0x7a4, &(0x7f0000000380)={{@my=0x1}, 0x8199, 0x800000000000000, 0x1}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) 12m17.443271693s ago: executing program 1 (id=1488): syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b22, &(0x7f0000000040)) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x1, 0x1}) 12m14.288840587s ago: executing program 1 (id=1502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r5}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000007000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) 12m13.443953957s ago: executing program 0 (id=1503): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$sock(0xffffffffffffffff, 0x0, 0x40400a0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000080)='/pro\xffZ\x15C\xf2\xb69\x8et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8c\xd9 \xcfpe\xbb{\x06\xd1l.'}, 0x30) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) fstat(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="61124c00000020006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070056060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff6d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded85d3cdd66d9c79f0529d045625b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c700e3806f825f1d0da2a304e06543b56d35235d7897a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664b44e22b72e843e7cf55f394cf75d1cd57c9150bfb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f9574f20e7f513a2a7c5dad90e7d479724d69fa0c0bf97af1231a49ea166f743279d240e2e6f01d8704f313d68b16198be5f6a50e9e0fd20893b2922df566d2622edee5000000000000000000d91c6da09fa7cdbbf16d4780d8c2401c55aff772aced3ff966ff76d796c171f5f7a31e1b14b0c0c712c0fdd2710f37a3d15710d68e7326a7db043c57784bd9bdb047db75"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) 12m13.309117737s ago: executing program 1 (id=1505): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x1}, 0x14}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r5, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000040)={&(0x7f0000002200)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r8}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x54, 0x0, &(0x7f0000000500)=[@request_death={0x400c630e, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12m12.06762452s ago: executing program 0 (id=1508): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="eacab4e41800000000000000000000000200000095000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17, @void, @value}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d", 0x63, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 32) mmap(&(0x7f00006a8000/0x1000)=nil, 0x1000, 0xb635773f07ebbeee, 0x13, 0xffffffffffffffff, 0x3000) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f0000003700)=[{{&(0x7f0000000300)=@alg, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/88, 0x58}, {&(0x7f0000000000)=""/24, 0x18}, {&(0x7f0000003840)=""/228, 0xffffffffffffffc4}, {&(0x7f0000000680)=""/145, 0x91}, {&(0x7f0000000740)=""/110, 0x6e}], 0x5, &(0x7f0000000840)=""/83, 0x53}, 0x7}, {{&(0x7f00000008c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000940)=""/133, 0x85}, {&(0x7f0000000a00)=""/220, 0xdc}, {&(0x7f00000000c0)=""/29, 0x1d}, {&(0x7f0000000380)=""/60, 0x3c}, {&(0x7f0000000500)=""/195, 0xc3}], 0x5, &(0x7f0000000c40)=""/65, 0x41}, 0x6}, {{&(0x7f0000000cc0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d40)=""/131, 0x83}, {&(0x7f0000000600)=""/59, 0x3b}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x3, &(0x7f0000000e40)=""/174, 0xae}, 0x4}, {{&(0x7f0000000f00)=@tipc, 0x80, &(0x7f0000001280)=[{&(0x7f0000000f80)}, {&(0x7f0000000fc0)=""/214, 0xd6}, {&(0x7f00000010c0)=""/16, 0x10}, {&(0x7f0000001100)=""/243, 0xf3}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000001200)=""/106, 0x6a}], 0x6, &(0x7f0000001300)=""/59, 0x3b}, 0x1}, {{&(0x7f0000001340)=@caif=@util, 0x80, &(0x7f0000001440)=[{&(0x7f00000013c0)=""/43, 0x2b}, {&(0x7f0000001400)}, {&(0x7f0000003600)=""/226, 0xe2}, {&(0x7f0000001500)=""/141, 0x8d}], 0x4}, 0x3}], 0x5, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async, rerun: 64) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x0, &(0x7f0000000040)}) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f000001d600)=[{{&(0x7f0000000b00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004bc0)=[{&(0x7f0000003940)="c142e74c49cfb52d820659b85231fbeff683e2115576afb97e08b2e90d68864cc5eaf89b29e926196496bc128e9b9351dd96ef859f121b47892c98c6ab0e8a88a5c1d9f5d8004a675316d32f1167a97a4e5df7e510b5c58eafc4675fe7027efe7aca4c95732d6658ad65b1ab26ec1175ad0968070f1e6bcdeeb137618b09e969278fdcf51f6cd83c", 0x88}, {&(0x7f0000000b80)="23acd761210a37f28fe06af2da7d5fb16c2c", 0x12}, {&(0x7f0000003a00)="ac74f5cb5f4a4b5d69fc999d3b8a41c5bd104a06d72c35274ae3a12fc3c3c539b868fa461dbfb6712533a4627f82401dff95697e6bb425aa5a34099ef33aa35dd648923ea5c9716720f704e551e7c1993aa85a7c3eb3bd9a5683bd551914eb439410298983cd338218e46a03b1a75d80fd32b667f2e6a50c6695112dea6d062751536a10345a55741475e3262cd4352afeba29ef9dd2160d5af066ed3ffb3799f95b379cf8e5d131a9524a6fe7", 0xad}, {&(0x7f0000003ac0)="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", 0x1000}, {&(0x7f0000004ac0)="4fc549971b62d86cad4fdf06bbdd90d63cac6bac5d0e7c8716fb4d9eedbf8d5136b29c37991bc1d917ed3b64bc8054cfd1ae9b01457dafd78ba81b79cb1fdc7100a1a48eb0103ef5318e588c06ccfe6b6722c2a2f85c4125743009d8cb48c5e81011b057a19ffbe225f8694bb177daa3d8a649df0c8a4af1466ec4ff8c40b055b963ba5789096f5375546a83c7303f7b7a33f7d36c3ff63dc33337898f2f09ac77f3ec1acd4b44a5c6b109b79c9e3c3a4921ec5095361b5aff9bf47fcfa4115e00d1123b3ed3a86de64b979819d9e36a840ed3d132cb67ded13ba4b55d00d382cf734099", 0xe4}, {&(0x7f0000000f80)}], 0x6, &(0x7f0000004c40)=[@cred={{0x1c}}], 0x20, 0x4}}, {{&(0x7f0000004c80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004ec0)=[{&(0x7f0000004d00)="19b1d0b915b4e8b61bdd5b", 0xb}, {&(0x7f0000004d40)="6b671f61e70d6bca47a83787faec5818a130aa9982b3195215a9b6d41db90e29b0eda0bca4b9abd83bcdf89f2342f240e85ebaa113f6b7de02ae2e6134b752264a5e9778b20d7f57c57906b45f851dab773ddc4b422b81defa0b907e75bd9ff74a29b348cf1670ad01cae8841c800503558ed2dd990ab82d0c996a73", 0x7c}, {&(0x7f0000004dc0)="32c54d60f40a7db360ef6df431e8439420c36b6c36f27ffb72243fa26c48e24efcf785b95f72ff96464845a8a6d3389b672a722001550cd4bd13ddd3778e48ab599957ca15d69ad90b6d3ac1a107d558a0133e2869eda6baf748ce320f97418b01c05fb1d4c0", 0x66}, {&(0x7f0000004e40)="9ee40c62205b1eeb609fc81aff493ee17cdb269aadbcf9f62090abe7d8e6e66f0b4e47488d1d2083ebc4777bce33917d693857c5b5471a880318ace6e2cacb550298b6596ef273f764d1", 0x4a}], 0x4, 0x0, 0x0, 0x8801}}, {{&(0x7f0000004f00)=@file={0x1, './file0/../file0/file0\x00'}, 0x6e, &(0x7f0000006080)=[{&(0x7f0000004f80)="94f2130069b8d885beba7eb7421619672dffd7373a73a53c1ba780c7510bef13d09c6918cc28a4d4157217a62ac65b5becc23e4265d6f419b87437faf9be0934b2a83dd4440e32132d7ce7fcd0183e4cb00abe23ee488cb09390dfcda70cb09f69961d4f95ccee8c2a26c26ea07126eeb2dd9d4feb1fde69a8044f3da45b60f7f96f73b1599c959709bbb3b2439d98002d79401b01d151a4b9a793a306852b4875dc4a826a6c1af65253286b8afa21fa223edcbebae024c4ed153d5b168c90114e17e4f7b1bdf4c8d1df5968f0a439ff2898d9f8133d903f", 0xd8}, {&(0x7f0000005080)="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", 0x1000}], 0x2, &(0x7f0000006100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r4, r2, r2, r2, r9, r5, r6, r0, 0xffffffffffffffff, r3]}}, @rights={{0x28, 0x1, 0x1, [r8, r2, 0xffffffffffffffff, r9, r0, r4]}}, @cred={{0x1c}}], 0x98, 0x4}}], 0x3, 0x0) (async, rerun: 64) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) (rerun: 64) 12m11.721677011s ago: executing program 0 (id=1511): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0xca2, 0x2, {0xffffffffffffffff}, {}, 0xff, 0x3}) r5 = syz_clone3(&(0x7f0000000500)={0x200080, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000400), {0x23}, &(0x7f0000000440)=""/69, 0x45, &(0x7f00000005c0)=""/245, &(0x7f00000004c0)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) r6 = open(&(0x7f00000006c0)='./file0\x00', 0x494940, 0x4) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(r7, 0x89f0, 0x1000000000000) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r2, &(0x7f0000000700)={r6, r7, 0x8}) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000000ec0), 0x0, 0x20004010) sendto$inet6(r6, &(0x7f0000000340)='0', 0x1, 0x800, &(0x7f00000002c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r8, 0x1) getsockopt$bt_hci(r8, 0x84, 0x6, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000001000000fe8000000000000000000000000000bb78360000000000000200001000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000"], 0xb8}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'wlan0\x00'}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000380)={0x80000, 0x0, [0x7fff, 0x9, 0x100, 0x7, 0xdac5, 0x5, 0x8000000000000000, 0x9]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0a406020"], 0xd) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000800)={[0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000010, 0x2, 0x0, 0x200000000, 0x0, 0x0, 0x1000000000000, 0x0, 0xffffff7ffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12m11.400343473s ago: executing program 1 (id=1512): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000000000040cf1090ea00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000011c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000b00)={0x48, 0x1, r5}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f00000000c0)={0x18, r5, 0x1, 0x0, &(0x7f0000000080)=[{0x0, 0x2}]}) ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000300)={'\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffff4ee15fa}) 12m10.707640895s ago: executing program 0 (id=1514): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007a00000095"], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) 12m10.52454404s ago: executing program 0 (id=1515): syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x4e, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone3(0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1, 0x0, 0x0, 0x182fa73}, 0x0) msgget$private(0x0, 0x0) 12m9.408009358s ago: executing program 1 (id=1517): rt_sigtimedwait(0x0, &(0x7f0000000240), &(0x7f00000002c0)={0x0, 0x3938700}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x1ff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000440)='TPROXY\x00', 0x3) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000480)={r1, 0x0, 0xfffffffffffff000, 0xfffffffff0000000}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000f00)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x188, 0x0, 0x2d8, 0x2d8, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0xd, 0x9, 0x1}}, @common=@ttl={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@empty, @loopback, 0xffffffff, 0xffffff00, 'vcan0\x00', 'rose0\x00', {}, {0xff}, 0x0, 0x0, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x3}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x4}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'ipvlan1\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3ff, 0x7, @ipv4=@loopback, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 12m9.403799431s ago: executing program 0 (id=1518): rt_sigtimedwait(0x0, &(0x7f0000000240), &(0x7f00000002c0)={0x0, 0x3938700}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x1ff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000440)='TPROXY\x00', 0x3) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000480)={r1, 0x0, 0xfffffffffffff000, 0xfffffffff0000000}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000f00)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x188, 0x0, 0x2d8, 0x2d8, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0xd, 0x9, 0x1}}, @common=@ttl={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@empty, @loopback, 0xffffffff, 0xffffff00, 'vcan0\x00', 'rose0\x00', {}, {0xff}, 0x0, 0x0, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x3}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x4}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'ipvlan1\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3ff, 0x7, @ipv4=@loopback, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 11m53.96658959s ago: executing program 33 (id=1518): rt_sigtimedwait(0x0, &(0x7f0000000240), &(0x7f00000002c0)={0x0, 0x3938700}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x1ff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000440)='TPROXY\x00', 0x3) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000480)={r1, 0x0, 0xfffffffffffff000, 0xfffffffff0000000}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000f00)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x188, 0x0, 0x2d8, 0x2d8, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0xd, 0x9, 0x1}}, @common=@ttl={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@empty, @loopback, 0xffffffff, 0xffffff00, 'vcan0\x00', 'rose0\x00', {}, {0xff}, 0x0, 0x0, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x3}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x4}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'ipvlan1\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3ff, 0x7, @ipv4=@loopback, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 11m53.900957848s ago: executing program 34 (id=1517): rt_sigtimedwait(0x0, &(0x7f0000000240), &(0x7f00000002c0)={0x0, 0x3938700}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x1ff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000440)='TPROXY\x00', 0x3) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000480)={r1, 0x0, 0xfffffffffffff000, 0xfffffffff0000000}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000f00)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x188, 0x0, 0x2d8, 0x2d8, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0xd, 0x9, 0x1}}, @common=@ttl={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@empty, @loopback, 0xffffffff, 0xffffff00, 'vcan0\x00', 'rose0\x00', {}, {0xff}, 0x0, 0x0, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x3}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x4}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'ipvlan1\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3ff, 0x7, @ipv4=@loopback, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 11.295873165s ago: executing program 5 (id=4237): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r3, &(0x7f0000001480)=[{&(0x7f0000000140)=""/235, 0xc}], 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000002100000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000, 0x0, @void, @value}, 0x20) 11.114009115s ago: executing program 7 (id=4240): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602001100000e000a000f000000028000001294", 0x2e}, {&(0x7f0000000640)}], 0x2}, 0x0) 9.921747388s ago: executing program 6 (id=4243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1}}], 0x1, 0x16da) add_key(0x0, &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000440)="03a897adf978c108449d29a20bf9f85dcbde0c20f82172b7d579ee97c236877f95cebd4e01e27a5e5b003d888b846da98debbf0304ec70d9489395e0b33a57f720776255591355e0aa740fbfceff307578c44ec89a5a8fdf496ccedf3b2a5b5a22534ed2978ee2a8392e4ef49ce51884239d72eb6547", 0x76, 0xffffffffffffffff) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a0003000000000000000080ffffffffffffff00000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8010000000002100000000000000bb050005002b0000000a0000a874000000fc01000000020000000200000000000000000000000000000800197c"], 0xe0}}, 0x0) 9.531772759s ago: executing program 7 (id=4244): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0xee01, 0x0) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 8.287398066s ago: executing program 7 (id=4248): bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 7.017169656s ago: executing program 7 (id=4249): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x2) syz_usb_connect$hid(0x6, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0xeef, 0x7262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x60, 0x9, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x0, 0xb3, {0x9, 0x21, 0x3, 0x40, 0x1, {0x22, 0x152}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x1, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x60, 0x1, 0x9}}]}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x300, 0x1, 0xe, 0x9, 0x20, 0xc}, 0x187, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000600)=@lang_id={0x4}}, {0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="3003168373b5059f0803ac2c90656cc7540000000001e665d28014736edff019800ac7b8c4d8d5ac5d85711c00000000"]}, {0x17, &(0x7f0000000700)=@string={0x17, 0x3, "dcccd079f881701fd9a1d81ea457fa8e533a20f859"}}, {0x2, &(0x7f0000000740)=@string={0x2}}, {0x95, &(0x7f00000007c0)=@string={0x95, 0x3, "17637f2f397400618821e26b20b5f7b6ddb8d3532f9b3abf7f77ca88d367a12283fb997d6456335b33b8be51fcc9c443ce522b82cdb7fa523069eaac99d5313572a8ca14e4054de97fad078c84accca1c3ae212b561fa9cf73ec46ac4e563c5bb7273bd629659b824301f9397ceb40f9d0cf33cd8773f6ec567e2cc063e96b0f86c541cb5ac227d53e267bbf648314e09b9d3b"}}]}) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000900)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x93a, 0x8002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x190, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x3, 0x40, {0x9, 0x21, 0xc, 0x4, 0x1, {0x22, 0x6c6}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x6, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x0, 0x7f, 0x9}}]}}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x200, 0x2, 0x10, 0x7}, 0x2f, &(0x7f0000000980)={0x5, 0xf, 0x2f, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "af13f97d8edbe467f971711948eb1963"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x62, 0x0, 0x2, 0x4, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x5, 0xf9, 0x1, 0x9}]}, 0x6, [{0x65, &(0x7f0000000a80)=@string={0x65, 0x3, "d9c5c25233042a6c34dfa688a585dbadc7e33d08f77ba3793da309d93f527f56b1fa8e52e0730fcd0416db69da2716be42867b694891a40e9aeee51d714b989859ff6016cbca0011583aea1fdf408ae7df082316b0f76520080c0946343727abec4af8"}}, {0xb, &(0x7f0000000b00)=@string={0xb, 0x3, "24699ebbdcd9c846b9"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x40e}}, {0x52, &(0x7f0000000b80)=@string={0x52, 0x3, "49e84ba9beb5a123dddc19e7dcc501517eb3d00b46504a887863201184b63e50c0d7af15751cbd73675bb1fc2f71d875b1e078332d36b17c6826c72971a7178400fa072133c89590ef2af322b170bb7b"}}, {0xfa, &(0x7f0000000c00)=@string={0xfa, 0x3, "7eb272b47f984800983ac5dae8d5fafac135fc78aa7d91af0908ef29bebab887aa19be4a445328a21e8d0b4f529805d24a076b35e66898e6a4d84b0e40548f3d8a0b08856ad32dfa2ded35c021e689700f3bcbbb9fa6770253b112ba9c3c00ba05e9f260f9b794f8287fe112ae32b11f82820aae487211f90526157c0b2096d65c44b055ce1b9e7417c493dccf95fe4edd2623e275d7bfe6c7876cfe590911423eb289d53f48df30d3f07ac63edd1726f026ae6a1c4e0dc6238a4087e1a2befd1522c4699a6142640f58103e2b8b21932a8ba86e21dec6771cda96f53ecbb0c9855ec20a77a2a27cd2904a7ab34cc6f6692b32154b0e07e3"}}, {0xa, &(0x7f0000000d00)=@string={0xa, 0x3, "46cf7caa571a6d7c"}}]}) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000dc0)) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000000)=r1, 0x4) r2 = gettid() r3 = socket(0x2, 0x5, 0x0) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000040)=""/107, &(0x7f0000000180)=0x6b) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmsg(r1, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x40010102) 6.875139166s ago: executing program 3 (id=4250): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x64, 0x0, 0x0, 0x4100, 0x40000000}, @initr0, @exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 6.710792045s ago: executing program 6 (id=4251): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/mdstat\x00', 0x0, 0x0) read$hiddev(r1, &(0x7f00000000c0)=""/4092, 0xffc) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000040)=""/7, 0x7}], 0x1, 0x0, 0x0) read$hiddev(r1, &(0x7f0000001100)=""/234, 0xea) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000012c0)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = dup3(r2, r3, 0x0) read$sequencer(r4, &(0x7f00000000c0)=""/49, 0x31) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) accept$ax25(r1, &(0x7f0000001200)={{0x3, @bcast}, [@netrom, @remote, @default, @bcast, @netrom, @rose, @rose, @rose]}, &(0x7f00000010c0)=0x48) 6.674854405s ago: executing program 3 (id=4253): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'caif0\x00', {0x2, 0x4e21, @private=0xa010101}}) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x50}}, 0x8000) r3 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r3, 0x0) write$binfmt_register(r1, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0'}, 0x74) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x1, 0x0, {{0x5, 0x4, 0x0, 0xf, 0x14, 0x0, 0x89, 0x0, 0x0, 0x0, @empty, @empty}}}}) 6.449347822s ago: executing program 6 (id=4255): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001000030400000000000000000000000047f190322127cc62ea29cef91514266a0853b47235a067d1c7560758f9c40dca8696ca3169c1ec23251e37a83c141bd7907b53cb795b58e5fe11d3dc506421144ae947e967dd98bd06e10dd26ab134e8e01287bc59fac664d451367c1f9f2729cd95c5ad470e7ca1d03767066788aa95bfcf432d0d", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2], 0x64}}, 0x40000) 6.195652127s ago: executing program 6 (id=4257): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0xd191, 0x10100, 0x0, 0xa4}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x402}}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r7, r6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r6, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = dup(r6) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) write$FUSE_INIT(r11, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x410980}}, 0x50) 5.989775591s ago: executing program 6 (id=4259): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0x2, 0x4) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$sequencer(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="010000007023237ba4a9b679"], 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180100001200"/16], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r7}, 0x10) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000000)=0x1ff) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000540)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.867351466s ago: executing program 5 (id=4260): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r0, &(0x7f0000007f80)=[{{&(0x7f0000000240)=@isdn={0x22, 0x9, 0x9, 0x2c, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)="cd2adeacbd00deda3f91f2fcea59f4db500e41048593b18ae7cd53744e023e9362a96da16b0b5997c989e4f0c1af1e26c17eceedca8ed71f39294352364d39bfa92a353f2a5c4cae68e1ce310078cc59dcd7fab2a65a811730593b6e3c082dca3eccbf346f14696a3f43555fe81ce64bb6f654fa976b35c3492e67e69fea9940dd68c2a59fb3fc", 0x87}, {&(0x7f00000003c0)="b1e80acc723c8d8585d6fd1f3075275a528b9385ac323992ac18278545a5dbce6c58bd863077f83066778f42f838a34f9221812db3ddf1dfa38ef4d0766b81c77be3dcd12389ede1b8ebd645d5e8a560e9ecbc1aaa2f8dd6adbc2dfa47beb0510427e611965281b123a495c9f782a643ce7b3254f58b12e5bae61547a9a53ee12b3bd387bd8b31481a6a9f2c994f919548621814214070437791face894137561d420136", 0xa4}], 0x2, &(0x7f0000000480)=[{0x90, 0xff, 0x6, "4fb6b0ad3a07a43b41966986c79e614fc330321f6627e6544bcbe9995565bc03568d7f8e72e80f0fc3e9b243a21a2ccccf967cc983f22a8980ac6c3c4521ef62e2671de3000cef39e4c04dc5e4a807a26910f6ebb9cb8c85e9eeb6ba48b113d4538dd885ddb2fdd2afe8d39ed7b8038a8f9b5db687ca02a4105c"}], 0x90}}, {{&(0x7f0000000540)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000880)=[{&(0x7f00000005c0)="0eeec2a74d0d594faa5b701c38591e754520417868f717012e3e9a17832f930fac1d5d2ff3dca6c684a5c96b864eea1dcbe4b612c48f78e492daa6eeb4c9c100d0ae9e69e9409bb7a1fd", 0x4a}, {&(0x7f0000000640)="f8c51b399529b795ab4749d0ab4859cd3eb6098ef7ec7c2a89f2e7e43ba8eb42ccef53a01763aedbd387bff9da9c55cc957ed3fae8a8837a535b8162dd1e0025e78785174def95d86ab090baec900593124baac4d9e758b8edb0815bdf812a1495569b3d2a6f6da01ad1d40f2b2c60cbf58c060405ce06e023928643a47edadc0473986cfe0deb59d9b74ab595e401ccaf453a64222a7f45d5cb593261b4acb0790a6aebce30f471c698c827f45389371324c67cac8a5ab358d9ae0c9a4eb170c7e11b0e581c2a8eedf8f39088c332c1d70c1b1377c5f361", 0xd8}, {&(0x7f0000000740)="3dbbc41fed804fc385d378afbb876252f9be377683add430c2a6b2226b8216a85b8b0b0c65440cba3974fd308a6b6d4f9492dccf5bcdc93b86bb5da59a727c6ad3bd8d0144a3838cf23457d668e7a39d16711255a86fc63712506968d6c2e51d117a8bc0fa625f7655a02c76ffada8500d74c2d8e63b2f312b562e1bd0abf16e1ceb35ab70323ee4f9", 0x89}, {&(0x7f0000008200)="df3f8ceb5e443e1178e66a8cf867d73535495b0e8e1a34d795ae742c4fa27047ef93fa7864217f4fc1f7e1dcb5f03ae6d3c6c97b00a8ee6f8ced031e773b265f42afe36cf249e233a38bfd", 0x4b}, {&(0x7f0000008140)="357df0c1da84cf31e5440294b8a6fabe4e5911ebf51ede5f68a6edb252d8960807a036b038c804c85197d7a6097eb17a24e3ae0e276a30fe165efefa405ec2d59dcebd1ec3f3d8e13789216d0be799ecaa059e3f738323f2bb34846740ecca30ac09c1e040193769f089d51d9ae0bc24a3f4ce1ec65fb3ab379a9427449c083e55ef0460fb64daf4a3f244f3e9fedc263fd7b8f3818669ebbc31e432b035e4794978ac5a62c578eb16c3", 0xaa}, {&(0x7f0000000840)="f8bb0e63e0dc75808db0a251e293657c2943c7130d93bfa6495596d43fc04b49ba1b72", 0x23}], 0x6, &(0x7f0000000900)=[{0x90, 0x10a, 0x8, "384d9899df90cadf2dd6d3555acb1a70c46f992b4d0c05fbfcc30842614c1a1edd0ae37f600b9d9cec3c1a75bdaf188988963014a7ffb65fbf949ee3e4ac5c15491caf8dc664c58a9a46ee4b4966f0b996ced654ed9a3ed7023f56e418dac3c0db86dfbf4277c8fa21e03343fa00b8013a834b8f1aa8fb1b4b3ee4"}], 0x90}}, {{&(0x7f00000009c0)=@l2tp6={0xa, 0x0, 0x9, @remote, 0x1, 0x1}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000a40)="b330aa50634ab20ead2842e0dd98a4928d921bc8632df74ea777f8b7683f89bb623024f30916b69a65494e39419bd1ac5669c6540dc4c617f5c119654502e9273ccddbe6d199b9adb8e50c6bb765c4ab6204f840235c6037624bbc30ba48bfc29b0df53b42209cb017361cde4b6ea2a3f8854650a038c75f1bc6c341e20f4b98425db87822981b8654b03a4c458459c63469787b739b1795dc528d797bead297ea8466daa47c10cea0b9622ef3668c09c881a60ca2b9984be89879905ee1f862eaf2e98e44d07012487eab1b9c690fd9403fbccb3249c9d7", 0xd8}, {&(0x7f0000000b40)="2d4df7eeaba63bef0222ae79ba", 0xd}, {&(0x7f0000000b80)="4f6a710164669d72c425aa3836d74ba06d3870ec35956406785e847cb4335f8a867e74b9568622bb9538603bbe666d8dc290809b390423001fd11561a6e60304c4ce8495759ba42224948124eaf9dc2a099d689ae8dc2523faa8364382c87fa6668aa66db42e0133bc3a805c4acf571fc05fd58be2745561a8f91f455572c547f0b5aa1e39f0ae22b242ce440124abdfb732a9d2", 0x94}, {&(0x7f0000000c40)="756b71e3b8cd38b1f8ec5241897d3bb327a7dd6a1c57177b5e450093bda611dff908233e69776fb709a2beb2e5a47e430c23f913e40e6104abe90fd9fa02288d06695244a4219975f4c9ab7992417bbdc9bb1ba3c56d14991cdf0c023b264d44b7c8f6510b396c272c0a57db6d0cb1d98bef5fc9ef7791671fd700a1160c6654d283ba481b1a84a7b5b754207afbf91b11bd028483a9a2a11f045c98e56e3677dc263f76b62d3b69a754dc4005bb3a1834efcc02f308f8bb043e481a13b01e96c06d62783c3c94fe8a3f3117aba944a55ae9965aaaee2c3653b798", 0xdb}, {&(0x7f0000000d40)="5f7f657e6f492d848caf34b865f2631dfe3db98fa048c6bd4d2b2e877a700d4f5de4b73968dd338e4f5eed7b88deff3b9b78e9393289d87ae79df7fbd6797d56582285c0618a2202648233c309acf6c19f510256695aa0b434a0725161814df39ab9862dc0a92b1a2b3f50198bb2d17f49792d3e31b15f6ae5da57031443bcf0faf3e061d6a1f775a861dea139d236a59fc8b753e08c2e5ec6e5a216dd", 0x9d}, {&(0x7f0000000e00)="728b7d08ff2e6aa8dabf5a85630a6a97b272f78b1c0531b493140597b0b60a6de58760e12d14cd0254bd3e881435d8242a02aa25ef1796c33a69b79f4387e640aa3c3be26986e4429e47267540ac80b123e2bc6aa6995087dc0237fb2c66ac02306760ef21f6955c549ac4164818fe93a2827f845084aad46b060595fedeb4b357cb29883fae3fc9c152f0fd0b10e6a8f380094cba8cc72d6a7a678ae423c6dc61bf729170760ca1f98e0481a1432eac588cdebf40bdd4f25a83439299958e6a1600fafc75afb014797b9027fc80ba3ea1bd6cc8fc05ab4fc50af782c35e88f55bbee49f22ea7f981cddc7a9459dc0f7a421", 0xf2}, {&(0x7f0000000f00)="f3f80ff106a6df34f679478498d1db9149039e15d08861c8c39344357faf761be33dcbac85a86a5e5e0c9324b8dc49cfc027ca2988deb01042f8862aae437b84f282e19b709d4a8a4f5c2568e1caa077fb5002eb67740e7bb194981a362b9bab58fe75aabd1e271757b9e606f56676b3c2b3d42f91b98b1ba762a61e41246274a5a037fe739f21ae2d86340a7ea8bffb06b2e63e125be2d5049aefcc8bbbf58a32b73784c59138171ec1043fb3ed6cc5f7c85c2cf5ba99a190cd0b81bba909eb1a6439d84d459ce3fbe08d", 0xcb}, {&(0x7f0000001000)="4e096e4261a18e3ba985", 0xa}], 0x8, &(0x7f00000010c0)=[{0x20, 0x0, 0x100, "9809cf182259f6d4a62f93"}, {0x108, 0x115, 0x45, "1728fb64663513d89d23c3f4191929e1fc48eef65c9124cab08b2ab8189987ee3b3632fe373e8822eae316b62efebbad6f2047fe680bfc9e341c30de560c52f70efb2f2b0ca5808cf3f4cd33f27a0b101a1d7c672a427911d71dc1f5fbee2034ab2ca65917e88d7d51fe41a30623973e2bc91600d8350542823182ee6b59fe81837ce47647e9342869422614472e7f22517741a7f4f43cfcb3578751b037b4a398d691caed4ff5b29e6abc45442b076e247c6e74557eab3bd1e598d0e4e7fc1d9405157ea55e63f0e6004e92fd72e2abca008076b9d39c638db5e28e820fab425ad3b443ad68a7233a873ab00a58d158cf4983052d5030a5"}], 0x128}}, {{&(0x7f0000001200)=@x25, 0x80, &(0x7f0000001500)=[{&(0x7f0000001280)="6d5cfd75153d6aa3289ffbe3e0d5688d349c5ef5399479e1516f4ca5f8e922ba1de050dfd4b763451a95ce19948364eae64778b3cfaf1e6a9e5458eb6a84a975cb96c473027f6292a4253914f1f119f87ac747e96d2ad191b4c4d71315c8db0e", 0x60}, {&(0x7f0000001300)="30e95846cd97097994c0fbc6f430446ee870ef46149186d886d30e5a0f06e1ad5dde6fa1e03e15132436485143a3ae9fcfc7e539ac3aad3ff572fba744f922426592878603b3adba9202551b932793b554c3042e4ffe545f7b", 0x59}, {&(0x7f0000001380)="7d7ae41f139dd253289e7fd6da4e72d056b9eaad3718ee0c8e62", 0x1a}, {&(0x7f00000013c0)="97441f70a0b8742d73bd12bb3c169901b86a3d61859a81c0c38af93e21297d9614c7e20101bb8af3e169bc2ddd83f17686986aa829c988f230afdffa703421", 0x3f}, {&(0x7f0000001400)="c183f16d74ac3ad67875c2df9b0aaf47f291fc7e82df1b7d3c60f9a73d9ea92fc8a056e48820b6da48283ab677b1e13e2ad908c64576f982e1242cc8937d0c0819155ce1fc5ac10a4e9485cede00f51211ca04711c7dfa9ae47085afa20083fb31f8f36882f70a5ad35dcbc0849433432ea10d6eedaafc138cd2be9421651b4443806eaf54205cbad906df2d274a068c1823ab2365bc7769a548f8af9bdac6ad82c1ec3f7c43d214026ff20578f6ba836c307d531924561f03d51709d8d55cd1efb5cc00d3e260813132a2aa233161e8bc611894adb1292615990ced4e4ea55041cf2b72e9767361f4", 0xe9}], 0x5, &(0x7f0000001580)=[{0x1010, 0x10a, 0x5, "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"}, {0x10, 0x115, 0x5}, {0xe0, 0x29, 0xfff, "d1e719fba13de248abf4f1e5b50e562a7cf2601aa1f7e7041f070c0e5044709590be91dbe691b4023073dc2d8cbe3ec93b292e2fa21cda1def14e2e7755940a0d238e9e187071b4db6b0e038f48a0985702063207b3337982377144c1a8a2f565771530ce746a08c68178addffb62ba0a27ea05873f776ba087fcb4605481d84725066e4fe479862af9c0b26cf6512eaabb92c0d6c2952cfe75425f40edf7f00fd806b029a8b28c4a241b46b598d340772431550d190c2af5354f94f0a0b95bf66c69d42a852ab852a4ff73bac"}, {0x30, 0x111, 0x0, "16d468b7fff5f857488b1868f398eaecfdcbf8dea910ab5f116758f8ef84"}, {0x1010, 0x88, 0xfffffff0, "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"}, {0x108, 0x10d, 0x964, "c8a35a6613b4facf56de60020f73ce2b060a32df98533e5973066cc1a70a6f1387700392ed68862103944e90f32bebf1d01c8fc629ed5662b0d40149cf9781860234be02aa988ea4d6226ef9ceccd786382896be5ac105388211a8b1b343d3832e43417416c671dced8d836ac201c8b57804a2dacfa934608f4291b8561fd36963cc730b2e82376315410327cfad5e2896c1f9dfe267c497fab1024feea8ee31ba50122a0fbb4c382e1036bcadf4f1caeda1744060f2a4a3ea0361d0d8b191907da7a7f8611ea87e57064c420d00e4be572706465008e1e708448d2a05c232c6c106051bb4ebc37b4dbb4cb88e3a83e76ff9"}, {0x78, 0x107, 0x2a3d031b, "6b606e1fe4c6d2310e44d2952027668fbbca0fa786a67b20abe044ac1b87096c098348d746e4a19721eedd0181a82f2eb54c760f8c3549d43c9e2d82c2f7c3c3e540a52c78b8e50155e9de5f5155819db9e4e96101aabb51a5a8987550c4cb7fd888865ae3b4f48f"}, {0xd0, 0x10e, 0x4, "a436f6c1c381767bcc2cd20a667c90c87fefe8c19f4c4decf244631aa25237dc8964eec0387365611976ed5218a00bbd47908d21ebdcce6f4a393981396ca95bbac040c2c96be102d6068b9cffdd75e298c5521b1b0b55feb63e343796dc0dc063d3c6ea439c4a206080fddecd18ad75d51a8cea995f2262af04a098917080620acad7dbb92d685d1f66dbbcb8f4d994a14bce715c95029a1e31a828a87a627ac2c7d0a6d89f9abfa01968254e1379612b9bf9af45e980dde032480be05e"}], 0x2390}}, {{&(0x7f0000003940)=@pppoe={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 'team_slave_0\x00'}}, 0x80, &(0x7f0000004d40)=[{&(0x7f00000039c0)="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", 0x1000}, {&(0x7f00000049c0)="b41426b28a6c6bcedc56cffb7380654f9188cfe6c81fc9567eb4d11b949a9cb42d03ef336480c5a0fd240d559efa7ca274aaef28154d235b6116bb573aba657e16f0ebd5ce0014926119657e7d905161d1098de244c52d276ea9b52505279db2ef2d63cbd7cd5068083c3df039efa1eab2f299c59977fcdd413e9821a2fe52597e44c85e2c7c5177eb53e337239e636ff67c26f77b3ccef25b479bda75b65781f0d33c88a49494e2577e6545c2142d432ea9dc54c29524e8b16608b62657cc34ae6b853d6c2159a23e7be9311b1bab", 0xcf}, {&(0x7f0000004ac0)="65bf01c03308bf634e1d60fbe876b96465793be3c5ccef3ea3616b6beb6b782ddff7bba01359ce8302890a264146eaf4a966aeacf8604c790b590a6f4f9a66ee6b394940513c00ca08bc5fc9e40118edf15e459341aa1b59c38743ed01d40827d172a97e8fde04a4e9f98425181cf91ba2612c70837c5b9ee8edb00e8f5f56f76e0a973c6bedb08fd777cda5ffd67734235a3371a5008b9219695284a91622e700bd83ada38d88fac9916995ebe6d31956e88007bb970fc70236329250", 0xbd}, {&(0x7f0000004bc0)="9ea0285e99b58ed1c23030a05e4dcf0d261e125332b0383d049532ba45e6206845303cb9492edc07550bd6dac7497b2cad56d495f0995ef0e4b014d47e6e2c5d122380f8dd", 0x45}, {0x0}], 0x5, &(0x7f0000008380)=ANY=[@ANYBLOB="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"], 0x1f8}}, {{&(0x7f0000004fc0)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x312c0eede644fabf}, 0x80, &(0x7f0000006040)=[{&(0x7f0000005040)}], 0x1, &(0x7f0000006080)}}], 0x6, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe174}}, './file0\x00'}) r2 = socket$inet6(0xa, 0xa, 0xaba) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)) r3 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000008300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x0, 0x2, 0x0, 0xf, 0x0, 0xb7f0, [{}, {0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6, 0x0, 0x0, @void, @value}, 0x28) getsockopt$inet_pktinfo(r3, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000480)=0x2) socket$inet6(0xa, 0x3, 0xff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x400) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@multicast1, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x3, 0x3, 0x0, 0x8000000, 0x0, 0x7}}, {{@in=@broadcast, 0x4, 0x2b}, 0x0, @in=@empty, 0x3501, 0x0, 0x2, 0x1}}, 0xe8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0)=0xfffffffc, 0x4) 4.819801453s ago: executing program 2 (id=4262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @local}}}]}]}, 0xa4}}, 0x21) 4.659326808s ago: executing program 2 (id=4263): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000200000000000000071122b000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 4.657675505s ago: executing program 5 (id=4264): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x21, 0x1f000008}, 0x0) 4.556286807s ago: executing program 2 (id=4265): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x3, 0x0, 0x6, 0x1, 0x0, 0x40}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.501463506s ago: executing program 5 (id=4266): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x29, 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndpcmc(&(0x7f0000002600), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r3, 0xc0844123, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000017000000bca30000000000002403000040feffff6b0af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000061140800000000001d430000000000007a0a00fe0000001f6114100000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4fffe2158dfb8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb3fa3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5973acc706db6b861b8c10a7cbd0b723906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff6194732827a58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f1000000006eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f3a6da2819d2f9e77c7c64affa555ec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f37382000000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23577949a50f2d0455cf799b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115553f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5f07918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa61071799e1acb3928143be1c1023a375e528285544d0064b91f00f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aa3f999ce700ffe794e27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac987fd637c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fd52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812fc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a2271d96c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795d35f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7eddd12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b0200780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca78fa04d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f00000000000000005bae7859839f856e7a397913eec7977f6231c5f11849b3deabc60c5ccf240d16924eb760a969813be02a229c674045b88915518a17b683268f10358e1c0b20cfc2bd105e5e1db7fed951b8faf126267bb38b8d356f63d3433d3dee643503a8ba4968adf6673f720c474ecf324d989235f1b52aacfe52e4519af87b7e1594728d6d6fff1248e72d5b1b1b692b2b732f0f2ac0714079fd7bf97bf2b5687d1db91daa5210d09ebe66d00ff4f35143be01585e629d408f2d00a0a290db76adc5f57e160b2c188bb1ecc4e7d2948788e4f9c1bcaf91dac53a2f525f7385d5d82728b5217908748f4c22b6d79700"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.41985086s ago: executing program 2 (id=4267): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x700, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {"0e000000000000000000000004000001"}}}}, 0x118) 4.252280609s ago: executing program 2 (id=4268): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$inet(0x2, 0x3, 0x6) syz_open_dev$vim2m(0x0, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x24d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xb0, 0x7f, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x533e, 0x7, 0x1, {0x22, 0x27}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x9, 0x5}}}}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0xfc, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x16}}}}, [@NL80211_ATTR_IE={0xc3, 0x2a, [@ssid={0x0, 0x1f, @random="ab7cfeea671563e8678ace39dbc729d04a1ef2996129a241156692b20d574d"}, @random_vendor={0xdd, 0x5e, "57b92f690d16076c0162e1e28de7a0db4507bc8f81e5ebe9ce4d481f10ac859ae4c903ad4f1828ea1bd33716e525a3616a2652130c48590883d66d1d2b97bea5a9a9e45c765efbfad3912b08dc0c0becac6fb5e3301735dcb8afec4eedbf"}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @link_id={0x65, 0x12}, @dsss={0x3, 0x1, 0x78}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x4, 0x0, {0xa, 0xe, 0x0, 0x6, 0x0, 0x1, 0x1, 0x2}, 0xc00, 0x9, 0x5}}, @cf={0x4, 0x6, {0x8, 0x7, 0x5, 0xeef}}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x44000}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) 4.158809192s ago: executing program 3 (id=4269): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0xd191, 0x10100, 0x0, 0xa4}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x402}}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r7, r6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r6, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = dup(r6) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) write$FUSE_INIT(r11, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x410980}}, 0x50) 3.451900958s ago: executing program 7 (id=4270): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000003300012800c0001006d6163766c616e0020000280080001001000000008000300000000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r2], 0x58}}, 0x0) 3.439343231s ago: executing program 3 (id=4271): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073115c000000000085100008faffffff850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rseq(&(0x7f0000000200), 0x20, 0x4000000000, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc6fffffd) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = epoll_create(0x8) r3 = dup(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x80) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000003c0)=0x10000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000340)={&(0x7f0000000480), 0x0}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = getpid() syz_pidfd_open(r6, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x58a4, 0x1}, 0x18, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = dup(r9) ioctl$KVM_SET_MSRS(r10, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r7, @ANYRES64]) 3.438114093s ago: executing program 5 (id=4272): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0xc0103, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') getdents64(r5, 0x0, 0x0) getdents(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x80000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf020000ffb703000008000000b7040000000000008500000003000070fbc55496048200850000002a0900009500"/87], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.107099647s ago: executing program 3 (id=4273): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000180)='timerslack_ns\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0xf5, 0x1}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000280)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xd, 'veth1_to_batadv\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffeffa, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 1.989611898s ago: executing program 5 (id=4274): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xb3, 0x93, 0x81, 0x8, 0xb48, 0x1003, 0x7b54, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xb7, 0xfd, 0x27}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x8b9, 0x80981) r2 = memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='htcp\x00', 0x5) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_init() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000c40)=[{{&(0x7f0000000180)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000a00)=""/103, 0x5d}], 0x394, &(0x7f0000000500)=""/244, 0xf4}, 0x1}, {{&(0x7f0000000600)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000680)=""/92, 0x5c}, {&(0x7f0000000700)=""/3, 0x3}, {&(0x7f0000000740)=""/160, 0xa0}, {&(0x7f0000000800)=""/245, 0xf5}, {&(0x7f0000000940)=""/112, 0x70}, {&(0x7f0000002180)=""/237, 0xed}, {&(0x7f0000000ac0)=""/155, 0x9b}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/141, 0xd7}], 0x9}, 0x8}], 0x2, 0x10102, 0x0) getdents(r5, &(0x7f0000001fc0)=""/182, 0xb6) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) 720.209689ms ago: executing program 6 (id=4276): r0 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r0, 0x2000000) 567.308218ms ago: executing program 3 (id=4277): syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x4e, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone3(0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x6000000000000000) msgget$private(0x0, 0x0) 0s ago: executing program 2 (id=4278): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000728000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000320000/0x2000)=nil) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) (async) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x52, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x36, 0x19, 0x20, 0x3344, 0x22f0, 0xef4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x97, 0x0, 0x0, 0x78, 0x7d, 0xe, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x1}, [@mixer_unit={0x7, 0x24, 0x4, 0x0, 0x5, "8e91"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x306, 0x5, 0x4, 0x5}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x57, "c7cc"}, @processing_unit={0x9, 0x24, 0x7, 0x4, 0x3, 0x5, '#~'}, @mixer_unit={0x5, 0x24, 0x4, 0x4, 0xd9}]}]}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): [ 861.647560][T15342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.203315][T15342] usb 6-1: config 0 descriptor?? [ 862.211241][T15342] gspca_main: spca505-2.14.0 probing 0733:0430 [ 863.025827][T15342] gspca_spca505: reg write: error -110 [ 863.057844][T15342] spca505 6-1:0.0: probe with driver spca505 failed with error -5 [ 863.142645][T16861] FAULT_INJECTION: forcing a failure. [ 863.142645][T16861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.147732][T15342] usb 6-1: USB disconnect, device number 30 [ 863.156553][T16861] CPU: 0 UID: 0 PID: 16861 Comm: syz.6.3104 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 863.172091][T16861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 863.182134][T16861] Call Trace: [ 863.185396][T16861] [ 863.188311][T16861] dump_stack_lvl+0x241/0x360 [ 863.192980][T16861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 863.198164][T16861] ? __pfx__printk+0x10/0x10 [ 863.202751][T16861] ? kasan_check_range+0x3a/0x290 [ 863.207763][T16861] should_fail_ex+0x3b0/0x4e0 [ 863.212445][T16861] _copy_to_user+0x31/0xb0 [ 863.216873][T16861] simple_read_from_buffer+0xca/0x150 [ 863.222255][T16861] proc_fail_nth_read+0x1e9/0x250 [ 863.227281][T16861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 863.232816][T16861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 863.238359][T16861] ? vfs_read+0x161/0xb70 [ 863.242682][T16861] ? vfs_read+0x1e4/0xb70 [ 863.247015][T16861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 863.252560][T16861] vfs_read+0x1fc/0xb70 [ 863.256717][T16861] ? __pfx___mutex_lock+0x10/0x10 [ 863.261736][T16861] ? __pfx_vfs_read+0x10/0x10 [ 863.266412][T16861] ? __fget_files+0x2a/0x410 [ 863.271011][T16861] ? __fget_files+0x395/0x410 [ 863.275693][T16861] ? __fget_files+0x2a/0x410 [ 863.280286][T16861] ksys_read+0x18f/0x2b0 [ 863.284529][T16861] ? __pfx_ksys_read+0x10/0x10 [ 863.289289][T16861] ? do_syscall_64+0x100/0x230 [ 863.294049][T16861] ? do_syscall_64+0xb6/0x230 [ 863.298718][T16861] do_syscall_64+0xf3/0x230 [ 863.303214][T16861] ? clear_bhb_loop+0x35/0x90 [ 863.307885][T16861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.313777][T16861] RIP: 0033:0x7f710d77d25c [ 863.318186][T16861] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 863.337782][T16861] RSP: 002b:00007f710e4f1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 863.346191][T16861] RAX: ffffffffffffffda RBX: 00007f710d936080 RCX: 00007f710d77d25c [ 863.354159][T16861] RDX: 000000000000000f RSI: 00007f710e4f10a0 RDI: 0000000000000006 [ 863.362153][T16861] RBP: 00007f710e4f1090 R08: 0000000000000000 R09: 0000000000000000 [ 863.370126][T16861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.378092][T16861] R13: 0000000000000000 R14: 00007f710d936080 R15: 00007fff60735078 [ 863.386073][T16861] [ 863.389159][ C0] vkms_vblank_simulate: vblank timer overrun [ 863.897920][T16864] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3108'. [ 867.920685][T16891] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3113'. [ 868.355401][T16910] xt_CT: You must specify a L4 protocol and not use inversions on it [ 870.342604][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.482355][ T5918] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 870.676300][ T5918] usb 6-1: too many configurations: 60, using maximum allowed: 8 [ 870.701821][ T5918] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 870.750349][ T5918] usb 6-1: can't read configurations, error -22 [ 870.922387][ T5918] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 871.105760][ T5918] usb 6-1: too many configurations: 60, using maximum allowed: 8 [ 871.135236][ T5918] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 871.218690][ T5918] usb 6-1: can't read configurations, error -22 [ 871.335525][ T5918] usb usb6-port1: attempt power cycle [ 871.782240][ T5918] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 871.803140][ T5918] usb 6-1: too many configurations: 60, using maximum allowed: 8 [ 871.814790][ T5918] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 871.822976][ T5918] usb 6-1: can't read configurations, error -22 [ 871.953549][ T5918] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 872.002116][T15342] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 872.049407][ T5918] usb 6-1: too many configurations: 60, using maximum allowed: 8 [ 872.083389][ T5918] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 872.111818][ T5918] usb 6-1: can't read configurations, error -22 [ 872.141683][ T5918] usb usb6-port1: unable to enumerate USB device [ 872.170275][T15342] usb 3-1: Using ep0 maxpacket: 8 [ 872.182118][T15342] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.222088][T15342] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 71, using maximum allowed: 30 [ 872.248801][T15342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 872.276134][T15342] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 71 [ 872.344528][T16956] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3137'. [ 872.381361][T15342] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 872.401916][T15342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.554257][T15342] usb 3-1: config 0 descriptor?? [ 872.764471][T16944] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3133'. [ 874.256590][T16984] binder: 16974:16984 ioctl 4018620d 0 returned -22 [ 875.426876][T16991] xt_CT: You must specify a L4 protocol and not use inversions on it [ 875.806773][T16992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3148'. [ 876.522954][T15342] usb 3-1: string descriptor 0 read error: -71 [ 876.723210][T15342] usb 3-1: USB disconnect, device number 61 [ 876.733518][T17010] serio: Serial port ttynull [ 877.398120][T17020] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3157'. [ 879.633679][T17024] netlink: 'syz.5.3160': attribute type 23 has an invalid length. [ 879.641503][T17024] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3160'. [ 881.176458][T17066] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3170'. [ 881.922300][T17076] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3171'. [ 881.932395][T17076] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3171'. [ 882.112251][ T29] audit: type=1326 audit(1732482111.416:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17086 comm="syz.3.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064177e819 code=0x7ffc0000 [ 882.134426][ T29] audit: type=1326 audit(1732482111.416:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17086 comm="syz.3.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064177e819 code=0x7ffc0000 [ 882.155961][ C0] vkms_vblank_simulate: vblank timer overrun [ 882.181210][ T29] audit: type=1326 audit(1732482111.416:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17086 comm="syz.3.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f064177e819 code=0x7ffc0000 [ 882.204598][ T29] audit: type=1326 audit(1732482111.416:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17086 comm="syz.3.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064177e819 code=0x7ffc0000 [ 882.226555][ T29] audit: type=1326 audit(1732482111.416:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17086 comm="syz.3.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064177e819 code=0x7ffc0000 [ 882.248405][ T29] audit: type=1326 audit(1732482111.416:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17086 comm="syz.3.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f064177e819 code=0x7ffc0000 [ 882.269852][ C0] vkms_vblank_simulate: vblank timer overrun [ 882.282072][ T29] audit: type=1326 audit(1732482111.416:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17086 comm="syz.3.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064177e819 code=0x7ffc0000 [ 882.303588][ C0] vkms_vblank_simulate: vblank timer overrun [ 882.312218][ T29] audit: type=1326 audit(1732482111.416:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17086 comm="syz.3.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064177e819 code=0x7ffc0000 [ 882.333896][ T29] audit: type=1326 audit(1732482111.416:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17086 comm="syz.3.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f064177e819 code=0x7ffc0000 [ 882.355311][ C0] vkms_vblank_simulate: vblank timer overrun [ 882.362058][ T29] audit: type=1326 audit(1732482111.416:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17086 comm="syz.3.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064177e819 code=0x7ffc0000 [ 883.240419][T16294] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 883.332016][T17092] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3179'. [ 883.560336][T17106] ipt_rpfilter: unknown options [ 884.963412][T17130] binder: BINDER_SET_CONTEXT_MGR already set [ 885.144044][T17130] binder: 17129:17130 ioctl 4018620d 20000040 returned -16 [ 886.287791][T17147] netlink: 'syz.7.3194': attribute type 11 has an invalid length. [ 886.296273][T17147] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3194'. [ 886.580416][T17155] Invalid logical block size (768) [ 886.753498][T17168] xt_CT: You must specify a L4 protocol and not use inversions on it [ 888.492166][T13379] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 888.653881][T13379] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 888.715589][T13379] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 888.747991][T13379] usb 3-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 888.757923][T13379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.797580][T13379] usb 3-1: config 0 descriptor?? [ 888.854430][T13379] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 888.918127][T13379] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 888.961820][T17192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 888.965016][T13981] udevd[13981]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 889.031536][T17192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.058493][T17192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.083541][T17192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.100114][T17192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.134064][ T5887] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 889.154979][T17192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.190741][T17192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.242402][T17197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3212'. [ 889.261136][T17192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.282047][T17192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.295150][T17192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.379110][T17192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.477004][T17202] binder: BINDER_SET_CONTEXT_MGR already set [ 889.483134][T17202] binder: 17173:17202 ioctl 4018620d 20000040 returned -16 [ 889.493570][T17202] x_tables: duplicate underflow at hook 4 [ 889.630855][T17192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.914024][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.932046][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.941818][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 890.002089][ T5887] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 890.011163][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.044277][ T5887] usb 6-1: config 0 descriptor?? [ 890.308635][T17210] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3214'. [ 890.612797][ T5887] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 890.622146][ T5887] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 890.649111][ T5887] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 890.701579][ T5887] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 890.719775][ T5887] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 890.746174][ T5887] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 890.754895][ T5887] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 890.765657][ T5887] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 890.779578][ T5887] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 890.794957][ T5887] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 890.811035][ T5887] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 890.835736][T17218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3217'. [ 890.847035][ T5887] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 890.858504][ T5887] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 890.946531][T17220] "syz.6.3218" (17220) uses obsolete ecb(arc4) skcipher [ 891.306315][T15342] usb 3-1: USB disconnect, device number 62 [ 892.425587][T15342] usb 6-1: USB disconnect, device number 35 [ 892.588008][T17247] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3226'. [ 892.617809][T17247] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3226'. [ 892.784799][T17250] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3227'. [ 893.639109][T17260] xt_CT: You must specify a L4 protocol and not use inversions on it [ 894.067971][T17262] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3230'. [ 896.202055][ T5918] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 897.132078][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 897.144380][ T5918] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.172564][ T5918] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.321305][ T5918] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 897.350911][ T5918] usb 4-1: config 0 interface 0 has no altsetting 0 [ 897.373449][ T5918] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 897.386589][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.399843][ T5918] usb 4-1: config 0 descriptor?? [ 898.447789][ T5918] hid-generic 0003:045E:05DA.001E: ignoring exceeding usage max [ 898.456716][ T5918] hid-generic 0003:045E:05DA.001E: unknown main item tag 0x0 [ 898.464325][ T5918] hid-generic 0003:045E:05DA.001E: unknown main item tag 0x0 [ 898.471736][ T5918] hid-generic 0003:045E:05DA.001E: unknown main item tag 0x0 [ 898.479590][ T5918] hid-generic 0003:045E:05DA.001E: unknown main item tag 0x0 [ 898.487389][ T5918] hid-generic 0003:045E:05DA.001E: unknown main item tag 0x0 [ 898.819248][ T5918] hid-generic 0003:045E:05DA.001E: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.3-1/input0 [ 898.842214][ T5918] usb 4-1: USB disconnect, device number 53 [ 898.878432][T17313] netlink: 'syz.6.3245': attribute type 1 has an invalid length. [ 900.272705][T17313] bond1: entered promiscuous mode [ 900.600260][T17323] Can't find ip_set type has [ 900.849381][T17317] team0: Port device team_slave_1 removed [ 900.989416][T17332] Cannot find del_set index 1 as target [ 901.072592][T17317] bond1: (slave team_slave_1): making interface the new active one [ 901.588291][T17317] team_slave_1: entered promiscuous mode [ 901.603684][T17317] bond1: (slave team_slave_1): Enslaving as an active interface with an up link [ 901.641042][T17342] tc_dump_action: action bad kind [ 901.709898][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 901.709914][ T29] audit: type=1107 audit(1732482131.096:319): pid=17344 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='O' [ 901.862418][ T5918] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 902.032197][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 902.046852][ T5918] usb 4-1: config 0 has too many interfaces: 225, using maximum allowed: 32 [ 902.055832][ T5918] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 225 [ 902.072080][T15342] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 902.094305][ T5918] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=7d.78 [ 902.109937][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 902.129914][ T5918] usb 4-1: Product: syz [ 902.135710][ T5918] usb 4-1: Manufacturer: syz [ 902.140337][ T5918] usb 4-1: SerialNumber: syz [ 902.155074][ T5918] usb 4-1: config 0 descriptor?? [ 902.244828][T15342] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.266140][T15342] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.295651][T15342] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 902.336145][T15342] usb 7-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 902.369568][T15342] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.401720][ T5944] usb 4-1: USB disconnect, device number 54 [ 902.419170][T15342] usb 7-1: config 0 descriptor?? [ 902.622657][ T5918] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 902.785407][ T5918] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 902.794826][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.814344][ T5918] usb 6-1: config 0 descriptor?? [ 902.822978][ T5918] cp210x 6-1:0.0: cp210x converter detected [ 902.845348][T15342] betop 0003:11C2:2208.001F: unknown main item tag 0x0 [ 902.852816][T15342] betop 0003:11C2:2208.001F: unknown main item tag 0x0 [ 902.859738][T15342] betop 0003:11C2:2208.001F: unknown main item tag 0x0 [ 902.866768][T15342] betop 0003:11C2:2208.001F: unknown main item tag 0x0 [ 902.873789][T15342] betop 0003:11C2:2208.001F: unknown main item tag 0x0 [ 902.890230][T15342] betop 0003:11C2:2208.001F: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.6-1/input0 [ 902.902144][T15342] betop 0003:11C2:2208.001F: no inputs found [ 903.164909][ T5918] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 903.173443][ T5918] cp210x 6-1:0.0: querying part number failed [ 903.771169][ T5918] usb 6-1: cp210x converter now attached to ttyUSB0 [ 904.856705][ T5918] usb 7-1: USB disconnect, device number 23 [ 905.100110][T17319] Bluetooth: hci6: unexpected event for opcode 0x0407 [ 905.459987][ T8] usb 6-1: USB disconnect, device number 36 [ 905.475853][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 905.497124][ T8] cp210x 6-1:0.0: device disconnected [ 906.083930][T17413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3274'. [ 906.912635][T17418] xt_CT: You must specify a L4 protocol and not use inversions on it [ 908.230362][T17432] cifs: Unknown parameter 'mode' [ 908.533677][T17435] netlink: 'syz.5.3279': attribute type 3 has an invalid length. [ 908.541436][T17435] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3279'. [ 909.176727][T17319] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 909.185476][T17319] Bluetooth: hci6: Injecting HCI hardware error event [ 909.195296][T17319] Bluetooth: hci6: hardware error 0x00 [ 910.279022][T17482] FAULT_INJECTION: forcing a failure. [ 910.279022][T17482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 910.311478][T17482] CPU: 1 UID: 0 PID: 17482 Comm: syz.5.3294 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 910.321942][T17482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 910.332017][T17482] Call Trace: [ 910.335306][T17482] [ 910.338249][T17482] dump_stack_lvl+0x241/0x360 [ 910.342954][T17482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 910.348176][T17482] ? __pfx__printk+0x10/0x10 [ 910.352795][T17482] ? __pfx_lock_release+0x10/0x10 [ 910.357847][T17482] should_fail_ex+0x3b0/0x4e0 [ 910.362554][T17482] _copy_from_user+0x2f/0xc0 [ 910.367198][T17482] copy_msghdr_from_user+0xae/0x680 [ 910.372431][T17482] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 910.378257][T17482] ? __fget_files+0x2a/0x410 [ 910.382871][T17482] ? __fget_files+0x2a/0x410 [ 910.387488][T17482] __sys_sendmsg+0x209/0x350 [ 910.392100][T17482] ? __pfx_lock_release+0x10/0x10 [ 910.397151][T17482] ? __pfx___sys_sendmsg+0x10/0x10 [ 910.402292][T17482] ? __pfx_vfs_write+0x10/0x10 [ 910.407105][T17482] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 910.413462][T17482] ? do_syscall_64+0x100/0x230 [ 910.418246][T17482] ? do_syscall_64+0xb6/0x230 [ 910.422944][T17482] do_syscall_64+0xf3/0x230 [ 910.427462][T17482] ? clear_bhb_loop+0x35/0x90 [ 910.432163][T17482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.438081][T17482] RIP: 0033:0x7f813b17e819 [ 910.442519][T17482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 910.462145][T17482] RSP: 002b:00007f813bfea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 910.470584][T17482] RAX: ffffffffffffffda RBX: 00007f813b335fa0 RCX: 00007f813b17e819 [ 910.478573][T17482] RDX: 0000000000000800 RSI: 00000000200003c0 RDI: 0000000000000005 [ 910.486561][T17482] RBP: 00007f813bfea090 R08: 0000000000000000 R09: 0000000000000000 [ 910.494547][T17482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.502535][T17482] R13: 0000000000000000 R14: 00007f813b335fa0 R15: 00007fff1e5a2288 [ 910.510538][T17482] [ 911.469805][T17319] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 911.796930][T17510] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3300'. [ 912.173175][T17520] netlink: 'syz.3.3304': attribute type 10 has an invalid length. [ 912.193056][T17520] team0: Device dummy0 is up. Set it down before adding it as a team port [ 913.458357][T17547] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3312'. [ 914.048108][T17567] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3320'. [ 914.360501][T17575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3321'. [ 915.118294][ T6022] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 915.378408][T17582] xt_CT: You must specify a L4 protocol and not use inversions on it [ 916.625681][T17604] serio: Serial port ttynull [ 916.741876][T17610] netlink: 'syz.2.3332': attribute type 3 has an invalid length. [ 916.749781][T17610] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3332'. [ 917.079744][T17616] netlink: 'syz.3.3334': attribute type 23 has an invalid length. [ 917.087802][T17616] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3334'. [ 917.541893][ T5888] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 917.733994][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.744557][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 917.780337][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 917.799728][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 917.814141][T17628] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 917.820671][T17628] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 917.829553][ T5888] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 917.934138][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.092944][ T5888] usb 3-1: config 0 descriptor?? [ 918.095058][T17628] vhci_hcd vhci_hcd.0: Device attached [ 918.108122][ T5888] appletouch 3-1:0.0: Could not find int-in endpoint [ 918.114988][ T5888] appletouch 3-1:0.0: probe with driver appletouch failed with error -5 [ 918.139640][ T5888] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 918.163504][T17631] vhci_hcd: connection closed [ 918.165052][ T9226] vhci_hcd: stop threads [ 918.174922][ T9226] vhci_hcd: release socket [ 918.180063][ T9226] vhci_hcd: disconnect device [ 918.306635][T17613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.316429][T17613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.328564][T17613] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 918.340684][T17613] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 918.348632][T17613] gretap1: entered promiscuous mode [ 918.354449][T17613] gretap1: entered allmulticast mode [ 918.370069][ T5918] usb 3-1: USB disconnect, device number 63 [ 919.435968][T17650] xt_CT: You must specify a L4 protocol and not use inversions on it [ 922.175244][ T8] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 922.541721][T15342] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 922.703634][T15342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.715000][T15342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.748186][T15342] usb 4-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 922.769514][T15342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.793977][ T8] usb 6-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 922.822519][T15342] usb 4-1: config 0 descriptor?? [ 922.855403][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 922.891079][ T8] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 922.900617][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 922.919293][ T8] usb 6-1: SerialNumber: syz [ 923.143609][ T8] usb 6-1: 0:2 : does not exist [ 923.256197][T15342] wacom 0003:056A:0027.0020: unknown main item tag 0x0 [ 923.273776][T15342] wacom 0003:056A:0027.0020: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 923.304564][T15342] wacom 0003:056A:0027.0020: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.3-1/input0 [ 923.337100][T15342] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0027.0020/input/input48 [ 923.498626][T17695] xt_CT: You must specify a L4 protocol and not use inversions on it [ 923.608769][T17665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 924.075226][ T8] usb 6-1: USB disconnect, device number 38 [ 924.104667][T15342] usb 4-1: USB disconnect, device number 55 [ 924.433107][T13981] udevd[13981]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 925.461463][T17714] cifs: Unknown parameter 'mode' [ 927.202354][T17729] xt_CT: You must specify a L4 protocol and not use inversions on it [ 927.460914][T17319] Bluetooth: hci5: unexpected event 0x09 length: 4 > 3 [ 927.794117][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 927.853068][T17742] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3372'. [ 927.902201][T17742] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3372'. [ 927.911543][T17742] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3372'. [ 927.932562][T17742] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3372'. [ 927.979452][T17750] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3374'. [ 928.115970][T17757] FAULT_INJECTION: forcing a failure. [ 928.115970][T17757] name failslab, interval 1, probability 0, space 0, times 0 [ 928.144637][T17757] CPU: 1 UID: 0 PID: 17757 Comm: syz.7.3376 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 928.155133][T17757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 928.165212][T17757] Call Trace: [ 928.168504][T17757] [ 928.171449][T17757] dump_stack_lvl+0x241/0x360 [ 928.176148][T17757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 928.181368][T17757] ? __pfx__printk+0x10/0x10 [ 928.185972][T17757] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 928.191958][T17757] ? __pfx___might_resched+0x10/0x10 [ 928.197252][T17757] should_fail_ex+0x3b0/0x4e0 [ 928.201934][T17757] should_failslab+0xac/0x100 [ 928.206610][T17757] ? __alloc_skb+0x1c3/0x440 [ 928.211195][T17757] kmem_cache_alloc_node_noprof+0x71/0x320 [ 928.216999][T17757] __alloc_skb+0x1c3/0x440 [ 928.221413][T17757] ? __pfx___alloc_skb+0x10/0x10 [ 928.226345][T17757] ? netlink_autobind+0xd6/0x2f0 [ 928.231280][T17757] ? netlink_autobind+0x2b0/0x2f0 [ 928.236304][T17757] netlink_sendmsg+0x638/0xcb0 [ 928.241071][T17757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 928.246358][T17757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 928.251635][T17757] __sock_sendmsg+0x221/0x270 [ 928.256315][T17757] ____sys_sendmsg+0x52a/0x7e0 [ 928.261078][T17757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 928.266359][T17757] ? __fget_files+0x2a/0x410 [ 928.270954][T17757] ? __fget_files+0x2a/0x410 [ 928.275561][T17757] __sys_sendmsg+0x269/0x350 [ 928.280157][T17757] ? __pfx_lock_release+0x10/0x10 [ 928.285188][T17757] ? __pfx___sys_sendmsg+0x10/0x10 [ 928.290305][T17757] ? __pfx_vfs_write+0x10/0x10 [ 928.295087][T17757] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 928.301409][T17757] ? do_syscall_64+0x100/0x230 [ 928.306172][T17757] ? do_syscall_64+0xb6/0x230 [ 928.310841][T17757] do_syscall_64+0xf3/0x230 [ 928.315340][T17757] ? clear_bhb_loop+0x35/0x90 [ 928.320014][T17757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.325906][T17757] RIP: 0033:0x7fd41297e819 [ 928.330314][T17757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 928.349914][T17757] RSP: 002b:00007fd4137c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 928.358324][T17757] RAX: ffffffffffffffda RBX: 00007fd412b35fa0 RCX: 00007fd41297e819 [ 928.366294][T17757] RDX: 0000000000000800 RSI: 00000000200003c0 RDI: 0000000000000005 [ 928.374263][T17757] RBP: 00007fd4137c3090 R08: 0000000000000000 R09: 0000000000000000 [ 928.382236][T17757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.390209][T17757] R13: 0000000000000000 R14: 00007fd412b35fa0 R15: 00007ffc1e745a68 [ 928.398187][T17757] [ 929.167098][T17778] C: renamed from team_slave_0 (while UP) [ 929.184325][T17778] netlink: 'syz.3.3384': attribute type 1 has an invalid length. [ 929.198733][T17778] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 929.254361][T17779] cifs: Unknown parameter 'mode' [ 930.865175][T17794] fuse: blksize only supported for fuseblk [ 931.067475][T17798] netlink: 'syz.5.3390': attribute type 10 has an invalid length. [ 931.122663][T17798] team0: Device dummy0 is up. Set it down before adding it as a team port [ 931.472026][ T8] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 931.648912][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 931.669700][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.678746][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12408, setting to 64 [ 931.690702][ T8] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 931.699900][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.711319][ T8] usb 4-1: config 0 descriptor?? [ 931.930131][ T5888] kernel write not supported for file /snd/seq (pid: 5888 comm: kworker/0:5) [ 931.964430][T13379] kernel read not supported for file /video7 (pid: 13379 comm: kworker/1:3) [ 931.989980][T17822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.013094][T17822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.053226][T17801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.094545][T17801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.162623][T17825] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 932.221090][T17825] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 932.236580][ T8] ath6kl: Failed to submit usb control message: -71 [ 932.252047][T17825] overlayfs: missing 'lowerdir' [ 932.257123][ T8] ath6kl: unable to send the bmi data to the device: -71 [ 932.283395][ T8] ath6kl: Unable to send get target info: -71 [ 932.291893][ T8] ath6kl: Failed to init ath6kl core: -71 [ 932.305115][ T8] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 932.457284][ T8] usb 4-1: USB disconnect, device number 56 [ 933.358418][T17838] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3400'. [ 934.347527][ T8] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 935.445544][ T8] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 935.454695][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.465020][ T8] usb 3-1: config 0 descriptor?? [ 935.473222][ T8] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 935.529114][T17869] cifs: Unknown parameter 'mode' [ 936.715727][T17874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3413'. [ 936.773662][ T8] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 936.901682][T17876] binder: 17871:17876 ioctl 4018620d 0 returned -22 [ 938.002811][ T8] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 938.272174][T13379] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 938.472411][T13379] usb 4-1: device descriptor read/64, error -71 [ 938.542959][T17894] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3419'. [ 938.563834][T17894] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3419'. [ 938.720759][T17844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3404'. [ 938.740869][ T8] usb 3-1: USB disconnect, device number 64 [ 938.900156][T13379] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 939.282149][T13379] usb 4-1: device descriptor read/64, error -71 [ 939.571811][T13379] usb usb4-port1: attempt power cycle [ 940.634899][T13379] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 940.763920][T13379] usb 4-1: device descriptor read/8, error -71 [ 940.801303][T17929] smk_cipso_doi:693 remove rc = -2 [ 940.806631][T17929] smk_cipso_doi:706 cipso add rc = -22 [ 945.087663][T17966] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 945.926209][T17988] xt_CT: You must specify a L4 protocol and not use inversions on it [ 946.266305][T17994] x_tables: duplicate underflow at hook 2 [ 946.302044][T13379] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 946.420516][T10397] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 946.592047][T13379] usb 6-1: Using ep0 maxpacket: 32 [ 946.598801][T13379] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 946.613857][T13379] usb 6-1: config 0 has no interface number 0 [ 946.639431][T17997] syz.3.3446 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 946.651034][T13379] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 946.661019][T13379] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.669841][T13379] usb 6-1: Product: syz [ 946.683456][T13379] usb 6-1: Manufacturer: syz [ 946.688198][T13379] usb 6-1: SerialNumber: syz [ 946.722687][T13379] usb 6-1: config 0 descriptor?? [ 946.753075][T13379] smsc95xx v2.0.0 [ 947.445679][T13379] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 947.472837][T13379] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 947.731316][T17987] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 947.791017][T13379] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 947.826180][T13379] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 948.000545][T13379] usb 6-1: USB disconnect, device number 39 [ 948.636504][T18017] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3454'. [ 952.438434][T18072] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3473'. [ 952.612248][T13379] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 952.982103][T13379] usb 7-1: Using ep0 maxpacket: 16 [ 952.991639][T13379] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.006313][T13379] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 953.016125][T13379] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.053875][T13379] usb 7-1: config 0 descriptor?? [ 953.080946][T13379] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input51 [ 953.417666][T18080] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3475'. [ 954.386570][T13379] usb 7-1: USB disconnect, device number 24 [ 954.400259][T13865] bcm5974 7-1:0.0: could not read from device [ 954.416019][ T5197] bcm5974 7-1:0.0: could not read from device [ 955.838428][T18092] cifs: Unknown parameter 'mode' [ 956.791592][ T29] audit: type=1107 audit(1732482186.176:320): pid=18106 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='O' [ 957.027822][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3486'. [ 957.282305][ T5944] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 957.476026][ T5944] usb 6-1: Using ep0 maxpacket: 16 [ 957.527006][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.586703][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.616163][ T5944] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 957.646084][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.675961][ T5944] usb 6-1: config 0 descriptor?? [ 958.481633][ T5944] corsair-cpro 0003:1B1C:1D00.0021: hidraw0: USB HID v0.00 Device [HID 1b1c:1d00] on usb-dummy_hcd.5-1/input0 [ 958.558191][ T5944] corsair-cpro 0003:1B1C:1D00.0021: probe with driver corsair-cpro failed with error -38 [ 959.262864][T18140] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3495'. [ 959.604036][ T5944] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 960.778687][ T8] usb 6-1: USB disconnect, device number 40 [ 960.837853][ T5944] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 960.846241][ T5944] usb 7-1: config 0 has no interface number 0 [ 960.852664][ T5944] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 960.863795][ T5944] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 960.875595][ T5944] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 960.902329][ T5944] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 960.915848][ T5944] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.924889][ T5944] usb 7-1: Product: syz [ 960.929060][ T5944] usb 7-1: Manufacturer: syz [ 960.939878][ T5944] usb 7-1: SerialNumber: syz [ 960.975495][ T5944] usb 7-1: config 0 descriptor?? [ 961.007020][T18143] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 961.014889][T18143] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 961.023936][ T5944] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 961.047652][ T5944] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 961.057022][T13379] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 961.221998][T13379] usb 4-1: Using ep0 maxpacket: 8 [ 961.240561][T18139] binder: 18135:18139 ioctl 4018620d 0 returned -22 [ 961.299466][T13379] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.329625][T13379] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 961.343192][T13379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.352027][T13379] usb 4-1: Product: syz [ 961.356305][T13379] usb 4-1: Manufacturer: syz [ 961.402787][T13379] usb 4-1: SerialNumber: syz [ 961.913639][T13379] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 961.921180][T13379] cdc_ncm 4-1:1.0: bind() failure [ 961.973766][T13379] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 961.980606][T13379] cdc_ncm 4-1:1.1: bind() failure [ 962.377864][ T8] usb 7-1: USB disconnect, device number 25 [ 962.460263][T18151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.599338][T18151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.663113][ T8] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 962.802911][ T8] cyberjack 7-1:0.69: device disconnected [ 963.142165][ T5888] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 963.211375][ T5361] usb 4-1: USB disconnect, device number 61 [ 963.278056][T18181] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 964.035775][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 1024 [ 964.046910][ T5888] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 964.058033][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 964.073625][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 964.100479][ T5888] usb 3-1: New USB device found, idVendor=1949, idProduct=85a5, bcdDevice=a3.3a [ 964.128342][T18181] cifs: Unknown parameter 'mode' [ 964.130267][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.178258][ T5888] usb 3-1: Product: syz [ 964.249853][ T5888] usb 3-1: Manufacturer: syz [ 964.341124][ T5888] usb 3-1: SerialNumber: syz [ 964.485652][ T5888] usb 3-1: config 0 descriptor?? [ 964.502323][T18175] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 964.794428][ T2144] usb 3-1: USB disconnect, device number 65 [ 965.682149][ T5888] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 965.862149][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 966.876089][T18208] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3517'. [ 967.157168][ T5888] usb 4-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 967.172359][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.228664][ T5888] usb 4-1: config 0 descriptor?? [ 967.244941][ T5888] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 967.253106][ T5888] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 967.263444][ T5888] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 967.271150][ T5888] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 967.299627][ T5888] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 967.468710][T18216] netlink: 'syz.6.3521': attribute type 23 has an invalid length. [ 967.477092][T18216] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3521'. [ 967.709919][ T5888] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 967.718961][ T5888] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 967.732130][ T5888] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 967.928817][ T5888] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 967.962205][ T5888] usb 4-1: USB disconnect, device number 62 [ 967.987369][ T5888] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 968.418224][ T5888] keyspan 4-1:0.0: device disconnected [ 968.770684][T18220] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 968.893499][T18219] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3519'. [ 968.934323][T18219] netlink: 'syz.7.3519': attribute type 3 has an invalid length. [ 968.942129][T18219] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3519'. [ 968.951666][T18219] netlink: 'syz.7.3519': attribute type 3 has an invalid length. [ 968.959455][T18219] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3519'. [ 968.998581][T18222] xt_cluster: node mask cannot exceed total number of nodes [ 969.169999][T18236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 969.723836][T18245] binder: 18238:18245 ioctl 4018620d 0 returned -22 [ 970.322687][T18237] devpts: called with bogus options [ 970.328748][T18237] devpts: called with bogus options [ 970.416940][T18237] devpts: called with bogus options [ 970.452852][T18237] devpts: called with bogus options [ 970.960360][T18237] devpts: called with bogus options [ 971.196338][T18263] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3531'. [ 971.595180][T18258] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3530'. [ 972.372262][ T5361] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 972.988542][T18285] xt_CT: You must specify a L4 protocol and not use inversions on it [ 975.306134][T18297] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3541'. [ 975.647986][T18301] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3545'. [ 976.415099][T18303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3544'. [ 976.482968][ T29] audit: type=1107 audit(1732482205.866:321): pid=18307 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='O' [ 976.639317][T18312] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3546'. [ 978.009206][T10397] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 978.402993][T18327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3553'. [ 980.572259][T18340] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3556'. [ 980.848775][T18348] SET target dimension over the limit! [ 981.985917][T18373] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3566'. [ 982.103216][T18374] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3564'. [ 983.217194][T18381] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3570'. [ 983.948296][T18395] ieee802154 phy0 wpan0: encryption failed: -22 [ 984.142122][ T29] audit: type=1326 audit(1732482213.506:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18398 comm="syz.7.3577" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd41297e819 code=0x0 [ 984.432340][ T5918] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 984.711335][ T5918] usb 6-1: Using ep0 maxpacket: 8 [ 984.743032][ T5918] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 984.780475][ T5918] usb 6-1: config 0 has no interface number 0 [ 984.803118][ T5918] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 984.820995][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.845076][ T5918] usb 6-1: Product: syz [ 984.854769][ T5918] usb 6-1: Manufacturer: syz [ 984.866071][ T5918] usb 6-1: SerialNumber: syz [ 984.885746][ T5918] usb 6-1: config 0 descriptor?? [ 984.932502][ T5918] usb 6-1: selecting invalid altsetting 1 [ 984.945818][ T5918] dvb_ttusb_budget: ttusb_init_controller: error [ 984.955374][ T5918] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 984.990496][T18414] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3581'. [ 985.602930][ T5918] DVB: Unable to find symbol stv0299_attach() [ 985.640962][ T5918] DVB: Unable to find symbol tda8083_attach() [ 985.647185][ T5918] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 985.682100][ T5918] usb 6-1: USB disconnect, device number 41 [ 985.706502][T18428] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3586'. [ 985.853704][T18432] netlink: 'syz.2.3587': attribute type 23 has an invalid length. [ 985.996675][T13379] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 986.006053][T18432] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3587'. [ 986.278243][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 986.821299][ T29] audit: type=1326 audit(1732482215.656:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18429 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064177e819 code=0x7ffc0000 [ 986.929292][ T29] audit: type=1326 audit(1732482215.656:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18429 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064177e819 code=0x7ffc0000 [ 987.025916][ T29] audit: type=1326 audit(1732482215.656:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18429 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f064177e819 code=0x7ffc0000 [ 987.047761][ T29] audit: type=1326 audit(1732482215.656:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18429 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064177e819 code=0x7ffc0000 [ 987.069891][ T29] audit: type=1326 audit(1732482215.666:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18429 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064177e819 code=0x7ffc0000 [ 987.096503][ T29] audit: type=1326 audit(1732482215.666:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18429 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f064177e819 code=0x7ffc0000 [ 987.118478][ T29] audit: type=1326 audit(1732482215.686:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18429 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064177e819 code=0x7ffc0000 [ 987.140289][ T29] audit: type=1326 audit(1732482215.686:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18429 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064177e819 code=0x7ffc0000 [ 987.162379][ T29] audit: type=1326 audit(1732482215.686:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18429 comm="syz.3.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f064177e819 code=0x7ffc0000 [ 987.442676][T13379] usb 7-1: device descriptor read/64, error -71 [ 987.682172][T13379] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 987.685326][T18459] C: renamed from team_slave_0 (while UP) [ 987.708754][T18459] netlink: 'syz.5.3597': attribute type 1 has an invalid length. [ 987.745573][T18459] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 987.923210][T13379] usb 7-1: device descriptor read/64, error -71 [ 988.715065][T13379] usb usb7-port1: attempt power cycle [ 988.777406][T18473] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3599'. [ 988.833857][T18475] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3602'. [ 990.412011][T18501] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3611'. [ 991.017989][T18517] tmpfs: Bad value for 'mpol' [ 991.042773][ T5361] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 991.219083][ T5361] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 991.235210][ T5361] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.493624][ T5361] usb 7-1: Product: syz [ 991.498406][ T5361] usb 7-1: Manufacturer: syz [ 991.503287][ T5361] usb 7-1: SerialNumber: syz [ 991.533693][ T5361] r8152-cfgselector 7-1: Unknown version 0x0000 [ 991.541139][ T5361] r8152-cfgselector 7-1: config 0 descriptor?? [ 992.328247][ T5887] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 992.503974][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 992.513928][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 992.548823][ T5887] usb 4-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 992.584580][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.619989][ T5887] usb 4-1: Product: syz [ 992.627854][ T5887] usb 4-1: Manufacturer: syz [ 992.638288][ T5887] usb 4-1: SerialNumber: syz [ 992.685596][ T5887] usb 4-1: config 0 descriptor?? [ 992.712026][ T5887] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 992.724001][ T5887] usb 4-1: Detected SIO [ 992.730559][ T5887] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 992.738139][ T5887] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 992.753957][ T5887] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 993.047291][ T5887] usb 4-1: USB disconnect, device number 63 [ 993.058210][ T5887] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 993.070226][ T5887] ftdi_sio 4-1:0.0: device disconnected [ 993.099039][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.364164][T18534] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3623'. [ 993.373338][T18534] IPVS: Unknown mcast interface: batadv0 [ 994.428390][T13379] r8152-cfgselector 7-1: USB disconnect, device number 30 [ 994.721271][T18562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3630'. [ 996.256712][T18579] netlink: 'syz.5.3635': attribute type 23 has an invalid length. [ 996.267380][T18579] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3635'. [ 996.268763][T18574] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 996.716732][T18574] cifs: Unknown parameter 'mode' [ 997.389103][T18592] smk_cipso_doi:693 remove rc = -2 [ 997.404992][T18592] smk_cipso_doi:706 cipso add rc = -17 [ 997.492296][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 997.492315][ T29] audit: type=1326 audit(1732482226.846:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18591 comm="syz.6.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710d77e819 code=0x7ffc0000 [ 997.561276][ T29] audit: type=1326 audit(1732482226.846:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18591 comm="syz.6.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f710d77e819 code=0x7ffc0000 [ 997.609726][ T29] audit: type=1326 audit(1732482226.846:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18591 comm="syz.6.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710d77e819 code=0x7ffc0000 [ 997.636116][ T29] audit: type=1326 audit(1732482226.846:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18591 comm="syz.6.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f710d77d1b0 code=0x7ffc0000 [ 997.684722][ T29] audit: type=1326 audit(1732482226.846:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18591 comm="syz.6.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f710d780047 code=0x7ffc0000 [ 997.771680][ T29] audit: type=1326 audit(1732482226.846:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18591 comm="syz.6.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f710d77e819 code=0x7ffc0000 [ 998.501587][ T29] audit: type=1326 audit(1732482226.976:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18591 comm="syz.6.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f710d780047 code=0x7ffc0000 [ 998.613901][ T29] audit: type=1326 audit(1732482226.976:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18591 comm="syz.6.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f710d77d4aa code=0x7ffc0000 [ 998.986245][ T29] audit: type=1326 audit(1732482226.976:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18591 comm="syz.6.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710d77e819 code=0x7ffc0000 [ 999.023244][ T29] audit: type=1326 audit(1732482226.976:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18591 comm="syz.6.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710d77e819 code=0x7ffc0000 [ 999.757179][T18623] debugfs: Directory 'netdev:nicvf0' with parent 'phy28' already present! [ 1000.180275][ T5887] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1000.357131][T18633] Invalid logical block size (4608) [ 1000.392079][ T5888] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 1000.482188][T18636] wireguard0: entered promiscuous mode [ 1000.488192][T18636] wireguard0: entered allmulticast mode [ 1000.496965][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.548218][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.574126][ T5888] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1000.590551][ T5887] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1000.595918][T18638] vlan2: entered allmulticast mode [ 1000.602059][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.610435][T18638] bridge0: port 3(vlan2) entered blocking state [ 1000.614741][ T5887] usb 3-1: config 0 descriptor?? [ 1000.620561][T18638] bridge0: port 3(vlan2) entered disabled state [ 1000.659679][T18638] vlan2: entered promiscuous mode [ 1000.682105][ T5888] usb 7-1: not running at top speed; connect to a high speed hub [ 1000.708650][T18638] bridge0: port 3(vlan2) entered blocking state [ 1000.715596][T18638] bridge0: port 3(vlan2) entered forwarding state [ 1000.725205][ T5888] usb 7-1: config 253 has an invalid interface number: 202 but max is 0 [ 1000.765391][ T5888] usb 7-1: config 253 has no interface number 0 [ 1000.801786][ T5888] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1000.825858][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.834398][ T5888] usb 7-1: Product: syz [ 1000.838610][ T5888] usb 7-1: Manufacturer: syz [ 1000.843760][ T5888] usb 7-1: SerialNumber: syz [ 1000.914951][T18621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3646'. [ 1002.332320][ T5361] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1002.505354][ T5361] usb 4-1: config 0 has an invalid interface number: 100 but max is 0 [ 1002.552083][ T5361] usb 4-1: config 0 has no interface number 0 [ 1002.559039][ T5361] usb 4-1: config 0 interface 100 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 32 [ 1002.569534][ T5361] usb 4-1: config 0 interface 100 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 1002.581880][ T5361] usb 4-1: config 0 interface 100 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1002.592466][ T5361] usb 4-1: config 0 interface 100 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1002.608376][ T5361] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=3c.ad [ 1002.644113][T18654] bridge1: entered promiscuous mode [ 1002.650188][ T5361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.679275][ T5361] usb 4-1: Product: syz [ 1002.700976][ T5361] usb 4-1: Manufacturer: syz [ 1002.713908][ T5361] usb 4-1: SerialNumber: syz [ 1002.743498][ T5361] usb 4-1: config 0 descriptor?? [ 1002.760149][T18646] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1002.768376][ T5361] port100 4-1:0.100: NFC: Could not find bulk-in or bulk-out endpoint [ 1002.823092][T18656] loop6: detected capacity change from 0 to 1 [ 1002.831756][T18656] Dev loop6: unable to read RDB block 1 [ 1002.838003][T18656] loop6: unable to read partition table [ 1002.844483][T18656] loop6: partition table beyond EOD, truncated [ 1002.851739][T18656] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 1002.851739][T18656] ) failed (rc=-5) [ 1002.949942][ T5888] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1002.954005][ T11] usb 7-1: Failed to submit usb control message: -71 [ 1002.983020][ T11] usb 7-1: unable to send the bmi data to the device: -71 [ 1002.990890][ T11] usb 7-1: unable to get target info from device [ 1002.997814][ T11] usb 7-1: could not get target info (-71) [ 1003.004486][ T11] usb 7-1: could not probe fw (-71) [ 1003.044222][ T5888] usb 7-1: USB disconnect, device number 31 [ 1003.920625][T18669] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3660'. [ 1004.105803][ T5887] usbhid 3-1:0.0: can't add hid device: -71 [ 1004.112045][ T5887] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1004.155839][ T5887] usb 3-1: USB disconnect, device number 66 [ 1004.184637][ T5918] usb 4-1: USB disconnect, device number 64 [ 1004.260791][T18669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3660'. [ 1004.297690][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 1004.297708][ T29] audit: type=1326 audit(1732482233.676:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18673 comm="syz.3.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064177e819 code=0x7ffc0000 [ 1004.426123][ T29] audit: type=1326 audit(1732482233.676:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18673 comm="syz.3.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f064177e819 code=0x7ffc0000 [ 1004.490422][ T29] audit: type=1326 audit(1732482233.676:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18673 comm="syz.3.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f064177e819 code=0x7ffc0000 [ 1004.924369][T18688] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3666'. [ 1006.883655][T18705] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3670'. [ 1006.948924][T18704] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3672'. [ 1006.969095][T18704] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3672'. [ 1009.060973][T18730] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3679'. [ 1009.880692][T18723] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3677'. [ 1010.042095][ T5888] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1010.112031][ T5361] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 1010.151003][T18753] netlink: 'syz.7.3686': attribute type 1 has an invalid length. [ 1010.202133][ T5888] usb 7-1: Using ep0 maxpacket: 16 [ 1010.211301][ T5888] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.237151][T18753] bond3: entered promiscuous mode [ 1010.252323][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1010.283279][ T5361] usb 3-1: config 5 has an invalid interface number: 187 but max is 0 [ 1010.341080][T18757] bond3: (slave team_slave_1): making interface the new active one [ 1010.349490][ T5361] usb 3-1: config 5 has no interface number 0 [ 1010.373399][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1010.382516][T18757] team_slave_1: entered promiscuous mode [ 1010.389859][ T5361] usb 3-1: config 5 interface 187 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1010.400707][T18757] bond3: (slave team_slave_1): Enslaving as an active interface with an up link [ 1010.422436][ T5888] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1010.432182][ T5888] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1010.450570][ T5361] usb 3-1: config 5 interface 187 altsetting 8 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1010.464453][ T5361] usb 3-1: config 5 interface 187 altsetting 8 endpoint 0x83 has an invalid bInterval 153, changing to 4 [ 1010.480954][ T5361] usb 3-1: config 5 interface 187 altsetting 8 endpoint 0x83 has invalid maxpacket 57626, setting to 1023 [ 1010.492776][ T5361] usb 3-1: config 5 interface 187 altsetting 8 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1010.506302][ T5361] usb 3-1: config 5 interface 187 has no altsetting 0 [ 1010.527814][ T5888] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1010.537138][ T5888] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1010.546393][ T5361] usb 3-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=21.7a [ 1010.557399][ T5361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.567690][ T5888] usb 7-1: Manufacturer: syz [ 1010.574138][ T5361] usb 3-1: Product: syz [ 1010.582590][ T5888] usb 7-1: config 0 descriptor?? [ 1010.590646][ T5361] usb 3-1: Manufacturer: syz [ 1010.598055][ T5361] usb 3-1: SerialNumber: syz [ 1011.374065][ T5361] em28xx 3-1:5.187: New device syz syz @ 12 Mbps (eb1a:2801, interface 187, class 187) [ 1011.387819][T16867] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1011.398751][ T5361] em28xx 3-1:5.187: Device initialization failed. [ 1011.427353][ T5361] em28xx 3-1:5.187: Device must be connected to a high-speed USB 2.0 port. [ 1011.476882][ T5361] usb 3-1: USB disconnect, device number 67 [ 1011.532105][ T5888] rc_core: IR keymap rc-hauppauge not found [ 1011.550046][ T5888] Registered IR keymap rc-empty [ 1011.566213][ T5888] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1011.579274][T18766] loop6: detected capacity change from 0 to 1 [ 1011.586462][T18766] Dev loop6: unable to read RDB block 1 [ 1011.594708][ T5888] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1011.604529][T18766] loop6: unable to read partition table [ 1011.610456][T18766] loop6: partition table beyond EOD, truncated [ 1011.621505][T18766] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 1011.621505][T18766] ) failed (rc=-5) [ 1011.635997][ T5888] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1011.649733][ T5888] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input52 [ 1011.689791][ T5888] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1011.712350][ T5888] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1011.738382][ T5888] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1011.762005][ T5888] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1011.796582][ T5888] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1011.829786][ T5888] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1011.882911][ T5888] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1012.332044][ T5888] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1012.352061][ T5888] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1012.482434][ T5888] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1012.545261][ T5888] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1012.559145][ T5888] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1012.644966][ T5888] usb 7-1: USB disconnect, device number 32 [ 1013.387763][T18788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3694'. [ 1015.125997][T18814] netlink: 'syz.7.3700': attribute type 23 has an invalid length. [ 1015.134635][T18814] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3700'. [ 1015.793645][T18825] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1018.704207][ T5361] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1019.213812][T13379] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1020.150927][T13379] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.163167][T13379] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.173338][T13379] usb 7-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1020.182667][T13379] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.287827][T13379] usb 7-1: config 0 descriptor?? [ 1020.383305][ T5918] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1020.929842][ T5361] usb 3-1: device descriptor read/all, error -71 [ 1021.098501][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3719'. [ 1021.222088][ T5918] usb 6-1: device descriptor read/64, error -71 [ 1021.415314][T18888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.435123][T18888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.708190][T18890] FAULT_INJECTION: forcing a failure. [ 1021.708190][T18890] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.720987][T18890] CPU: 1 UID: 0 PID: 18890 Comm: syz.3.3723 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 1021.731427][T18890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1021.741493][T18890] Call Trace: [ 1021.744784][T18890] [ 1021.747725][T18890] dump_stack_lvl+0x241/0x360 [ 1021.752428][T18890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1021.757639][T18890] ? __pfx__printk+0x10/0x10 [ 1021.762253][T18890] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1021.768247][T18890] ? __pfx___might_resched+0x10/0x10 [ 1021.773557][T18890] should_fail_ex+0x3b0/0x4e0 [ 1021.778256][T18890] should_failslab+0xac/0x100 [ 1021.782951][T18890] ? __alloc_skb+0x1c3/0x440 [ 1021.787561][T18890] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1021.793389][T18890] __alloc_skb+0x1c3/0x440 [ 1021.797824][T18890] ? __pfx___alloc_skb+0x10/0x10 [ 1021.802780][T18890] ? netlink_autobind+0xd6/0x2f0 [ 1021.807730][T18890] ? netlink_autobind+0x2b0/0x2f0 [ 1021.812777][T18890] netlink_sendmsg+0x638/0xcb0 [ 1021.817570][T18890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1021.822882][T18890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1021.828193][T18890] __sock_sendmsg+0x221/0x270 [ 1021.832897][T18890] ____sys_sendmsg+0x52a/0x7e0 [ 1021.837691][T18890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1021.842988][T18890] ? __fget_files+0x2a/0x410 [ 1021.847594][T18890] ? __fget_files+0x2a/0x410 [ 1021.852218][T18890] __sys_sendmsg+0x269/0x350 [ 1021.856824][T18890] ? __pfx_lock_release+0x10/0x10 [ 1021.861869][T18890] ? __pfx___sys_sendmsg+0x10/0x10 [ 1021.867013][T18890] ? __pfx_vfs_write+0x10/0x10 [ 1021.871823][T18890] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1021.878168][T18890] ? do_syscall_64+0x100/0x230 [ 1021.882949][T18890] ? do_syscall_64+0xb6/0x230 [ 1021.887652][T18890] do_syscall_64+0xf3/0x230 [ 1021.892173][T18890] ? clear_bhb_loop+0x35/0x90 [ 1021.896869][T18890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.902786][T18890] RIP: 0033:0x7f064177e819 [ 1021.907216][T18890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1021.926836][T18890] RSP: 002b:00007f063f5d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1021.935269][T18890] RAX: ffffffffffffffda RBX: 00007f0641936160 RCX: 00007f064177e819 [ 1021.943255][T18890] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 000000000000000c [ 1021.951239][T18890] RBP: 00007f063f5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.959220][T18890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1021.967206][T18890] R13: 0000000000000000 R14: 00007f0641936160 R15: 00007fff6e672a88 [ 1021.975211][T18890] [ 1021.987727][T18890] cifs: Unknown parameter 'mode' [ 1021.993840][ T5918] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1022.172149][ T5918] usb 6-1: device descriptor read/64, error -71 [ 1022.373249][ T5918] usb usb6-port1: attempt power cycle [ 1022.382049][ T5361] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1022.485899][T13379] hid-led 0003:1D34:000A.0022: probe with driver hid-led failed with error -71 [ 1022.497890][T13379] usb 7-1: USB disconnect, device number 33 [ 1022.543446][ T5361] usb 3-1: Using ep0 maxpacket: 16 [ 1022.571672][ T5361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.612053][ T5361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.626967][ T5361] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1022.654553][ T5361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.696542][ T5361] usb 3-1: config 0 descriptor?? [ 1023.218930][T18910] (syz.6.3730,18910,0):dlmfs_mkdir:420 ERROR: invalid domain name for directory. [ 1024.069050][T18923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3733'. [ 1024.218642][ T5361] letsketch 0003:6161:4D15.0023: Device info: Ъ [ 1024.546091][ T5361] usb 3-1: Max retries (5) exceeded reading string descriptor 201 [ 1024.738492][ T5361] letsketch 0003:6161:4D15.0023: probe with driver letsketch failed with error -71 [ 1024.788691][ T5361] usb 3-1: USB disconnect, device number 70 [ 1024.825011][ T29] audit: type=1326 audit(1732482254.216:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18928 comm="syz.7.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41297e819 code=0x7ffc0000 [ 1024.902216][ T29] audit: type=1326 audit(1732482254.276:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18928 comm="syz.7.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41297e819 code=0x7ffc0000 [ 1024.987763][ T29] audit: type=1326 audit(1732482254.376:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18928 comm="syz.7.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd41297e819 code=0x7ffc0000 [ 1025.011364][ T29] audit: type=1326 audit(1732482254.376:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18928 comm="syz.7.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41297e819 code=0x7ffc0000 [ 1025.033090][ T29] audit: type=1326 audit(1732482254.376:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18928 comm="syz.7.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41297e819 code=0x7ffc0000 [ 1025.054945][ T29] audit: type=1326 audit(1732482254.376:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18928 comm="syz.7.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd41297e819 code=0x7ffc0000 [ 1025.076774][ T29] audit: type=1326 audit(1732482254.376:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18928 comm="syz.7.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41297e819 code=0x7ffc0000 [ 1025.099240][ T29] audit: type=1326 audit(1732482254.396:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18928 comm="syz.7.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd41297e819 code=0x7ffc0000 [ 1025.121297][ T29] audit: type=1326 audit(1732482254.396:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18928 comm="syz.7.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41297e819 code=0x7ffc0000 [ 1025.143152][ T29] audit: type=1326 audit(1732482254.516:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18928 comm="syz.7.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd41297e819 code=0x7ffc0000 [ 1025.308009][T18951] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3746'. [ 1026.872114][T18968] cifs: Unknown parameter 'mode' [ 1027.041216][T18966] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1027.345664][T18974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3750'. [ 1027.819321][T18982] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 1029.509725][T19002] debugfs: Directory 'netdev:nicvf0' with parent 'phy28' already present! [ 1030.222269][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1030.222283][ T29] audit: type=1107 audit(1732482259.556:388): pid=19016 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='O' [ 1030.381417][ T2144] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1030.541262][T19026] qrtr: Invalid version 0 [ 1032.173839][T19054] block nbd5: not configured, cannot reconfigure [ 1035.001384][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 1035.351419][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1035.812537][T19091] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1036.617980][T19101] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3785'. [ 1036.668235][T19104] netlink: 276 bytes leftover after parsing attributes in process `syz.6.3787'. [ 1041.046455][T19155] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3801'. [ 1041.205457][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1041.232127][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1041.276163][T19165] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3805'. [ 1041.709816][T19174] netlink: 'syz.2.3807': attribute type 1 has an invalid length. [ 1042.699237][T19182] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1043.396334][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1043.631999][ T5887] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1043.793740][ T5887] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 1043.802393][ T5887] usb 6-1: config 0 has no interface number 0 [ 1043.808605][ T5887] usb 6-1: config 0 interface 16 has no altsetting 0 [ 1043.823218][ T5887] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=30.4b [ 1043.833122][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.844548][ T5887] usb 6-1: Product: syz [ 1043.958426][ T5887] usb 6-1: Manufacturer: syz [ 1043.963342][ T5887] usb 6-1: SerialNumber: syz [ 1043.975744][ T5887] usb 6-1: config 0 descriptor?? [ 1044.435939][ T5887] usbtest 6-1:0.16: couldn't get endpoints, -71 [ 1044.443489][ T5887] usbtest 6-1:0.16: probe with driver usbtest failed with error -71 [ 1044.471242][ T5887] usb 6-1: USB disconnect, device number 45 [ 1044.623880][T19178] bridge0: port 4(erspan0) entered blocking state [ 1044.630384][T19178] bridge0: port 4(erspan0) entered disabled state [ 1044.637074][T19178] erspan0: entered allmulticast mode [ 1044.643418][T19178] erspan0: entered promiscuous mode [ 1044.649356][T19178] bridge0: port 4(erspan0) entered blocking state [ 1044.655888][T19178] bridge0: port 4(erspan0) entered forwarding state [ 1047.172178][T13379] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1047.813557][T13379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1047.824081][T19230] TCP: TCP_TX_DELAY enabled [ 1047.829052][T13379] usb 4-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 1047.838190][T13379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.872858][T13379] usb 4-1: config 0 descriptor?? [ 1049.427768][T13379] usbhid 4-1:0.0: can't add hid device: -71 [ 1049.467786][T13379] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1049.480080][T19255] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 1049.488658][T19255] macvtap1: entered promiscuous mode [ 1049.494232][T19255] macvtap1: entered allmulticast mode [ 1049.499623][T19255] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 1049.509719][T19255] mac80211_hwsim hwsim20 wlan0: left allmulticast mode [ 1049.517397][T19255] mac80211_hwsim hwsim20 wlan0: left promiscuous mode [ 1049.564220][T13379] usb 4-1: USB disconnect, device number 65 [ 1050.116322][T19274] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3836'. [ 1050.335786][T19279] netlink: 'syz.3.3837': attribute type 11 has an invalid length. [ 1050.738260][T19279] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3837'. [ 1050.945108][T19280] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1051.211567][T19300] vivid-000: ================= START STATUS ================= [ 1051.327260][T19300] vivid-000: Radio HW Seek Mode: Bounded [ 1051.403700][T19300] vivid-000: Radio Programmable HW Seek: false [ 1051.409933][T19300] vivid-000: RDS Rx I/O Mode: Block I/O [ 1051.427245][T19300] vivid-000: Generate RBDS Instead of RDS: false [ 1051.436266][T19300] vivid-000: RDS Reception: true [ 1051.441257][T19300] vivid-000: RDS Program Type: 0 inactive [ 1051.491119][T19300] vivid-000: RDS PS Name: inactive [ 1051.590414][T19300] vivid-000: RDS Radio Text: inactive [ 1051.751772][T19300] vivid-000: RDS Traffic Announcement: false inactive [ 1051.868523][T19300] vivid-000: RDS Traffic Program: false inactive [ 1051.982411][T19300] vivid-000: RDS Music: false inactive [ 1052.000715][T19300] vivid-000: ================== END STATUS ================== [ 1052.482362][T19316] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3846'. [ 1053.187825][T19321] futex_wake_op: syz.7.3850 tries to shift op by -1; fix this program [ 1053.907611][T19341] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3856'. [ 1054.518960][T19349] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3859'. [ 1054.696770][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.788968][T19361] 9pnet_fd: Insufficient options for proto=fd [ 1057.635872][T19383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3871'. [ 1057.685097][ T29] audit: type=1107 audit(1732482287.066:389): pid=19382 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='O' [ 1059.032003][ T5888] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1059.040257][ T5887] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1059.154234][T19429] netlink: 'syz.5.3887': attribute type 1 has an invalid length. [ 1059.170131][T19429] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3887'. [ 1059.194367][ T5888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1059.206388][ T5888] usb 7-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1059.215707][ T5887] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1059.224681][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.233241][ T5887] usb 3-1: config 0 has no interface number 0 [ 1059.239362][ T5887] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1059.271138][ T5888] usb 7-1: config 0 descriptor?? [ 1059.292401][ T5887] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 1059.307026][ T5887] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1059.316247][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=243 [ 1059.337826][ T5887] usb 3-1: Product: syz [ 1059.350475][ T5887] usb 3-1: Manufacturer: syz [ 1059.363838][ T5887] usb 3-1: SerialNumber: syz [ 1059.381500][ T5887] usb 3-1: config 0 descriptor?? [ 1059.396341][T19414] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1059.462027][ T5887] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 1059.542421][T15342] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1059.624503][T19414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.648113][T19414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.764722][ T5361] usb 3-1: USB disconnect, device number 72 [ 1059.786701][ T5361] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 1059.937082][T19436] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3889'. [ 1059.951249][ T5888] usbhid 7-1:0.0: can't add hid device: -71 [ 1059.958199][ T5888] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1059.988400][ T5888] usb 7-1: USB disconnect, device number 34 [ 1060.142522][T15342] usb 6-1: Using ep0 maxpacket: 16 [ 1060.149710][T15342] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1060.184852][T15342] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1060.194396][T15342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.203163][T15342] usb 6-1: Product: syz [ 1060.207355][T15342] usb 6-1: Manufacturer: syz [ 1060.212203][T15342] usb 6-1: SerialNumber: syz [ 1060.228466][T15342] usb 6-1: config 0 descriptor?? [ 1060.240241][T15342] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1060.257226][T15342] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1060.342172][ T5887] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 1060.822252][T19431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.832534][T19431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.853080][T19431] overlayfs: missing 'lowerdir' [ 1060.925313][T19445] 9pnet_fd: Insufficient options for proto=fd [ 1060.983905][ T5887] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1061.000267][ T5887] usb 4-1: not running at top speed; connect to a high speed hub [ 1061.330137][T15342] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1061.415477][ T5887] usb 4-1: config 2 has an invalid interface number: 8 but max is 1 [ 1061.423640][ T5887] usb 4-1: config 2 has an invalid interface number: 3 but max is 1 [ 1061.431682][ T5887] usb 4-1: config 2 has no interface number 0 [ 1061.437952][ T5887] usb 4-1: config 2 has no interface number 1 [ 1061.444147][ T5887] usb 4-1: config 2 interface 8 has no altsetting 0 [ 1061.486388][ T5887] usb 4-1: New USB device found, idVendor=1199, idProduct=9051, bcdDevice=17.eb [ 1061.502503][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.511445][ T5887] usb 4-1: Product: syz [ 1061.515771][ T5887] usb 4-1: Manufacturer: syz [ 1061.520563][ T5887] usb 4-1: SerialNumber: syz [ 1062.784573][T19436] netlink: 'syz.3.3889': attribute type 29 has an invalid length. [ 1062.795839][T19463] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3898'. [ 1062.832877][T19436] netlink: 'syz.3.3889': attribute type 29 has an invalid length. [ 1062.923258][ T5887] usb 4-1: Could not set interface, error -71 [ 1062.963969][ T5887] usb 4-1: USB disconnect, device number 66 [ 1063.373749][T19475] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3902'. [ 1063.402010][T15342] em28xx 6-1:0.0: write to i2c device at 0xa0 failed with unknown error (status=1) [ 1063.411341][T15342] em28xx 6-1:0.0: failed to read eeprom (err=-5) [ 1063.432000][T15342] em28xx 6-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1063.607473][T19477] gtp0: entered promiscuous mode [ 1063.613632][T19477] gtp0: entered allmulticast mode [ 1063.685320][T15342] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1064.350156][T15342] em28xx 6-1:0.0: dvb set to bulk mode. [ 1064.356393][ T5918] em28xx 6-1:0.0: Binding DVB extension [ 1064.369363][T15342] usb 6-1: USB disconnect, device number 46 [ 1064.488229][T15342] em28xx 6-1:0.0: Disconnecting em28xx [ 1064.521666][ T5918] em28xx 6-1:0.0: Registering input extension [ 1064.574464][T15342] em28xx 6-1:0.0: Closing input extension [ 1064.615691][T15342] em28xx 6-1:0.0: Freeing device [ 1065.215094][T19501] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1067.105278][ T5887] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1067.238607][T19536] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3918'. [ 1068.572360][ T5887] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1068.581451][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.293424][ T5887] usb 4-1: config 0 descriptor?? [ 1069.373883][T19551] futex_wake_op: syz.6.3924 tries to shift op by -1; fix this program [ 1069.504937][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1069.896066][ T5887] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1069.906835][ T5887] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1070.143544][ T5887] usb 4-1: USB disconnect, device number 67 [ 1070.559948][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.567523][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.575698][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.583234][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.590631][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.598088][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.605540][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.613486][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.620896][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.628674][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.636651][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.644825][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.652281][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.659678][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.667157][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.674622][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.682062][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.689458][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.697363][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.704929][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.712613][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.720021][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.727735][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.735736][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.743688][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.751092][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.758537][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.766011][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.773461][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.780865][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.788319][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.795797][ T5918] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1070.807068][ T5918] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1070.966753][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1070.982820][T19564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1071.013178][T19574] netlink: 112 bytes leftover after parsing attributes in process `syz.7.3929'. [ 1071.086427][T15342] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1071.403994][T15342] usb 7-1: config 0 has no interfaces? [ 1071.410479][T15342] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1071.441343][T15342] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.515891][T19586] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3932'. [ 1071.525331][T19586] netlink: 272 bytes leftover after parsing attributes in process `syz.5.3932'. [ 1071.535460][T19586] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3932'. [ 1071.981279][T15342] usb 7-1: config 0 descriptor?? [ 1072.338634][T19570] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3927'. [ 1072.803221][T19597] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3935'. [ 1072.976051][T19604] binder: 19600:19604 ioctl 4018620d 0 returned -22 [ 1073.562996][ T5361] usb 7-1: USB disconnect, device number 35 [ 1075.045260][ T9234] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1075.084448][T19615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3941'. [ 1076.087751][T19617] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3942'. [ 1077.571209][T19648] futex_wake_op: syz.5.3950 tries to shift op by -1; fix this program [ 1078.043329][T19653] futex_wake_op: syz.6.3951 tries to shift op by -1; fix this program [ 1082.646929][T19689] futex_wake_op: syz.3.3962 tries to shift op by -1; fix this program [ 1082.705826][ T5844] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1082.715582][T19686] xt_l2tp: invalid flags combination: c [ 1082.764745][T19686] 9pnet: p9_errstr2errno: server reported unknown error słܷM6' [ 1082.834457][T19693] FAULT_INJECTION: forcing a failure. [ 1082.834457][T19693] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.889906][T19693] CPU: 0 UID: 0 PID: 19693 Comm: syz.7.3964 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 1082.900351][T19693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1082.910419][T19693] Call Trace: [ 1082.913711][T19693] [ 1082.916653][T19693] dump_stack_lvl+0x241/0x360 [ 1082.921359][T19693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1082.926586][T19693] ? __pfx__printk+0x10/0x10 [ 1082.931201][T19693] ? fs_reclaim_acquire+0x93/0x130 [ 1082.936331][T19693] ? __pfx___might_resched+0x10/0x10 [ 1082.941647][T19693] should_fail_ex+0x3b0/0x4e0 [ 1082.946342][T19693] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1082.952083][T19693] should_failslab+0xac/0x100 [ 1082.956777][T19693] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1082.962514][T19693] __kmalloc_noprof+0xd8/0x400 [ 1082.967300][T19693] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1082.972876][T19693] tomoyo_path_number_perm+0x236/0x860 [ 1082.978352][T19693] ? __lock_acquire+0x1397/0x2100 [ 1082.983390][T19693] ? tomoyo_path_number_perm+0x206/0x860 [ 1082.989042][T19693] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1082.995074][T19693] ? __fget_files+0x2a/0x410 [ 1082.999675][T19693] ? __fget_files+0x2a/0x410 [ 1083.004277][T19693] security_file_ioctl+0xc6/0x2a0 [ 1083.009326][T19693] __se_sys_ioctl+0x46/0x170 [ 1083.013941][T19693] do_syscall_64+0xf3/0x230 [ 1083.018462][T19693] ? clear_bhb_loop+0x35/0x90 [ 1083.023161][T19693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.029077][T19693] RIP: 0033:0x7fd41297e819 [ 1083.033512][T19693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1083.053132][T19693] RSP: 002b:00007fd4137c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1083.061563][T19693] RAX: ffffffffffffffda RBX: 00007fd412b35fa0 RCX: 00007fd41297e819 [ 1083.069555][T19693] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1083.077550][T19693] RBP: 00007fd4137c3090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.085551][T19693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.093540][T19693] R13: 0000000000000000 R14: 00007fd412b35fa0 R15: 00007ffc1e745a68 [ 1083.101531][T19693] [ 1083.129985][T19693] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1083.624642][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1083.659132][T19706] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1083.858489][T19716] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1083.906551][T19715] debugfs: Directory 'netdev:nicvf0' with parent 'phy44' already present! [ 1084.073317][T19719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3971'. [ 1084.093839][T19719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3971'. [ 1084.109063][T19719] gtp1: entered promiscuous mode [ 1084.116324][T19719] gtp1: entered allmulticast mode [ 1084.231252][T19727] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3975'. [ 1084.281569][T19727] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3975'. [ 1084.305806][T19732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3976'. [ 1084.322539][T19727] netlink: 81 bytes leftover after parsing attributes in process `syz.5.3975'. [ 1085.931212][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1085.955561][ T29] audit: type=1107 audit(1732482315.346:390): pid=19746 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='O' [ 1086.124338][T19756] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1086.450595][T19760] Invalid logical block size (21760) [ 1086.628579][T19759] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3985'. [ 1086.789257][T19755] 9pnet_fd: Insufficient options for proto=fd [ 1087.809712][T19786] netlink: 'syz.2.3993': attribute type 1 has an invalid length. [ 1087.826047][T19783] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3991'. [ 1087.832661][T19786] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3993'. [ 1088.487322][T19800] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1089.708123][T19809] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4000'. [ 1089.975478][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1090.442372][T19820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1090.940537][T19830] binder: 19826:19830 ioctl 4018620d 0 returned -22 [ 1093.774324][T19866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1094.709221][T19889] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1095.252060][T19908] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4032'. [ 1095.299376][T19908] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4032'. [ 1095.352000][T19908] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4032'. [ 1095.362268][T19908] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4032'. [ 1096.723818][ T8] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1096.727357][T19922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1096.921971][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1096.929056][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1096.938564][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1096.960415][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1097.114635][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1097.129590][ T8] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1097.138820][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.147090][ T8] usb 3-1: Product: syz [ 1097.159775][ T8] usb 3-1: Manufacturer: syz [ 1097.165088][ T8] usb 3-1: SerialNumber: syz [ 1097.181919][ T8] usb 3-1: config 0 descriptor?? [ 1097.190711][T19913] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1097.842392][T19913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.852346][T19913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.935099][T19913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.994120][T19913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.195890][ T8] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1098.258924][ T8] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input55 [ 1098.273924][ C0] powermate: config urb returned -71 [ 1098.279584][ C0] powermate: config urb returned -71 [ 1098.285656][ C0] powermate: config urb returned -71 [ 1098.291249][ C0] powermate: config urb returned -71 [ 1098.309515][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1098.318447][ T8] usb 3-1: USB disconnect, device number 73 [ 1098.858571][T19944] netlink: 'syz.7.4042': attribute type 1 has an invalid length. [ 1098.866467][T19944] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4042'. [ 1098.878798][T19944] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1101.174007][T19963] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1101.599357][T19973] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4052'. [ 1102.058337][T19983] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4056'. [ 1102.561951][ T8] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1102.717987][T19970] netlink: 7 bytes leftover after parsing attributes in process `syz.7.4051'. [ 1102.727197][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1104.265072][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 1104.367559][ T8] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1104.390976][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.517820][ T8] usb 4-1: Product: syz [ 1104.526072][ T8] usb 4-1: Manufacturer: syz [ 1104.530706][ T8] usb 4-1: SerialNumber: syz [ 1104.808075][ T8] usb 4-1: config 0 descriptor?? [ 1104.816139][T19985] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1104.824356][ T8] hub 4-1:0.0: bad descriptor, ignoring hub [ 1104.830383][ T8] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1104.840010][ T8] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input56 [ 1105.594815][T15342] usb 4-1: USB disconnect, device number 68 [ 1105.594815][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1106.514555][T20028] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4069'. [ 1107.453556][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1108.281120][T20043] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4074'. [ 1108.315350][T20043] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4074'. [ 1108.324425][T20043] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4074'. [ 1108.684336][T20055] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1109.916648][T20066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4082'. [ 1110.969753][T20067] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4081'. [ 1111.080913][T20084] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4088'. [ 1111.986259][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1112.035088][T20099] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1112.150018][T20101] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1112.152516][ T5918] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1112.332344][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 1112.348584][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.384984][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.414275][ T5918] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1112.442114][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.482669][ T5918] usb 4-1: config 0 descriptor?? [ 1112.920946][ T5918] kye 0003:0458:5011.0025: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1112.939624][T20103] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1112.990335][ T5918] kye 0003:0458:5011.0025: hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 1113.013210][ T5918] kye 0003:0458:5011.0025: tablet-enabling feature report not found [ 1113.021235][ T5918] kye 0003:0458:5011.0025: tablet enabling failed [ 1113.598249][T20105] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4095'. [ 1113.845978][T20115] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1113.854500][ T5918] usb 4-1: USB disconnect, device number 69 [ 1114.030603][T20118] trusted_key: encrypted_key: keylen parameter is missing [ 1114.201341][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1114.250470][T20121] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4100'. [ 1114.272050][T20121] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4100'. [ 1114.281179][T20121] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4100'. [ 1114.312096][T20121] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4100'. [ 1114.440730][T20134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4103'. [ 1114.590317][T20137] netlink: 'syz.5.4105': attribute type 10 has an invalid length. [ 1114.732016][ T5918] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1114.872297][T20147] netlink: 'syz.6.4108': attribute type 23 has an invalid length. [ 1114.880237][T20147] netlink: 244 bytes leftover after parsing attributes in process `syz.6.4108'. [ 1115.357812][T20149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1115.452331][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 1115.463316][T20153] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 1115.510661][T20154] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 1 [ 1115.526609][ T5918] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 1115.539342][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.550894][ T5918] usb 3-1: Product: syz [ 1115.559334][ T5918] usb 3-1: Manufacturer: syz [ 1115.564672][ T5918] usb 3-1: SerialNumber: syz [ 1115.616404][ T5918] usb 3-1: config 0 descriptor?? [ 1115.661219][ T5918] as10x_usb: device has been detected [ 1115.688965][ T5918] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1115.796832][ T5918] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1115.886705][ T5918] as10x_usb: error during firmware upload part1 [ 1116.029572][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.059820][ T5918] Registered device Abilis Systems DVB-Titan [ 1116.915847][ T5918] usb 3-1: USB disconnect, device number 74 [ 1117.007736][ T5918] Unregistered device Abilis Systems DVB-Titan [ 1117.175090][ T5918] as10x_usb: device has been disconnected [ 1118.562262][T20179] netlink: 7 bytes leftover after parsing attributes in process `syz.6.4113'. [ 1119.147636][T20197] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1119.355937][T20201] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1122.154423][T20220] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4128'. [ 1122.422972][T20220] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4128'. [ 1123.527018][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1123.690357][T20241] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1124.622009][ T2144] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1124.676843][T20253] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4140'. [ 1124.753458][T20253] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4140'. [ 1124.790662][ T2144] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.231958][ T2144] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.257691][T20253] gtp2: entered promiscuous mode [ 1125.272032][ T2144] usb 4-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 1125.289502][T20253] gtp2: entered allmulticast mode [ 1125.314965][ T2144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.344581][ T2144] usb 4-1: config 0 descriptor?? [ 1125.474663][T20267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.511761][T20267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.610043][T20275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1125.691974][T15342] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1126.406877][ T2144] wacom 0003:056A:009F.0026: hidraw0: USB HID v0.00 Device [HID 056a:009f] on usb-dummy_hcd.3-1/input0 [ 1127.180772][T20291] debugfs: Directory 'netdev:nicvf0' with parent 'phy28' already present! [ 1127.338103][ T5923] usb 4-1: USB disconnect, device number 70 [ 1127.346264][T20291] debugfs: Directory 'netdev:nicvf0' with parent 'phy28' already present! [ 1128.448162][T20310] FAULT_INJECTION: forcing a failure. [ 1128.448162][T20310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1128.524664][T20310] CPU: 0 UID: 0 PID: 20310 Comm: syz.6.4154 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 1128.535138][T20310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1128.545210][T20310] Call Trace: [ 1128.548499][T20310] [ 1128.551438][T20310] dump_stack_lvl+0x241/0x360 [ 1128.556137][T20310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1128.561350][T20310] ? __pfx__printk+0x10/0x10 [ 1128.565968][T20310] ? snprintf+0xda/0x120 [ 1128.570263][T20310] should_fail_ex+0x3b0/0x4e0 [ 1128.574964][T20310] _copy_to_user+0x31/0xb0 [ 1128.579394][T20310] simple_read_from_buffer+0xca/0x150 [ 1128.584793][T20310] proc_fail_nth_read+0x1e9/0x250 [ 1128.589843][T20310] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1128.595415][T20310] ? rw_verify_area+0x55e/0x6f0 [ 1128.600290][T20310] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1128.605863][T20310] vfs_read+0x1fc/0xb70 [ 1128.610044][T20310] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1128.615961][T20310] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1128.621878][T20310] ? __pfx_vfs_read+0x10/0x10 [ 1128.626582][T20310] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1128.632490][T20310] ? do_sock_setsockopt+0x3e2/0x720 [ 1128.637715][T20310] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1128.643291][T20310] ksys_read+0x18f/0x2b0 [ 1128.647564][T20310] ? __pfx_ksys_read+0x10/0x10 [ 1128.652350][T20310] ? do_syscall_64+0x100/0x230 [ 1128.657128][T20310] ? do_syscall_64+0xb6/0x230 [ 1128.661820][T20310] do_syscall_64+0xf3/0x230 [ 1128.666335][T20310] ? clear_bhb_loop+0x35/0x90 [ 1128.671029][T20310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.676947][T20310] RIP: 0033:0x7f710d77d25c [ 1128.681379][T20310] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1128.701014][T20310] RSP: 002b:00007f710e512030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1128.709450][T20310] RAX: ffffffffffffffda RBX: 00007f710d935fa0 RCX: 00007f710d77d25c [ 1128.717438][T20310] RDX: 000000000000000f RSI: 00007f710e5120a0 RDI: 0000000000000005 [ 1128.725426][T20310] RBP: 00007f710e512090 R08: 0000000000000000 R09: 0000000000000000 [ 1128.733416][T20310] R10: 0000000020000780 R11: 0000000000000246 R12: 0000000000000001 [ 1128.741396][T20310] R13: 0000000000000000 R14: 00007f710d935fa0 R15: 00007fff60735078 [ 1128.749397][T20310] [ 1128.842025][ T5923] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1128.992084][ T5923] usb 4-1: device descriptor read/64, error -71 [ 1129.420081][ T5923] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1129.811985][ T5923] usb 4-1: device descriptor read/64, error -71 [ 1129.922258][ T5923] usb usb4-port1: attempt power cycle [ 1130.629310][ T5923] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1132.218923][ T5923] usb 4-1: device descriptor read/8, error -71 [ 1132.340234][T20345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4168'. [ 1133.272009][T15342] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1133.427268][T20358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4169'. [ 1133.455144][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1133.562006][T15342] usb 6-1: Using ep0 maxpacket: 32 [ 1133.569956][T15342] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.609572][T15342] usb 6-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice=18.00 [ 1133.650460][T15342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.691504][T15342] usb 6-1: config 0 descriptor?? [ 1133.939591][T20370] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4173'. [ 1134.351660][T15342] input: HID 0458:5014 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5014.0027/input/input61 [ 1134.382018][T20373] futex_wake_op: syz.2.4174 tries to shift op by -1; fix this program [ 1134.893033][T15342] kye 0003:0458:5014.0027: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5014] on usb-dummy_hcd.5-1/input0 [ 1134.943566][T15342] usb 6-1: USB disconnect, device number 48 [ 1135.182268][T20389] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1136.807161][T20397] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4180'. [ 1137.770752][T20414] binder: 20410:20414 ioctl 4018620d 0 returned -22 [ 1138.568441][T20419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4187'. [ 1138.694902][T20421] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4188'. [ 1139.727532][T20425] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4192'. [ 1139.790675][T16867] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1139.795321][T20435] futex_wake_op: syz.2.4193 tries to shift op by -1; fix this program [ 1141.330776][T20452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1142.046462][T20454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4198'. [ 1142.086346][T20454] dummy0: entered promiscuous mode [ 1142.095005][T20454] macvtap1: entered promiscuous mode [ 1142.114415][T20454] macvtap1: entered allmulticast mode [ 1142.119833][T20454] dummy0: entered allmulticast mode [ 1142.236152][T20458] dummy0: left allmulticast mode [ 1142.242379][T20458] dummy0: left promiscuous mode [ 1142.283953][T20465] debugfs: Directory 'netdev:nicvf0' with parent 'phy26' already present! [ 1142.301619][T20468] debugfs: Directory 'netdev:nicvf0' with parent 'phy26' already present! [ 1142.352189][ T5888] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1143.382498][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 1143.412505][ T5888] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1143.426517][ T5888] usb 4-1: config 0 has no interface number 0 [ 1143.458277][ T5888] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1143.483976][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.494344][T20488] 9pnet_fd: Insufficient options for proto=fd [ 1143.553815][ T5888] usb 4-1: Product: syz [ 1143.558089][ T5888] usb 4-1: Manufacturer: syz [ 1143.562981][ T5888] usb 4-1: SerialNumber: syz [ 1143.570981][ T5888] usb 4-1: config 0 descriptor?? [ 1143.591700][T20493] binder: BINDER_SET_CONTEXT_MGR already set [ 1143.597224][ T5888] usb 4-1: selecting invalid altsetting 1 [ 1143.633068][T20493] binder: 20491:20493 ioctl 40046207 0 returned -16 [ 1143.665795][T20495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4209'. [ 1143.788670][T20492] ./file0: Can't open blockdev [ 1143.794163][ T29] audit: type=1326 audit(1732482373.166:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20489 comm="syz.7.4210" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd41297e819 code=0xffff0000 [ 1144.191801][ T5888] dvb_ttusb_budget: ttusb_init_controller: error [ 1144.198231][ T5888] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1144.368109][ T5888] DVB: Unable to find symbol stv0299_attach() [ 1144.432334][ T5888] DVB: Unable to find symbol tda8083_attach() [ 1144.438876][ T5888] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1144.502132][ T5888] usb 4-1: USB disconnect, device number 75 [ 1144.653109][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1144.865329][T20518] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4218'. [ 1144.877089][T20518] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4218'. [ 1145.122009][ T5888] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1145.244748][T20527] netlink: 'syz.5.4221': attribute type 10 has an invalid length. [ 1145.254504][T20527] bond0: (slave bond_slave_0): Releasing backup interface [ 1145.302124][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 1145.309971][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.321391][ T5888] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1145.339012][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.366965][ T5888] usb 4-1: config 0 descriptor?? [ 1145.382122][ T5888] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1145.413729][T15342] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1145.613859][T15342] usb 3-1: Using ep0 maxpacket: 16 [ 1145.631112][T15342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.659009][T15342] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1145.701439][T15342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.766055][T15342] usb 3-1: config 0 descriptor?? [ 1145.843751][T20516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.877908][T20516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.252473][ T5888] gspca_vc032x: reg_w err -110 [ 1146.259829][ T5888] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 1146.622000][T20542] fuse: Bad value for 'fd' [ 1146.665106][T15342] lenovo 0003:17EF:6047.0028: unknown main item tag 0x0 [ 1146.672232][T15342] lenovo 0003:17EF:6047.0028: unknown main item tag 0x0 [ 1146.681017][T15342] lenovo 0003:17EF:6047.0028: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 1148.237591][ T2144] usb 4-1: USB disconnect, device number 76 [ 1148.402341][T15342] usb 3-1: USB disconnect, device number 75 [ 1149.637175][T20573] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4236'. [ 1149.943722][T20581] netlink: 'syz.7.4240': attribute type 10 has an invalid length. [ 1150.914750][T20584] netlink: 'syz.3.4241': attribute type 23 has an invalid length. [ 1150.923196][T20584] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4241'. [ 1154.347675][T20617] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4252'. [ 1154.600410][T20626] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4255'. [ 1154.642168][ T5888] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1154.806769][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1154.819502][ T5888] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1154.846383][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.877357][ T5888] usb 4-1: config 0 descriptor?? [ 1154.984924][T20633] futex_wake_op: syz.2.4258 tries to shift op by -1; fix this program [ 1155.681918][ T5361] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1155.852134][ T5361] usb 7-1: Using ep0 maxpacket: 32 [ 1155.859840][ T5361] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1155.872543][ T5361] usb 7-1: config 0 has no interface number 0 [ 1155.889738][ T5361] usb 7-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1155.918371][ T5361] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1155.964071][ T5888] usb 4-1: string descriptor 0 read error: -71 [ 1155.999815][ T5888] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1156.115951][ T5361] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.144046][ T5888] usb 4-1: USB disconnect, device number 77 [ 1156.160795][ T5361] usb 7-1: Product: syz [ 1156.198530][ T5361] usb 7-1: Manufacturer: syz [ 1156.277875][ T5361] usb 7-1: SerialNumber: syz [ 1156.298325][ T5361] usb 7-1: config 0 descriptor?? [ 1156.320087][T20635] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1156.337340][ T5361] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1156.362813][ T5361] em28xx 7-1:0.132: Video interface 132 found: bulk [ 1157.092515][ T5923] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 1157.269683][ T5923] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1157.300844][ T5923] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1157.396044][ T5923] usb 3-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 1157.453385][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.499399][ T5923] usb 3-1: Product: syz [ 1157.547931][ T5923] usb 3-1: Manufacturer: syz [ 1157.557372][T20669] futex_wake_op: syz.3.4271 tries to shift op by -1; fix this program [ 1157.568184][ T5923] usb 3-1: SerialNumber: syz [ 1157.603480][T20661] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1157.615445][ T5361] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 1159.017512][ T5361] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1159.142243][ T5361] em28xx 7-1:0.132: board has no eeprom [ 1159.392145][ T5361] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1159.400013][ T5361] em28xx 7-1:0.132: analog set to bulk mode. [ 1159.454214][ T5923] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input62 [ 1159.474453][ T5197] bcm5974 3-1:1.0: could not read from device [ 1159.482126][ T5888] em28xx 7-1:0.132: Registering V4L2 extension [ 1160.214681][ T5197] bcm5974 3-1:1.0: could not read from device [ 1160.267482][ T5197] bcm5974 3-1:1.0: could not read from device [ 1160.307111][ T5923] usb 3-1: USB disconnect, device number 76 [ 1160.315900][ T5888] em28xx 7-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1160.342973][ T5888] em28xx 7-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1160.356691][ T5891] usb 7-1: USB disconnect, device number 36 [ 1160.363600][ T5891] em28xx 7-1:0.132: Disconnecting em28xx [ 1160.479392][ T5888] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 1160.491970][ T5888] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 1160.507064][ T5888] em28xx 7-1:0.132: No AC97 audio processor [ 1160.575486][ T5888] usb 7-1: Decoder not found [ 1160.580132][ T5888] em28xx 7-1:0.132: failed to create media graph [ 1160.626294][ T5887] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1160.909955][ T5888] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 1161.500136][ T5888] em28xx 7-1:0.132: Remote control support is not available for this card. [ 1161.513782][ T5891] em28xx 7-1:0.132: Closing input extension [ 1161.519743][ T5891] ================================================================== [ 1161.527815][ T5891] BUG: KASAN: slab-use-after-free in media_device_unregister+0x154/0x470 [ 1161.536258][ T5891] Read of size 8 at addr ffff88806ba88210 by task kworker/0:7/5891 [ 1161.544164][ T5891] [ 1161.546502][ T5891] CPU: 0 UID: 0 PID: 5891 Comm: kworker/0:7 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 1161.556929][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1161.566996][ T5891] Workqueue: usb_hub_wq hub_event [ 1161.572049][ T5891] Call Trace: [ 1161.575344][ T5891] [ 1161.578285][ T5891] dump_stack_lvl+0x241/0x360 [ 1161.582998][ T5891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1161.588217][ T5891] ? __pfx__printk+0x10/0x10 [ 1161.592829][ T5891] ? _printk+0xd5/0x120 [ 1161.597009][ T5891] ? __virt_addr_valid+0x183/0x530 [ 1161.602139][ T5891] ? __virt_addr_valid+0x183/0x530 [ 1161.607264][ T5891] print_report+0x169/0x550 [ 1161.611772][ T5891] ? __virt_addr_valid+0x183/0x530 [ 1161.616884][ T5891] ? __virt_addr_valid+0x183/0x530 [ 1161.622003][ T5891] ? __virt_addr_valid+0x45f/0x530 [ 1161.627128][ T5891] ? __phys_addr+0xba/0x170 [ 1161.631642][ T5891] ? media_device_unregister+0x154/0x470 [ 1161.637302][ T5891] kasan_report+0x143/0x180 [ 1161.641832][ T5891] ? media_device_unregister+0x154/0x470 [ 1161.647494][ T5891] media_device_unregister+0x154/0x470 [ 1161.652977][ T5891] em28xx_release_resources+0xa7/0x230 [ 1161.658454][ T5891] em28xx_usb_disconnect+0x1cc/0x530 [ 1161.663753][ T5891] usb_unbind_interface+0x25e/0x940 [ 1161.668977][ T5891] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 1161.674714][ T5891] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1161.680437][ T5891] device_release_driver_internal+0x503/0x7c0 [ 1161.686518][ T5891] bus_remove_device+0x34f/0x420 [ 1161.691487][ T5891] device_del+0x57a/0x9b0 [ 1161.695834][ T5891] ? kobject_put+0x272/0x480 [ 1161.700441][ T5891] ? __pfx_device_del+0x10/0x10 [ 1161.705313][ T5891] ? kobject_put+0x44d/0x480 [ 1161.709917][ T5891] usb_disable_device+0x3bf/0x850 [ 1161.714944][ T5891] usb_disconnect+0x340/0x950 [ 1161.719625][ T5891] hub_event+0x1ebc/0x5150 [ 1161.724047][ T5891] ? debug_object_deactivate+0x2d5/0x390 [ 1161.729675][ T5891] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1161.734874][ T5891] ? __pfx_hub_event+0x10/0x10 [ 1161.739640][ T5891] ? __pfx_lock_acquire+0x10/0x10 [ 1161.744666][ T5891] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1161.750643][ T5891] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1161.756973][ T5891] ? process_scheduled_works+0x976/0x1850 [ 1161.762693][ T5891] process_scheduled_works+0xa63/0x1850 [ 1161.768248][ T5891] ? __pfx_process_scheduled_works+0x10/0x10 [ 1161.774234][ T5891] ? assign_work+0x364/0x3d0 [ 1161.778824][ T5891] worker_thread+0x870/0xd30 [ 1161.783409][ T5891] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1161.789299][ T5891] ? __kthread_parkme+0x169/0x1d0 [ 1161.794317][ T5891] ? __pfx_worker_thread+0x10/0x10 [ 1161.799419][ T5891] kthread+0x2f0/0x390 [ 1161.803483][ T5891] ? __pfx_worker_thread+0x10/0x10 [ 1161.808592][ T5891] ? __pfx_kthread+0x10/0x10 [ 1161.813186][ T5891] ret_from_fork+0x4b/0x80 [ 1161.817600][ T5891] ? __pfx_kthread+0x10/0x10 [ 1161.822196][ T5891] ret_from_fork_asm+0x1a/0x30 [ 1161.826973][ T5891] [ 1161.829988][ T5891] [ 1161.832308][ T5891] Allocated by task 5888: [ 1161.836627][ T5891] kasan_save_track+0x3f/0x80 [ 1161.841310][ T5891] __kasan_kmalloc+0x98/0xb0 [ 1161.845910][ T5891] __kmalloc_cache_noprof+0x19c/0x2c0 [ 1161.851284][ T5891] em28xx_v4l2_init+0xfd/0x2f40 [ 1161.856131][ T5891] em28xx_init_extension+0x120/0x1c0 [ 1161.861407][ T5891] process_scheduled_works+0xa63/0x1850 [ 1161.866945][ T5891] worker_thread+0x870/0xd30 [ 1161.871525][ T5891] kthread+0x2f0/0x390 [ 1161.875594][ T5891] ret_from_fork+0x4b/0x80 [ 1161.880002][ T5891] ret_from_fork_asm+0x1a/0x30 [ 1161.884759][ T5891] [ 1161.887069][ T5891] Freed by task 5888: [ 1161.891030][ T5891] kasan_save_track+0x3f/0x80 [ 1161.895718][ T5891] kasan_save_free_info+0x40/0x50 [ 1161.900748][ T5891] __kasan_slab_free+0x59/0x70 [ 1161.905511][ T5891] kfree+0x1a0/0x440 [ 1161.909407][ T5891] em28xx_v4l2_init+0x16d7/0x2f40 [ 1161.914433][ T5891] em28xx_init_extension+0x120/0x1c0 [ 1161.919713][ T5891] process_scheduled_works+0xa63/0x1850 [ 1161.925273][ T5891] worker_thread+0x870/0xd30 [ 1161.929863][ T5891] kthread+0x2f0/0x390 [ 1161.933922][ T5891] ret_from_fork+0x4b/0x80 [ 1161.938333][ T5891] ret_from_fork_asm+0x1a/0x30 [ 1161.943097][ T5891] [ 1161.945415][ T5891] The buggy address belongs to the object at ffff88806ba88000 [ 1161.945415][ T5891] which belongs to the cache kmalloc-8k of size 8192 [ 1161.959464][ T5891] The buggy address is located 528 bytes inside of [ 1161.959464][ T5891] freed 8192-byte region [ffff88806ba88000, ffff88806ba8a000) [ 1161.973343][ T5891] [ 1161.975657][ T5891] The buggy address belongs to the physical page: [ 1161.982068][ T5891] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6ba88 [ 1161.990829][ T5891] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1161.999317][ T5891] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1162.006859][ T5891] page_type: f5(slab) [ 1162.010831][ T5891] raw: 00fff00000000040 ffff88801ac42280 ffffea0001c07c00 0000000000000004 [ 1162.019401][ T5891] raw: 0000000000000000 0000000080020002 00000001f5000000 0000000000000000 [ 1162.027976][ T5891] head: 00fff00000000040 ffff88801ac42280 ffffea0001c07c00 0000000000000004 [ 1162.036632][ T5891] head: 0000000000000000 0000000080020002 00000001f5000000 0000000000000000 [ 1162.045296][ T5891] head: 00fff00000000003 ffffea0001aea201 ffffffffffffffff 0000000000000000 [ 1162.053962][ T5891] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1162.062622][ T5891] page dumped because: kasan: bad access detected [ 1162.069032][ T5891] page_owner tracks the page as allocated [ 1162.074736][ T5891] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 19877, tgid 19874 (syz.7.4020), ts 1094319433337, free_ts 1090575672251 [ 1162.095831][ T5891] post_alloc_hook+0x1f3/0x230 [ 1162.100604][ T5891] get_page_from_freelist+0x363e/0x3790 [ 1162.106141][ T5891] __alloc_pages_noprof+0x292/0x710 [ 1162.111339][ T5891] alloc_pages_mpol_noprof+0x3e8/0x680 [ 1162.116784][ T5891] alloc_slab_page+0x6a/0x140 [ 1162.121453][ T5891] allocate_slab+0x5a/0x2f0 [ 1162.125952][ T5891] ___slab_alloc+0xcd1/0x14b0 [ 1162.130620][ T5891] __slab_alloc+0x58/0xa0 [ 1162.134941][ T5891] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 1162.141350][ T5891] kmalloc_reserve+0x111/0x2a0 [ 1162.146103][ T5891] pskb_expand_head+0x1f0/0x1380 [ 1162.151046][ T5891] ip_tunnel_xmit+0x1de9/0x26a0 [ 1162.155896][ T5891] ipgre_xmit+0x972/0xd20 [ 1162.160224][ T5891] dev_hard_start_xmit+0x27a/0x7e0 [ 1162.165328][ T5891] __dev_queue_xmit+0x1b73/0x3f50 [ 1162.170347][ T5891] __bpf_tx_skb+0x18e/0x260 [ 1162.174844][ T5891] page last free pid 19810 tgid 19810 stack trace: [ 1162.181335][ T5891] free_unref_page+0xded/0x1130 [ 1162.186189][ T5891] __folio_put+0x2c7/0x440 [ 1162.190607][ T5891] skb_release_data+0x483/0x8a0 [ 1162.195451][ T5891] sk_skb_reason_drop+0x1c9/0x380 [ 1162.200470][ T5891] mptcp_destroy_common+0x428/0x600 [ 1162.205661][ T5891] mptcp_destroy+0x86/0x120 [ 1162.210155][ T5891] __mptcp_destroy_sock+0x154/0x400 [ 1162.215344][ T5891] __mptcp_close+0x7c8/0xb60 [ 1162.219927][ T5891] mptcp_close+0x2a/0x1a0 [ 1162.224250][ T5891] inet_release+0x17d/0x200 [ 1162.228747][ T5891] sock_close+0xbc/0x240 [ 1162.232985][ T5891] __fput+0x23c/0xa50 [ 1162.236959][ T5891] task_work_run+0x24f/0x310 [ 1162.241542][ T5891] syscall_exit_to_user_mode+0x13f/0x340 [ 1162.247165][ T5891] do_syscall_64+0x100/0x230 [ 1162.251742][ T5891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.257634][ T5891] [ 1162.259944][ T5891] Memory state around the buggy address: [ 1162.265566][ T5891] ffff88806ba88100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1162.273617][ T5891] ffff88806ba88180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1162.281667][ T5891] >ffff88806ba88200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1162.289721][ T5891] ^ [ 1162.294300][ T5891] ffff88806ba88280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1162.302353][ T5891] ffff88806ba88300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1162.310400][ T5891] ================================================================== [ 1162.318650][ T5891] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1162.325844][ T5891] CPU: 0 UID: 0 PID: 5891 Comm: kworker/0:7 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 1162.336260][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1162.346321][ T5891] Workqueue: usb_hub_wq hub_event [ 1162.351356][ T5891] Call Trace: [ 1162.354637][ T5891] [ 1162.357579][ T5891] dump_stack_lvl+0x241/0x360 [ 1162.362278][ T5891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1162.367495][ T5891] ? __pfx__printk+0x10/0x10 [ 1162.372112][ T5891] ? preempt_schedule+0xe1/0xf0 [ 1162.376986][ T5891] ? vscnprintf+0x5d/0x90 [ 1162.381333][ T5891] panic+0x349/0x880 [ 1162.385248][ T5891] ? check_panic_on_warn+0x21/0xb0 [ 1162.390370][ T5891] ? __pfx_panic+0x10/0x10 [ 1162.394812][ T5891] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 1162.400815][ T5891] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1162.407167][ T5891] ? print_report+0x502/0x550 [ 1162.411858][ T5891] check_panic_on_warn+0x86/0xb0 [ 1162.416819][ T5891] ? media_device_unregister+0x154/0x470 [ 1162.422473][ T5891] end_report+0x77/0x160 [ 1162.426736][ T5891] kasan_report+0x154/0x180 [ 1162.431252][ T5891] ? media_device_unregister+0x154/0x470 [ 1162.436907][ T5891] media_device_unregister+0x154/0x470 [ 1162.442389][ T5891] em28xx_release_resources+0xa7/0x230 [ 1162.447854][ T5891] em28xx_usb_disconnect+0x1cc/0x530 [ 1162.453149][ T5891] usb_unbind_interface+0x25e/0x940 [ 1162.458371][ T5891] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 1162.464114][ T5891] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1162.469858][ T5891] device_release_driver_internal+0x503/0x7c0 [ 1162.475954][ T5891] bus_remove_device+0x34f/0x420 [ 1162.480916][ T5891] device_del+0x57a/0x9b0 [ 1162.485261][ T5891] ? kobject_put+0x272/0x480 [ 1162.489868][ T5891] ? __pfx_device_del+0x10/0x10 [ 1162.494735][ T5891] ? kobject_put+0x44d/0x480 [ 1162.499347][ T5891] usb_disable_device+0x3bf/0x850 [ 1162.504394][ T5891] usb_disconnect+0x340/0x950 [ 1162.509092][ T5891] hub_event+0x1ebc/0x5150 [ 1162.513534][ T5891] ? debug_object_deactivate+0x2d5/0x390 [ 1162.519186][ T5891] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1162.524412][ T5891] ? __pfx_hub_event+0x10/0x10 [ 1162.529196][ T5891] ? __pfx_lock_acquire+0x10/0x10 [ 1162.534232][ T5891] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1162.540221][ T5891] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1162.546567][ T5891] ? process_scheduled_works+0x976/0x1850 [ 1162.552316][ T5891] process_scheduled_works+0xa63/0x1850 [ 1162.557901][ T5891] ? __pfx_process_scheduled_works+0x10/0x10 [ 1162.563915][ T5891] ? assign_work+0x364/0x3d0 [ 1162.568529][ T5891] worker_thread+0x870/0xd30 [ 1162.573137][ T5891] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1162.579051][ T5891] ? __kthread_parkme+0x169/0x1d0 [ 1162.584090][ T5891] ? __pfx_worker_thread+0x10/0x10 [ 1162.589208][ T5891] kthread+0x2f0/0x390 [ 1162.593303][ T5891] ? __pfx_worker_thread+0x10/0x10 [ 1162.598427][ T5891] ? __pfx_kthread+0x10/0x10 [ 1162.603025][ T5891] ret_from_fork+0x4b/0x80 [ 1162.607454][ T5891] ? __pfx_kthread+0x10/0x10 [ 1162.612061][ T5891] ret_from_fork_asm+0x1a/0x30 [ 1162.616851][ T5891] [ 1162.620149][ T5891] Kernel Offset: disabled [ 1162.624476][ T5891] Rebooting in 86400 seconds..