last executing test programs: 8m5.891233387s ago: executing program 1 (id=228): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80100) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_io_uring_setup(0x3c08, &(0x7f00000005c0)={0x0, 0x8ec7, 0x10, 0x1, 0x39a}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000340)=0x7, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) io_uring_enter(r1, 0x1d69, 0x0, 0x0, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000340)=0xf) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 8m5.84228064s ago: executing program 1 (id=229): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x20000000000000bb, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f00000005c0)=0x440009, 0x4) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x4890) ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, &(0x7f0000000440)=0x1f) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_usb_connect(0x4, 0x44, &(0x7f0000000c80)=ANY=[], 0x0) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 8m2.756799794s ago: executing program 1 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x2000000}], 0x400000000000172, 0x4000000) 8m1.551822128s ago: executing program 1 (id=239): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80100) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_io_uring_setup(0x3c08, &(0x7f00000005c0)={0x0, 0x8ec7, 0x10, 0x1, 0x39a}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000340)=0x7, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) io_uring_enter(r1, 0x1d69, 0x0, 0x0, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000340)=0xf) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 8m1.116317428s ago: executing program 1 (id=245): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002f40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x788, 0x180, 0x250, 0x250, 0x0, 0x478, 0x6b8, 0x6b8, 0x6b8, 0x6b8, 0x6b8, 0x6, &(0x7f0000000240), {[{{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'gretap0\x00', {0xff}, 'team0\x00', {}, 0xc, 0x1b}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@private=0xa010100, 0x2a, 0x16, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0xbe52, [0x5, 0x7], 0x10001, 0x30, 0x0, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x44}, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @loopback, @private0, @dev={0xfe, 0x80, '\x00', 0x44}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @remote], 0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@loopback, 0x34, 0x3d, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [0xff, 0x0, 0xff, 0xff0000ff], [0x0, 0xff, 0xffffff00, 0xff000000], 'dummy0\x00', 'gretap0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x5, 0x2}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@hl={{0x28}, {0x1, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x1}, {0xffffffffffffffff, 0x5, 0x4}, {0x3, 0x0, 0x6}, 0x9, 0x9372}}}, {{@ipv6={@loopback, @loopback, [0xff, 0x0, 0x0, 0xff], [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], 'veth1_virt_wifi\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0x0, 0x8, 0x0, 0x4}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x9, @ipv4=@loopback, 0x4e20}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r2, &(0x7f0000000600)={0x2020}, 0x2020) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002780)) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4, 0x0, 0x0, 0x73, &(0x7f0000000140)="6dd843c5c81a54534156b94df57499dbaf83f9f0b4786b8e05c226c2fabd77635b429985c5a6dd9ce15eccf216b562887260e1ff055cb5161ac4142c363e0015054a9bee6caca74e27bcf633464fabcf44db08dd9bab60e2e1866cf01fb4baee0c77798629354ca5d789ea77d1231e07297ab1", 0x5}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002800)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6c8, 0xf0, 0x5f8, 0x508, 0x508, 0x508, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x6, &(0x7f00000000c0), {[{{@ipv6={@private0, @remote, [0xff, 0xff000000, 0xffffff00, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'gretap0\x00', {0xff}, {}, 0x0, 0x4, 0x4, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'veth0_macvtap\x00', {0x1}}}}, {{@ipv6={@empty, @loopback, [0xffffffff, 0xff, 0xffff00, 0xffffff00], [0xff000000, 0xffffffff, 0x0, 0xffffffff], 'macvlan1\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x2e, 0x1, 0x4, 0x24}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:man_t:s0\x00'}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0xffffff00, 0x0, 0xffffffff], [0xffffff00, 0xffffffff], 'nr0\x00', 'pim6reg0\x00', {}, {0xff}, 0x5e, 0x4b, 0x4, 0x4}, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@hbh={{0x48}, {0x8, 0x1, 0x0, [0x1000, 0xe2, 0x5, 0x9, 0xfff, 0x95b8, 0xffff, 0x31, 0x7, 0x80, 0x2, 0xc800, 0x0, 0x40, 0x7, 0x5], 0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@empty, 0x39, 0x23, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x5, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x21}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0xffffffff, 0xff000000], [0x0, 0xffff00, 0xff000000, 0xff000000], 'bond0\x00', 'nr0\x00', {}, {0xff}, 0x11, 0x7f, 0x6, 0x40}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'vxcan1\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x728) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) sendfile(r4, r4, 0x0, 0x8000002) 8m0.024643121s ago: executing program 1 (id=248): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) syz_emit_ethernet(0xfe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="86", 0x1}], 0x1}}], 0x1, 0x20004000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x2000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000040008100000002000000200001801400040000000000000000000000ffffac1414aa060001000a"], 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'caif0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 7m44.967097995s ago: executing program 32 (id=248): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[], 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) syz_emit_ethernet(0xfe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="86", 0x1}], 0x1}}], 0x1, 0x20004000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x2000, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000040008100000002000000200001801400040000000000000000000000ffffac1414aa060001000a"], 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'caif0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 45.256693894s ago: executing program 0 (id=1812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) 45.19228422s ago: executing program 0 (id=1814): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) pipe(&(0x7f0000000280)={0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@newtaction={0x81c, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x808, 0x1, [@m_bpf={0x7bc, 0x18, 0x0, 0x0, {{0x8}, {0x4}, {0x792, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x81c}, 0x1, 0x0, 0x0, 0x30000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x48b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x7, 0x8) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = inotify_init1(0x0) read(r4, &(0x7f0000000140)=""/80, 0x50) inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x50007a2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x40) landlock_create_ruleset(0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x49, 0x0, &(0x7f0000000000)) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) fcntl$dupfd(r5, 0x0, r5) 39.583265483s ago: executing program 0 (id=1820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xc2fb}, &(0x7f0000000040)=0x8) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) openat$fb0(0xffffffffffffff9c, &(0x7f00000004c0), 0x4000, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f0000000080)=@generic={0x8}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r4, 0xcccccccc}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb660, 0x0, 0x0, 0x0, 0xf69}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100007}]}, &(0x7f0000000400)='syzkaller\x00', 0x3, 0x42, &(0x7f0000000500)=""/66, 0x41100, 0x41, '\x00', 0x0, @sk_skb=0x5, r1, 0x8, &(0x7f0000000480)={0xa, 0x23}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xe, 0x5, 0x40}, 0x10, r11, r5, 0x4, &(0x7f0000000180)=[r1], &(0x7f0000000640)=[{0x4, 0x5, 0xc, 0xa}, {0x0, 0xfffffffd, 0x3, 0x2}, {0x2, 0x2000005, 0x9, 0x3}, {0x5, 0x3, 0x8, 0x1}], 0x10, 0x1000, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r4], &(0x7f0000000200), &(0x7f00000000c0)=[r10], 0x0, 0x0, 0x300}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000003c0)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0xa, 0x0, 0xbbbbbbbb}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x5, 0x0, 0x7fff, 0x0, 0x4, 0xfffc}) 38.600646874s ago: executing program 0 (id=1825): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000b00)={'hsr0\x00', 0x9}) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a18100310000", 0x17}], 0x1}, 0x4000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)=0x800) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffffffffffdbd) io_uring_setup(0x2fa, &(0x7f0000000200)={0x0, 0x5b5d, 0x200, 0x0, 0x1f5, 0x0, r0}) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r0, &(0x7f0000000b40)=""/4096, 0x1000) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfe16) 38.55067877s ago: executing program 0 (id=1826): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x20000000000000bb, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f00000005c0)=0x440009, 0x4) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x4890) ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, &(0x7f0000000440)=0x1f) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000dbe000/0x4000)=nil, 0x4000, 0x1, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_usb_connect(0x4, 0x44, &(0x7f0000000c80)=ANY=[], 0x0) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 37.084051222s ago: executing program 2 (id=1830): openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000003380)) r3 = eventfd2(0x1, 0x1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 36.264209539s ago: executing program 3 (id=1832): mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000180)=0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f00000001c0)="c86752837bfc4930a9e263a1f5c3497faa0ba3dc9762cd1aeaef24195affe2e8f75ea026546997b7b1cac40fd2f6d95fc40a0c1a2732fb5af148a0902efad84f711b04e3092eec85f48d9caf31f4d70d9e815667fd9efdb639396d0bb709d417c36865e278e87e239cca5fed4cf557fee18b5170155010d848faaf2ffb02461c4c8a56800f9e7018f782cd96672d", 0x8e, 0x200480c4, &(0x7f0000000380)={0x11, 0x1, r3, 0x1, 0x83, 0x6, @local}, 0x14) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000002c0)=@multiplanar_userptr={0x7, 0x2, 0x4, 0x0, 0x0, {}, {0x2, 0x0, 0x9, 0x6, 0x4, 0x7, "5d912f34"}, 0x4, 0x2, {&(0x7f0000000100)=[{0x0, 0x1, {&(0x7f0000000080)}, 0x2}, {0x8, 0x2, {&(0x7f00000000c0)}, 0x3}]}, 0x1, 0x0, r1}) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0xf4, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000050002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140ff"], 0x90}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f00100001800207e05bd7000ffdbdf25e0000002000000000000000000000000e00000020000000000000000000000004a2400114e2100000a000080330000005a13e43921704acbf5a56741cf0d8556c50cc5b9f980d312ce7f9a56b0cc841d5042667654fe3888a0039cdc169c4f12600c3a493c805253b6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d56c000000ff020000000000000000000000000001030000000000000003000000000000000000000000000000040000000000000009000000000000000500000000000000ffffff7f00000000000200000000000007000000000000000100008000000000050000000000000000800000000000000100010008000000010001002cbd7000003500000000020c40000000000000005900000000000000ed0003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028050000b9ebb0f30a6ef9b62fe62ea58187924148f6d3b4ffec83eb715356c7de6614a6fc3701dcdff11783317d93a0662b56f613e75035d4ead73fe38b53a89052e5c57db709c4f055159bd6d7fd3373bcfd74007f6b2808ec5a4ff309fe4e287a3a51fc5871d930ee87772e33ee40c23b5a4a0007e9f21d695fb3e22a8bdb0c5d682671f4f677e384297bd9bd983bfb7d355488f7f2f8fd22fba2c806416771062dd86d5e3911ce00000008000b0002000000"], 0x1f0}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140), 0x109102, 0x0) write$6lowpan_enable(r6, &(0x7f00000000c0)='0', 0x1) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$llc(r7, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x5, &(0x7f0000001100)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffec8, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) r11 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000001f80)=r10, 0x4) r12 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x33fe0) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r13, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r13, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x3, 0x1]}, 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r13, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0x8) socket$phonet_pipe(0x23, 0x5, 0x2) 35.551493969s ago: executing program 2 (id=1834): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, 0x0) unshare(0x2040400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000340)={0xc60, 0x3, 0x101, 0x5, 0x15, "89380e1ed2b75a632b4848a68f0ab4929ebea0"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kfree\x00'}, 0x19) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x2, {0x0, 0x1ee}}, 0x18, &(0x7f0000000040)={0x0}}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) setsockopt$inet6_buf(r3, 0x29, 0xd3, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0x30) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000280)={0x3, 0xffffffffffffffff, 0x1, {0x7fffffff, 0xffffffff}, 0x8}, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe70305"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$dsp(r6, &(0x7f0000003200)=""/4105, 0x1009) write$dsp(r0, &(0x7f0000002200)='D', 0x1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$rxrpc(0x21, 0x2, 0xa) 35.463446637s ago: executing program 0 (id=1835): r0 = syz_io_uring_setup(0xfb2, &(0x7f00000002c0)={0x0, 0xbb06, 0x20, 0x2, 0x2c3}, &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000700)={&(0x7f0000002000)={[{&(0x7f0000000400)="120293fc89707b7d01fa1c2244c88d143f1e11f21dab28fc92557e48070004c811925b6abd3f9c01374fb77d62a7ae93", 0x30, 0x3}, {&(0x7f0000000440)="90fc634ef93aa7b13f4592149f290fe2b1eba38f5ec3bd99a865dc7ab789663450c971441c2ebe87262b118c7771f121686049d567ae67272a7d39e9983f541611beeff7c11a42e43c71e9c347febc21e567ee01b132df4b8e4413e8dce4e5b4cb7476f5871deeb1a7c70d6cfd1f3cc0c6c0ecdab4f07addd4a39f059fb4e8daa6e095768be8859c2f5c3387ee1e27f0afc4a546778b688ad369e11e018dce7cc66a563be9c5a72d8216eaee0cbf5cbb869673a4d7766b3719", 0xb9}, {0x0, 0x0, 0x1}, {&(0x7f0000000600)="4d7951e2008ae984b8efde58df43a79afdc13dbb6bcf9e96edcb04df656734565e1e485b363385cac28b28afe7102d08677225a3279533e89e01863eeb1255fa30e6f8e0b09fa2869a7b81486e3ce684c63d01eee9084d6f96ca9ff7fb895f9a4f7de4ec0c3029c10122fb7112d0e5f817abfed4feabca2b64dee3b74f8a9be7602b95add9b91333b0351e0d47c63940fd65b1d17c18aec78283e7b078ae8e69a8d8ffc4fd2fd7fa31aa07e2b53b2e721e3458ae4a1841535e8afca693b567df40bdae41c4381eaf08fe86bd7bb70baedd341255942ce781d670afe8bfa0ecd232988337f04b66ae68", 0xe9, 0x3}]}, 0x4, 0x2}, 0x1) socket$inet(0x2, 0x2, 0x1) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x8000000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket(0x25, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000010000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7fff, @bcast, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) syz_open_procfs(0x0, &(0x7f00000003c0)='net/netstat\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x101001, 0x0) read$FUSE(r3, 0x0, 0x0) getpeername$unix(r3, &(0x7f0000000080)=@abs, &(0x7f0000000200)=0x6e) 34.588390701s ago: executing program 2 (id=1840): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x4e0d) syz_create_resource$binfmt(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) r2 = socket$inet6(0xa, 0x3, 0xff) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x5}, 0x1c) dup2(r0, r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x38}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @private1}}, {{0xa, 0x0, 0x0, @private1}}]}, 0x190) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000240)=0x2f) 33.097021438s ago: executing program 3 (id=1843): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x0, 0x2000000, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) close_range(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x82000003}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(r6, &(0x7f00000000c0)=""/108, 0x6c) read$dsp(r6, &(0x7f0000000200)=""/168, 0xa8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r7, 0xffffffffffffff65, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040), 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe99, 0x16, 0x8, 0x0, 0x0}}, 0x10) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0x1}, {0x10, 0x9}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000540)={&(0x7f0000000300), 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x110) 32.903668491s ago: executing program 3 (id=1844): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7b5, 0x312, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000180)={0x0, 0x8, 0x4, {0x4, 0x2, "8453"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 32.788549208s ago: executing program 5 (id=1845): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x20000000000000bb, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f00000005c0)=0x440009, 0x4) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x4890) ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, &(0x7f0000000440)=0x1f) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000dbe000/0x4000)=nil, 0x4000, 0x1, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_usb_connect(0x4, 0x44, &(0x7f0000000c80)=ANY=[], 0x0) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 31.991624854s ago: executing program 2 (id=1846): socket$kcm(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='contention_end\x00', r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)="255161fc12e31d068d10d1c2bd39", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 31.966259624s ago: executing program 2 (id=1847): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000b00)={'hsr0\x00', 0x9}) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181003100000001090000000000000e000a", 0x23}], 0x1}, 0x4000) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)=0x800) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffffffffffdbd) io_uring_setup(0x2fa, &(0x7f0000000200)={0x0, 0x5b5d, 0x200, 0x0, 0x1f5, 0x0, r0}) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r0, &(0x7f0000000b40)=""/4096, 0x1000) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfe16) 31.906262417s ago: executing program 2 (id=1848): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x8, 0x26, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000005e0a0000000000003655000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018130000", @ANYRES32, @ANYBLOB="000000000000000018200000", @ANYRES32=r0, @ANYBLOB="000000000d000000181a0000", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018400000010000000000000000000000181b0000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x4000, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff9a, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x6}, 0xffffffff, 0xfffff7fc, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x6c}, 0xa, @in=@multicast1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x5}}, 0xe8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x334a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, &(0x7f0000000240), &(0x7f0000000280)=0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0xffff0000, @ipv4={'\x00', '\xff\xff', @dev}, 0x8}, 0x1c) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r5, &(0x7f0000000300)=""/154, 0x9a) socket$kcm(0x11, 0x1, 0x300) 29.864667282s ago: executing program 3 (id=1853): mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000180)=0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f00000001c0)="c86752837bfc4930a9e263a1f5c3497faa0ba3dc9762cd1aeaef24195affe2e8f75ea026546997b7b1cac40fd2f6d95fc40a0c1a2732fb5af148a0902efad84f711b04e3092eec85f48d9caf31f4d70d9e815667fd9efdb639396d0bb709d417c36865e278e87e239cca5fed4cf557fee18b5170155010d848faaf2ffb02461c4c8a56800f9e7018f782cd96672d", 0x8e, 0x200480c4, &(0x7f0000000380)={0x11, 0x1, r3, 0x1, 0x83, 0x6, @local}, 0x14) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000002c0)=@multiplanar_userptr={0x7, 0x2, 0x4, 0x0, 0x0, {}, {0x2, 0x0, 0x9, 0x6, 0x4, 0x7, "5d912f34"}, 0x4, 0x2, {&(0x7f0000000100)=[{0x0, 0x1, {&(0x7f0000000080)}, 0x2}, {0x8, 0x2, {&(0x7f00000000c0)}, 0x3}]}, 0x1, 0x0, r1}) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0xf4, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000050002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140ff"], 0x90}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f00100001800207e05bd7000ffdbdf25e0000002000000000000000000000000e00000020000000000000000000000004a2400114e2100000a000080330000005a13e43921704acbf5a56741cf0d8556c50cc5b9f980d312ce7f9a56b0cc841d5042667654fe3888a0039cdc169c4f12600c3a493c805253b6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1f0}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140), 0x109102, 0x0) write$6lowpan_enable(r6, &(0x7f00000000c0)='0', 0x1) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$llc(r7, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x5, &(0x7f0000001100)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffec8, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) r11 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000001f80)=r10, 0x4) r12 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x33fe0) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r13, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r13, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x3, 0x1]}, 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r13, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0x8) socket$phonet_pipe(0x23, 0x5, 0x2) 29.410889938s ago: executing program 5 (id=1854): syz_open_dev$loop(&(0x7f0000000a00), 0x9, 0x80001) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r3 = socket(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x20044891}) socket$can_j1939(0x1d, 0x2, 0x7) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000100)=""/159) ptrace$pokeuser(0x6, r7, 0x358, 0xffff8880b840e000) 29.163664522s ago: executing program 5 (id=1855): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x69}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=local=relaVive: ,7$']) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x10) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x208000, 0x0) syz_io_uring_setup(0x342c, 0x0, 0x0, &(0x7f0000000340)) socket$netlink(0x10, 0x3, 0x4) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000583000/0x2000)=nil, 0x2000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 28.280998729s ago: executing program 5 (id=1860): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x161902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) getpid() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[{}, {}], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2, 0x8, 0x6, 0x0, r1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r8, 0x4018aee3, &(0x7f00000004c0)=@attr_other={0x0, 0x6, 0x0, &(0x7f0000000480)=0x4}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) 27.37243941s ago: executing program 5 (id=1861): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r1, 0x4b2f, 0x10000000005) r2 = socket$inet6(0xa, 0x40000080806, 0x1) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r2, 0x20000005) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r8}, 0x10) r10 = syz_open_dev$usbmon(&(0x7f0000000380), 0x5, 0x80001) ioctl$MON_IOCQ_RING_SIZE(r10, 0x9205) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r7, &(0x7f000000ccc0)=[{{&(0x7f00000000c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000440)="168e2668ca5e739d71c0945b7deb5c57e9fbd148244aa7df3a29e1616d9f46eb3737cda87e0c7dfb8e264f9ecb4d495614a076e652e6ea46b3cbd0afd0ff7a4e0800a454567e4ff0d4cc280ed99f50bac2d63d35fcce32a857ca8e791002c7d1d14a952602c4b0d0fa9be080ab677029f8a7c5bff47a4ee4facd8b2ce76d12a076320838ba01945aca118b8d19b60f26bf4b15ea7a4dbbb6a31b205064a9cab4f553eaf660d1ba92e1dbd12c12c4227c1b5fa756dcfc1359599b25e143344bc7b73a0dc1065e05a6dd039c971a9652a4d9eff66fe7793acdec99594d0191a24474c00d", 0xe3}, {&(0x7f00000001c0)="a0147ba2af2c250a0954128b5fcb93c09dc7cc2f524a140c5ee0aa2d6bb2e0bb9fb974700cba1ae9fcd2717b", 0x2c}, {&(0x7f0000000280)="c1a1c075eae12da37fe8473e92e8e558935b69ce9a9e97baa54faae75fd7c109775031abe4690e934b2cbe8538a7e70c3a0be9a5ab6fae8db68546a744c45b3dd0325d91672d9648078a4c7b95230dc621b879ad95ca732792078b1dd7b9639e953b", 0x62}, {&(0x7f0000000540)="3d219f21a21f20997d1059055485fc5912fced14163c53d82932591ee86c04c62aabff56ff9eeb3900f3f6ca5693652b1f07e90ce1b53f2d3c32d0e8607019eefbec0fc269415e30406d2fd0685f5264f06b17b212e54134f14b2a8b9971b13abb0f0e0ac9c61f6fee2b3662f5946ddef3f8abb063b9c1", 0x77}], 0x4, &(0x7f0000002780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="000000001800fff1d2caffffff00000000000001", @ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x8040}}, {{&(0x7f0000002840)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003c00)=[{&(0x7f00000028c0)="3217babe0c708617e5e49e0523b21e3e52154a868d4c694a3dcf89b125e1d2684a1bc95efc8c0b03e27f646e38142241b221406f996c8667c47ff246f8d05a46a2f4800504c3199cbe01a2bce724eb1ffb8a204887fe525173d7a971c11d7346dc8e196851b551b2bec15711790ccc0e52f7d3a19edc87cf6b8b3b20fe0ce8eb97448ed7558d4c147bffd650cab4a3608d8f783303247990f0", 0x99}, {&(0x7f0000002980)="795f799b493e7d8dad1fc773e5e753c3657066d5ccc8065dab2ca94da86f0fcbd69f4268d9ac3bf5b181feff46d132cc35a96d680530c4f0f8b9141eb8e097dd8fbd4467632b00920af591ee7f412342af20bbd990cede5c34b4ffc4749ac5e66173c8255ed9a7be3aae913de18bdc9e", 0x70}, {&(0x7f0000002a00)="350df2b90bb46c58f28b84c23d0dc736d26bbdab3d9a21bbc991eaa481374fc3bb2114e79adb5f4ddb6909cde15a61017df55fdfeec24ee293d7f3aeb471523e3e5d034a714751fda0312526edc71ffb5ae80081e877e1e91bc8e326be847efff915d98d0ada2ffd8eaa452efaa73122b73ee37b434393467eca1df0a83a3cf576ab2bf2a27302255f911dfe5c9ce68554bd68b96e2de76d68513f368b", 0x9d}, {&(0x7f0000002ac0)="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", 0x1000}, {&(0x7f0000003ac0)="b58fe055b580719875bdd84448", 0xd}, {&(0x7f0000003b00)="4bfdb7cf81496d91b831b02dd7594c3374e2b564554f4ad8efa7ab571c7da59ce585e6e9b40d5066d806a8", 0x2b}, {&(0x7f0000003b40)="0454743fb170268641ba0bfc2cc52083a46449867681d47b24d4b4dc098939209ce14fef123eb0442ce2506cd95d970aed70120e78bae9d978e043bf4d6ba0cbec02c54424fb7166936ba6c988a57348b7f00a4bf0946ec1f26e3e4b342328102cb51dd49d2ae63d7faf4b54dd3bf086fbcc6becbad3d85e9cbd93b21f98c2a1ffbd12ae38ab8e", 0x87}], 0x7, &(0x7f0000003f80)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r3, 0xffffffffffffffff, r4, r3, r8, r4, r3, r3, r7]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x138, 0x4001}}, {{0x0, 0x0, &(0x7f0000006540)=[{&(0x7f00000040c0)="f010a7e656ae50d5f0d140a4b09dde0a4c0e1bd29d75871665cae99bea6b34fbf5506009baf96acf951b882dc3bc6ae57996c809111446be77b051849a39d2244e2a6d6de2db8e4f8d39a5005dcb033a6b685cbc5a1ff870cdb73291ab6b7a0029be86380ba9bcb932cda912943cbc77efa2579f2cc3779433c6", 0x7a}, {&(0x7f0000006140)="d7800fce6ee1ada80c5be15048bb3fa5f30dadb0405f98bcf35df1a6e8197e1e0bfd367ca6f87247028218c14d18", 0x2e}, {&(0x7f0000006180)="cd3fea7322fada76dc41e339a723a96ee46ea158f51235a8be9c67e9556e85e53342d046a8e8a1b20aedc18f36a095901538a7ae1e1732ebea4a9dc43ee2b0868b8fb1d30c382ff1804d877b9fc23efc737b60a0f8f9180f86cd0dd03d738974ffbd67a9f7f4191ed459528d16015a1963a587223a8b364015f9807232787a8f01d4cb7898deee80c7147dc15deb1f4e3c96ae3e51352c1ff56fad7a5f13803d4f", 0xa1}, {&(0x7f0000006240)="45d0e5e37700135ed2f4a575c0e45063cd51143a64e29cdabfcef91cbfa71145c20f5127c0c99c7bd8960f2c99270a0f3004c5b6ec1fe516b3d05deb987052add526105ab9139b935ab8fee38fb3f6aa6e363676967bb79c6d9e6b7d3ec12015fc69c57748df911a4bfe108e385deb7d301bac9d94c0a1eca4e63d7c0b8bebe1d3fcaf4a11bd3e", 0x87}, {&(0x7f0000006300)="693020fe", 0x4}, {&(0x7f0000006340)="775e42abd72eda836e24700ef521409ff234c9336aab452bd584844b4a3880cb4a7fdcc9943978bc9eb0ea9a125bdbc1637644f97ca7da0c52895297a0d6ec5661b368f74444b9af06b8239bd2cc1f818c52b3aab06af56f208364ae021c67f32730313c0d34b17da29e9a20d2e5296e9d6d72fddcabf76bdd5b86b7408ab16d9c7f36b967d15303839283800cf36b356ac69c51caad8576aa392e17b4f8714f7d08bbf756e425a89b537a1213bed31942190b7463d0369b4d092f0fe79abf1ab8029eaa464c4094b883011efb1b", 0xce}, {&(0x7f0000006440)="552fe66332e92e180ae67d687fa74d071382317aac3b2ce03acc0527ff431c5ddf2432c886d166d2bdbe8cdafacd8e7c090b2b6106fae85ef876ded03eecc08a6abc3352bf4759a27922a68a9c19b2e6f5b6e2f4b7c37fe67652c335bd5b7aa6c15b1dadcee19b660d95583c6a51edf60c34e16166fd499237bd9468e67ed4f713be56b9d37a5a4596ce5c4280ea36b3773cfd4874a8d71fa60ff360d5299f2319b17ec389d474bc9f12168173de2286adf3400aade96bf5525a431fea82a687ba538f0bf4e8555e9c", 0xc9}], 0x7, &(0x7f00000086c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r10, r4, r9, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, r10, r3, r10, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0xa8, 0x40000}}, {{&(0x7f0000008780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000009e40)=[{&(0x7f0000008800)="98d3c4a4ee0e8137c8f527b0b94a1f558cffc7abff8054e83d1e4a21b8816e3add042695e4af620a62f6eabfac76b85eec27194a0da5a2429935ccdc7c0f3655e07111a9a2c7bdae50d9da94536a175584bf07b49df0554c7e8501fcbfbf59262a30f39d2024b61fe7b1e3517261ed882f144e7a88aaf3cd3dc99ea388f53e81096a07891936e960834527e2777725e6646ad41c44f0ab9d20636eed9f97fa90b743af3ce3fc5b7ad6aef3cf4b554c761ea2", 0xb2}, {&(0x7f00000088c0)="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", 0x1000}, {&(0x7f00000098c0)="52f589acaaf8ee9776efad69cbb62853a47966115e95fab253d496a8fb461acba99fae301f045f74c43b1feae53b93a1e9e2a64864", 0x35}, {&(0x7f0000009900)="122077af4cfc7ee99c29e471bbba6c44acf1e03bbb4d155ebed6e5a0b7f3c06c39fc7be89a0a39dddadd9878070999bb015a9d298bbfc8144df8a7871a80bd5e3e5338c9d6998e5ffb3323fc02c353d5eeae0cec132f1ee5a26eecbe73a31cdb5dfa6d3c2797378520fae4bea3ecb8b5df676980181d90bd641902760c306291bb6aa5086d4b874078542afabdaedb9e0c604cbd6731f61c3c506e396f1f504930755ca55c4b03b16aec114dd755359723d5c28b70ed62a8c5877d691ade2eb90f288da78773bba07b83a196406089adf5ca178468dc", 0xd6}, {&(0x7f0000009a00)="d227da2f2f8d13409a5d763c0e34b249afdb2fbbcfd81bb4bfb5ee6663b07a913ebf1282ca3c125d44aa47dd61b362130048cc57dfb133ce0032b81c9f1459bec129364dbd7724ff3a06644e7c2cb875c5d9707e4669f17abeeec1fd216d04c6c5f16a6b7376fd293f4f9ff5caa03e80723fd5c7f6ab0d6f0546b926e31401fbe006275ff83f8ded1531efdc2bc5ec8f0e4176239f8eac8bda2d73fa43da07d60fccbfe6cfbb74b044621e1048fd47e572ad472b3567e254e6ade8975d963b6326f9d9485c5116cb972312fae95cb727ef80d37d90c0f3c0e8453ea70cd40207c2a043c91cf6ac6cbff3e872", 0xec}, {&(0x7f0000009b00)="287606a219cf77dd876f3d33bcad0ecbec7f6f5dde80797b5f55a0e932e76bbbfeacbc0708e423c8fa2572e6ce204bc24d747a665af8a7d97c525e3cd240b16768706ac7f7fb568b482e308c4a4d4d4cd710ef9ad682bdcfcf9f03c8f764d5674f476dd32e3b55ed14aca4d21b76d0d132dbd6380579f8bdc51166e90717ec17a375f6106fcbe73a3848", 0x8a}, {&(0x7f0000009bc0)="896c892126bba42263cdbe2ee6b492b5a4ccb02adf51c1e2cc3cec7fce51ec3cf28983c374aef969e40cc8a807c2c87d3420b4e46e88d3c97f8abccf4d6dedddd85d4b3f8cfac7c8e993a5368daf838125bc926f8622fc9c9b3140c4d883364119ceff2613adf477996c1eee2d256cd6de92f4fdec80442f81d2d513d6400c05037c87a42aed12d37c6133482d77ab7f44ee861f16792d0cba1e85dbac12081b2903a70c6ce62b27592e543e56cace31d2d1b5af5ec151bb8f8fcaaf3edece2a34e876efe6d984a525b565b3d6d5b8ff05edc8cf79a630fb5f30b3", 0xdb}, {&(0x7f0000009cc0)="6ca43418c23976229d03bc4f95877123e1e14f281a800d0a9208de95ad7d7bffcd4db7", 0x23}, {&(0x7f0000009d00)="628779dbacdd447fe29006978eeb7f8a69f31384d4969cbf619fd132c9fd8b7153169e7f59f03b2685329f6969aafe489ce52d3fd3d5878797c8bfe9eb39e77ad6d9f3473f7cb3fb1fed62b87e16ddbe7f61c1be74", 0x55}, {&(0x7f0000009d80)="7c46d5679526b87276ae81f4dc291f55f5c75f6106055d0d6889d1930546f8f81ba120b0b0e66804c9ac6713eaf6821a76f45055034a61f9517219483a5fb619f6150e08168051ac19f0c2895ed0ea1cffbe0df177e02a978d4063bce74dee3d839572da06d5d97850a18b6eb23cfc89a227518d4dbf10edf689f2541d033dd4f10a92660ed1d9473fd685b074db8f083ad0565310f0176ef67e2b82278549bbf958f2012c12758efb73", 0xaa}], 0xa, &(0x7f0000009f00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r7]}}], 0x18, 0x8080}}, {{&(0x7f0000009f40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000a000)=[{&(0x7f0000009fc0)="b9cdf8dc331ac30d07a5d7182ccc1123dacaac0570d1e3856983a2aef4b672895fb25032d2", 0x25}], 0x1, &(0x7f000000a040)=[@rights={{0x24, 0x1, 0x1, [r4, r1, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}], 0x28, 0x40053}}, {{&(0x7f000000a080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000b400)=[{&(0x7f000000a100)="a7a12f3ce1c2fd380fc082faa8973013d184430b99728556601f10a9081ff0c3cb6fcd0c1ccac6ee3c3784435a5cfd8be9ac5a3de143f15a2c911192d83e605d23f68a6a818d1b29754610798f8d0d5e83c2c921e85dd9ed64db917b4c", 0x5d}, {&(0x7f00000006c0)="444c6dca05c7dc0840b28c656a34a77f72624108f04627b4042b885f47da4ff6b0201d1a7aac287393404cf5f386d094372a34948cdc973fb7d7830d077019f6ce0cc7a19915b8de42257bd39536b0c10d812e3506dd5cd0f493ed7eced57dc800fcca6615acebf44a993069afd64364d14b4e6d95c2ed2804ffff045ff9e42df5ca8c3ed2b42b139bf5f9279506ba55d39846d211c6994b00d404cdf8a92497eb552a4fb85193c4e74adf9b1751739254e4b83f29826cd904b88954deeae0027c2d", 0xc2}, {&(0x7f000000a280)="de6b0bdd3b6439bbdc329bf533c8b31e2c77efe1632a9ee18789d73501a6c482f4bcdbc6ce8e9e63e6e2dd9cb06ff8f9862feb97e2e23795fd1558725f968bc31e5b51b2786119340ca6e2b7028e1adb46b94552a02d1b98687cb1730dcfcc46cb85a26202dabf1f876c6a905110", 0x6e}, {&(0x7f000000a300)="b35f0cf83468ba25d8e65e8de9ff9f3097411e52aacd4169cee373342fa427f179b89c5457ad043ac645c2574c036a237c35f94969cbf79ed0d46fc1a55406786f518a863e11c8919db11875d5474cbb7cba20e13319c86c018a050df7594ff58ef5c0a165ca0a1b703ef8828dfc459b254c9c33a79e92f1398eaf6425dbcff790f5130a6ecd049217ab660644df6dcf864c66e3950f39a5c4bc3f52739dff01350b75eecd87980882fe3ba28910f9d09014b44d579ed85aa70902b2b92e1eb9bb1b9bbc6ed8136144897eccec50", 0xce}, {&(0x7f000000a400)="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", 0x1000}], 0x5, &(0x7f000000b5c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r6, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8, 0x24040814}}, {{&(0x7f000000b6c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f000000ba80)=[{&(0x7f000000b740)="4f1452d221ca53d95adce66dbf5c91c9ab4f269eb46777071394e1f4c35a7e9bdb4e033d6a7a4f887e61c445a4b522c81eefd0cd3c2b077ed313a3d76515ca9f772852b8126d8dab798c799a30fc4ccb7ccd43d3bb5b7454dd4cb55cb06a2b7e2a64f745c35fa7de0800e981c217d91f1fce69c56c3d32a51c43b930ba3dad4ca28f26f0c3a619e96f0d", 0x8a}, {&(0x7f000000b800)="8159e1c2085f0eace55f2dab94cb512491e3600329b6e02956f64e2a18b8d15c342b216ace05338a9fcb378d02e9584848f3accd525cc73e146a1d3d58f1082836967d0610160de0ef9d489fd98e718ae603dff7fd80d16ea521239bd32a2e2a4ae7c3e353c8716395b2d1c17e107e55333ed6935485", 0x76}, {&(0x7f000000b880)="06e8a0d9b9443e1fe8984bdc0b87053534fa83ba89189516c54b9fc831105f9a046bae61ccef5e66c8053c4a0c8e5d3f06191ab247356c21b8a5c9b7914697e855744c992e9eb8293c79c903cd489641d90e6182b1ea2e2fc4d37c8dba2b0a42e8e48a59a44a006fa49777f979789fcfb28189427f86468664ba7171b45570fd5120de66b387ee1f144a93065975958e2f5f1e90ad6cd1221637d0ff48cb1df3ac63b6576f00a3fc3a14a6b1bee3d76dac356befb2923f46d4c06690d3c9d47149c5fe18eccd8f4be17a25efbce781b468d5cd5a41dba56c455a431b255d76b3697065784fa21945", 0xe8}, {&(0x7f000000b980)="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", 0xfb}], 0x4, &(0x7f000000bac0)=[@rights={{0x2c, 0x1, 0x1, [r9, 0xffffffffffffffff, r2, r7, r3, r6, r4]}}, @cred={{0x1c}}], 0x50, 0x8080}}, {{0x0, 0x0, &(0x7f000000cb40)=[{&(0x7f000000bb40)="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", 0x1000}], 0x1, &(0x7f000000cc40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, r6, r1, 0xffffffffffffffff, r4]}}], 0x60, 0x16a1f817e480263c}}], 0x8, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x7a, &(0x7f0000000340)={r12, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r13) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000400)) 26.832596811s ago: executing program 3 (id=1864): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x20000000000000bb, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f00000005c0)=0x440009, 0x4) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x4890) ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, &(0x7f0000000440)=0x1f) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000dbe000/0x4000)=nil, 0x4000, 0x1, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_usb_connect(0x4, 0x44, &(0x7f0000000c80)=ANY=[], 0x0) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 24.352609393s ago: executing program 5 (id=1871): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) r4 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fchmodat(r5, &(0x7f00000001c0)='./file0\x00', 0xd8) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r4) ioctl$FIONREAD(r3, 0x541b, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r6, 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b0000000000011907800000000e000000100004e20009c8d7802000000000000000000000082d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d170194bd7b1b0303c5ba7f602606a285b330da2d58da817f8a5f77a23de36a21643b33cfa231a427159c7b9f0eceb155f0"], 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000001f40)=[{0x0, 0x94}, {&(0x7f0000000840)=""/215, 0x94}], 0x2}, 0x8}], 0x1, 0x10041, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000080)={r9}, &(0x7f0000000100)=0x8) socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 23.793159108s ago: executing program 3 (id=1872): syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000000c0), 0x0, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xfffffffe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x5}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x13, 0x4, 0x8, 0x3, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x20a02, 0x0) write$selinux_load(r5, &(0x7f0000000180)={0xf97cff8c, 0x8}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000200)='@') 21.399234839s ago: executing program 4 (id=1881): r0 = syz_io_uring_setup(0x7870, &(0x7f0000000300)={0x0, 0x216f, 0x8000, 0x2, 0x1cd}, &(0x7f0000000280)=0x0, &(0x7f0000000380)=0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f00000003c0)={0x7fffffff}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$audion(&(0x7f0000000400), 0x3, 0x48a403) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x20008d4) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="1fe8ffff0000000000003b000000", @ANYRES64=r2, @ANYBLOB="21003300d08000"], 0x40}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[], &(0x7f00000000c0)=""/209, 0x1a, 0xd1, 0x1, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r7 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r9, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000440)={0x40000b, 0x900}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04130d0300005e00cd00feffc9005700", @ANYRES64=0x0, @ANYRES16=r7, @ANYRES32=r6, @ANYRESHEX=r1], 0x10) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)=0x10000) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x8, 0x8007, 0x6, 0x80000001, {{0x5, 0x4, 0x3, 0x2, 0x14, 0x65, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3e}}}}}) 20.496717072s ago: executing program 4 (id=1882): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0x11, 0x4) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bind$netrom(r4, &(0x7f0000000140)={{0x3, @default, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs$namespace(r7, &(0x7f00000001c0)='ns/cgroup\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'], 0x48) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000005500010e0e0000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0xc000) sendmmsg$inet(r5, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="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", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) 19.637527906s ago: executing program 33 (id=1835): r0 = syz_io_uring_setup(0xfb2, &(0x7f00000002c0)={0x0, 0xbb06, 0x20, 0x2, 0x2c3}, &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000700)={&(0x7f0000002000)={[{&(0x7f0000000400)="120293fc89707b7d01fa1c2244c88d143f1e11f21dab28fc92557e48070004c811925b6abd3f9c01374fb77d62a7ae93", 0x30, 0x3}, {&(0x7f0000000440)="90fc634ef93aa7b13f4592149f290fe2b1eba38f5ec3bd99a865dc7ab789663450c971441c2ebe87262b118c7771f121686049d567ae67272a7d39e9983f541611beeff7c11a42e43c71e9c347febc21e567ee01b132df4b8e4413e8dce4e5b4cb7476f5871deeb1a7c70d6cfd1f3cc0c6c0ecdab4f07addd4a39f059fb4e8daa6e095768be8859c2f5c3387ee1e27f0afc4a546778b688ad369e11e018dce7cc66a563be9c5a72d8216eaee0cbf5cbb869673a4d7766b3719", 0xb9}, {0x0, 0x0, 0x1}, {&(0x7f0000000600)="4d7951e2008ae984b8efde58df43a79afdc13dbb6bcf9e96edcb04df656734565e1e485b363385cac28b28afe7102d08677225a3279533e89e01863eeb1255fa30e6f8e0b09fa2869a7b81486e3ce684c63d01eee9084d6f96ca9ff7fb895f9a4f7de4ec0c3029c10122fb7112d0e5f817abfed4feabca2b64dee3b74f8a9be7602b95add9b91333b0351e0d47c63940fd65b1d17c18aec78283e7b078ae8e69a8d8ffc4fd2fd7fa31aa07e2b53b2e721e3458ae4a1841535e8afca693b567df40bdae41c4381eaf08fe86bd7bb70baedd341255942ce781d670afe8bfa0ecd232988337f04b66ae68", 0xe9, 0x3}]}, 0x4, 0x2}, 0x1) socket$inet(0x2, 0x2, 0x1) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x8000000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket(0x25, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000010000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7fff, @bcast, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) syz_open_procfs(0x0, &(0x7f00000003c0)='net/netstat\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x101001, 0x0) read$FUSE(r3, 0x0, 0x0) getpeername$unix(r3, &(0x7f0000000080)=@abs, &(0x7f0000000200)=0x6e) 19.629488024s ago: executing program 4 (id=1884): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x44, r2, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x88800}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x28000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x124, r2, 0x101, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r3, 0x1) r4 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940), 0x0}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r5 = io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x683e, 0x400, 0x1, 0x12}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r5, 0x11, &(0x7f0000000d40)="01", 0x1) close(0xffffffffffffffff) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x1028}, {r3, 0x4020}, {r1, 0x8458}], 0x3, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x4]}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) 16.566093567s ago: executing program 34 (id=1848): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x8, 0x26, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000005e0a0000000000003655000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018130000", @ANYRES32, @ANYBLOB="000000000000000018200000", @ANYRES32=r0, @ANYBLOB="000000000d000000181a0000", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018400000010000000000000000000000181b0000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x4000, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff9a, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x6}, 0xffffffff, 0xfffff7fc, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x6c}, 0xa, @in=@multicast1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x5}}, 0xe8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x334a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, &(0x7f0000000240), &(0x7f0000000280)=0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0xffff0000, @ipv4={'\x00', '\xff\xff', @dev}, 0x8}, 0x1c) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r5, &(0x7f0000000300)=""/154, 0x9a) socket$kcm(0x11, 0x1, 0x300) 16.563419507s ago: executing program 4 (id=1886): r0 = socket(0x15, 0x2, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000004780)={'batadv_slave_0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x7, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0xfffffffe]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24720000020605000000000000400000000000000900020073797a3200000000040006"], 0x24}, 0x1, 0x0, 0x0, 0x20040004}, 0x80) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x200080c4) 16.408782181s ago: executing program 4 (id=1887): socket(0x15, 0x5, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x60100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffde3, &(0x7f0000000200)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0xbfffd000, 0x800000}], 0x0) 16.010998475s ago: executing program 4 (id=1888): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090"], 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x88080, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a", 0xe, 0xfffffffffffffffe) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e000018000280040012000500163001000000080015"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r3, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x100000000000000) 9.00913603s ago: executing program 35 (id=1871): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) r4 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fchmodat(r5, &(0x7f00000001c0)='./file0\x00', 0xd8) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r4) ioctl$FIONREAD(r3, 0x541b, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r6, 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b0000000000011907800000000e000000100004e20009c8d7802000000000000000000000082d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d170194bd7b1b0303c5ba7f602606a285b330da2d58da817f8a5f77a23de36a21643b33cfa231a427159c7b9f0eceb155f0"], 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000001f40)=[{0x0, 0x94}, {&(0x7f0000000840)=""/215, 0x94}], 0x2}, 0x8}], 0x1, 0x10041, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000080)={r9}, &(0x7f0000000100)=0x8) socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 8.506946565s ago: executing program 36 (id=1872): syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000000c0), 0x0, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xfffffffe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x5}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x13, 0x4, 0x8, 0x3, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x20a02, 0x0) write$selinux_load(r5, &(0x7f0000000180)={0xf97cff8c, 0x8}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000200)='@') 0s ago: executing program 37 (id=1888): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090"], 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x88080, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a", 0xe, 0xfffffffffffffffe) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e000018000280040012000500163001000000080015"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r3, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x100000000000000) kernel console output (not intermixed with test programs): interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 396.525337][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.562225][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 396.587412][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.870842][ T9] usb 6-1: usb_control_msg returned -32 [ 396.886082][ T9] usbtmc 6-1:16.0: can't read capabilities [ 396.910401][T10534] block nbd5: shutting down sockets [ 397.570043][ T5874] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 397.573923][T10572] 8021q: VLANs not supported on ipvlan1 [ 397.711291][T10573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.738603][T10573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.752953][T10573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.762347][T10573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.792086][T10575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1194'. [ 397.832697][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 397.976942][T10579] netlink: 'syz.3.1194': attribute type 10 has an invalid length. [ 397.984973][T10579] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1194'. [ 398.192956][T10579] team0: Port device geneve0 added [ 398.223542][T10578] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 398.250794][T10578] CIFS mount error: No usable UNC path provided in device string! [ 398.250794][T10578] [ 398.261025][T10578] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 398.343654][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 398.343676][ T30] audit: type=1400 audit(1745208833.935:799): avc: denied { accept } for pid=10576 comm="syz.4.1195" lport=51147 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 398.682854][T10578] net_ratelimit: 70 callbacks suppressed [ 398.682866][T10578] sctp: failed to load transform for md5: -2 [ 398.880530][ T9] usb 6-1: USB disconnect, device number 20 [ 398.977709][ T54] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 399.353000][ T5874] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 399.520337][ T5874] usb 1-1: config 0 has no interface number 0 [ 399.529864][ T5874] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 399.540977][T10579] syz.3.1194 (10579) used greatest stack depth: 21144 bytes left [ 399.548730][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.558266][ T5874] usb 1-1: Product: syz [ 399.562999][ T5874] usb 1-1: Manufacturer: syz [ 399.567945][ T5874] usb 1-1: SerialNumber: syz [ 399.576099][ T5874] usb 1-1: config 0 descriptor?? [ 399.585715][ T5874] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 399.831321][T10598] netlink: 'syz.2.1198': attribute type 2 has an invalid length. [ 400.298123][ T5874] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 400.740920][ T5874] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 400.931627][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 400.940040][ T5874] usb 1-1: USB disconnect, device number 44 [ 400.977190][ T5874] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 401.003766][ T5874] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 401.023092][ T5874] quatech2 1-1:0.51: device disconnected [ 401.294316][T10616] ubi31: attaching mtd0 [ 401.615172][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 401.786370][T10616] ubi31: scanning is finished [ 401.791223][T10616] ubi31: empty MTD device detected [ 402.052723][T10616] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 402.060659][T10616] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 402.067926][T10616] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 402.075327][T10616] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 402.083123][T10616] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 402.090337][T10616] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 402.098381][T10616] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1392264118 [ 402.108792][T10616] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 402.142803][T10619] ubi31: background thread "ubi_bgt31d" started, PID 10619 [ 402.162537][ T9] usb 3-1: New USB device found, idVendor=413c, idProduct=81e0, bcdDevice=fe.29 [ 402.198582][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.216156][ T9] usb 3-1: Product: syz [ 402.225505][ T9] usb 3-1: Manufacturer: syz [ 402.235281][ T9] usb 3-1: SerialNumber: syz [ 402.257143][ T9] usb 3-1: config 0 descriptor?? [ 402.406462][ T30] audit: type=1400 audit(1745208838.005:800): avc: denied { block_suspend } for pid=10624 comm="syz.3.1205" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 402.435676][T10625] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1205'. [ 402.682995][T10628] fuse: Bad value for 'rootmode' [ 403.127897][T10631] netlink: 'syz.3.1206': attribute type 10 has an invalid length. [ 403.406230][T10641] team0: Device gtp0 is of different type [ 403.441940][ T30] audit: type=1326 audit(1745208839.025:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f318298e169 code=0x7fc00000 [ 403.544393][ T30] audit: type=1400 audit(1745208839.145:802): avc: denied { setattr } for pid=10645 comm="syz.0.1209" name="file0" dev="tmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 403.895666][ T5835] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 404.138306][ T5873] usb 3-1: USB disconnect, device number 31 [ 404.149908][ T30] audit: type=1326 audit(1745208839.675:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f318298e169 code=0x7fc00000 [ 404.212790][T10662] 8021q: VLANs not supported on ipvlan1 [ 406.283009][ T5835] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 408.561509][T10705] fuse: Unknown parameter 'jk' [ 408.885267][ T30] audit: type=1400 audit(1745208844.225:804): avc: denied { setopt } for pid=10701 comm="syz.5.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 409.419715][ T30] audit: type=1400 audit(1745208845.015:805): avc: denied { connect } for pid=10708 comm="syz.2.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 411.477164][T10740] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 411.549395][T10742] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 411.727531][T10742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1237'. [ 411.839950][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 412.029495][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 412.076637][ T9] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 412.089058][ T9] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 412.152057][ T9] usb 1-1: config 6 has no interface number 0 [ 412.186639][ T9] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 412.244158][ T9] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 412.366981][T10752] 8021q: VLANs not supported on ipvlan1 [ 412.534993][ T9] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 412.585348][ T9] usb 1-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 412.612362][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 412.626364][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.641432][ T9] usb 1-1: Product: syz [ 412.646070][ T9] usb 1-1: Manufacturer: syz [ 412.650785][ T9] usb 1-1: SerialNumber: syz [ 412.656985][T10736] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 412.671281][ T9] hso 1-1:6.2: Failed to find BULK IN ep [ 413.390226][ T5869] usb 1-1: USB disconnect, device number 45 [ 413.589451][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 413.980957][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 414.051833][ T9] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 414.094242][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.159698][ T9] usb 6-1: config 0 descriptor?? [ 414.171313][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 415.350999][ T5873] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 416.013290][ T5873] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x1 is Bulk; changing to Interrupt [ 416.068753][ T5873] usb 1-1: config 1 interface 0 has no altsetting 0 [ 416.120782][ T5873] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 416.145055][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.178916][ T5873] usb 1-1: Product: 릤ἄ瞰艱醕࿗⛔逷镙ﳈ㭡㽽鷌먲雒ꥴ쯲㮅蕑佼캥쭿쟘僤給塏辈䍂퉾 [ 416.195463][ T5873] usb 1-1: Manufacturer: ࠄ [ 416.200462][ T5873] usb 1-1: SerialNumber: 䰈⦡逊뀭౗㳵෼繬퇢歀풜巬얚료ኬ離 [ 416.225895][T10788] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 416.542280][T10807] 8021q: VLANs not supported on ipvlan1 [ 416.741952][T10788] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1249'. [ 416.751952][T10783] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1249'. [ 416.777259][ T5873] usb 1-1: USB disconnect, device number 46 [ 417.200407][ T5873] usb 6-1: USB disconnect, device number 21 [ 417.919843][ T5873] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 418.101374][ T5873] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x1 is Bulk; changing to Interrupt [ 418.117963][ T5873] usb 4-1: config 1 interface 0 has no altsetting 0 [ 418.146762][ T5873] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 418.170887][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.195696][ T5873] usb 4-1: Product: 릤ἄ瞰艱醕࿗⛔逷镙ﳈ㭡㽽鷌먲雒ꥴ쯲㮅蕑佼캥쭿쟘僤給塏辈䍂퉾 [ 418.221632][ T5873] usb 4-1: Manufacturer: ࠄ [ 418.226350][ T5873] usb 4-1: SerialNumber: 䰈⦡逊뀭౗㳵෼繬퇢歀풜巬얚료ኬ離 [ 418.257706][T10814] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 418.379404][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 418.470148][T10814] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1256'. [ 418.480167][T10812] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1256'. [ 418.516014][ T5873] usb 4-1: USB disconnect, device number 36 [ 418.549457][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 418.555777][ T9] usb 6-1: config 5 has an invalid interface number: 35 but max is 1 [ 418.580014][ T9] usb 6-1: config 5 has an invalid interface number: 4 but max is 1 [ 418.639786][ T9] usb 6-1: config 5 has an invalid interface number: 4 but max is 1 [ 418.669430][ T9] usb 6-1: config 5 has no interface number 0 [ 418.689499][ T9] usb 6-1: config 5 has no interface number 1 [ 418.701420][ T9] usb 6-1: config 5 interface 35 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 418.733767][ T9] usb 6-1: config 5 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 418.754382][ T9] usb 6-1: config 5 interface 35 has no altsetting 0 [ 418.761183][ T9] usb 6-1: config 5 interface 4 has no altsetting 0 [ 418.767828][ T9] usb 6-1: config 5 interface 4 has no altsetting 1 [ 418.778954][ T9] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=d4.1b [ 418.799493][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.808409][ T9] usb 6-1: Product: syz [ 418.814054][ T9] usb 6-1: Manufacturer: syz [ 418.818698][ T9] usb 6-1: SerialNumber: syz [ 419.080026][ T5873] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 419.547835][ T9] ttusbir 6-1:5.35: cannot find expected altsetting [ 419.560512][ T9] ttusbir 6-1:5.4: cannot find expected altsetting [ 419.580195][ T9] usb 6-1: USB disconnect, device number 22 [ 419.722737][T10838] ubi31: detaching mtd0 [ 419.730013][T10838] ubi31: mtd0 is detached [ 419.734507][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 419.742125][ T5873] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 419.855210][ T5873] usb 1-1: config 0 has no interface number 0 [ 420.083422][ T5873] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 420.093375][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.102273][ T5873] usb 1-1: Product: syz [ 420.106460][ T5873] usb 1-1: Manufacturer: syz [ 420.113628][ T5873] usb 1-1: SerialNumber: syz [ 420.123714][ T5873] usb 1-1: config 0 descriptor?? [ 420.132431][ T5873] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 420.344726][ T5873] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 420.363606][ T5873] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 421.505191][T10865] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 421.519013][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 421.556027][T10864] netlink: 'syz.4.1271': attribute type 27 has an invalid length. [ 421.558390][T10866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1270'. [ 421.781942][T10864] bond0: left promiscuous mode [ 421.787189][ T9] usb 1-1: USB disconnect, device number 47 [ 421.810490][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 421.830900][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 421.849675][T10864] bond_slave_0: left promiscuous mode [ 421.873361][T10864] bond_slave_1: left promiscuous mode [ 421.879093][T10864] veth0_to_team: left promiscuous mode [ 421.885940][ T9] quatech2 1-1:0.51: device disconnected [ 421.948616][T10864] veth0_to_team: left allmulticast mode [ 421.954422][T10864] veth0_vlan: left allmulticast mode [ 421.968450][T10864] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 423.399396][ T12] Bluetooth: (null): Invalid header checksum [ 423.579462][ T12] Bluetooth: (null): Invalid header checksum [ 423.585579][ T12] Bluetooth: (null): Invalid header checksum [ 423.669491][ T12] Bluetooth: (null): Invalid header checksum [ 423.676003][ T12] Bluetooth: (null): Invalid header checksum [ 425.289493][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 425.829466][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 425.846146][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 425.904670][ T9] usb 4-1: config 0 has no interface number 0 [ 425.922703][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 425.933560][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.943260][ T9] usb 4-1: Product: syz [ 425.959793][ T9] usb 4-1: Manufacturer: syz [ 425.964501][ T9] usb 4-1: SerialNumber: syz [ 425.971182][ T9] usb 4-1: config 0 descriptor?? [ 426.051369][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 426.282817][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 426.306477][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 427.129758][T10910] 8021q: VLANs not supported on ipvlan1 [ 427.351120][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 427.354389][ T5873] usb 4-1: USB disconnect, device number 37 [ 427.387514][ T5835] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 427.495135][ T5873] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 427.515255][ T5873] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 427.538908][ T5873] quatech2 4-1:0.51: device disconnected [ 427.656293][T10926] mkiss: ax0: crc mode is auto. [ 428.884938][T10935] 8021q: VLANs not supported on ipvlan1 [ 429.231872][T10942] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 429.241056][T10942] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 429.250102][T10942] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 429.259506][T10942] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 429.289537][T10942] batman_adv: batadv0: Adding interface: geneve2 [ 429.295962][T10942] batman_adv: batadv0: Interface activated: geneve2 [ 430.564385][T10952] bridge_slave_0: left allmulticast mode [ 430.583683][T10952] bridge_slave_0: left promiscuous mode [ 430.595448][T10952] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.616606][T10952] bridge_slave_1: left allmulticast mode [ 430.622618][T10952] bridge_slave_1: left promiscuous mode [ 430.628774][T10952] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.657453][T10952] bond0: (slave bond_slave_0): Releasing backup interface [ 430.868603][T10952] bond0: (slave bond_slave_1): Releasing backup interface [ 431.056973][T10959] netlink: 'syz.5.1298': attribute type 27 has an invalid length. [ 431.074747][T10952] team0: Port device team_slave_0 removed [ 431.382727][T10952] team0: Port device team_slave_1 removed [ 431.390487][T10952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.397937][T10952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.516509][T10952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.555054][T10952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.727626][T10952] team0: Port device geneve0 removed [ 431.880027][ T5873] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 432.069920][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 432.259410][ T5873] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 432.267841][ T5873] usb 3-1: config 0 has no interface number 0 [ 432.296073][ T5873] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 432.305636][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.314257][ T5873] usb 3-1: Product: syz [ 432.324138][ T5873] usb 3-1: Manufacturer: syz [ 432.334139][ T5873] usb 3-1: SerialNumber: syz [ 432.628665][ T5873] usb 3-1: config 0 descriptor?? [ 432.661932][ T5873] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 432.812101][T10988] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 432.862922][T10988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1306'. [ 433.153971][ T5873] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 433.176197][ T5873] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 433.242840][T10990] fuse: Unknown parameter 'use00000000000000000000' [ 433.314009][T10994] netlink: 'syz.5.1308': attribute type 10 has an invalid length. [ 433.555037][T11002] syz.3.1311: attempt to access beyond end of device [ 433.555037][T11002] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 434.391584][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 434.399216][ T5873] usb 3-1: USB disconnect, device number 32 [ 434.411286][ T5873] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 434.476937][ T5873] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 434.505496][ T5873] quatech2 3-1:0.51: device disconnected [ 434.532813][T11001] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 434.556099][T11001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1310'. [ 434.619517][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 434.754096][T11008] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 434.829722][T11009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1313'. [ 434.900231][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 435.008505][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 435.057120][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 435.068717][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 435.094984][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 435.115323][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.133809][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 435.144420][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.491857][T11016] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1316'. [ 435.628493][ T9] usb 6-1: usb_control_msg returned -32 [ 435.636052][ T9] usbtmc 6-1:16.0: can't read capabilities [ 435.680768][T11022] block nbd5: shutting down sockets [ 436.194993][T11033] netdevsim netdevsim0: Direct firmware load for . [ 436.194993][T11033] failed with error -2 [ 436.206284][T11033] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 436.206284][T11033] [ 436.406560][T11035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.417911][T11035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.520193][T11035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.556866][T11035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.024249][T11048] netlink: 'syz.0.1323': attribute type 10 has an invalid length. [ 437.782580][ T9] usb 6-1: USB disconnect, device number 23 [ 438.148396][T11064] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1329'. [ 438.279574][T11065] 8021q: VLANs not supported on ipvlan1 [ 438.638418][T11070] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1331'. [ 438.653838][T11074] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1330'. [ 438.885602][T11081] bridge0: entered allmulticast mode [ 438.944756][ T30] audit: type=1400 audit(1745208874.525:806): avc: denied { read } for pid=11079 comm="syz.0.1335" dev="sockfs" ino=30363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 439.685425][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.691729][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.841498][T11097] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 440.059609][ T5869] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 440.110020][ T5873] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 440.403394][ T5873] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x1 is Bulk; changing to Interrupt [ 440.430670][ T5873] usb 6-1: config 1 interface 0 has no altsetting 0 [ 440.454832][ T5873] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 440.466020][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.474595][ T5873] usb 6-1: Product: 릤ἄ瞰艱醕࿗⛔逷镙ﳈ㭡㽽鷌먲雒ꥴ쯲㮅蕑佼캥쭿쟘僤給塏辈䍂퉾 [ 440.487656][ T5873] usb 6-1: Manufacturer: ࠄ [ 440.489752][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 440.919727][ T5869] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 440.928452][ T5869] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 440.948901][ T5869] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 440.963042][ T5869] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 440.977160][ T5873] usb 6-1: SerialNumber: 䰈⦡逊뀭౗㳵෼繬퇢歀풜巬얚료ኬ離 [ 440.977767][ T5869] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 441.275919][T11086] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 441.308613][T11115] 8021q: VLANs not supported on ipvlan1 [ 441.314934][ T5869] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 441.339087][T11118] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1344'. [ 441.357216][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.463299][T11126] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1346'. [ 441.701863][ T5869] usb 3-1: usb_control_msg returned -32 [ 441.749610][T11099] block nbd2: shutting down sockets [ 441.791951][ T5869] usbtmc 3-1:16.0: can't read capabilities [ 442.026364][ T5873] usb 6-1: USB disconnect, device number 24 [ 442.292403][T11143] veth0_to_bond: entered promiscuous mode [ 442.300707][T11143] bridge0: entered promiscuous mode [ 442.624835][T11144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.634429][T11144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.646157][T11144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.654961][T11144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.889409][T11146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1352'. [ 443.015982][T11134] bridge0: left promiscuous mode [ 443.021308][T11134] veth0_to_bond: left promiscuous mode [ 443.399688][T11152] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 445.130226][T11142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1353'. [ 445.166516][ T5869] usb 3-1: USB disconnect, device number 33 [ 445.200910][T11164] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1358'. [ 445.529564][T11170] 8021q: VLANs not supported on ipvlan1 [ 445.637704][T11174] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1361'. [ 445.670068][ T30] audit: type=1400 audit(1745208881.245:807): avc: denied { map } for pid=11171 comm="syz.5.1362" path="socket:[31042]" dev="sockfs" ino=31042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 445.764565][ T30] audit: type=1400 audit(1745208881.245:808): avc: denied { read } for pid=11171 comm="syz.5.1362" path="socket:[31042]" dev="sockfs" ino=31042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 446.084094][ T30] audit: type=1400 audit(1745208881.645:809): avc: denied { getopt } for pid=11179 comm="syz.0.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 446.539379][ T5869] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 446.708447][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 446.716312][ T5869] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 446.745284][ T5869] usb 3-1: config 0 has no interface number 0 [ 446.773422][ T5869] usb 3-1: config 0 interface 184 has no altsetting 0 [ 447.141589][ T5869] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 447.166526][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.194777][ T5869] usb 3-1: Product: syz [ 447.223751][ T5869] usb 3-1: Manufacturer: syz [ 447.249377][ T5869] usb 3-1: SerialNumber: syz [ 447.256674][T11204] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1372'. [ 447.260265][ T5869] usb 3-1: config 0 descriptor?? [ 447.305765][ T5869] smsc75xx v1.0.0 [ 447.313864][T11206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.398709][T11206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.667945][T11213] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 447.908981][T11215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.934779][T11184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.964297][T11184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.991657][T11184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.000383][T11184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.005687][T11219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.396611][T11221] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 448.408422][T11184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.419656][T11184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.428811][ T5869] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 448.440015][ T5869] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 448.449732][ T5869] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 448.460211][ T5869] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 448.494471][ T5869] usb 3-1: USB disconnect, device number 34 [ 448.506412][T11217] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1377'. [ 448.916192][T11228] netlink: 'syz.3.1381': attribute type 1 has an invalid length. [ 449.489971][T11239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.528623][T11241] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1384'. [ 449.681438][T11239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.072276][ T12] Bluetooth: (null): Invalid header checksum [ 450.078337][ T12] Bluetooth: (null): Invalid header checksum [ 450.111944][ T12] Bluetooth: (null): Invalid header checksum [ 450.134297][ T12] Bluetooth: (null): Invalid header checksum [ 450.220220][ T13] Bluetooth: (null): Invalid header checksum [ 450.330633][ T65] Bluetooth: (null): Invalid header checksum [ 450.421644][ T5873] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 450.699964][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 450.708505][ T5873] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 450.718341][ T5873] usb 4-1: config 0 has no interface number 0 [ 450.732960][ T5873] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 450.749947][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.757939][ T5873] usb 4-1: Product: syz [ 451.186925][ T5873] usb 4-1: Manufacturer: syz [ 451.192076][ T5873] usb 4-1: SerialNumber: syz [ 451.198620][ T5873] usb 4-1: config 0 descriptor?? [ 451.206362][ T5873] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 451.337606][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1391'. [ 451.352646][T11259] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 451.354023][T11261] netlink: 'syz.4.1392': attribute type 2 has an invalid length. [ 451.361125][T11259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.371845][T11261] netlink: 'syz.4.1392': attribute type 2 has an invalid length. [ 451.422322][ T5873] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 451.454827][ T5873] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 451.543130][ T5869] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 451.713319][ T5869] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 451.732073][ T5869] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.756145][ T5869] usb 1-1: config 0 interface 0 has no altsetting 0 [ 451.762866][ T9] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 451.773137][ T5869] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 451.784912][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.799018][ T5869] usb 1-1: config 0 descriptor?? [ 451.921183][ T9] usb 6-1: config index 0 descriptor too short (expected 5668, got 36) [ 451.937883][ T9] usb 6-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 451.956918][ T9] usb 6-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 451.990817][ T9] usb 6-1: config 3 has no interface number 0 [ 452.016464][ T9] usb 6-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 452.042800][ T9] usb 6-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 452.064299][ T9] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 452.084601][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 452.087913][ T10] usb 4-1: USB disconnect, device number 38 [ 452.103459][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.116868][ T9] usb 6-1: Product: syz [ 452.124162][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 452.136608][ T9] usb 6-1: Manufacturer: syz [ 452.143509][ T9] usb 6-1: SerialNumber: syz [ 452.150790][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 452.168115][ T10] quatech2 4-1:0.51: device disconnected [ 452.175728][T11265] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 452.389580][T11279] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 452.623757][ T9] usb-storage 6-1:3.20: USB Mass Storage device detected [ 452.644280][ T30] audit: type=1326 audit(1745208888.245:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11256 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4118e169 code=0x7fc00000 [ 452.645703][ T9] usb-storage 6-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 452.697462][T11287] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 452.706949][T11287] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 452.716405][T11287] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 452.725750][T11287] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 452.726566][ T9] scsi host1: usb-storage 6-1:3.20 [ 452.838006][ T9] usb 6-1: USB disconnect, device number 25 [ 452.851572][T11287] geneve3: entered promiscuous mode [ 453.366510][ T1145] Bluetooth: (null): Invalid header checksum [ 453.372753][ T1145] Bluetooth: (null): Invalid header checksum [ 453.379212][ T1145] Bluetooth: (null): Invalid header checksum [ 453.385272][ T1145] Bluetooth: (null): Invalid header checksum [ 453.392570][ T1145] Bluetooth: (null): Invalid header checksum [ 453.426635][ T5869] hid-steam 0003:28DE:1102.000B: unknown main item tag 0x0 [ 453.435534][ T5869] hid-steam 0003:28DE:1102.000B: unknown main item tag 0x0 [ 453.443597][ T5869] hid-steam 0003:28DE:1102.000B: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 453.819087][ T5869] hid-steam 0003:28DE:1102.000B: Steam Controller 'XXXXXXXXXX' connected [ 453.838399][ T5869] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.000B/input/input17 [ 453.962737][ T5869] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0 [ 453.985611][ T5869] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0 [ 454.012856][ T5869] hid-steam 0003:28DE:1102.000C: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 454.541138][T11307] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 454.753521][ T5869] usb 1-1: reset full-speed USB device number 48 using dummy_hcd [ 455.313804][ T30] audit: type=1326 audit(1745208890.905:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11256 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf4118e169 code=0x7fc00000 [ 456.514704][ T9] usb 1-1: USB disconnect, device number 48 [ 456.692755][ T9] hid-steam 0003:28DE:1102.000B: Steam Controller 'XXXXXXXXXX' disconnected [ 457.119774][T11340] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 457.763566][T11350] netlink: 'syz.3.1416': attribute type 27 has an invalid length. [ 458.352297][T11361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1418'. [ 458.657048][T11350] veth0_to_team: left promiscuous mode [ 458.662818][T11350] veth0_to_team: left allmulticast mode [ 458.913901][T11367] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1420'. [ 459.090587][T11350] veth0_vlan: left allmulticast mode [ 459.187527][T11350] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.201000][T11350] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.212503][T11350] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.222962][T11350] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.325318][T11350] bridge2: left promiscuous mode [ 459.834778][ T30] audit: type=1400 audit(1745208895.435:812): avc: denied { write } for pid=11382 comm="syz.3.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 460.470000][ T5874] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 460.647794][ T5874] usb 6-1: config 1 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 460.675524][ T5874] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.751590][ T5874] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 460.832701][ T5874] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 460.902801][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.918003][ T5874] usb-storage 6-1:1.0: USB Mass Storage device detected [ 460.935658][ T5874] usb-storage 6-1:1.0: Quirks match for vid 1908 pid 1315: 20000 [ 461.393719][ T5874] usb 6-1: USB disconnect, device number 26 [ 461.710448][ T5873] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 461.805211][T11416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 461.876999][ T5873] usb 4-1: New USB device found, idVendor=2639, idProduct=0017, bcdDevice=ce.6a [ 461.890976][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.901991][ T5873] usb 4-1: Product: syz [ 461.910486][T11420] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1436'. [ 461.929926][ T5873] usb 4-1: Manufacturer: syz [ 461.944742][ T5873] usb 4-1: SerialNumber: syz [ 462.386621][ T5873] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 462.467083][T11427] lo speed is unknown, defaulting to 1000 [ 462.473052][T11427] lo speed is unknown, defaulting to 1000 [ 462.480688][T11427] lo speed is unknown, defaulting to 1000 [ 462.489378][T11427] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 462.500073][T11427] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 462.576067][T11427] lo speed is unknown, defaulting to 1000 [ 462.584520][T11427] lo speed is unknown, defaulting to 1000 [ 462.591338][T11427] lo speed is unknown, defaulting to 1000 [ 462.597818][T11427] lo speed is unknown, defaulting to 1000 [ 462.604220][T11427] lo speed is unknown, defaulting to 1000 [ 462.666371][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 462.681572][ T5873] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 462.691134][ T5873] usb 1-1: config 0 has no interface number 0 [ 462.711554][ T5873] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 462.767810][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.817505][ T5873] usb 1-1: Product: syz [ 462.826443][ T5873] usb 1-1: Manufacturer: syz [ 462.838972][ T5873] usb 1-1: SerialNumber: syz [ 462.847427][ T5873] usb 1-1: config 0 descriptor?? [ 462.858706][ T5873] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 463.061178][ T5873] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 463.086670][ T5873] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 463.213143][T11433] FAULT_INJECTION: forcing a failure. [ 463.213143][T11433] name failslab, interval 1, probability 0, space 0, times 0 [ 463.226455][T11433] CPU: 1 UID: 0 PID: 11433 Comm: syz.5.1439 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 463.226478][T11433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 463.226488][T11433] Call Trace: [ 463.226494][T11433] [ 463.226500][T11433] dump_stack_lvl+0x16c/0x1f0 [ 463.226527][T11433] should_fail_ex+0x512/0x640 [ 463.226548][T11433] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 463.226567][T11433] should_failslab+0xc2/0x120 [ 463.226587][T11433] __kmalloc_cache_node_noprof+0x6d/0x420 [ 463.226603][T11433] ? __lock_acquire+0x5ca/0x1ba0 [ 463.226617][T11433] ? __get_vm_area_node+0x101/0x300 [ 463.226643][T11433] __get_vm_area_node+0x101/0x300 [ 463.226668][T11433] __vmalloc_node_range_noprof+0x277/0x1540 [ 463.226691][T11433] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 463.226710][T11433] ? find_held_lock+0x2b/0x80 [ 463.226736][T11433] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 463.226759][T11433] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 463.226790][T11433] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 463.226808][T11433] __vmalloc_noprof+0x6d/0x90 [ 463.226831][T11433] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 463.226849][T11433] bpf_prog_alloc_no_stats+0x54/0x630 [ 463.226865][T11433] ? security_capable+0x7e/0x260 [ 463.226886][T11433] bpf_prog_alloc+0x3b/0x230 [ 463.226901][T11433] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 463.226927][T11433] bpf_prog_load+0x1a04/0x2490 [ 463.226955][T11433] ? __pfx_bpf_prog_load+0x10/0x10 [ 463.226973][T11433] ? avc_has_perm_noaudit+0x149/0x3b0 [ 463.227012][T11433] ? selinux_bpf+0xde/0x130 [ 463.227028][T11433] ? bpf_lsm_bpf+0x9/0x10 [ 463.227046][T11433] __sys_bpf+0x433c/0x4d80 [ 463.227067][T11433] ? rcu_is_watching+0x12/0xc0 [ 463.227090][T11433] ? __pfx___sys_bpf+0x10/0x10 [ 463.227109][T11433] ? __schedule+0x1186/0x5de0 [ 463.227129][T11433] ? ksys_write+0x190/0x240 [ 463.227168][T11433] ? fput+0x70/0xf0 [ 463.227186][T11433] ? ksys_write+0x1b9/0x240 [ 463.227209][T11433] __x64_sys_bpf+0x78/0xc0 [ 463.227230][T11433] ? lockdep_hardirqs_on+0x7c/0x110 [ 463.227251][T11433] do_syscall_64+0xcd/0x260 [ 463.227276][T11433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.227293][T11433] RIP: 0033:0x7f285ed8e169 [ 463.227306][T11433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.227322][T11433] RSP: 002b:00007f285cbb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 463.227338][T11433] RAX: ffffffffffffffda RBX: 00007f285efb6160 RCX: 00007f285ed8e169 [ 463.227349][T11433] RDX: 0000000000000094 RSI: 0000200000002040 RDI: 0000000000000005 [ 463.227358][T11433] RBP: 00007f285cbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 463.227368][T11433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.227378][T11433] R13: 0000000000000000 R14: 00007f285efb6160 R15: 00007ffd24c13678 [ 463.227400][T11433] [ 463.227658][T11433] syz.5.1439: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 463.540219][T11433] CPU: 0 UID: 0 PID: 11433 Comm: syz.5.1439 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 463.540243][T11433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 463.540253][T11433] Call Trace: [ 463.540258][T11433] [ 463.540264][T11433] dump_stack_lvl+0x16c/0x1f0 [ 463.540291][T11433] warn_alloc+0x248/0x3a0 [ 463.540310][T11433] ? __pfx_warn_alloc+0x10/0x10 [ 463.540328][T11433] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 463.540348][T11433] ? __kasan_kmalloc+0x8a/0xb0 [ 463.540364][T11433] ? __get_vm_area_node+0x1e5/0x300 [ 463.540393][T11433] __vmalloc_node_range_noprof+0xd31/0x1540 [ 463.540415][T11433] ? find_held_lock+0x2b/0x80 [ 463.540444][T11433] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 463.540467][T11433] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 463.540499][T11433] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 463.540516][T11433] __vmalloc_noprof+0x6d/0x90 [ 463.540538][T11433] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 463.540556][T11433] bpf_prog_alloc_no_stats+0x54/0x630 [ 463.540571][T11433] ? security_capable+0x7e/0x260 [ 463.540592][T11433] bpf_prog_alloc+0x3b/0x230 [ 463.540607][T11433] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 463.540627][T11433] bpf_prog_load+0x1a04/0x2490 [ 463.540653][T11433] ? __pfx_bpf_prog_load+0x10/0x10 [ 463.540677][T11433] ? avc_has_perm_noaudit+0x149/0x3b0 [ 463.540715][T11433] ? selinux_bpf+0xde/0x130 [ 463.540730][T11433] ? bpf_lsm_bpf+0x9/0x10 [ 463.540746][T11433] __sys_bpf+0x433c/0x4d80 [ 463.540766][T11433] ? rcu_is_watching+0x12/0xc0 [ 463.540788][T11433] ? __pfx___sys_bpf+0x10/0x10 [ 463.540806][T11433] ? __schedule+0x1186/0x5de0 [ 463.540826][T11433] ? ksys_write+0x190/0x240 [ 463.540861][T11433] ? fput+0x70/0xf0 [ 463.540879][T11433] ? ksys_write+0x1b9/0x240 [ 463.540899][T11433] __x64_sys_bpf+0x78/0xc0 [ 463.540919][T11433] ? lockdep_hardirqs_on+0x7c/0x110 [ 463.540939][T11433] do_syscall_64+0xcd/0x260 [ 463.540962][T11433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.540978][T11433] RIP: 0033:0x7f285ed8e169 [ 463.540992][T11433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.541007][T11433] RSP: 002b:00007f285cbb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 463.541023][T11433] RAX: ffffffffffffffda RBX: 00007f285efb6160 RCX: 00007f285ed8e169 [ 463.541033][T11433] RDX: 0000000000000094 RSI: 0000200000002040 RDI: 0000000000000005 [ 463.541043][T11433] RBP: 00007f285cbb4090 R08: 0000000000000000 R09: 0000000000000000 [ 463.541052][T11433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.541062][T11433] R13: 0000000000000000 R14: 00007f285efb6160 R15: 00007ffd24c13678 [ 463.541083][T11433] [ 463.541088][T11433] Mem-Info: [ 463.812043][T11433] active_anon:34701 inactive_anon:0 isolated_anon:0 [ 463.812043][T11433] active_file:11285 inactive_file:39197 isolated_file:0 [ 463.812043][T11433] unevictable:768 dirty:183 writeback:0 [ 463.812043][T11433] slab_reclaimable:11951 slab_unreclaimable:100215 [ 463.812043][T11433] mapped:36828 shmem:30973 pagetables:1227 [ 463.812043][T11433] sec_pagetables:0 bounce:0 [ 463.812043][T11433] kernel_misc_reclaimable:0 [ 463.812043][T11433] free:1288271 free_pcp:569 free_cma:0 [ 463.857472][T11433] Node 0 active_anon:138804kB inactive_anon:0kB active_file:44944kB inactive_file:156620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147036kB dirty:732kB writeback:0kB shmem:122356kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11568kB pagetables:4908kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 463.891381][T11433] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:276kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 463.922972][T11433] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 463.950077][T11433] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 463.956507][T11433] Node 0 DMA32 free:1233220kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB active_anon:138688kB inactive_anon:0kB active_file:44944kB inactive_file:155032kB unevictable:1536kB writepending:732kB present:3129332kB managed:2541508kB mlocked:0kB bounce:0kB free_pcp:1456kB local_pcp:764kB free_cma:0kB [ 463.986906][T11433] lowmem_reserve[]: 0 0 1 1 1 [ 463.991969][T11433] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:1588kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 464.019391][T11433] lowmem_reserve[]: 0 0 0 0 0 [ 464.024109][T11433] Node 1 Normal free:3904364kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:168kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:852kB local_pcp:788kB free_cma:0kB [ 464.053432][T11433] lowmem_reserve[]: 0 0 0 0 0 [ 464.058140][T11433] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 464.070818][T11433] Node 0 DMA32: 72*4kB (UME) 125*8kB (UE) 146*16kB (UE) 78*32kB (UME) 50*64kB (UME) 43*128kB (UME) 31*256kB (UM) 17*512kB (UME) 13*1024kB (UME) 2*2048kB (ME) 289*4096kB (UM) = 1232616kB [ 464.089250][T11433] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 464.101589][T11433] Node 1 Normal: 264*4kB (UME) 76*8kB (UME) 46*16kB (UME) 206*32kB (UME) 120*64kB (UME) 41*128kB (UME) 16*256kB (UME) 11*512kB (UME) 6*1024kB (UME) 6*2048kB (UME) 941*4096kB (M) = 3904416kB [ 464.120383][T11433] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 464.130276][T11433] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 464.139589][T11433] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 464.149120][T11433] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 464.158408][T11433] 81455 total pagecache pages [ 464.163106][T11433] 0 pages in swap cache [ 464.167232][T11433] Free swap = 124976kB [ 464.171390][T11433] Total swap = 124996kB [ 464.175519][T11433] 2097051 pages RAM [ 464.179358][T11433] 0 pages HighMem/MovableOnly [ 464.184019][T11433] 429632 pages reserved [ 464.188157][T11433] 0 pages cma reserved [ 464.275010][T11438] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1441'. [ 464.275901][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 464.297315][ T5873] usb 1-1: USB disconnect, device number 49 [ 464.378558][T11437] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 464.379051][ T5873] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 464.429816][T11437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1440'. [ 464.435589][ T5873] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 464.683180][ T5874] usb 4-1: USB disconnect, device number 39 [ 464.773420][ T5873] quatech2 1-1:0.51: device disconnected [ 467.270786][T11484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1455'. [ 467.309840][ T5873] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 467.640043][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 467.652209][ T5873] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 467.662854][ T5873] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 467.674010][ T5873] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 467.714841][ T5873] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 467.745284][ T5873] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 467.818367][T11479] xt_hashlimit: size too large, truncated to 1048576 [ 467.879153][ T5873] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 467.910211][T11485] xt_HMARK: proto mask must be zero with L3 mode [ 467.920863][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.232073][ T5873] usb 3-1: usb_control_msg returned -32 [ 468.237791][ T5873] usbtmc 3-1:16.0: can't read capabilities [ 468.281871][T11481] block nbd2: shutting down sockets [ 468.999382][ T5869] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 469.008041][T11502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.016834][T11502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.025590][T11502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.034113][T11502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.170774][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.181622][ T5869] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 469.192270][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.224245][ T5869] usb 1-1: config 0 descriptor?? [ 469.238404][ T5869] usb 1-1: bad CDC descriptors [ 469.299679][T11505] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 469.465095][ T5873] usb 1-1: USB disconnect, device number 50 [ 470.561298][ T5873] usb 3-1: USB disconnect, device number 35 [ 470.643423][ T30] audit: type=1400 audit(1745208906.245:813): avc: denied { ioctl } for pid=11518 comm="syz.3.1466" path="socket:[32261]" dev="sockfs" ino=32261 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 471.649251][T11533] bridge0: port 1(team0) entered blocking state [ 471.655557][T11533] bridge0: port 1(team0) entered disabled state [ 471.661882][T11533] team0: entered allmulticast mode [ 471.667786][T11533] team0: entered promiscuous mode [ 471.681328][ T30] audit: type=1400 audit(1745208907.245:814): avc: granted { setsecparam } for pid=11531 comm="syz.3.1467" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 472.144999][T11548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.840149][T11548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.345005][T11570] overlayfs: failed to resolve './file1': -2 [ 473.649440][ T5869] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 473.699964][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 473.849388][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 473.875495][ T5869] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 473.896553][ T5869] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 473.915908][T11580] netlink: 'syz.2.1476': attribute type 16 has an invalid length. [ 473.924599][T11580] netlink: 'syz.2.1476': attribute type 3 has an invalid length. [ 473.929447][ T5869] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 473.933564][T11580] netlink: 'syz.2.1476': attribute type 1 has an invalid length. [ 473.964142][ T5869] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 473.980003][T11580] netlink: 'syz.2.1476': attribute type 2 has an invalid length. [ 473.984352][ T5869] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.999829][T11580] netlink: 64022 bytes leftover after parsing attributes in process `syz.2.1476'. [ 474.031374][ T5869] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 474.219392][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.311012][T11590] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 474.355857][ T30] audit: type=1326 audit(1745208909.955:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.2.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e438e169 code=0x7ffc0000 [ 474.447210][ T5869] usb 4-1: usb_control_msg returned -32 [ 474.455994][ T5869] usbtmc 4-1:16.0: can't read capabilities [ 474.465734][ T30] audit: type=1326 audit(1745208909.955:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.2.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb3e438e169 code=0x7ffc0000 [ 474.569399][ T30] audit: type=1326 audit(1745208909.955:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.2.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e438e169 code=0x7ffc0000 [ 474.660546][T11567] block nbd3: shutting down sockets [ 474.690066][ T30] audit: type=1326 audit(1745208909.955:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.2.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb3e438e169 code=0x7ffc0000 [ 474.957116][ T30] audit: type=1326 audit(1745208909.955:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.2.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e438e169 code=0x7ffc0000 [ 475.143982][ T30] audit: type=1326 audit(1745208909.985:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.2.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fb3e438e169 code=0x7ffc0000 [ 475.175903][ T30] audit: type=1326 audit(1745208909.985:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.2.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 475.237136][ T30] audit: type=1326 audit(1745208909.985:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.2.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e438e169 code=0x7ffc0000 [ 475.377930][T11610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.392210][T11610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.443073][T11610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.493160][T11610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.534715][T11613] nvme_fabrics: missing parameter 'transport=%s' [ 475.551295][T11613] nvme_fabrics: missing parameter 'nqn=%s' [ 476.651728][ T5869] usb 4-1: USB disconnect, device number 40 [ 477.089420][T11648] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 477.398360][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 477.398373][ T30] audit: type=1400 audit(1745208912.995:835): avc: denied { append } for pid=11653 comm="syz.5.1490" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 477.430456][T11654] loop6: detected capacity change from 0 to 524287999 [ 477.518053][T11654] Dev loop6: unable to read RDB block 8 [ 477.524578][T11654] loop6: unable to read partition table [ 477.533704][T11654] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 477.910073][ T5869] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 478.069505][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 478.075754][ T5869] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 478.084074][ T5869] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 478.093846][ T5869] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 478.103706][ T5869] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 478.113676][ T5869] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.173228][ T5869] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 478.238269][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.516717][ T5869] usb 4-1: usb_control_msg returned -32 [ 478.519486][ T5873] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 478.522339][ T5869] usbtmc 4-1:16.0: can't read capabilities [ 478.570571][T11677] block nbd3: shutting down sockets [ 478.689996][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 478.698522][ T5873] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 478.721819][ T5873] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 478.738564][ T5873] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 478.756502][ T5873] usb 1-1: New USB device found, idVendor=5bef, idProduct=5c51, bcdDevice=25.7a [ 478.767282][ T5873] usb 1-1: New USB device strings: Mfr=6, Product=161, SerialNumber=199 [ 478.778622][ T5873] usb 1-1: Product: syz [ 478.785211][ T5873] usb 1-1: Manufacturer: syz [ 478.792389][ T5873] usb 1-1: SerialNumber: syz [ 478.799003][ T5873] usb 1-1: config 0 descriptor?? [ 479.014427][ T30] audit: type=1400 audit(1745208914.615:836): avc: denied { ioctl } for pid=11673 comm="syz.0.1495" path="socket:[32452]" dev="sockfs" ino=32452 ioctlcmd=0x3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 479.055075][ T5873] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 479.065838][ T5873] usb 1-1: USB disconnect, device number 51 [ 479.119387][ T5869] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 479.269367][ T5869] usb 6-1: Using ep0 maxpacket: 8 [ 479.283130][ T5869] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 479.293323][ T5869] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 479.303617][ T5869] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 479.315290][ T5869] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 479.325713][ T5869] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.340744][ T5869] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 479.351137][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.359974][T11684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.368484][T11684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.383627][T11684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.396580][T11684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.581020][ T5869] usb 6-1: usb_control_msg returned -32 [ 479.591275][ T5869] usbtmc 6-1:16.0: can't read capabilities [ 479.623537][T11681] block nbd5: shutting down sockets [ 479.683544][ T30] audit: type=1400 audit(1745208915.285:837): avc: denied { setopt } for pid=11689 comm="syz.2.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 479.708124][ T30] audit: type=1400 audit(1745208915.305:838): avc: denied { create } for pid=11690 comm="syz.0.1502" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 479.779103][ T30] audit: type=1400 audit(1745208915.375:839): avc: denied { read } for pid=11693 comm="syz.0.1503" path="socket:[32484]" dev="sockfs" ino=32484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 480.363073][T11704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.373218][T11704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.384731][T11704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.395515][T11704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.669475][ T5873] usb 4-1: USB disconnect, device number 41 [ 480.826543][T11712] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 481.513613][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 481.522316][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 481.853054][ T5869] usb 6-1: USB disconnect, device number 27 [ 482.289468][ T5869] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 482.645533][ T5869] usb 6-1: Using ep0 maxpacket: 32 [ 482.652331][ T5869] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 482.660549][ T5869] usb 6-1: config 0 has no interface number 0 [ 482.666747][ T5869] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 482.677852][ T5869] usb 6-1: config 0 interface 85 has no altsetting 0 [ 482.687587][ T5869] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 482.696852][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.704963][ T5869] usb 6-1: Product: syz [ 482.709243][ T5869] usb 6-1: Manufacturer: syz [ 482.713984][ T5869] usb 6-1: SerialNumber: syz [ 482.724179][ T5869] usb 6-1: config 0 descriptor?? [ 483.409550][T11743] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 483.543058][ T5835] Bluetooth: hci5: command 0xfc11 tx timeout [ 483.549348][ T54] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 483.559584][T11745] 8021q: VLANs not supported on ipvlan1 [ 483.697783][T11742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1514'. [ 483.784003][ T5869] appletouch 6-1:0.85: Geyser mode initialized. [ 483.820297][ T5869] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input19 [ 483.991075][ T5873] usb 6-1: USB disconnect, device number 28 [ 483.993318][T11749] lo speed is unknown, defaulting to 1000 [ 484.013284][ T5873] appletouch 6-1:0.85: input: appletouch disconnected [ 484.639380][T11759] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 485.210343][ T5869] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 485.549371][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 485.562261][ T5869] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 485.582532][ T5869] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 485.701990][ T5869] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 486.009790][ T5869] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 486.027918][ T5869] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.049219][ T5869] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 486.097208][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.389844][ T5869] usb 3-1: usb_control_msg returned -32 [ 486.425770][ T5869] usbtmc 3-1:16.0: can't read capabilities [ 486.432104][T11758] block nbd2: shutting down sockets [ 487.210895][T11794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.226579][T11794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.340943][T11794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.398470][T11794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.044367][ T5873] usb 3-1: USB disconnect, device number 36 [ 489.790791][T11816] netlink: 'syz.2.1533': attribute type 27 has an invalid length. [ 490.694920][T11816] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 493.122170][ T30] audit: type=1400 audit(1745208928.725:840): avc: denied { bind } for pid=11856 comm="syz.2.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 493.164789][ T30] audit: type=1400 audit(1745208928.725:841): avc: denied { name_bind } for pid=11856 comm="syz.2.1542" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 493.239492][ T30] audit: type=1400 audit(1745208928.725:842): avc: denied { node_bind } for pid=11856 comm="syz.2.1542" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 493.392465][ T30] audit: type=1400 audit(1745208928.995:843): avc: denied { write } for pid=11856 comm="syz.2.1542" laddr=172.20.20.170 lport=45632 faddr=172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 494.087346][ T5873] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 494.097720][ T5873] hid-generic 0000:0003:0000.000D: unknown main item tag 0x0 [ 494.130952][ T5873] hid-generic 0000:0003:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 494.150034][T11877] virtiofs: Unknown parameter 'always' [ 494.156283][T11877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1545'. [ 494.562997][T11882] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 497.864043][T11912] input: syz1 as /devices/virtual/input/input20 [ 497.871209][ T30] audit: type=1400 audit(1745208933.475:844): avc: denied { shutdown } for pid=11911 comm="syz.5.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 498.325212][ T30] audit: type=1400 audit(1745208933.555:845): avc: denied { connect } for pid=11908 comm="syz.4.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 498.344868][ T30] audit: type=1400 audit(1745208933.635:846): avc: denied { connect } for pid=11908 comm="syz.4.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 498.437078][T11923] netlink: 'syz.5.1555': attribute type 10 has an invalid length. [ 498.438063][ T5834] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 498.449190][T11923] team0: Port device wlan1 added [ 498.522203][T11930] netlink: 'syz.3.1560': attribute type 27 has an invalid length. [ 498.542299][T11930] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 498.780793][T11934] netlink: 'syz.4.1561': attribute type 27 has an invalid length. [ 498.892215][T11934] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 499.010452][T11939] input: syz0 as /devices/virtual/input/input21 [ 500.119483][T11948] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 501.251000][T11959] syz.3.1567: attempt to access beyond end of device [ 501.251000][T11959] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 501.412190][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.419080][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.529753][ T5834] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 502.549206][ T5834] Bluetooth: hci3: Injecting HCI hardware error event [ 502.557143][ T54] Bluetooth: hci3: hardware error 0x00 [ 503.159767][T11982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1573'. [ 503.178549][ T5869] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 503.823396][ T5869] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x1 is Bulk; changing to Interrupt [ 503.833322][ T5869] usb 4-1: config 1 interface 0 has no altsetting 0 [ 503.989621][T11989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1575'. [ 504.026039][ T5869] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 504.036423][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.177199][ T5869] usb 4-1: Product: 릤ἄ瞰艱醕࿗⛔逷镙ﳈ㭡㽽鷌먲雒ꥴ쯲㮅蕑佼캥쭿쟘僤給塏辈䍂퉾 [ 504.289374][ T5869] usb 4-1: Manufacturer: ࠄ [ 504.309720][ T5869] usb 4-1: SerialNumber: 䰈⦡逊뀭౗㳵෼繬퇢歀풜巬얚료ኬ離 [ 504.321400][T11976] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 504.532913][T11975] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1572'. [ 504.543209][T11973] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1572'. [ 504.560480][ T5869] usb 4-1: USB disconnect, device number 42 [ 504.581837][ T54] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 504.591995][ T30] audit: type=1400 audit(1745208940.195:847): avc: denied { map } for pid=11992 comm="syz.4.1579" path="socket:[34227]" dev="sockfs" ino=34227 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 508.611829][T12051] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 512.019986][ T5873] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 512.079862][ T5874] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 512.092073][T12083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1602'. [ 512.142656][T12082] team0 (unregistering): Port device team_slave_0 removed [ 512.151664][T12082] team0 (unregistering): Port device team_slave_1 removed [ 512.263559][ T5873] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x1 is Bulk; changing to Interrupt [ 512.274489][ T5873] usb 6-1: config 1 interface 0 has no altsetting 0 [ 512.292646][ T5873] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 512.303274][ T5874] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x1 is Bulk; changing to Interrupt [ 512.319910][ T5823] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 512.327500][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.340575][ T5874] usb 3-1: config 1 interface 0 has no altsetting 0 [ 512.356875][ T5873] usb 6-1: Product: 릤ἄ瞰艱醕࿗⛔逷镙ﳈ㭡㽽鷌먲雒ꥴ쯲㮅蕑佼캥쭿쟘僤給塏辈䍂퉾 [ 512.374190][ T5874] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 512.384041][ T5873] usb 6-1: Manufacturer: ࠄ [ 512.389850][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.397902][ T5873] usb 6-1: SerialNumber: 䰈⦡逊뀭౗㳵෼繬퇢歀풜巬얚료ኬ離 [ 512.407156][ T5874] usb 3-1: Product: 릤ἄ瞰艱醕࿗⛔逷镙ﳈ㭡㽽鷌먲雒ꥴ쯲㮅蕑佼캥쭿쟘僤給塏辈䍂퉾 [ 512.468201][T12063] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 512.483362][ T5874] usb 3-1: Manufacturer: ࠄ [ 512.500126][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 512.526598][ T5874] usb 3-1: SerialNumber: 䰈⦡逊뀭౗㳵෼繬퇢歀풜巬얚료ኬ離 [ 512.566123][ T5823] usb 4-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 512.636930][T12067] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 512.647875][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.769710][T12063] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1596'. [ 512.779797][T12060] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1596'. [ 512.792851][ T5823] usb 4-1: Product: syz [ 512.797043][ T5823] usb 4-1: Manufacturer: syz [ 512.810280][ T5823] usb 4-1: SerialNumber: syz [ 512.816637][ T5823] usb 4-1: config 0 descriptor?? [ 512.890668][T12067] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1598'. [ 512.900472][T12065] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1598'. [ 512.915121][ T5823] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 512.934028][ T5874] usb 3-1: USB disconnect, device number 37 [ 512.948072][ T5873] usb 6-1: USB disconnect, device number 29 [ 512.997757][T12094] FAULT_INJECTION: forcing a failure. [ 512.997757][T12094] name failslab, interval 1, probability 0, space 0, times 0 [ 513.015478][T12094] CPU: 1 UID: 0 PID: 12094 Comm: syz.4.1606 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 513.015502][T12094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 513.015512][T12094] Call Trace: [ 513.015517][T12094] [ 513.015524][T12094] dump_stack_lvl+0x16c/0x1f0 [ 513.015555][T12094] should_fail_ex+0x512/0x640 [ 513.015572][T12094] ? fs_reclaim_acquire+0xae/0x150 [ 513.015597][T12094] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 513.015620][T12094] should_failslab+0xc2/0x120 [ 513.015638][T12094] __kmalloc_noprof+0xd2/0x510 [ 513.015661][T12094] tomoyo_realpath_from_path+0xc2/0x6e0 [ 513.015687][T12094] ? tomoyo_profile+0x47/0x60 [ 513.015705][T12094] tomoyo_path_number_perm+0x245/0x580 [ 513.015725][T12094] ? tomoyo_path_number_perm+0x237/0x580 [ 513.015747][T12094] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 513.015769][T12094] ? find_held_lock+0x2b/0x80 [ 513.015811][T12094] ? find_held_lock+0x2b/0x80 [ 513.015831][T12094] ? hook_file_ioctl_common+0x145/0x410 [ 513.015853][T12094] ? __fget_files+0x20e/0x3c0 [ 513.015873][T12094] security_file_ioctl+0x9b/0x240 [ 513.015898][T12094] __x64_sys_ioctl+0xb7/0x200 [ 513.015922][T12094] do_syscall_64+0xcd/0x260 [ 513.015947][T12094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.015964][T12094] RIP: 0033:0x7f875458e169 [ 513.015977][T12094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.015992][T12094] RSP: 002b:00007f87553a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 513.016008][T12094] RAX: ffffffffffffffda RBX: 00007f87547b5fa0 RCX: 00007f875458e169 [ 513.016019][T12094] RDX: 0000000000000002 RSI: 0000000000004611 RDI: 0000000000000003 [ 513.016028][T12094] RBP: 00007f87553a3090 R08: 0000000000000000 R09: 0000000000000000 [ 513.016038][T12094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.016047][T12094] R13: 0000000000000000 R14: 00007f87547b5fa0 R15: 00007ffe3f69ca28 [ 513.016069][T12094] [ 513.016091][T12094] ERROR: Out of memory at tomoyo_realpath_from_path. [ 513.242674][ T5823] pwc: Warning: more than 1 configuration available. [ 513.250384][ T5823] pwc: Failed to set LED on/off time (-71) [ 513.263436][ T5823] pwc: send_video_command error -71 [ 513.268644][ T5823] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 513.279872][ T5823] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 513.301292][ T5823] usb 4-1: USB disconnect, device number 43 [ 513.629631][T12112] openvswitch: netlink: EtherType 0 is less than min 600 [ 516.749759][ T30] audit: type=1400 audit(1745208951.135:848): avc: denied { ioctl } for pid=12140 comm="syz.2.1622" path="/dev/input/mouse0" dev="devtmpfs" ino=1000 ioctlcmd=0x64b9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 517.110588][T12148] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1624'. [ 522.685586][T12227] tmpfs: Unknown parameter 'hugealways' [ 523.204988][T12239] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 523.369553][T12240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1644'. [ 524.108065][T12248] CIFS mount error: No usable UNC path provided in device string! [ 524.108065][T12248] [ 524.118454][T12248] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 525.112510][ T30] audit: type=1400 audit(1745208960.715:849): avc: denied { getattr } for pid=12252 comm="syz.2.1650" path="anon_inode:[kvm-gmem]" dev="anon_inodefs" ino=35935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 525.474836][ T30] audit: type=1400 audit(1745208961.075:850): avc: denied { create } for pid=12260 comm="syz.3.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 525.513108][ T30] audit: type=1400 audit(1745208961.075:851): avc: denied { write } for pid=12260 comm="syz.3.1652" path="socket:[35948]" dev="sockfs" ino=35948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 525.579046][T12264] FAULT_INJECTION: forcing a failure. [ 525.579046][T12264] name failslab, interval 1, probability 0, space 0, times 0 [ 525.605251][T12264] CPU: 0 UID: 0 PID: 12264 Comm: syz.2.1653 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 525.605268][T12264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 525.605275][T12264] Call Trace: [ 525.605278][T12264] [ 525.605282][T12264] dump_stack_lvl+0x16c/0x1f0 [ 525.605301][T12264] should_fail_ex+0x512/0x640 [ 525.605312][T12264] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 525.605325][T12264] should_failslab+0xc2/0x120 [ 525.605337][T12264] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 525.605347][T12264] ? __alloc_skb+0x2b2/0x380 [ 525.605362][T12264] __alloc_skb+0x2b2/0x380 [ 525.605373][T12264] ? __pfx___alloc_skb+0x10/0x10 [ 525.605386][T12264] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 525.605403][T12264] netlink_alloc_large_skb+0x69/0x130 [ 525.605418][T12264] netlink_sendmsg+0x6a1/0xdd0 [ 525.605435][T12264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.605454][T12264] ____sys_sendmsg+0xa95/0xc70 [ 525.605470][T12264] ? copy_msghdr_from_user+0x10a/0x160 [ 525.605483][T12264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.605504][T12264] ___sys_sendmsg+0x134/0x1d0 [ 525.605517][T12264] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.605545][T12264] __sys_sendmsg+0x16d/0x220 [ 525.605558][T12264] ? __pfx___sys_sendmsg+0x10/0x10 [ 525.605574][T12264] ? rcu_is_watching+0x12/0xc0 [ 525.605591][T12264] do_syscall_64+0xcd/0x260 [ 525.605606][T12264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.605617][T12264] RIP: 0033:0x7fb3e438e169 [ 525.605625][T12264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.605635][T12264] RSP: 002b:00007fb3e5146038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.605644][T12264] RAX: ffffffffffffffda RBX: 00007fb3e45b5fa0 RCX: 00007fb3e438e169 [ 525.605651][T12264] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 525.605657][T12264] RBP: 00007fb3e5146090 R08: 0000000000000000 R09: 0000000000000000 [ 525.605663][T12264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.605668][T12264] R13: 0000000000000000 R14: 00007fb3e45b5fa0 R15: 00007fff66127858 [ 525.605681][T12264] [ 526.672613][T12280] hub 6-0:1.0: USB hub found [ 527.548764][T12280] hub 6-0:1.0: 1 port detected [ 527.567522][T12287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12287 comm=syz.0.1660 [ 527.603099][T12280] input: syz0 as /devices/virtual/input/input23 [ 527.627738][T12287] vlan2: entered allmulticast mode [ 527.910877][ T5823] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 528.110066][ T5823] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 528.135285][T12300] syz.0.1664: attempt to access beyond end of device [ 528.135285][T12300] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 528.149564][ T5874] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 528.990264][ T5823] usb 3-1: config 7 has no interface number 0 [ 529.064667][ T5823] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 529.074129][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.082157][ T5823] usb 3-1: Product: syz [ 529.086757][ T5823] usb 3-1: Manufacturer: syz [ 529.091417][ T5823] usb 3-1: SerialNumber: syz [ 529.141262][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.153734][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.173864][ T5874] usb 6-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 529.183474][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.211814][ T5874] usb 6-1: config 0 descriptor?? [ 529.841401][ T5874] hid-led 0003:1D34:0004.000E: unknown main item tag 0x0 [ 529.906154][ T5874] hid-led 0003:1D34:0004.000E: probe with driver hid-led failed with error -71 [ 529.924761][ T5874] usb 6-1: USB disconnect, device number 30 [ 530.021794][ T5823] as10x_usb: device has been detected [ 530.029170][ T5823] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 530.062679][ T5823] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 530.080304][ T30] audit: type=1400 audit(1745208965.675:852): avc: denied { firmware_load } for pid=5823 comm="kworker/1:3" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=271 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 530.109338][ T5823] as10x_usb: error during firmware upload part1 [ 530.116021][ T5823] Registered device Elgato EyeTV DTT Deluxe [ 530.121030][ T5823] usb 3-1: USB disconnect, device number 38 [ 530.153355][ T5823] Unregistered device Elgato EyeTV DTT Deluxe [ 530.160931][ T5823] as10x_usb: device has been disconnected [ 530.491462][T12319] lo speed is unknown, defaulting to 1000 [ 532.851533][T12361] syz.4.1681: attempt to access beyond end of device [ 532.851533][T12361] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 534.848917][T12370] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 535.211398][ T5823] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 535.410467][ T5823] usb 6-1: too many configurations: 32, using maximum allowed: 8 [ 535.420296][ T5823] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 535.427857][ T5823] usb 6-1: can't read configurations, error -61 [ 535.610187][ T5823] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 535.821808][ T5823] usb 6-1: too many configurations: 32, using maximum allowed: 8 [ 535.840264][ T5823] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 535.847885][ T5823] usb 6-1: can't read configurations, error -61 [ 535.854312][ T5823] usb usb6-port1: attempt power cycle [ 536.914533][ T5823] usb usb6-port1: Cannot enable. Maybe the USB cable is bad? [ 537.081304][ T5823] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 537.482973][ T5823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 537.494516][ T5823] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 537.529868][ T5823] usb 6-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 537.543312][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.572478][ T5823] usb 6-1: config 0 descriptor?? [ 537.745019][ T30] audit: type=1326 audit(1745208973.345:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12415 comm="syz.0.1695" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf4118e169 code=0x0 [ 538.035598][ T5823] smartjoyplus 0003:6666:8802.000F: unknown main item tag 0x0 [ 538.044009][ T5823] smartjoyplus 0003:6666:8802.000F: unknown main item tag 0x0 [ 538.052187][ T5823] smartjoyplus 0003:6666:8802.000F: item fetching failed at offset 2/5 [ 538.062592][ T5823] smartjoyplus 0003:6666:8802.000F: parse failed [ 538.070106][ T5823] smartjoyplus 0003:6666:8802.000F: probe with driver smartjoyplus failed with error -22 [ 538.408630][ T30] audit: type=1400 audit(1745208973.985:854): avc: denied { mounton } for pid=12418 comm="syz.3.1697" path="/376/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 539.679382][ T5869] usb 6-1: USB disconnect, device number 34 [ 540.409976][ T5823] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 540.581329][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 540.591846][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 540.643659][ T5823] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 540.662456][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.673169][ T5823] usb 4-1: Product: syz [ 540.677612][ T5823] usb 4-1: Manufacturer: syz [ 540.729882][ T5823] usb 4-1: SerialNumber: syz [ 540.737053][ T5823] usb 4-1: config 0 descriptor?? [ 540.871604][ T30] audit: type=1400 audit(1745208976.465:855): avc: denied { relabelfrom } for pid=12444 comm="syz.0.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 540.930146][ T30] audit: type=1400 audit(1745208976.465:856): avc: denied { relabelto } for pid=12444 comm="syz.0.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 541.442939][T12437] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 542.020446][T12461] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1707'. [ 542.970916][T12473] syz.4.1710: attempt to access beyond end of device [ 542.970916][T12473] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 543.246247][T12477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 543.562277][T12486] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1714'. [ 543.571824][T12486] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1714'. [ 543.581110][T12486] netlink: 'syz.4.1714': attribute type 5 has an invalid length. [ 543.588979][T12486] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1714'. [ 545.012786][T12488] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1713'. [ 545.019835][ T30] audit: type=1400 audit(1745208979.815:857): avc: denied { read } for pid=12474 comm="syz.2.1711" name="file0" dev="tmpfs" ino=1757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 545.080680][ T30] audit: type=1400 audit(1745208979.815:858): avc: denied { open } for pid=12474 comm="syz.2.1711" path="/323/file0" dev="tmpfs" ino=1757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 545.104787][ T30] audit: type=1400 audit(1745208979.815:859): avc: denied { ioctl } for pid=12474 comm="syz.2.1711" path="/323/file0" dev="tmpfs" ino=1757 ioctlcmd=0x1262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 545.725961][ T5823] usb 4-1: USB disconnect, device number 44 [ 547.919587][T12523] syz.2.1722: attempt to access beyond end of device [ 547.919587][T12523] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 549.098217][T12530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1721'. [ 549.199458][ T30] audit: type=1400 audit(1745208984.775:860): avc: denied { wake_alarm } for pid=12527 comm="syz.5.1725" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 549.491970][T12539] lo speed is unknown, defaulting to 1000 [ 550.432253][ T30] audit: type=1400 audit(1745208985.795:861): avc: denied { bind } for pid=12543 comm="syz.5.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 550.564808][ T30] audit: type=1400 audit(1745208985.815:862): avc: denied { name_bind } for pid=12543 comm="syz.5.1729" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 550.651512][ T30] audit: type=1400 audit(1745208985.815:863): avc: denied { node_bind } for pid=12543 comm="syz.5.1729" saddr=fe88::6 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 550.889635][T12552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1728'. [ 553.649471][ T5869] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 553.679843][ T30] audit: type=1400 audit(1745208989.285:864): avc: denied { shutdown } for pid=12578 comm="syz.5.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 553.782706][T12581] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1738'. [ 553.792074][T12581] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1738'. [ 553.814247][T12581] Invalid source name [ 553.819834][ T5869] usb 1-1: device descriptor read/64, error -71 [ 554.272588][ T5869] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 554.408861][T12589] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 554.436204][T12586] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1740'. [ 554.470847][ T5869] usb 1-1: device descriptor read/64, error -71 [ 554.599636][ T5869] usb usb1-port1: attempt power cycle [ 555.349415][ T5869] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 555.381343][ T5869] usb 1-1: device descriptor read/8, error -71 [ 555.504513][ T5823] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 555.619603][T12608] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 555.651999][ T5869] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 555.680782][ T5823] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 555.699227][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.711662][ T5869] usb 1-1: device descriptor read/8, error -71 [ 555.762291][ T5823] usb 4-1: Product: syz [ 555.766567][ T5823] usb 4-1: Manufacturer: syz [ 555.771848][ T5823] usb 4-1: SerialNumber: syz [ 555.786143][ T5823] usb 4-1: config 0 descriptor?? [ 555.836349][ T5869] usb usb1-port1: unable to enumerate USB device [ 556.027563][ T5823] usb-storage 4-1:0.0: USB Mass Storage device detected [ 556.208713][T12620] netlink: 'syz.0.1748': attribute type 27 has an invalid length. [ 556.479938][T12620] batman_adv: batadv0: Interface deactivated: geneve2 [ 556.841516][ T5869] usb 4-1: USB disconnect, device number 45 [ 556.850029][T12620] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 556.859199][T12620] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 556.875167][T12620] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 556.964570][T12620] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 557.182859][T12623] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 557.205060][T12620] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 557.215185][ T5823] hid-generic 0000:0003:0000.0010: unknown main item tag 0x0 [ 557.218341][T12620] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 557.228514][ T5823] hid-generic 0000:0003:0000.0010: unknown main item tag 0x0 [ 557.253399][ T5823] hid-generic 0000:0003:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz1 [ 557.259286][T12620] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 557.274444][T12620] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 557.289990][T12620] geneve3: left promiscuous mode [ 557.290072][T12639] virtiofs: Unknown parameter 'always' [ 557.334471][T12639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1750'. [ 558.432043][T12652] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1754'. [ 559.216584][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1756'. [ 559.240807][ T5873] IPVS: starting estimator thread 0... [ 559.600711][T12662] IPVS: using max 37 ests per chain, 88800 per kthread [ 560.547930][ T5873] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 560.710905][ T5873] usb 6-1: Using ep0 maxpacket: 8 [ 560.718129][ T5873] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 560.727887][ T5873] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.791065][ T5873] usb 6-1: config 0 has no interface number 0 [ 560.950657][ T5873] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 560.962983][ T30] audit: type=1400 audit(1745208996.475:865): avc: denied { ioctl } for pid=12674 comm="syz.2.1761" path="mnt:[4026532801]" dev="nsfs" ino=4026532801 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 560.988131][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.316320][ T5873] usb 6-1: Product: syz [ 561.326481][ T5873] usb 6-1: Manufacturer: syz [ 561.331635][ T5873] usb 6-1: SerialNumber: syz [ 561.361293][ T5873] usb 6-1: config 0 descriptor?? [ 561.896990][ T5873] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 561.905037][ T5873] usb 6-1: No valid video chain found. [ 562.308498][ T5869] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 562.322206][ T5873] usb 6-1: USB disconnect, device number 35 [ 562.330281][T12698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1766'. [ 562.371976][T12703] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1767'. [ 562.421400][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.427789][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.459328][ T5869] usb 4-1: Using ep0 maxpacket: 32 [ 562.465766][ T5869] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 562.473905][ T5869] usb 4-1: config 0 has no interface number 0 [ 562.481717][ T5869] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 562.490840][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.498828][ T5869] usb 4-1: Product: syz [ 562.503001][ T5869] usb 4-1: Manufacturer: syz [ 562.507583][ T5869] usb 4-1: SerialNumber: syz [ 562.513722][ T5869] usb 4-1: config 0 descriptor?? [ 562.564401][ T5869] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 562.649343][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 562.767032][ T5869] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 562.777980][ T5869] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 562.809304][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 562.815798][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.826045][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 562.836960][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 562.846591][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 562.856241][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 562.871678][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 562.880866][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 562.888946][ T9] usb 3-1: Manufacturer: syz [ 562.898030][ T9] usb 3-1: config 0 descriptor?? [ 564.082819][ T9] rc_core: IR keymap rc-hauppauge not found [ 564.089130][ T9] Registered IR keymap rc-empty [ 564.096545][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 564.129415][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 564.299380][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 564.315845][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input24 [ 564.489182][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 564.510964][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 564.519455][ T5869] usb 4-1: USB disconnect, device number 46 [ 564.527139][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 564.538185][ T5869] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 564.570842][ T5869] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 564.592024][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 564.613170][ T5869] quatech2 4-1:0.51: device disconnected [ 564.629652][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 564.643015][T12727] syz.0.1775 (12727): /proc/12725/oom_adj is deprecated, please use /proc/12725/oom_score_adj instead. [ 564.659527][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 564.662755][T12727] sg_write: process 1201 (syz.0.1775) changed security contexts after opening file descriptor, this is not allowed. [ 564.679579][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 564.719599][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 564.739386][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 564.779462][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 564.819662][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 564.865886][T12734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1777'. [ 564.931211][ T9] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 564.945839][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 566.128125][ T5873] usb 3-1: USB disconnect, device number 39 [ 567.791211][T12759] could not allocate digest TFM handle blake2s-224-x86 [ 567.834483][T12770] syzkaller1: entered promiscuous mode [ 567.846368][T12770] syzkaller1: entered allmulticast mode [ 567.979917][ T5873] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 568.042254][ T30] audit: type=1400 audit(1745209003.645:866): avc: denied { mount } for pid=12775 comm="syz.3.1790" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 568.073543][T12776] xt_CT: You must specify a L4 protocol and not use inversions on it [ 568.083682][T12776] tracefs: Bad value for 'uid' [ 568.086938][ T30] audit: type=1400 audit(1745209003.685:867): avc: denied { remount } for pid=12775 comm="syz.3.1790" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 568.088494][T12776] tracefs: Bad value for 'uid' [ 568.127020][ T30] audit: type=1400 audit(1745209003.725:868): avc: denied { mounton } for pid=12775 comm="syz.3.1790" path="/391/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 568.276167][ T5873] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x1 is Bulk; changing to Interrupt [ 568.291182][ T5873] usb 1-1: config 1 interface 0 has no altsetting 0 [ 568.310240][ T5873] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 568.319720][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.327700][ T5873] usb 1-1: Product: 릤ἄ瞰艱醕࿗⛔逷镙ﳈ㭡㽽鷌먲雒ꥴ쯲㮅蕑佼캥쭿쟘僤給塏辈䍂퉾 [ 568.340146][ T5873] usb 1-1: Manufacturer: ࠄ [ 568.344724][ T5873] usb 1-1: SerialNumber: 䰈⦡逊뀭౗㳵෼繬퇢歀풜巬얚료ኬ離 [ 568.400887][T12754] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 568.761774][T12754] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1785'. [ 568.772222][T12751] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1785'. [ 568.828496][ T5873] usb 1-1: USB disconnect, device number 56 [ 569.083393][ T30] audit: type=1400 audit(1745209004.495:869): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 570.702943][T12802] tun0: tun_chr_ioctl cmd 1074025675 [ 570.708256][T12802] tun0: persist enabled [ 570.718748][T12802] tun0: tun_chr_ioctl cmd 1074025675 [ 570.731267][T12802] tun0: persist disabled [ 570.750596][T12802] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1797'. [ 570.879768][T12805] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 571.715674][ T30] audit: type=1400 audit(1745209007.315:870): avc: denied { read } for pid=12818 comm="syz.5.1804" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 571.750037][T12823] block device autoloading is deprecated and will be removed. [ 571.829342][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 571.839315][ T5873] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 571.902220][ T30] audit: type=1400 audit(1745209007.315:871): avc: denied { open } for pid=12818 comm="syz.5.1804" path="/283/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 571.902758][T12819] md: md2 stopped. [ 571.925265][ C1] vkms_vblank_simulate: vblank timer overrun [ 572.457571][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 572.492604][ T30] audit: type=1400 audit(1745209007.505:872): avc: denied { ioctl } for pid=12818 comm="syz.5.1804" path="/283/file0/file0" dev="fuse" ino=64 ioctlcmd=0x932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 572.521336][ T5873] usb 4-1: unable to get BOS descriptor or descriptor too short [ 572.533095][ T5873] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 572.547378][ T5873] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 572.549512][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 572.573787][ T5873] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 572.672874][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.685087][ T5873] usb 4-1: Product: syz [ 572.689873][ T5873] usb 4-1: Manufacturer: syz [ 572.692844][ T9] usb 1-1: config 100 has too many interfaces: 156, using maximum allowed: 32 [ 572.694456][ T5873] usb 4-1: SerialNumber: syz [ 572.703614][ T9] usb 1-1: config 100 has an invalid descriptor of length 36, skipping remainder of the config [ 572.703634][ T9] usb 1-1: config 100 has 0 interfaces, different from the descriptor's value: 156 [ 572.704455][ T9] usb 1-1: config 100 has too many interfaces: 156, using maximum allowed: 32 [ 573.173726][ T9] usb 1-1: config 100 has an invalid descriptor of length 36, skipping remainder of the config [ 573.189038][ T9] usb 1-1: config 100 has 0 interfaces, different from the descriptor's value: 156 [ 573.210315][ T9] usb 1-1: config 100 has too many interfaces: 156, using maximum allowed: 32 [ 573.219284][ T9] usb 1-1: config 100 has an invalid descriptor of length 36, skipping remainder of the config [ 573.285540][ T9] usb 1-1: config 100 has 0 interfaces, different from the descriptor's value: 156 [ 573.305271][ T9] usb 1-1: string descriptor 0 read error: -22 [ 573.311656][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 573.320789][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.424821][ T30] audit: type=1326 audit(1745209010.025:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12839 comm="syz.2.1809" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3e438e169 code=0x0 [ 574.537275][T12843] x_tables: duplicate underflow at hook 2 [ 575.789786][T12864] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 580.320807][T12877] hpfs: Bad magic ... probably not HPFS [ 580.446936][ T30] audit: type=1400 audit(1745209016.045:874): avc: denied { create } for pid=12872 comm="syz.3.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 580.655832][ T5823] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 580.900017][ T5823] usb 6-1: Using ep0 maxpacket: 32 [ 580.917939][ T5823] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 580.936325][ T5823] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 580.945792][ T5823] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.958211][ T5823] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 580.969036][ T5823] usb 6-1: config 1 has no interface number 0 [ 580.976383][ T5823] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 580.985687][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.022741][ T30] audit: type=1400 audit(1745209017.625:875): avc: denied { watch watch_reads } for pid=12898 comm="syz.4.1827" path=2F6D656D66643A2D42D14E49C56A9A08202864656C6574656429 dev="hugetlbfs" ino=37675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 582.523215][T12904] netlink: 'syz.4.1829': attribute type 27 has an invalid length. [ 582.589679][T12904] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 585.302072][T12941] ext4: Unknown parameter '+^d[' [ 586.034128][T12950] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 588.671664][T12982] random: crng reseeded on system resumption [ 588.678788][ T30] audit: type=1400 audit(1745209024.275:876): avc: denied { append } for pid=12980 comm="syz.4.1850" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 588.730572][ T30] audit: type=1400 audit(1745209024.275:877): avc: denied { open } for pid=12980 comm="syz.4.1850" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 590.679676][T12998] tmpfs: Bad value for 'mpol' [ 591.398629][ T30] audit: type=1400 audit(1745209026.995:878): avc: denied { setopt } for pid=13010 comm="syz.4.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 592.772339][T13022] lo speed is unknown, defaulting to 1000 [ 593.808300][T13034] tipc: Started in network mode [ 593.815541][T13034] tipc: Node identity 4, cluster identity 4711 [ 593.824184][T13034] tipc: Node number set to 4 [ 595.455146][ T30] audit: type=1400 audit(1745209031.055:879): avc: denied { bind } for pid=13048 comm="syz.5.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 597.590666][T13063] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 597.591818][T13063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1875'. [ 597.593370][T13062] caif:caif_disconnect_client(): nothing to disconnect [ 598.337754][T13072] FAULT_INJECTION: forcing a failure. [ 598.337754][T13072] name failslab, interval 1, probability 0, space 0, times 0 [ 598.337792][T13072] CPU: 1 UID: 0 PID: 13072 Comm: syz.4.1878 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 598.337805][T13072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 598.337811][T13072] Call Trace: [ 598.337815][T13072] [ 598.337819][T13072] dump_stack_lvl+0x16c/0x1f0 [ 598.337837][T13072] should_fail_ex+0x512/0x640 [ 598.337848][T13072] ? _copy_from_iter+0x161/0x15b0 [ 598.337861][T13072] should_failslab+0xc2/0x120 [ 598.337873][T13072] __kmalloc_cache_noprof+0x6a/0x3e0 [ 598.337890][T13072] ? __pfx__copy_from_iter+0x10/0x10 [ 598.337900][T13072] ? vhost_iotlb_add_range_ctx+0xf0/0xa80 [ 598.337920][T13072] vhost_iotlb_add_range_ctx+0xf0/0xa80 [ 598.337940][T13072] vhost_chr_write_iter+0x5e9/0x10f0 [ 598.337957][T13072] ? __pfx_vhost_chr_write_iter+0x10/0x10 [ 598.337972][T13072] ? selinux_file_permission+0x11f/0x580 [ 598.337989][T13072] ? bpf_lsm_file_permission+0x9/0x10 [ 598.338005][T13072] ? security_file_permission+0x71/0x210 [ 598.338021][T13072] ? rw_verify_area+0xcf/0x680 [ 598.338036][T13072] vfs_write+0x5ba/0x1180 [ 598.338052][T13072] ? __pfx_vhost_net_chr_write_iter+0x10/0x10 [ 598.338068][T13072] ? __pfx_vfs_write+0x10/0x10 [ 598.338083][T13072] ? find_held_lock+0x2b/0x80 [ 598.338105][T13072] ksys_write+0x12a/0x240 [ 598.338113][T13072] ? __pfx_ksys_write+0x10/0x10 [ 598.338126][T13072] do_syscall_64+0xcd/0x260 [ 598.338142][T13072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.338152][T13072] RIP: 0033:0x7f875458e169 [ 598.338166][T13072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.338175][T13072] RSP: 002b:00007f87553a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 598.338186][T13072] RAX: ffffffffffffffda RBX: 00007f87547b5fa0 RCX: 00007f875458e169 [ 598.338192][T13072] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000003 [ 598.338198][T13072] RBP: 00007f87553a3090 R08: 0000000000000000 R09: 0000000000000000 [ 598.338204][T13072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.338209][T13072] R13: 0000000000000000 R14: 00007f87547b5fa0 R15: 00007ffe3f69ca28 [ 598.338222][T13072] [ 599.413949][ T30] audit: type=1400 audit(1745209035.015:880): avc: denied { setopt } for pid=13082 comm="syz.4.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 600.427498][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 600.428671][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 600.429502][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 600.430058][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 600.430785][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 600.522179][T13092] lo speed is unknown, defaulting to 1000 [ 600.668199][T13092] chnl_net:caif_netlink_parms(): no params data found [ 600.742933][T13092] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.743047][T13092] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.743112][T13092] bridge_slave_0: entered allmulticast mode [ 600.744323][T13092] bridge_slave_0: entered promiscuous mode [ 600.747250][T13092] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.747772][T13092] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.748473][T13092] bridge_slave_1: entered allmulticast mode [ 600.749171][T13092] bridge_slave_1: entered promiscuous mode [ 600.775746][T13092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.778119][T13092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.810276][T13092] team0: Port device team_slave_0 added [ 600.814585][T13092] team0: Port device team_slave_1 added [ 600.836828][T13092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.836861][T13092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.836899][T13092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.838807][T13092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.838837][T13092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.838874][T13092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.874349][T13092] hsr_slave_0: entered promiscuous mode [ 600.875931][T13092] hsr_slave_1: entered promiscuous mode [ 602.510908][ T54] Bluetooth: hci5: command tx timeout [ 603.353445][T13102] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 603.807083][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 603.808522][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 603.810305][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 603.822764][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 603.829347][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 604.579298][ T54] Bluetooth: hci5: command tx timeout [ 605.860103][ T54] Bluetooth: hci6: command tx timeout [ 606.669613][ T54] Bluetooth: hci5: command tx timeout [ 607.939437][ T54] Bluetooth: hci6: command tx timeout [ 608.739491][ T54] Bluetooth: hci5: command tx timeout [ 610.019526][ T54] Bluetooth: hci6: command tx timeout [ 611.078235][ T5834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 611.082706][ T5834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 611.083778][ T5834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 611.089964][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 611.090444][ T5834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 611.576835][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 611.578156][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 611.578798][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 611.583277][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 611.583774][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 612.109795][ T54] Bluetooth: hci6: command tx timeout [ 613.149467][ T54] Bluetooth: hci7: command tx timeout [ 613.621010][ T5834] Bluetooth: hci3: command tx timeout [ 615.219364][ T54] Bluetooth: hci7: command tx timeout [ 615.709470][ T54] Bluetooth: hci3: command tx timeout [ 617.299474][ T54] Bluetooth: hci7: command tx timeout [ 617.780473][ T54] Bluetooth: hci3: command tx timeout [ 619.379299][ T54] Bluetooth: hci7: command tx timeout [ 619.862783][ T54] Bluetooth: hci3: command tx timeout [ 620.035462][ T5834] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 620.037195][ T5834] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 620.037761][ T5834] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 620.038508][ T5834] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 620.038989][ T5834] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 622.109341][ T54] Bluetooth: hci8: command tx timeout [ 623.860928][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.860970][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.179280][ T54] Bluetooth: hci8: command tx timeout [ 626.259640][ T54] Bluetooth: hci8: command tx timeout [ 628.339830][ T54] Bluetooth: hci8: command tx timeout [ 660.995456][ T5834] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 660.996471][ T5834] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 660.997413][ T5834] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 660.998190][ T5834] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 660.998683][ T5834] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 663.060330][ T54] Bluetooth: hci9: command tx timeout [ 663.496530][ T5834] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 663.497929][ T5834] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 663.498519][ T5834] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 663.499770][ T5834] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 663.502882][ T5834] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 665.139372][ T5834] Bluetooth: hci9: command tx timeout [ 665.539321][ T5834] Bluetooth: hci10: command tx timeout [ 667.229756][ T5834] Bluetooth: hci9: command tx timeout [ 667.629756][ T5834] Bluetooth: hci10: command tx timeout [ 669.299886][ T5834] Bluetooth: hci9: command tx timeout [ 669.699269][ T5834] Bluetooth: hci10: command tx timeout [ 671.008958][ T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 671.009967][ T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 671.010607][ T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 671.011371][ T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 671.011850][ T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 671.779223][ T54] Bluetooth: hci10: command tx timeout [ 672.017005][ T5834] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 672.017898][ T5834] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 672.018517][ T5834] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 672.020578][ T5834] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 672.021790][ T5834] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 673.059771][ T54] Bluetooth: hci11: command tx timeout [ 674.099866][ T54] Bluetooth: hci12: command tx timeout [ 675.139778][ T54] Bluetooth: hci11: command tx timeout [ 676.179988][ T54] Bluetooth: hci12: command tx timeout [ 677.219940][ T54] Bluetooth: hci11: command tx timeout [ 678.259229][ T54] Bluetooth: hci12: command tx timeout [ 679.299819][ T54] Bluetooth: hci11: command tx timeout [ 680.339837][ T54] Bluetooth: hci12: command tx timeout [ 680.521580][ T5834] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 680.522440][ T5834] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 680.523006][ T5834] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 680.524101][ T5834] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 680.524591][ T5834] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 682.579678][ T54] Bluetooth: hci13: command tx timeout [ 684.659614][ T54] Bluetooth: hci13: command tx timeout [ 685.300848][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.300897][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.739556][ T54] Bluetooth: hci13: command tx timeout [ 688.819521][ T54] Bluetooth: hci13: command tx timeout [ 721.070586][ T5834] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 721.072006][ T5834] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 721.072955][ T5834] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 721.073699][ T5834] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 721.074182][ T5834] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 723.139524][ T5834] Bluetooth: hci14: command tx timeout [ 723.219213][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 723.582309][ T5834] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 723.583941][ T5834] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 723.584519][ T5834] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 723.585261][ T5834] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 723.585766][ T5834] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 725.219803][ T54] Bluetooth: hci14: command tx timeout [ 725.629243][ T54] Bluetooth: hci15: command tx timeout [ 727.299754][ T5834] Bluetooth: hci14: command tx timeout [ 727.699428][ T5834] Bluetooth: hci15: command tx timeout [ 728.339688][ T5834] Bluetooth: hci6: command 0x0406 tx timeout [ 729.379610][ T54] Bluetooth: hci14: command tx timeout [ 729.459806][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 729.459828][ T31] Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 [ 729.459838][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 729.459845][ T31] task:kworker/0:0 state:D stack:21832 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 729.459906][ T31] Workqueue: usb_hub_wq hub_event [ 729.459929][ T31] Call Trace: [ 729.459936][ T31] [ 729.459947][ T31] __schedule+0x116f/0x5de0 [ 729.459984][ T31] ? __pfx___schedule+0x10/0x10 [ 729.460010][ T31] ? find_held_lock+0x2b/0x80 [ 729.460034][ T31] ? schedule+0x2d7/0x3a0 [ 729.460058][ T31] schedule+0xe7/0x3a0 [ 729.460079][ T31] schedule_timeout+0x257/0x290 [ 729.460098][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 729.460125][ T31] ? mark_held_locks+0x49/0x80 [ 729.460139][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 729.460162][ T31] __wait_for_common+0x2fc/0x4e0 [ 729.460185][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 729.460207][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 729.460232][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 729.460262][ T31] devtmpfs_submit_req+0xa8/0x100 [ 729.460288][ T31] devtmpfs_create_node+0x18a/0x230 [ 729.460312][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 729.460338][ T31] ? up_write+0x1b2/0x520 [ 729.460366][ T31] ? kernfs_create_link+0x1bd/0x240 [ 729.460393][ T31] ? kernfs_put+0x35/0x60 [ 729.460410][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 729.460433][ T31] device_add+0x10bd/0x1a70 [ 729.460454][ T31] ? __pfx_device_add+0x10/0x10 [ 729.460471][ T31] ? usb_detect_static_quirks+0x335/0x3e0 [ 729.460496][ T31] ? usb_cache_string+0xf2/0x150 [ 729.460521][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 729.460546][ T31] usb_new_device+0xd07/0x1a20 [ 729.460577][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 729.460597][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 729.460625][ T31] ? mark_held_locks+0x49/0x80 [ 729.460645][ T31] hub_event+0x2eb7/0x4fa0 [ 729.460686][ T31] ? __pfx_hub_event+0x10/0x10 [ 729.460702][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 729.460736][ T31] ? rcu_is_watching+0x12/0xc0 [ 729.460761][ T31] process_one_work+0x9cc/0x1b70 [ 729.460794][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 729.460813][ T31] ? __pfx_process_one_work+0x10/0x10 [ 729.460842][ T31] ? assign_work+0x1a0/0x250 [ 729.460869][ T31] worker_thread+0x6c8/0xf10 [ 729.460903][ T31] ? __pfx_worker_thread+0x10/0x10 [ 729.460922][ T31] kthread+0x3c2/0x780 [ 729.460942][ T31] ? __pfx_kthread+0x10/0x10 [ 729.460958][ T31] ? __pfx_kthread+0x10/0x10 [ 729.460975][ T31] ? __pfx_kthread+0x10/0x10 [ 729.460992][ T31] ? __pfx_kthread+0x10/0x10 [ 729.461009][ T31] ? rcu_is_watching+0x12/0xc0 [ 729.461030][ T31] ? __pfx_kthread+0x10/0x10 [ 729.461048][ T31] ret_from_fork+0x45/0x80 [ 729.461067][ T31] ? __pfx_kthread+0x10/0x10 [ 729.461085][ T31] ret_from_fork_asm+0x1a/0x30 [ 729.461124][ T31] [ 729.461212][ T31] INFO: task kworker/1:3:5823 blocked for more than 143 seconds. [ 729.461224][ T31] Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 [ 729.461235][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 729.461242][ T31] task:kworker/1:3 state:D stack:18392 pid:5823 tgid:5823 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 729.461288][ T31] Workqueue: usb_hub_wq hub_event [ 729.461304][ T31] Call Trace: [ 729.461309][ T31] [ 729.461320][ T31] __schedule+0x116f/0x5de0 [ 729.461356][ T31] ? __pfx___schedule+0x10/0x10 [ 729.461382][ T31] ? find_held_lock+0x2b/0x80 [ 729.461404][ T31] ? schedule+0x2d7/0x3a0 [ 729.461428][ T31] schedule+0xe7/0x3a0 [ 729.461448][ T31] schedule_timeout+0x257/0x290 [ 729.461466][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 729.461493][ T31] ? mark_held_locks+0x49/0x80 [ 729.461508][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 729.461531][ T31] __wait_for_common+0x2fc/0x4e0 [ 729.461553][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 729.461575][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 729.461601][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 729.461630][ T31] devtmpfs_submit_req+0xa8/0x100 [ 729.461655][ T31] devtmpfs_create_node+0x18a/0x230 [ 729.461680][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 729.461706][ T31] ? up_write+0x1b2/0x520 [ 729.461734][ T31] ? kernfs_create_link+0x1bd/0x240 [ 729.461758][ T31] ? kernfs_put+0x35/0x60 [ 729.461777][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 729.461799][ T31] device_add+0x10bd/0x1a70 [ 729.461819][ T31] ? __pfx_device_add+0x10/0x10 [ 729.461845][ T31] usb_new_device+0xd07/0x1a20 [ 729.461881][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 729.461900][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 729.461928][ T31] ? mark_held_locks+0x49/0x80 [ 729.461948][ T31] hub_event+0x2eb7/0x4fa0 [ 729.461989][ T31] ? __pfx_hub_event+0x10/0x10 [ 729.462004][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 729.462037][ T31] ? rcu_is_watching+0x12/0xc0 [ 729.462061][ T31] process_one_work+0x9cc/0x1b70 [ 729.462091][ T31] ? __pfx_process_one_work+0x10/0x10 [ 729.462118][ T31] ? assign_work+0x1a0/0x250 [ 729.462139][ T31] worker_thread+0x6c8/0xf10 [ 729.462167][ T31] ? __kthread_parkme+0x19e/0x250 [ 729.462193][ T31] ? __pfx_worker_thread+0x10/0x10 [ 729.462213][ T31] kthread+0x3c2/0x780 [ 729.462231][ T31] ? __pfx_kthread+0x10/0x10 [ 729.462248][ T31] ? __pfx_kthread+0x10/0x10 [ 729.462264][ T31] ? __pfx_kthread+0x10/0x10 [ 729.462281][ T31] ? __pfx_kthread+0x10/0x10 [ 729.462297][ T31] ? rcu_is_watching+0x12/0xc0 [ 729.462318][ T31] ? __pfx_kthread+0x10/0x10 [ 729.462336][ T31] ret_from_fork+0x45/0x80 [ 729.462354][ T31] ? __pfx_kthread+0x10/0x10 [ 729.462372][ T31] ret_from_fork_asm+0x1a/0x30 [ 729.462409][ T31] [ 729.462423][ T31] INFO: task kworker/0:3:5869 blocked for more than 143 seconds. [ 729.462433][ T31] Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 [ 729.462443][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 729.462451][ T31] task:kworker/0:3 state:D stack:21352 pid:5869 tgid:5869 ppid:2 task_flags:0x4288160 flags:0x00004000 [ 729.462499][ T31] Workqueue: md_misc mddev_delayed_delete [ 729.462516][ T31] Call Trace: [ 729.462522][ T31] [ 729.462532][ T31] __schedule+0x116f/0x5de0 [ 729.462556][ T31] ? __lock_acquire+0xa91/0x1ba0 [ 729.462582][ T31] ? __pfx___schedule+0x10/0x10 [ 729.462607][ T31] ? find_held_lock+0x2b/0x80 [ 729.462629][ T31] ? schedule+0x2d7/0x3a0 [ 729.462653][ T31] schedule+0xe7/0x3a0 [ 729.462674][ T31] schedule_timeout+0x257/0x290 [ 729.462692][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 729.462719][ T31] ? mark_held_locks+0x49/0x80 [ 729.462734][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 729.462757][ T31] __wait_for_common+0x2fc/0x4e0 [ 729.462778][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 729.462799][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 729.462820][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 729.462838][ T31] devtmpfs_submit_req+0xa8/0x100 [ 729.462858][ T31] devtmpfs_delete_node+0xf6/0x160 [ 729.462874][ T31] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 729.462890][ T31] ? __call_rcu_common.constprop.0+0x3e5/0x9f0 [ 729.462902][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 729.462923][ T31] ? kernfs_put+0x4e/0x60 [ 729.462934][ T31] ? sysfs_remove_group+0xc6/0x180 [ 729.462947][ T31] device_del+0x734/0x9f0 [ 729.462964][ T31] ? __pfx_device_del+0x10/0x10 [ 729.462979][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 729.462993][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 729.463007][ T31] del_gendisk+0x486/0xc40 [ 729.463021][ T31] ? __pfx_del_gendisk+0x10/0x10 [ 729.463031][ T31] ? kernfs_put.part.0+0x18b/0x630 [ 729.463046][ T31] md_kobj_release+0xb2/0x100 [ 729.463061][ T31] kobject_put+0x1e4/0x5a0 [ 729.463078][ T31] process_one_work+0x9cc/0x1b70 [ 729.463096][ T31] ? __pfx_process_one_work+0x10/0x10 [ 729.463115][ T31] ? assign_work+0x1a0/0x250 [ 729.463135][ T31] worker_thread+0x6c8/0xf10 [ 729.463157][ T31] ? __pfx_worker_thread+0x10/0x10 [ 729.463170][ T31] kthread+0x3c2/0x780 [ 729.463181][ T31] ? __pfx_kthread+0x10/0x10 [ 729.463190][ T31] ? __pfx_kthread+0x10/0x10 [ 729.463201][ T31] ? __pfx_kthread+0x10/0x10 [ 729.463211][ T31] ? __pfx_kthread+0x10/0x10 [ 729.463221][ T31] ? rcu_is_watching+0x12/0xc0 [ 729.463234][ T31] ? __pfx_kthread+0x10/0x10 [ 729.463246][ T31] ret_from_fork+0x45/0x80 [ 729.463256][ T31] ? __pfx_kthread+0x10/0x10 [ 729.463267][ T31] ret_from_fork_asm+0x1a/0x30 [ 729.463289][ T31] [ 729.463294][ T31] INFO: task kworker/1:4:5873 blocked for more than 143 seconds. [ 729.463301][ T31] Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 [ 729.463307][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 729.463312][ T31] task:kworker/1:4 state:D stack:21256 pid:5873 tgid:5873 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 729.463338][ T31] Workqueue: usb_hub_wq hub_event [ 729.463347][ T31] Call Trace: [ 729.463350][ T31] [ 729.463356][ T31] __schedule+0x116f/0x5de0 [ 729.463368][ T31] ? number+0x9aa/0xc70 [ 729.463385][ T31] ? __pfx___schedule+0x10/0x10 [ 729.463401][ T31] ? find_held_lock+0x2b/0x80 [ 729.463414][ T31] ? schedule+0x2d7/0x3a0 [ 729.463429][ T31] schedule+0xe7/0x3a0 [ 729.463441][ T31] schedule_timeout+0x257/0x290 [ 729.463453][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 729.463468][ T31] ? mark_held_locks+0x49/0x80 [ 729.463477][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 729.463491][ T31] __wait_for_common+0x2fc/0x4e0 [ 729.463505][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 729.463518][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 729.463534][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 729.463551][ T31] devtmpfs_submit_req+0xa8/0x100 [ 729.463567][ T31] devtmpfs_create_node+0x18a/0x230 [ 729.463582][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 729.463599][ T31] ? up_write+0x1b2/0x520 [ 729.463615][ T31] ? kernfs_create_link+0x1bd/0x240 [ 729.463630][ T31] ? kernfs_put+0x35/0x60 [ 729.463642][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 729.463655][ T31] device_add+0x10bd/0x1a70 [ 729.463666][ T31] ? __pfx_device_add+0x10/0x10 [ 729.463676][ T31] ? add_device_randomness+0xb7/0xf0 [ 729.463689][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 729.463703][ T31] usb_new_device+0xd07/0x1a20 [ 729.463721][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 729.463733][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 729.463750][ T31] ? mark_held_locks+0x49/0x80 [ 729.463762][ T31] hub_event+0x2eb7/0x4fa0 [ 729.463783][ T31] ? __pfx_hub_event+0x10/0x10 [ 729.463793][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 729.463812][ T31] ? rcu_is_watching+0x12/0xc0 [ 729.463827][ T31] process_one_work+0x9cc/0x1b70 [ 729.463843][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 729.463859][ T31] ? __pfx_process_one_work+0x10/0x10 [ 729.463875][ T31] ? assign_work+0x1a0/0x250 [ 729.463888][ T31] worker_thread+0x6c8/0xf10 [ 729.463904][ T31] ? __kthread_parkme+0x19e/0x250 [ 729.463920][ T31] ? __pfx_worker_thread+0x10/0x10 [ 729.463932][ T31] kthread+0x3c2/0x780 [ 729.463943][ T31] ? __pfx_kthread+0x10/0x10 [ 729.463953][ T31] ? __pfx_kthread+0x10/0x10 [ 729.463963][ T31] ? __pfx_kthread+0x10/0x10 [ 729.463973][ T31] ? __pfx_kthread+0x10/0x10 [ 729.463983][ T31] ? rcu_is_watching+0x12/0xc0 [ 729.463997][ T31] ? __pfx_kthread+0x10/0x10 [ 729.464008][ T31] ret_from_fork+0x45/0x80 [ 729.464018][ T31] ? __pfx_kthread+0x10/0x10 [ 729.464029][ T31] ret_from_fork_asm+0x1a/0x30 [ 729.464051][ T31] [ 729.464064][ T31] INFO: task syz.0.1835:12929 blocked for more than 143 seconds. [ 729.464071][ T31] Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 [ 729.464077][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 729.464081][ T31] task:syz.0.1835 state:D stack:28328 pid:12929 tgid:12925 ppid:5830 task_flags:0x400040 flags:0x00004004 [ 729.464110][ T31] Call Trace: [ 729.464113][ T31] [ 729.464119][ T31] __schedule+0x116f/0x5de0 [ 729.464139][ T31] ? __pfx___schedule+0x10/0x10 [ 729.464155][ T31] ? find_held_lock+0x2b/0x80 [ 729.464169][ T31] ? schedule+0x2d7/0x3a0 [ 729.464183][ T31] schedule+0xe7/0x3a0 [ 729.464196][ T31] schedule_preempt_disabled+0x13/0x30 [ 729.464209][ T31] rwsem_down_read_slowpath+0x62f/0xb60 [ 729.464228][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 729.464250][ T31] ? __pfx___might_resched+0x10/0x10 [ 729.464265][ T31] ? try_to_unlazy+0x24e/0x660 [ 729.464284][ T31] down_read+0xef/0x480 [ 729.464300][ T31] ? __pfx_down_read+0x10/0x10 [ 729.464316][ T31] ? lookup_fast+0x156/0x610 [ 729.464333][ T31] walk_component+0x345/0x5b0 [ 729.464350][ T31] path_lookupat+0x17e/0x780 [ 729.464369][ T31] filename_lookup+0x224/0x5f0 [ 729.464380][ T31] ? __pfx_filename_lookup+0x10/0x10 [ 729.464400][ T31] ? getname_kernel+0x52/0x370 [ 729.464413][ T31] ? __asan_memcpy+0x3c/0x60 [ 729.464432][ T31] kern_path+0x35/0x50 [ 729.464441][ T31] tomoyo_mount_acl+0x624/0x850 [ 729.464456][ T31] ? kernel_text_address+0x8d/0x100 [ 729.464469][ T31] ? __kernel_text_address+0xd/0x40 [ 729.464484][ T31] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 729.464512][ T31] ? tomoyo_domain+0xbb/0x150 [ 729.464522][ T31] ? tomoyo_profile+0x47/0x60 [ 729.464533][ T31] tomoyo_mount_permission+0x16d/0x420 [ 729.464548][ T31] ? tomoyo_mount_permission+0x14f/0x420 [ 729.464563][ T31] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 729.464586][ T31] security_sb_mount+0x9b/0x260 [ 729.464601][ T31] path_mount+0x128/0x1f30 [ 729.464615][ T31] ? kmem_cache_free+0x2d4/0x4d0 [ 729.464625][ T31] ? __pfx_path_mount+0x10/0x10 [ 729.464639][ T31] ? putname+0x154/0x1a0 [ 729.464653][ T31] __x64_sys_mount+0x28d/0x310 [ 729.464665][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 729.464677][ T31] ? rcu_is_watching+0x12/0xc0 [ 729.464694][ T31] do_syscall_64+0xcd/0x260 [ 729.464710][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.464721][ T31] RIP: 0033:0x7fdf4118e169 [ 729.464730][ T31] RSP: 002b:00007fdf41faa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 729.464740][ T31] RAX: ffffffffffffffda RBX: 00007fdf413b6080 RCX: 00007fdf4118e169 [ 729.464748][ T31] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000200000000140 [ 729.464754][ T31] RBP: 00007fdf41210a68 R08: 0000200000000980 R09: 0000000000000000 [ 729.464761][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 729.464768][ T31] R13: 0000000000000000 R14: 00007fdf413b6080 R15: 00007ffee596e458 [ 729.464781][ T31] [ 729.464795][ T31] [ 729.464795][ T31] Showing all locks held in the system: [ 729.464800][ T31] 3 locks held by kworker/0:0/9: [ 729.464806][ T31] #0: ffff888022699948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 729.464835][ T31] #1: ffffc900000e7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 729.464868][ T31] #2: ffff88802943b198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 729.464894][ T31] 2 locks held by kdevtmpfs/26: [ 729.464900][ T31] #0: ffff88801c6d8950 (&type->i_mutex_dir_key/1){+.+.}-{4:4}, at: __kern_path_locked+0x132/0x2a0 [ 729.464933][ T31] #1: ffffffff8eef4368 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x25/0x1a0 [ 729.464964][ T31] 1 lock held by khungtaskd/31: [ 729.464970][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 729.464997][ T31] 3 locks held by kworker/u8:4/65: [ 729.465003][ T31] #0: ffff88814d034948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 729.465030][ T31] #1: ffffc90001577d18 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 729.465057][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 729.465099][ T31] 3 locks held by kworker/u8:7/3015: [ 729.465105][ T31] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 729.465132][ T31] #1: ffffc9000b967d18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 729.465159][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 729.465192][ T31] 2 locks held by getty/5576: [ 729.465198][ T31] #0: ffff8880329a50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 729.465227][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 729.465254][ T31] 3 locks held by kworker/1:3/5823: [ 729.465260][ T31] #0: ffff888022699948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 729.465287][ T31] #1: ffffc90002f57d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 729.465314][ T31] #2: ffff888145352198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 729.465339][ T31] 2 locks held by kworker/0:3/5869: [ 729.465344][ T31] #0: ffff8881416be548 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 729.465371][ T31] #1: ffffc9000405fd18 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 729.465398][ T31] 3 locks held by kworker/1:4/5873: [ 729.465404][ T31] #0: ffff888022699948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 729.465430][ T31] #1: ffffc9000409fd18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 729.465457][ T31] #2: ffff8880295c2198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 729.465481][ T31] 1 lock held by syz.2.206/6727: [ 729.465486][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 729.465514][ T31] 1 lock held by syz.4.546/8259: [ 729.465520][ T31] #0: ffffffff8f0a4488 (tty_mutex){+.+.}-{4:4}, at: tty_release_struct+0xad/0xe0 [ 729.465550][ T31] 1 lock held by syz.5.1087/10175: [ 729.465556][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 729.465583][ T31] 1 lock held by syz.5.1658/12291: [ 729.465588][ T31] #0: ffffffff8f9650e8 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x156/0x470 [ 729.465620][ T31] 2 locks held by syz.0.1835/12929: [ 729.465626][ T31] #0: ffffffff8ee40090 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_mount_permission+0x14f/0x420 [ 729.465655][ T31] #1: ffff88801c6d8950 (&type->i_mutex_dir_key#2){++++}-{4:4}, at: walk_component+0x345/0x5b0 [ 729.465688][ T31] 1 lock held by syz.2.1848/12975: [ 729.465693][ T31] #0: ffff88801c6d8950 (&type->i_mutex_dir_key#2){++++}-{4:4}, at: do_lock_mount+0xb0/0x5b0 [ 729.465721][ T31] 1 lock held by syz.5.1871/13050: [ 729.465727][ T31] #0: ffffffff8f0a4488 (tty_mutex){+.+.}-{4:4}, at: tty_release_struct+0xad/0xe0 [ 729.465756][ T31] 3 locks held by syz.3.1872/13053: [ 729.465762][ T31] #0: ffffffff8f0a4488 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x53e/0xf90 [ 729.465785][ T31] #1: ffff888047f9f1c0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_init_dev.part.0+0x37/0x500 [ 729.465809][ T31] #2: ffffffff8e3ace40 (console_lock){+.+.}-{0:0}, at: con_install+0x99/0x600 [ 729.465839][ T31] 2 locks held by syz-executor/13092: [ 729.465845][ T31] #0: ffffffff90868640 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 729.465879][ T31] #1: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 729.465907][ T31] 1 lock held by syz-executor/13106: [ 729.465913][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 729.465941][ T31] 1 lock held by syz-executor/13115: [ 729.465947][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 729.465974][ T31] 1 lock held by syz-executor/13118: [ 729.465980][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 729.466008][ T31] 1 lock held by syz-executor/13123: [ 729.466013][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 729.466041][ T31] 1 lock held by syz-executor/13130: [ 729.466047][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 729.466075][ T31] 1 lock held by syz-executor/13133: [ 729.466081][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 729.466109][ T31] 1 lock held by syz-executor/13136: [ 729.466114][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 729.466142][ T31] 1 lock held by syz-executor/13139: [ 729.466148][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 729.466176][ T31] 1 lock held by syz-executor/13142: [ 729.466181][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 729.466209][ T31] 1 lock held by syz-executor/13145: [ 729.466215][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 729.466242][ T31] 1 lock held by syz-executor/13148: [ 729.466248][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 729.466276][ T31] [ 729.466278][ T31] ============================================= [ 729.466278][ T31] [ 729.466283][ T31] NMI backtrace for cpu 1 [ 729.466290][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 729.466302][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 729.466308][ T31] Call Trace: [ 729.466311][ T31] [ 729.466315][ T31] dump_stack_lvl+0x116/0x1f0 [ 729.466329][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 729.466340][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 729.466352][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 729.466364][ T31] watchdog+0xf70/0x12c0 [ 729.466376][ T31] ? __pfx_watchdog+0x10/0x10 [ 729.466386][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 729.466399][ T31] ? __kthread_parkme+0x19e/0x250 [ 729.466415][ T31] ? __pfx_watchdog+0x10/0x10 [ 729.466425][ T31] kthread+0x3c2/0x780 [ 729.466435][ T31] ? __pfx_kthread+0x10/0x10 [ 729.466444][ T31] ? __pfx_kthread+0x10/0x10 [ 729.466453][ T31] ? __pfx_kthread+0x10/0x10 [ 729.466463][ T31] ? __pfx_kthread+0x10/0x10 [ 729.466472][ T31] ? rcu_is_watching+0x12/0xc0 [ 729.466484][ T31] ? __pfx_kthread+0x10/0x10 [ 729.466494][ T31] ret_from_fork+0x45/0x80 [ 729.466504][ T31] ? __pfx_kthread+0x10/0x10 [ 729.466514][ T31] ret_from_fork_asm+0x1a/0x30 [ 729.466534][ T31] [ 729.466537][ T31] Sending NMI from CPU 1 to CPUs 0: [ 729.466562][ C0] NMI backtrace for cpu 0 [ 729.466571][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 729.466586][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 729.466593][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 729.466614][ C0] Code: 35 5d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 4a 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 729.466625][ C0] RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6 [ 729.466635][ C0] RAX: 0000000003283e7b RBX: 0000000000000000 RCX: ffffffff8b72a419 [ 729.466643][ C0] RDX: 0000000000000000 RSI: ffffffff8dbef846 RDI: ffffffff8bf46540 [ 729.466651][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd [ 729.466658][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 [ 729.466666][ C0] R13: ffffffff8e097740 R14: ffffffff90864910 R15: 0000000000000000 [ 729.466674][ C0] FS: 0000000000000000(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 729.466687][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 729.466695][ C0] CR2: 00007f93266c6b4c CR3: 000000007b26e000 CR4: 00000000003526f0 [ 729.466703][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 729.466710][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 729.466718][ C0] Call Trace: [ 729.466721][ C0] [ 729.466726][ C0] default_idle+0x13/0x20 [ 729.466742][ C0] default_idle_call+0x6d/0xb0 [ 729.466759][ C0] do_idle+0x391/0x510 [ 729.466775][ C0] ? __pfx_do_idle+0x10/0x10 [ 729.466791][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 729.466810][ C0] cpu_startup_entry+0x4f/0x60 [ 729.466825][ C0] rest_init+0x16b/0x2b0 [ 729.466836][ C0] ? acpi_subsystem_init+0x133/0x180 [ 729.466852][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 729.466871][ C0] start_kernel+0x3e9/0x4d0 [ 729.466888][ C0] x86_64_start_reservations+0x18/0x30 [ 729.466906][ C0] x86_64_start_kernel+0xb0/0xc0 [ 729.466922][ C0] common_startup_64+0x13e/0x148 [ 729.466943][ C0] [ 729.467553][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 729.467561][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00493-gac71fabf1567 #0 PREEMPT(full) [ 729.467574][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 729.467579][ T31] Call Trace: [ 729.467583][ T31] [ 729.467586][ T31] dump_stack_lvl+0x3d/0x1f0 [ 729.467601][ T31] panic+0x71c/0x800 [ 729.467613][ T31] ? __pfx_panic+0x10/0x10 [ 729.467621][ T31] ? __pfx__printk+0x10/0x10 [ 729.467630][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 729.467647][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 729.467660][ T31] ? irq_work_queue+0xce/0x100 [ 729.467672][ T31] ? watchdog+0xdda/0x12c0 [ 729.467682][ T31] ? watchdog+0xdcd/0x12c0 [ 729.467694][ T31] watchdog+0xdeb/0x12c0 [ 729.467707][ T31] ? __pfx_watchdog+0x10/0x10 [ 729.467716][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 729.467730][ T31] ? __kthread_parkme+0x19e/0x250 [ 729.467746][ T31] ? __pfx_watchdog+0x10/0x10 [ 729.467757][ T31] kthread+0x3c2/0x780 [ 729.467767][ T31] ? __pfx_kthread+0x10/0x10 [ 729.467776][ T31] ? __pfx_kthread+0x10/0x10 [ 729.467786][ T31] ? __pfx_kthread+0x10/0x10 [ 729.467796][ T31] ? __pfx_kthread+0x10/0x10 [ 729.467805][ T31] ? rcu_is_watching+0x12/0xc0 [ 729.467818][ T31] ? __pfx_kthread+0x10/0x10 [ 729.467829][ T31] ret_from_fork+0x45/0x80 [ 729.467839][ T31] ? __pfx_kthread+0x10/0x10 [ 729.467849][ T31] ret_from_fork_asm+0x1a/0x30 [ 729.467874][ T31] [ 729.467983][ T31] Kernel Offset: disabled