last executing test programs: 9.203621749s ago: executing program 2 (id=1636): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.183818783s ago: executing program 2 (id=1651): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000000000)=""/4098, &(0x7f0000001080)=0x1002) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001040), &(0x7f00000010c0)=0xc) (fail_nth: 3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x7, 0x0, @void}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_usbip_server_init(0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.244667494s ago: executing program 4 (id=1655): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x3, 0x5, 0x80, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x4, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) (fail_nth: 3) 5.899960202s ago: executing program 3 (id=1656): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) msync(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000001c80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b80)={0x14, 0x3, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x8000000) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x8008551d, &(0x7f00000003c0)=ANY=[@ANYBLOB="0529000001001d00800b22cd88c40808a9aa46825346caf411f6e90de04151dc598bf4f8b5dd81d7e3c2a90276c4674565545ed680ec23cde63871a7f0e510e7a954dacae5bc6567940f7d74fbcced6e2d57bb"]) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x8000001, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 5.307220282s ago: executing program 0 (id=1658): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000380)=@req3={0x7b, 0x38de65dc, 0x0, 0x26, 0x8, 0xd8}, 0x1c) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000d00)=[{{0xfffffffffffffffe, 0x0, &(0x7f0000000e40)}}], 0x1, 0x0) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000000600)=""/38, 0x26}, {&(0x7f0000000640)=""/49, 0x31}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000680)=""/66, 0x42}], 0x5}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, &(0x7f0000000040)={'macvlan0\x00', &(0x7f0000000100)=@ethtool_channels={0x3c, 0xf53, 0x2, 0x1, 0x5, 0x40, 0x3, 0x6, 0x4}}) 5.277870571s ago: executing program 4 (id=1659): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB="00ff7f00", @ANYRES16=r1, @ANYBLOB="0100000000000000000003020200"], 0x14}, 0x1, 0x40030000000000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000fc0)=@nat={'nat\x00', 0x19, 0x3, 0xcaa, [0x20000300, 0x0, 0x0, 0x20000330, 0x20000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000300000008000000808a67656e6576653100000000000000000070696d36726567300000000000000000677265746170300000000000000000007866726d300000000000000000000000000000000000ffffff00ffffaaaaaaaaaabbff0000ff0000ae000000ae000000e600000071756f74610000000000000000000000000000000000000000000000000000001800000000000000010000000000000006000000000000000900000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff00001000000000000000110000000100000000106361696630000000000000000000000070696d72656730000000000000000000766c616e30000000000000000000000076657468305f746f5f62617461647600bbbbbbbbbbbbff0000000000bbbbbbbbbbbbff00ffff00ff2e090000660900009e0900003830325f330000000000000000000000000000000000000000000000000000000800000000000000bc00000704040000616d6f6e6700000000000000000000000000000000000000000000000000000068080000000000000c000000000000000200000009000000050000000900000002000000060000000600000001000000bf0000003f6c000009000000040000008554000008000000e20000000e00000002000000c90b000004000000030000000100010001040000f0fc00000000000003000000050000000900000062000000413d000000000000050000003a04000003000000000800000a00000007000000080000001df9ffff06000000ff1200008100000002000000090000000900000003000000ffffffff1f0000000200000002000000010000007e0000001b33406805000000060000000300000004000000ff0100000100000007000000020000000400000000000100"]}, 0x3b4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x46, 0x2}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x1b18) ioctl$EVIOCGKEY(r3, 0x80404518, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b400000000000000791090000000000079000000000000009500000000000000a43abba0b245385a1964b904e462de529745a4cd61a7a0d25ddfd38b8b9a36c14ae1ee5ae29051b28b53a4182deb5ae03bc264746b0025abb901765f30c1d039e73af80f39ba982e44fe40c17211db9c82e6da61712f41775115599d65c29cfcd0bffd10d2c62aebfbf41dd375c71938ddfaa1df3017a99ecbddbfee7f7abeba22c29a9cb001001079a87ed58d2cbaf30b8fc3b5fd1fb63bafef7d7bdd5bad81e40379623de900000000002d306a2ab944935390685cfc1e57a6e5d4a1d4456cd3631013f8"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet(0xa, 0x801, 0x84) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0e00"/13], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000e1ff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0xa7, 0x0, 0x0, 0x1, 0x0, 0x403}, 0x50) 5.162298628s ago: executing program 3 (id=1660): r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto(r0, &(0x7f0000000000)="3f4772273d0b1b41b94ad8d100706dfc0913a90d7ef185b45a95048c1ecd2b2ba7e25935c3ad9afc3e44e681bcb91dc97573748ef38ce822e8", 0x39, 0x1, &(0x7f0000000180)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000003480)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x12, 0x3f, 0x66, 0x0, 0x7, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x4e20, 0x4e20, 0x2b, 0x0, @wg=@data={0x4, 0xd9, 0x86d, "70d68dd1fd030a7def393eec876c92d25e7526"}}}}, 0x4d) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMK={0x14, 0xfe, "a7bba3b5b1cfc70c000100"}]}, 0x3c}}, 0x8000090) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = mq_open(0x0, 0x42, 0x0, 0x0) mq_timedsend(r11, 0x0, 0x0, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x2001, 0x0) recvmmsg$unix(r0, &(0x7f0000004400)=[{{&(0x7f0000001780), 0x6e, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) 5.067686655s ago: executing program 2 (id=1661): socketpair(0x28, 0x20000000000001, 0x0, &(0x7f0000000100)) (async, rerun: 32) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) (async, rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) (async, rerun: 32) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) (async) unshare(0x26020480) (async) unshare(0x0) 5.066846482s ago: executing program 1 (id=1662): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x800, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9b108", 0x4, 0x40005, 0x0, 0x0) shutdown(r0, 0x2) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000088}, {@dev}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b057e255f9fc7fcd3678acf258357e1e5a90d17a85ed2bb685014e05fe9dd53656818b650ff910557ae37262d1202049fd3e46740a84e730119514262213ed7957fbdbfb2aa975531396fdcd06430f49d3102697a185091e299fd98504173205364a390622b72d5b169249a81bc558643f18c4fe15d272375fec5f59124a968"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x0, &(0x7f0000004540)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r1, 0x1) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x40000071) 3.578749414s ago: executing program 2 (id=1663): r0 = syz_clone(0x10890000, &(0x7f0000000140)="0789216f40f8d99c13052f75d9f2db3dd7bfefb333efa8a9d5386efff0a69b47f400274a38c6d00f2d51f430c1a988553c9f29d1fa80e4850000000000000000e9da4f68ef13d264ca5d16669e1f1f1071e9c09d8726ef8f4bd5c2b60228b7b03ceadf9b43e031c83c136503c9e5f46f21a8dbe7851cba3fa329b91c49199c0db0fa7a402a7b2e37792e0fabdb7e6ba8a79dad822ba15f298afc0776a12a21717763632fda7600aff7361869a35d3ecf1c8af632a1acce66801c688848c9998cd3a3cfd690c62e30e84a6f8945f8edffcb8e17715dc3118fb736fe856e472432c14b00"/238, 0xee, &(0x7f0000000300), &(0x7f0000000080), &(0x7f0000003240)="640784ed93c0b146f8d9ea96b251e3e8be2249bc888ac539327b632044009071f53176ff30f2e48d87286428f37d1b37080e3d91cbc54e4aec0b4232157617ebca6584f5eab554bb30bfe7684b655736f7efa33b23c378c9b05eca8e635ac211681938417c51f6a0121895acb88fd1f1998fbe73ae498b9a5e3076d394089c2e0c8d5297e5dca88ce0ad3c1b4b6b3fa14b50554cf9153b95692e97f510a03fd814e4146c742363e4043504000000000000001b21954af1b34b034c3b5915a47fac7178def68b4c2907ad5b2ad0baf67d8746a27d7fa3a6cb366909cb62e591be9c7f61751ef682682785ef44ecc8d7e7b3e033a8934ebfa93796ee807e500b22126f13374af5d6c87b4649a888190f6e6a8a2dec9ee55a95591baa6a4f74f4f1") ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000002540)) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000002580), 0x24600, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000025c0), 0x6, 0x20000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_encap(r4, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b70, &(0x7f0000000340)=ANY=[]) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002840)={0x4, 0x22, &(0x7f0000002600)=@raw=[@generic={0xf, 0xd, 0x5, 0x100, 0xfffffff8}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000002740)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000002780)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000027c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000002800)=[{0x0, 0x1, 0x0, 0x5}, {0x2, 0x5, 0x7, 0x3}], 0x10, 0xa, @void, @value}, 0x94) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000002900), 0x4000, 0x0) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002940), 0x10200, 0x0) r9 = syz_open_dev$hidraw(&(0x7f0000002980), 0x7, 0x40000) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000029c0)={0x0, 0x1}, 0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002a00)={0x7ff, 0x6, {r0}, {0xee00}, 0x7f, 0x2}) getresuid(&(0x7f0000002a40), &(0x7f0000002a80)=0x0, &(0x7f0000002ac0)) getresgid(&(0x7f0000002b00), &(0x7f0000002b40)=0x0, &(0x7f0000002b80)) r14 = syz_open_dev$tty1(0xc, 0x4, 0x1) r15 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r15, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002bc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r17 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002c00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003180)=[{{&(0x7f00000003c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000440)="5dfb0c4d6be1b41570c022cd19aec30d74c6e7c8cc78087280da6fc1c57df7a5fa1dd786e0e84aa5290d57bd68f5b5fabe7b988866b1312d374e5cfd5d933e61d821d65bbb2b5327a0c7a5eca796d4c1f479de3b95c090790b1a226f7249ca9b8988793a55ed09a5418d6e9f94cca8b08943f16357f260d2cc30677a2f50912f33d88b5db5ebd5ded5defec5d3c07c41742250ccde9a83fcc415a25639c828b2644c037f47882d421b9c7b4c258d4a78e015a34784da3d880eba4e6411c5e16a8c0cbcbf2853883c6cb02510c4291725622d279a6e36d75d2e27cd16ecf19a5362323e290c01d39146b9c92bdfb600ec86121a3ceda316cb622c723a413f68ed0009dd777dff59ec45fa9313e94d5c4e610df34365d485115340ddadc34c4f6fdbda47033155c0d10c0cae13909b0ebdd32b0521f5692e429328d8e6d5da53780c4d33cf87eb1f78516910a82438f745e6c5b5970d01242d11367af7cf8f55f60bb1026901cff20bdc2c5f2200e33efb1289b86b1fe375320a6981ecbbccd4b6ee1a0eb7b2a2df6c15fe45dd911b1af6b428c240b1711c94c63d2a631d0ab76be5af451445a74ae2c65279fd194a3141eba5c95575e79a45d7c7550a1d1626da3754c4edd21f396dfee24e56003fd26ebd23f29967b534367888fc90506675687bae273cd5039f05f424386d56c5057f68cfa7618cf105096e73be46036ed67808a7a7642da0ef1a189d8587dfc0ebd966df0068c3a606074870cb4e0966d5a2f0df8c96e9310aee20832724fdc2f4420bdb2e2b8da8ff6deb3c7124e901f3e85de109fd5c4360b20d2fbc9523207b33ca87c3bc864910a99401ee2f2bfc995541f2122079c11795ed340494a5939dc9bdf279cfe2094172e64bee259ff7893918e910995469899e406227e9e170c6933287a37468e3cf16bb71fca371cf7cf3188b847d6c0599bc5c6c29d1faf1ccace5c4ebdad4d52056fde8c2eb46e3e6baca64df1f427f8ddbd34666e9d6c6c7b01d28b71be033f1059d665c7ea7916f05464881a7853d940a15774dcf51cca8e98acb7b05d75800631b977a71367e7869cb6b4eeee9ba3320a5eabfe3d34ee6b68eacef2c3f6a28fed46701974dc02b77e6229e29bc4ce373b86d819078218c37d01879facdc18f3916ed9a13159815577449053a2c60394527b56850dbe9ee79fb771df6a1720fc2de806afed48b0d7c3da7ff41bbe03656a32815d77d884afa62343578f5fed36ad5cae2c7e0f50379a304f5aa25a3da4d7f955e7fc1adb45c641e0a060282ab1cc71848fcc434e8d3e066562a60885c2180cb1a21dc681562b8cd22917f9032aaf3d763f9614fe8d75ee82eecaac7e1fc825c0ac2cf84def84483d0fe02b7b29844543322b5ab7db6ca2ce069bebf9f0604e344ee99c187232e09883319a1d25a4740db6bda09388e99cfe0c1ad213bc6b6959593bb67c0630f95c1c4d684ff0be8faf4ddfafa281e0a5299c24b78d827e022bd02d71f2ee89bd8bc05dff1835cfbb4fed2f6ed8908e6f7554efe6cc7845d4e5af0d81a177d261bab922b3269a8b8e6fb6cbfb162f621a3dc4a96918c276064074abfc065735b3d10c2e8c2e77ec76f771e3e522b3bd9eecb1faa00edf4eefcefdf8ad5370e54d23082532410c68af0b94780b496123e6d1c66496235b94c84ae6c1d3f68b35aa423dd747131f1226efa461d75be5654cbee9c5396261fdff86c098dfe18a5cad7b810f5ec3ac8487182aab958bef7e1541c25688b56f2fb6c3e14927c3eb03e6ea1484d8ed65a780186b5bd15b59faeb386f438b25e2fc77111d55ca6b61e5284aab496cd7838af7980db77a2228bc8efb40344645fd3514fe4cba3c1aa4646c26e79f53d7e768d3ca06593462575301c80414373fb99d34983509e9fd613d362fd2ca7fed0e21bd8bf916f5084e3e9740a954c5f530f9278c9cfbaa668f0a210cf1bb5bf8f608e61fb550aea384b96f967cd0fcb359fec48ffef3fca8afb5452e998e0393a03e1891004789f2cac585a0c5de38d6a387bf24195316f2e928a5b63bed959251339b68283f72bbba55b5ae5debeabc7d51a374678ce6770208b8a44e49a2701fbeac1c04cff9077bcaac082ddb3d03ab95da7f043586eb52216ec5b1ea814a71e0b446802497a4f1f17949902d1aaaf56269322621dd2786e6dd14506856a5d52062b6b7224457e14068071557c77cafb95b93b5060559a660e99eeb6bbf6fca42884719a7721777573262b2c3895438259d22a3a261b6a537eb94f99e216ce42d9aeb45d59d62d70e3b323aa4ee2c58777b06c7bf82fb49478aa39e0194c6a3c0a8755c4cae2c472423cd21a938ee76f834c63d27439d2d32452ff46be93283053ea1af6ddc9d271f2a9a1e805a7bd97523c79e91f8f1c52c804ec38904d35221e775e004693664f3566a6fa4f65818578410141445c9f17e36b1dcea0a5298e45915684caf9a3490f57a9eee4881bf0f8d9a14a21379ecc8eda42d602c496c4aa16ef71f8ee80f3903353a481ddcdf3a2b9b08542b22daac43a720e73029cd1c521d940d8db29cd395b6d999dab8a3c4a7335f8713dea48ebbf906741b63f136c1764f5a81e4d7cbb2bbe564212e8f81066990317b6d2b6e3146f79ba0ff0bc84e087e850dcbb180604ae874c414595b4eb8411040ff57ff58d68ba78c71b7400f88ce31d1abb7c832cad7d45791fbb8bef53f98575290a35b1b5c857110475ac24b1f71999ae03f0a49443b9b92cfb7ad73bb995b3dca6d3f0d648e7d68ad97011cde939a37205c7d2993997e35cc89ae84618a7ae84086004825bb9dec60fe774960c2b7ca835114a382c99d64516d74481964f55f4f79cf8f08a281f8cfd7908de19e94de3f6279b3826636dfc12b7ecab20e026810a4ef3f12cfea6f107aa253da8b1fe578804a91931b93ad8b6090c99a8a848fcb4577e4008c09ea775fe0abf3489e9fa95086e9d44387b709cba5c5bbc635d416469164a666aea30f33c7969e37e67d5e94b7c17412369651650a743a5bbc84a28ea4c0b33f2a9934cc0205ea8568223fc0066e2e53143c2b02e3c48ec39b880c91671e36974421e4840fd8aca1afdea9c3161deee5e9b945e47d65ed81283ec2cbd403d775988fc05a92f359490c224bf5af79b252bac5e0289dc8dc519ee37ebb000b3b3850120674ff0ac11fb6b21c745331f15eaa04e495c4b460a45fe50cc881190f7bfc1079901f23b5e5f22c6e7a13ee0f631e6b7de39f3f1fda806a0abfb13d3c873998f1a8916edf2b44676b670f5ee40917f2b6948ac66810550153af42178b9d7e3c81d485f9164a14b910b0b006d2491dc8ea04f9f54e16b27b6886f4b449f08cf401bb3a9ce53abe451d197bcbbcb4438ddd3adecffab95ac119923bd8a8a44c03b2b372ae71b80e495848458e5a8df7de6ddbff619cfe641cb0fbb91ce249b71562ec89232f10b87343bf5d4c8257b5c3a2fafda01a181edb3ceb0a1da98fd4e58193ecebfaeb4cd9cf3316bc789b89e1db1f02d4039a38542194dc3b113ec46215ffa16c0aadfd46abb175d7ef82da5bdac56a2e9328624765678fafc7727ee15fa6e0e4260a4f40240711d544ab0ebbd81703cabd0123cc99ad87887c8ccbcbf27f006dc2ba11b0b677e944d6babd0612a02d02f94a1394fd7bbf351a71f578f12dddfb892fdad8627842d4e11901cf9a062c9f6e0b996432e04fb8a95441dda08a92db93e2f4f1edd23a772a80d04e1f8075fcaae7a2ceea0c588e8b972353f88f8ea94b0a9ec3416433cee44c51c764437d1d28f637d99ec02c460a64787f3e4e87f2aa2b9e0d6d37e58d5069f0c0e118b234e964f4ceb9e523f3b3210ac5076a818bd7f0857d6fe4bc8e3fe026264a8c081737a77fff6863f3d9fba334bebded14ed697bcc78142802fa8e356aef64f9b4303f963609e812cfbc7f23a4bedfea9e06d042f71c1a8b856e85a12bc4c5cd1cce754e39121bf80af94aed2adf167b0a6d03c9336fc2392739db2742bbe49047dcbf519d807bb683248d26dcc37b01aaee12bffc300940ada083b486ea1eb5d24eafd914e7a0e3815240dd397b5fa929d2755037f7ee46de5f2bc7bfbfb13fb9b2b6144cffa1af1f770e5419c1e6a0ef5527ff5f1e25f95b3c97a389d9f88345f6b9900bf272937bcf6c5278d3abea4c83573dbf588a4ed6fe9f282d62742843d6095ca6f69461fc2f8ddd5e027c2bb5976f97aa01d825a0d0b7f6aee7ffd62a7c4532c1af1fabcd65227be3e8d9cd3a79df45f0c837ade25e57f381929aad4ea1ebdd887d63dd34e544455adddbee2ce340e81989c9355f421424f747a9dd9ab82eef1e340724992efe5a86bd58b2b917b9c227f85522b48384c4df05ee295f1e074c1d54f49e7438689f9968ab85fc428abc984931e19e62a75782b788e5304e06850751a788f075130295d680ffaa0848ef2938eeb2c8d5fd5f9901826363d6d3992cc1a565cf4adbe793b22eb19d8c6cc7d503779ae3e631bb6a3c7203b3d89f3b845c89e52e65ae8d2c7b07d67edf1694787e6ac5686cd86e2212e9c879aa9ee0a1e248da078052d0f5cded0703d7b90e5e94c8dee916a05e1b7d82f228608f1266840e20a43c77db5a97677e7f7586e4060303536ab1a17433583c56da5370071f8f8863f3fcb2d062bfe1129ff8dd89eae5b5495a955f35164be69e23064835a6c36eed3912731ef9feb23b5962b8a45c8e28b3a2c91f2480d14950d9e0bf29b1805c590ca036c9838cf2f316c889c3b4318cf799027dd38efe526fb62be8b0c6705c01ae1d965c16629216fc00910da111ed2cf776164ec76ba3adce1f4681f13530f9ac03b3182ebf8c9cc077901708ef0acc9faa622ea37842669e5cde0a5840c9fabf711d0e8ee53e2cf1d6889b6b8dad3785b21a35673b30ea252ea83b7c1961ec17b94a11e981bc03aaff0ac6e88039172933580280b70da6b9b9fbf60df033d855e77aca20022e7247405fee208c8d595d3beff1b5432abd75391592d678a68f12d7142a57ef3278da31913f6fa9de6f528314e032e6d824f8a95574707f57b178e862ad479277ac3582ade2378ee90fcdf10911f6e9d4ecb7ae957a536c29f628c544f30d5aae73daa926bfe1f93e4ea75493b85c2e3a31a502961241280ec1ecdd47d8b16aec7f430703f23a8fb5bb53b2429da3b0302cdf1affbf41a836864be5c0ad0c201e5cb577d17e7a4667e57d30d8821e0ce8dbbac7b3bd6bfd8d7f050849fb874f0e4ea9191976538a32686d66c89fb607ca7e7b085b8ffd03169daca8c4b00bf83adae26e0dd1646acc2ab20518d3236be52fea7e9827989df60851f51aebc4bf78ab232681d109759b27be87a2d4f69215d25ae67be43aaa61bbcf0bc90c7cbd19998c8bcd8e01314e1eebeb45463d31b7bc2379223321a873e5efa5640aae1ffdec0ca1b7a419394e30c829368e2ada84900cc4a5047645af9d4c35cc53b96e6854523e82ab8d56bf84a7da39884b49b188c75aa0463f7a5d223b5a3506684d40da3a728c7108067169573c125e14a8091f858b3cbab5997ceecdc6d13c8c55fb999f87cf5c3d6a6bd95f6b0a417e4580e83d74a1930ed6af6495b3fa5c1f010fff94449b77fef8f5267172ebc8f9e9aec46a91d9dff6bf9be07603b2ef02582eb68f0c060ca1da300e03c2f78c2bbfa5f8fa38f00f06a554782e752d3792a008b5a78a959106935a85a2c413ce54071606f80120da21c3704a98cb8621ba34cf07a8e381e771d7e1f", 0x1000}, {&(0x7f0000001440)="13047bda73ec834b749a7632d55d8260d2ec7f93552bb2e401ac35abf9d1937b7e4c1bbc6b7a5f8a7b5a44d11941832f36680494cdbd06ca2c590f3af0cd92c3781a6e42bdd8d77d1591423d5c26bcbf491678dc29bba688a0fe01dd9afb5403a67ed406239838ff6fcf05fb7fa51c9e969f08c444e92236d7439aea93adfd6e8c8166132a33834f212c8576094ae945e17ac1", 0x93}, {&(0x7f0000001500)="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", 0x1000}], 0x3, &(0x7f0000002c40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r3, r4]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r5, r6, 0xffffffffffffffff, r7, r8, r9, 0xffffffffffffffff, r10]}}, @cred={{0x1c, 0x1, 0x2, {r0, r11, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r0, r12, r13}}}, @rights={{0x20, 0x1, 0x1, [r14, 0xffffffffffffffff, r15, r16]}}, @cred={{0x1c, 0x1, 0x2, {r0, r18, r19}}}], 0xf8, 0x20040000}}, {{&(0x7f0000002d40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002f80)=[{&(0x7f0000002dc0)="5aa432589bbd30886926b6cccd59ad", 0xf}, {&(0x7f0000002e00)="1fc79ca230e83292d080c21e21b23567dcf5ff50428b1a6607212d708830a558085f54143f8b56b2c587986ae8c9902a5a750beec0226084ac8284dfbf8a47647a36e9ab7971db17f16aec0d5e3b", 0x4e}, {&(0x7f0000002e80)="46b45d5a0c4c0a87c8aa414006d727e66b9d46ae9449c305bffab44179b8ba51bbe79947b636cf0f67d758315e3741c17201c6ddfd8711647269352a3929dfc066d5ccc8fd0a04f9e0a3ac0cac3cbea75c3f2bf696a9f61ad0712d0eb16cc0f7b0fc09ff412057a5057d6283c839d4828be2c837077afe8184", 0x79}, {&(0x7f0000002f00)="3ac1e419b188f421e3ec664aa7cd0005982f854eeeb1ef5b7abf176ebd31ad5d546fec9b4ba237b9f6ffe8ce270c786735c8b12becc173f0ff7edd84b7600ee03b39a0fcc8b69e41c379e542f31e17f6d2681b9248ec9681842b7dfe5309ecd7bdef91b8c244f05833a69f1686ca5c12a36306b6", 0x74}], 0x4, 0x0, 0x0, 0x24040800}}, {{&(0x7f0000002fc0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x50}}], 0x3, 0x80) capset(&(0x7f0000000040)={0x20080522, r0}, &(0x7f0000000280)={0x0, 0x10000, 0x4, 0x0, 0x0, 0x1c96}) r20 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x109a40, 0x0) ioctl$TIOCSETD(r20, 0x5423, &(0x7f0000000100)=0x16) 2.99830692s ago: executing program 1 (id=1664): r0 = fsopen(&(0x7f00000001c0)='gfs2\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001f80)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x2b8, 0x0, 0x0, 0x6000000, 0x240, 0x3a8, 0x3a8, 0x240, 0x3a8, 0x3, 0x0, {[{{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xffffffff], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0xd2030000}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xff, 0x0, 0xff000000], [0xff, 0xff000000, 0x0, 0xffffff00], 'tunl0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x4, 0x8, 0x0, 0x40}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x0, 0x10538, 0xffffffff, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.907584787s ago: executing program 3 (id=1665): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='afs_make_fs_call1\x00', r4, 0x0, 0x80000007ffffd}, 0x18) r5 = open$dir(0x0, 0x260003, 0x0) mkdirat(r5, &(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r8, r7], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r9, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000300)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r11}, 0x10) r12 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802) ioctl$USBDEVFS_CONTROL(r12, 0xc0185500, &(0x7f0000000040)={0x0, 0x5, 0x6, 0x1, 0x0, 0x101, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f0000000240)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet6(r2, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x48, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1100, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010008b0f00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800a0014002cf54fbe58000000"], 0x40}}, 0x0) 2.834342788s ago: executing program 0 (id=1666): socketpair$unix(0x1, 0x5, 0x0, 0x0) unshare(0x20000400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x80010, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3a8) sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040), 0xc) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x80000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000001c0)="ba30a945e46b03d7dd459192252b6e3c518d8badd03bee30080487b36c9dc92d57f60c92e675acf419e99d5ca8758bdc1e0ddc04ee8d370e9e5c1faa5b4fefed59d0931c498f0c7a38aeae2c26014b38"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000180)=[@dead_binder_done={0x40086310, 0x1000000}], 0x0, 0x0, 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x7, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write(r1, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x1, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000040)='./file0\x00', r7}, 0x18) 2.509604579s ago: executing program 4 (id=1667): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001439) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) recvmmsg(r1, &(0x7f0000001f00)=[{{&(0x7f0000000240)=@pppol2tpv3, 0x80, &(0x7f0000000a40)=[{&(0x7f00000002c0)=""/165, 0xa5}, {&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000440)=""/173, 0xad}], 0x3}, 0xbfe5}, {{&(0x7f00000006c0)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0}, 0x5}], 0x2, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r2, &(0x7f0000000680)=[{&(0x7f0000000080)='~', 0x1}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x12) read(r0, 0x0, 0x0) 2.408774279s ago: executing program 0 (id=1668): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4001000010003b1500000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000f000100"], 0x140}}, 0x0) 2.407622529s ago: executing program 2 (id=1669): socket$kcm(0x10, 0x2, 0x10) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000000)=0x4, 0x4) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r3, r4) listen(r2, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/160, 0xa0}], 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) 1.927662515s ago: executing program 1 (id=1670): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) msync(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ioctl$NBD_PRINT_DEBUG(r3, 0xab06) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = socket(0x2a, 0x2, 0xffffffff) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000700)=ANY=[@ANYRESHEX=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='i2c_write\x00', r3, 0x0, 0x930}, 0x18) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000001c80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x8000000) r10 = syz_open_dev$usbfs(&(0x7f0000000300), 0x5, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r10, 0x8008551d, &(0x7f00000003c0)=ANY=[@ANYBLOB="0529000001000000800b22cd88c40808a9aa46825346caf411f6e90de04151dc598bf4f8b5dd81d7e3c2a90276c4674565545ed680ec23cde63871a7f0e510e7a954dacae5bc6567940f7d74fbcced6e2d57bb"]) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r11, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x8000001, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000200000000038c494ccf9ce7520f54a9eca46fd374f8706b12f0ad2f337180db62332d72cde946f41c85c65afddadd1a2721c594004f2299d47077229cee1771aa6d40f21e642b47b29897e9a8f5ffc58424fa5b9b2d93251cd819876280100"/134], 0x50) 1.121255066s ago: executing program 1 (id=1671): socket$nl_route(0x10, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) r0 = syz_io_uring_setup(0x16e, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x8e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'ip_vti0\x00', r4, 0x7810, 0x20, 0x8, 0x4000006, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 1.120371917s ago: executing program 4 (id=1672): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r1, 0x7810, 0x20, 0x8, 0x4000006, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 1.068665687s ago: executing program 2 (id=1673): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r1, @in={{0x2, 0x4e24, @private=0xa010100}}, 0xa, 0x8, 0x7, 0x8, 0x9, 0xfffffff8, 0x4}, 0x9c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140)) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000380)={{0x2, 0x0, 0x42968a0d, 0x3, 0x31f}}) syz_usb_connect(0x5, 0x383, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x94, 0xad, 0x2f, 0x10, 0x12d1, 0x1464, 0xf013, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x371, 0x2, 0x1, 0x9, 0x10, 0x5, [{{0x9, 0x4, 0x3f, 0x5, 0x5, 0xff, 0xff, 0xff, 0x36, [@uac_as={[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xc89, 0xfffc, 0xd, "a114325c11bf"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x3, 0xad, 0x9, "9f8e", "d2"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x2, 0x3}, @as_header={0x7, 0x24, 0x1, 0x2, 0x81, 0x1001}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x4, 0x1, 0x6, 0xc, "9b0767716c0404"}]}], [{{0x9, 0x5, 0xd, 0x3, 0x20, 0xca, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0xcf}, @generic={0xf8, 0x30, "49ea580b5a7db1c66709000a5160c7097b63dd9b4b0d8e49802fa74d82cc635f285aeb623f9ceb57cfabe123cabf4fc272f40ce3f518f3bf12ad84b138dc8b76a1fe273f095c3b90fbd14b68693cfd0989a6de4a825abaf5a17fe0b025d72b303a3098b0e8b503c6636268f2e021aaca0e4aab5d6a1ea5dc4fb36fd9b661d36f53678dea27273e0269db5419128acd223b0a4ea352418e302a45bd31c854f6362d34e1368078417ed57e6dba5cbd49f39689e1489074e01532a9be64afa2563d75803c49c02fe5feceb603918234d084aaa23fcc78c34c3a7dc5de110f0bbe0a4a18c2ab5488b4bc8fb97e43fdea07b6fb8d832b4f44"}]}}, {{0x9, 0x5, 0xb, 0x12, 0x40, 0x6, 0x3, 0x40}}, {{0x9, 0x5, 0xf, 0x1, 0x20, 0xe9, 0x2, 0x7f}}, {{0x9, 0x5, 0x4, 0x4, 0x20, 0xf0, 0x0, 0xe, [@generic={0x30, 0x1, "361ec42fd075998528d41bd8bfa826f4a4202b989747a6197757b2eebe9f4cde936c1d3cf2d1d337fdd397bbffdb"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x8, 0x28, 0x26, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xf, 0x8}]}}]}}, {{0x9, 0x4, 0x98, 0x9, 0x3, 0x48, 0x18, 0x7, 0x9, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "34067d229c"}, {0x5, 0x24, 0x0, 0x98}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x3, 0x4d7, 0x3}, {0x6, 0x24, 0x1a, 0x3, 0x31}}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0xf, 0xb7}, @as_header={0x7, 0x24, 0x1, 0x6, 0x4, 0x2}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x40, 0x4, 0x4, 0xb3, "", "e865"}, @as_header={0x7, 0x24, 0x1, 0xb8, 0x8, 0x1002}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x400, 0xfd4, 0x6, "9082"}]}], [{{0x9, 0x5, 0x80, 0x0, 0x10, 0x10, 0x4b, 0xe}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x4, 0x2, 0x2, [@generic={0x40, 0x3, "f2248368b37c4e202ec41ff6f7b6544a2334ace00ed8c6e21e2059fa79407db811b193246d7c97881f8fad698429c7148abf20c8477d22be805f7c4fe404"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3df, 0x2, 0x6, 0xf, [@generic={0xe3, 0x10, "dcfaf4509d8339925e9817bbf1b4affaf94e5c4c7acc4cf22f7ac8bc5fa8bf446293b470dff814ab2b1fc1cb19164a5e093f1be7b596adeca44a54f544803ad9e648f378aeb62d686d0220e8460947c403418cac6d428d2729075a48a1bccc60c594e5ff7736c6f21204a41ccfcb39e7d9cbb3cab916de0f4f893b8f9cf5783af74b19824399f4370da79a45d88be9ccc01964c45dcf81c4ff2095138337a2318b019164896c29822ad4000eec636cd48a237186150680180cab5e9d1dfb4b95f370bfe79b8abaff84cc7ae25a0e1f633a6ca0a10ea1cbc2a1918a629215238519"}, @generic={0x32, 0x0, "787710a8646b887e69a921225ce47634c7cc660127bef213087bb13cf5f5377cc132ae461e91d9e7c16dc366d38ab5d6"}]}}]}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x110, 0x6, 0x4, 0x0, 0x8, 0x9}, 0x2f, &(0x7f00000007c0)={0x5, 0xf, 0x2f, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "182968b2928f6b6db265069700a118e4"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x52, 0x81, 0x9, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0x40, 0x3, 0x2, 0x8}]}, 0x2, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x3445}}, {0x60, &(0x7f0000000840)=@string={0x60, 0x3, "2a7484dafb9766fd8e302e36a74edf2f94df0a7261f3dcace684c87992981a03cff9fa894e79173bdc5519decefb04ebe538703153e9b9c7983e6c83628035bdf3455608c5850d8eae842181b86c538634c2ee8819a4f858bbced6ccfb5d"}}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x73, &(0x7f0000000900)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x7, 0x10, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "8ae0fdb611"}, {0x5, 0x24, 0x0, 0x44}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x2, 0x421, 0xe5}, {0x6, 0x24, 0x1a, 0x0, 0x3}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x63, 0x10, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x3, 0x56, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x10, 0x21, 0x8}}}}}}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x200, 0x4, 0x7, 0x6, 0x40, 0x4}, 0xc6, &(0x7f00000009c0)={0x5, 0xf, 0xc6, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0xc, 0xb, 0xff0d}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x4, 0xf000, 0x8000, [0xc0, 0xff00, 0xf0, 0xffc0f0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x8, 0x9, 0x8}, @generic={0x7d, 0x10, 0xa, "4ec3ab3301347f1ea1541ed3507c44587bd3c3420ed335ad9c74b29c4ee37a611ec6e299dd54590dec181413569910a9ff0bbc6fdf6386fe058f76d336be73388788906d4f3f1c62d9a2df1651b73a393df8ec522d4ab3ba20b61d261b212d06dd961358a78b497a05a77e8f727fa28a7ae3cee7fa1d96de4464"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "56f4f0da21e81a82496cad7ef4a34f8e"}]}, 0xa, [{0x2d, &(0x7f0000000ac0)=@string={0x2d, 0x3, "9c18bb7d0561687723adab3fd7517b3adb938fa1e4d4820d58b90a8121658cef6b3b7edc6b581e31626317"}}, {0xbe, &(0x7f0000000b00)=@string={0xbe, 0x3, "bef56ea0d2e62d2857b3eff5342aa195a7cb8aec097800a1184b99be60eb80d158b44bf996ad02c845ecaf1b077ad35616d163c0f938a5b538cbb7a585a3d4bf39d8f31e0ee39543e30dd25e4b8b157cd4b2812e62dd000064b1715d38a68d088319fce24f1a9e6c44b95778aaa78db8d7add88998bbe08bad910f27d87e8aba7335ca2b66b5b62e2f4ac9e0e42fc84819fa60cdf03c7fa8f5e7051e6ff71c4f360388a1fc1471af469525f6104b5f615ff52b8595f7e5bd86ac43cd"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0xc09}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x422}}, {0x57, &(0x7f0000000c80)=@string={0x57, 0x3, "2cb2d8c70bc6f3f5586ca40b3da6ef7b19d539c9fcceedb8bdb810236a132b148e28ea52cdcf3414e095af2d341a3a2bb5e7c388988cbfedf41b923a4398dcc3bdff962b4987cff6081efafd3fbe8bb7e88486a223"}}, {0xab, &(0x7f0000000d00)=@string={0xab, 0x3, "46ad3591fe9334966a948a80dd544d0fb8798a737307feebe64300073b9877eff63f48756d585417734cc0193349a343125c150b64aa70acb5d0574625be258bdb6f86f0f8210e0b4afd60f5e3207af94fe9a8ea17db282fe168134ad50c17afa076f756158e808cca8004f2da7eca15634e699c38cdb14a3594fa7bb92a13f2a4a4b8c3e8a0d68577768f75282e034a6a594c7a7308821ea5a1e4c8421c23318b9d10c6746092c4a7"}}, {0x97, &(0x7f0000000dc0)=@string={0x97, 0x3, "5ea0f743ece1945482e3ed110403b24523a2205e2cf3c316973b0340a792e2456049018b281192bb860eca74ccb09e1c0efe2c8d72993fcf47941d913bede2b3ddce3c7b55c5e248703bf4397bd7473b15cd2e439a587909bc4aecfdc5d0a91fe301d88089c9209f77091978ec438b5f75b39ca8e4c6f24f72560918a5641ec471c5e7ecfe3ee40d2b3a459ca37309287ecde5a803"}}, {0xd2, &(0x7f0000000e80)=@string={0xd2, 0x3, "ac56e9a3e0e31f110badc83b3bf2b7bc0d13424da4fe27f4cda600794dd8d460d496a1df017b91ba8460afd049339d63220e6412c539c9562be0231c1e66308f4a35f9aced1662ba80ad28d2bfcbeff023e3ba49cca1d9aad82230f953fca03eff314f76d86af4a2bc46104590a0c7487ad67a0c7b6ba08e683f5de7416244be639507ec09d1b51abf6f95307b6512abacb2863cb7d856aca963ea1d3d17517ef388fa79f46c21ad08628b00f4450459ce478b8afc438ebee17b2f93f60efa480200ff6ecd9fa8b9d96bea8ad493def6"}}, {0x51, &(0x7f0000000f80)=@string={0x51, 0x3, "67d8f4244293b5deafc8625be64721576cf524e0d0c31ef1a83736dea1a4645113df04ff2a84da01a10dc1668e237369124778cb25668f987ed53a8bd054c8af904065bf413fc6cf6f882150979320"}}]}) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000010c0)={0x4, 0x6, 0x3, 0x8, 0x2e, 0x5, 0x6, 0x7, 0xc, 0x6, 0x1, 0x90, 0x0, 0x80}, 0xe) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001600)={'tunl0\x00', &(0x7f0000001580)={'sit0\x00', 0x0, 0x700, 0x7, 0x4, 0x8000, {{0x16, 0x4, 0x0, 0x8, 0x58, 0x65, 0x0, 0x9, 0x2f, 0x0, @multicast2, @local, {[@timestamp={0x44, 0xc, 0x25, 0x0, 0x5, [0x6a, 0x3]}, @timestamp_prespec={0x44, 0x14, 0x9f, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}, {@broadcast, 0xf40}]}, @rr={0x7, 0x17, 0xc2, [@empty, @local, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, @rand_addr=0x64010102]}, @generic={0x82, 0xa, "510c0c0af7c96cdf"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001b00)={'batadv0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f00000048c0)=[{{&(0x7f0000001100)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001140)="5e10c0161dc35abf78337ed052ea8a223c28af6abb23c005f5dd5e25c036f71fd7503d95189dad4a192800618709aba590f917455be38501ce5dc4e779f2e7590703b2b4f042c818065faea06bcfe237ba7cae", 0x53}, {&(0x7f00000011c0)="d97f4d54267064be93d62897e63e666a21b2526902ee383c54c71a8f87182ee11c7f55f0662372dd02fbe1656baf7fe076bc667de09855c8c23851a1fee7929118e6480b60664778a1993dda1f8016a5aa89511e0bc3f4a2ccd34938bda2e93d5174f80bba2b53d891ad535532c0da366185b62281d87b78c03b48445c018a24adebf341d913aa8ae34d30d17d9c913b67cf94fa5a1fa9dc001848f27da014aa9df6c983e55a71734fa12d918d8e549c", 0xb0}, {&(0x7f0000001280)="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", 0xff}, {&(0x7f0000001380)="83a6822331cac5edf60b314eedd087b68a10cae2982a6a751077b6024aa5083ec11ffa3191467af03beb6df97cf07dc3ac8747a548a393d119c21fd50d8f8133c9cdbb98034a7527bb04e9c51ea2f46a92d3a68ab38e210a2b47c3ca796b2b062dfe3d39b8bd6c61efaa0f9c4f1bc7905274b902896c0f37a5f00d5e8cad3eb3e5519e379b956aeae7ad2cee91f573cf60670514e706ac03234d2051c0415590bc4259839628b3fe15169906", 0xac}, {&(0x7f0000001440)="6e4dcec280fc1fc89d98f697eed8e44f5f48f04ff39bfdffc7b8b29e6c926d5ff67f393a101f853c763e247e0f6904ccde10c871ee55328ff9867e5ad72bf98b2058c23d66195600d1891555fbfadef4ca7047af38c90d74c853335d109d768711005b372f7787fc86c72d6db6040f515f3102d0062bdd876c003524a2f68c7f1be94c03476262c4178176533d8d774a9d6d88875fee3b2134e6c360159e9175", 0xa0}], 0x5, &(0x7f0000001640)=[@ip_retopts={{0x94, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x34, 0x0, 0x4, [0x216, 0x3, 0x3, 0x1, 0x4, 0x64, 0x4]}, @end, @cipso={0x86, 0x19, 0xffffffffffffffff, [{0x1, 0x9, "2058380aedd1d0"}, {0x5, 0xa, "98bc8375db13306d"}]}, @timestamp={0x44, 0xc, 0xd7, 0x0, 0x1, [0x0, 0xe]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xb7, [@remote]}, @timestamp_addr={0x44, 0x24, 0xb0, 0x1, 0x2, [{@broadcast, 0x10001}, {@remote}, {@rand_addr=0x64010100, 0x9}, {@empty, 0xf}]}, @timestamp_prespec={0x44, 0xc, 0x2b, 0x3, 0x1, [{@loopback}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0xb8}}, {{&(0x7f0000001700)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000001a80)=[{&(0x7f0000001740)="e91282afe03b46a758720b", 0xb}, {&(0x7f0000001780)="66f298316b118193e510162183ddb374b397c93698148f641baf3f51f8e9ae04476967041d8526b9dc3eb485660c2a99f86f28db1a7fd65c", 0x38}, {&(0x7f00000017c0)="58f209c8440d59d1f68af41c41d529855e4918ef19f11b5f64372f0bd36a8bdef94a9d94054169963e54b857d8d4241149fb7d64abae", 0x36}, {&(0x7f0000001800)="29d121223f07ae34d294dcfc62f0d5eb6c97080300b5a8b064fb51dc9a2ded6f8131fde52da6398f72d9f7d4ea0616c36dc9f5146d41d2dc1da3885c243132023c38f7fa2e9d8e694203fcaa8c239ec4bb732b22b55d6b96a18c511afe3e5a54e6fccba5e2df1897b2570dc4e22f4bbcdcbe106acf8b9ffd42708de24fc12a474df99dc5dd56e8e10ae347c895bf742de6419e21c9a3e1a61e7c2a84a7a8d0c862ebefd331912c15ceedf9e0a0f62e1b109400d6a5a579adf66f20ca7f9b3e7c3f37c23229948682fc456ce1f24eaf7e38be9cc9b6f11bef6528c01a6ef0f620f721ba65ba5eb6cb23e4e73884dfc32400004dbb", 0xf4}, {&(0x7f0000001900)="293abc779d76c64ce054ee0f58161b65a0642b7107f57841bbdc3033b95f107b5d26eaa7aaac00b98ca1941631b7d5e96ba4830e78718d1d6e428a8d14fad3bd7a12daa4d95928ff98eace161da0ee0fe28ac34126a9e758331d349a773c623afda448d96d648e4332855d111db3e44a13aaf0af346b013604f1ddef50aa8b8f9278e9af9eff015ff8552a977a382f5191b7d988212301e898e9706aaf5cc495601103ab0bf2930adbaef3b84aceb8efc704663c1cbca53d23b295f6393407e33821d9e4c24c801d160b232a8188d217f0", 0xd1}, {&(0x7f0000001a00)="4d59ca517b968e3905ea9d701b71c6e40fecdc60312e18f9e2700e6427427a61260d0621613279b4a076d18039a9d6599bcf4e155b399065686b8b53ca13e8c0be07deca6a657ba8eb97cba0ccac8fc46a771e535b3ab28cc8df95686e67ef2fb5047ef64481bed6eb5b3c343383949dff93d0f2559d4d", 0x77}], 0x6, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x14}, @remote}}}], 0x20}}, {{&(0x7f0000001b80)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000001bc0)="1cf6e41b016c70bd99a516c5ccc14b3f04bb0a0c6f354035ad53560325d1e16b984cea2ed7630ead372f9057c64fda166da7394e905355813b5b17f923207d3ad8194d9e968f2e9dc7f2973cfad51c8dfa0d27cf5a61d56dc60e84119e753454175cd37e7bffb88e7ace61094672cc39c28552b582a46dfe08cedecf834d214de631a2e64f26a3b6f991fd6a26ef39660b0ee4394a3933b2405a465a09a128add2801d4e9d111970b7b8269d8b1ad77c42b9fb84ce9627099da5fa9eee663b24904a", 0xc2}, {&(0x7f0000001cc0)="176bcc22de56f5f256eb08a9fa710107c48e4457ac8fd0bb43619abd07a7529b35d1f764685812b8b338f8b5eafb48bdf7392bf23c18c61a44dfbf19e8bdc739321d743dd880c6b343c303bdf0b35e2edc114917c2a5af", 0x57}], 0x2, &(0x7f0000001d80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}, {{&(0x7f0000001dc0)={0x2, 0x401, @multicast1}, 0x10, &(0x7f0000002f40)=[{&(0x7f0000001e00)="c672c3dc2360f7c952f24df9800389ec3c", 0x11}, {&(0x7f0000001e40)="000fcee564a8df177f3ecd9dc9518f92256c96c6295eb98733e9f791c7f71dfb0fdfe3b0dbf134907eabc4800dd83cb73a2a17087b7519b9e8e08abbad0c018119435a81ee15da07280a650379af1476491abaeedd26d481d5b0810c0aabc2f198db2d9870f139bf63f5285d931958cba413baed511d23c749f74d17a4c75cd0681adb9a61cb4ab12e71079c70f4b22e82bb5474344e3b15f0854d4c3576f93636ec4c3188a773ff2afa3b6e82bcb34c6b3f00d74b5369afac27ee3070335c47d91bcb1a551cf04bced01d070ecad56400a0bba396bdbc75d5bdf78c0728fa01f241c3aa922ad54c86a166", 0xeb}, {&(0x7f0000001f40)="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", 0x1000}], 0x3, &(0x7f0000002f80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@rr={0x7, 0x1b, 0xdc, [@remote, @local, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x26}, @multicast1]}, @timestamp_addr={0x44, 0x24, 0xf1, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@empty, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x9e5}]}, @lsrr={0x83, 0x17, 0xa, [@dev={0xac, 0x14, 0x14, 0x21}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x41}, @broadcast]}, @end, @timestamp_prespec={0x44, 0x14, 0xf6, 0x3, 0x4, [{@rand_addr=0x64010102, 0xffffffff}, {@rand_addr=0x64010101, 0x7}]}, @noop]}}}], 0x98}}, {{&(0x7f0000003040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, &(0x7f0000003100)=[{&(0x7f0000003080)="7bed9b84443df339761f64dd381491adfe6222193e07df4727de70c287549eceb483bcbf7767698fb07a96ec58cac84d1972936d39968c5207fc38f7f49f97c4c4404b1ba2d2a18d915ef0e09edf262c7e4c7fcef4674fca3810d84237d42f", 0x5f}], 0x1, &(0x7f0000003140)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xca}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_retopts={{0x44, 0x0, 0x7, {[@end, @ssrr={0x89, 0x13, 0x65, [@loopback, @loopback, @loopback, @empty]}, @generic={0x86, 0xc, "559f6dbc8c47c595b1d4"}, @rr={0x7, 0x13, 0xec, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0x38}, @multicast2]}]}}}], 0x90}}, {{&(0x7f0000003200)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000004640)=[{&(0x7f0000003240)="ee6dff76dd33fce81816230e0c2598e1c38dd39901c37cd2e8b138e04ebc59832581bdf6551056c710176f52f626b15b57920d7c413deb035dde049c33fb7de4eb31f4106466b58bccecf6ec2dd010352dd17cca86c0417bf7dca6006643c533d0f2c2dc7d06f22e06935589123b3f779426b01dba41fbcf0202be20d19b86113bec5da22e525bfccd7c7b2dcf63af3f34e2493c3d70e18a056c065480c331fb67212f576fd808be4e3f384d5baf8e04a32140c352aa1f68d599314a3e13852fb768182cc48aae50f8c3af5201804598b9f3000c1be5cc9ad1", 0xd9}, {&(0x7f0000003340)="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", 0xfb}, {&(0x7f0000003440)="a44d3228adc4e438c2f4746bb004aaaafe5bd08608b056bcf56ff20868f50092dc0e6aee9981382acf15e047fca09fbdee8b1897d7dc67a9d5456e6f49d188d8593b81ab0c30d4654e442b127d0db9c680feafb41507b1a198bc52d794922d38c44d2cd13188fd9894194c8457dc14a600836bbffa39f6cf968e119d4574661a714771c7260e0cae9b9140a61bb76388b96925c5449a19c4161ed6d4cbcf402e28b4565a362f84c0c4a7d961849b273180037d97745d300df6d79682ca867ad43810b1aab0e732f3e7d40894ad58be121e868452963d7f1e2083478598afe40e7794d16e5262d842ff5eadb1076e4b8e6e3ecc589a91ce275449bb55ae002a232e62c270e61336cda5b20d5a62e5bc2a1674b1e268e2a72d75006556f5b570b1ff7e1e028270d285146448fbc6b63439e037bef9f33da279ed22c000afd13ad1072c9e9ec78e447fd59acf1cc04294382b5bbcc743c624d4726a29f7ac4ec9ddc2d77adc13670c10efc0e89e3a57c1dc861ce24145b8dd8c374326aef240feb5f34f6453c5edca97e0728abd12e1f42cf24bf935de01eec818586fe0a355f09ca3bcab8adcb6893a467a446388c39625e292cdb812c88a1d07a1bd15fac7872b48fff7509542bdc1462dec706bf241b21b495dd149600be6009107a7e112031c124be95bde87ba9c30787b2d148ef64ba97847db7155302b0b0b1b38c1c99c58e55458d2f69a0c657fec10e4f17e9b07d95a2fbd72e5eaa66f85d4992c7e1615de58d4c1900a38a3b4b81d1d5e5d2c9e3fa89db0e80193b32cd33db0b3ff9b61caf95abba16a7331f24701be2813dfcbf7f20276e83791c839d400e75c6f2b39865e83698b28ffe6c9e7d5d9fb57f9c839935e838d6a240280e2c850933be99debf10b7bc27ee2aca2188a234e91feec410be73b2f2c969fdd4ee2d48e9bba4e6773f60565b3673c0c446aecee5d1c709b5370c1918e5722f69851d9f6b5fc5b720f64ff410f601e36542515f20f6e88aeb4bef2898b11535057cb31e4d20db3f98c1184df560fa6774038225f449abc8638102df6f74cd0bb074c46fc54bd1f0000d37d0bf515f4d3e56ca0d4e9fb1c5b63ebcc3027a8023c166edb6a6b52d4188a04e0a4a5d9d17b771982f1eb90359c62ab6bff0f295926fc3eb6cc436ca3331116f013c0439312d985441fff8e09a09751f54d7091c87bae9db0be52360d2db962e98a1f05377b462f63cd189a42ad3740ec4b335674e62e3dca8f6c08f8465895e0f35ff03966c8dd8f06c874cad4a9eafeb865f7d0cf63183af489620619dfaaaeca73ac6c39ad6ba21623d3e5a9233a3acc8987daa6363b173bb83adf48163084289e9f46e2de378c30b79282785550aab71e9c97625d031755f1c561d8130783e05323f2c5da15dd12d9fefffef2c1ef86cd1f27ffe621db784fe13e7931c3ece38032924aff6ad40a937a9fb1ceb9e54595131d9690fb67675c14431b53b3800eeee9ee302886daceac1e6d1e755b4e40b08bda63821ffb94f508a38085be89f2b9ac5ad1a22a5244c38e161c7aed874643ec4e9e2e12460dbb57735df869488f59d511b48b928e2e5a5a0f685d76d5cf74c674bc50e05ce1e42d799a82f9d0f684d60b2c044c9c28bc0a48a0e4097de187131c0ca378918fa12a3ec42f658c692c97ea18d022414dd3545af81b5692e65c3ce5403a95c712425d5a432d8dc663cb7051c17c10376e34807472a69abdee4da01f28aa2fcbc71a557d7383d013289acb3fafed8052a953dd066dbf4f36b077f20140a7afa478cc286573f5f827a2ed0a2b6b6ad30f3895bf7d91e9f2547a3aa2282b9cd9608a06eeedaf16cdfaf5a6b44a72bba5ed76d6e4c3f7da463d0c20413946fc5a6bacdb6017f92ffa3ba54f57031b9ba57e402fb18fdb90b3b4813e8967611ee927a602e28f17f0f8f87d5c37bf330bcee63008d8b3d749c59a6f375c12282367fdfa802f729a6d3d1b7aa84641ebd6d2d1477219c9dc46edf8e020ddfd076bba19df95603d5ab7d51c3e251a25f692e798901daacad51524b2fdfaf51298b580e09384e182135b05e0b2eb93b72c6f9d62dfad840b92841ad8f9b93f577ffe469fa3772cc7cc07878e1ddf8607e8063935943ce52a275e8289791f6b9aa3c82774db0c59f7e5176e19aa5ce32caeab4ac6c84cb2d289ad30c4b12ac7b062a7810ec773750893c16e1bf31a81840762290a181c896642ffc08518923d16a775d3fbde3b37bcd7fe5d2690301207145bd96c45aada5f0abb1f8008c47756ea3c771ece216d2ac19e7d9635b3d0d467ccf2f3ba21a1945dd0d63e8e9179ce4f2f723643444cf4068bcad38859258d3baffd35aa18ee4ee7f6bb7dcb0582aac40ad167c65015994f9acfe0b18d7aafa032bdffdc6eab7cb8473f1b5f2a73b95309d8f553e89108c33f5db40cd20ca99d2b44ae3bed9449df8a30d455785f50070ccb7f460c261f8d8b55105dd0c46c5bcc9a6e5badc0cdabd685691530fb93aa6197c8d7be7aa9598ceaebb51009836ac50975482f6652133caa5476e642246643735d0825a7f6001674938f217c892c72deef4248e7e7ae2e7e5d699439aa2f362ef1256d9afdea1313e91fe4d2ed0427c77d4fbc41a57c26350e9d833152afc40052396d104d5403e2c26e12f0e3c0bd4bafb38e9efe14b3f3f8d1d7dcfc71412c7dfaa90f50ab2acacce442dbeb89f51ce90c270843ce4cc8d6f3ca936b89951aa9100b30e77de23161cd22099d456a89119778dff12a024f501e3bf5dbcd89596401bffdc26db13fbc7797e9a7c422f009fd2c9b685188d9cdeb69e534cc04293e2f6a5f2eb61da5aa7c9bba4b26d9de13f160d602657b8336303aceccd715e57a03bbeb1a8481f2c38e3056f22591f928e6818950bf7e3fe7e6ab22a239eba59df92ab27aad181d5c3f099d6f9404a6520a8d30397a1aef6e4dce79fc88731182676f0fb4ef36bc9c3cef9b22b0686cc22d0a97c15b6d9c8c098a7e75b52b9ca289a9b427bdea40df6a81b0dffefa8ac89feb3f99fb85c793ed35c3528a41cb1323299632c083cfe712535be35e9a4b4599841051506cafe35e225982615df1fb2544e4df422c73590705d2a7c763026054eb6a3ba39d623a264478f3dabd88573204a3a090a7988404ef105ca7c07d1385a3545a9244efcd4ef16539d63758334d4a20a2f31c5c622711f720e3ca3ad3571db84725729b71b0ff457e55f741a56407fa259d355b35c3abea6efe9414c1e9af38a461c49c52ed02e9aafcfe874d10778a4d8f1c324cbaf354c0cd7d9ae08b8e739205ddec72d49f59a57b5f83ed5f30acbec5cf2a4c3e123bd4c823e16d2f273cbb8a749fd2cc3883458447314381a7b4f14e4658529c130ee83abea0e5d2f0fbc764673fb6c6ada61723725793ed46e13faf701857b569bff0c469310e5c0a1045603ee0387b4cfd8b1a8d8c70b23481fa656455cfc7300f5daa28da40b867e96006773a11dd3858816bc7b53bcd6439be3e8560d04d162839b0266c3ce6d103b854839f6a5ce0eb819ed43d77bc94f3ff855d10d41029ddef2ff321655b568eefefbcf2502cba7d80b6fe734ade8705362a57d46893ba9d8be9df08d81d43f92427ec867a70b887b7f757f81681e671a655a08114e9d7a9aeccec078479acdfdcd669ea1eb69f2721c5f6bcc94bebbd2aafaa88690e8eea7f7e5a73754e3633123a49055b870dde12e9ad9de5291b41c13c7d382d02232aa9d77d6f17c50af8736f8e2e3ffdbfb547d3e05c990f846aa8df81c37fc0641c3a1bcac461201e805b5a9ede66262e654763d6eb987d6bbf007b1cda1c28176eadf3864fb97b4af6dd6701f05f5a45a6c48846cb64e96c8ea64b4657a5938d18577bf68f54270dfd354306194e061169b27b7c3a8f657c03c33b246ab1bdb8c44a1ce919d6fbcce6446c35406ff66aac3e4d20ef46a93f36d01b6215fa56fe6144e3b85ec73648c2a9d38c91faad0cad774872373bddc1e489cbc0718a6a80152f77746b7eb9d54104ea456ecf064f1180e5252055cf9a4ed3f832cb112fadc00bebffca13e70332e29d4a1b3968540d4077c0ffd77c485bd047957ec807717bdda6fe6f869462c0a285d9d02630eccd27a75eca808e4f588890a1dae932527f82c56ec0e72882166f86ccf3981e1909989a9eb82492cddd452b84eb1d7861022e6a45441bbfba264a751aefa754ac5cf2f425cad1612f3b4424c0548d72682ee083292b9d54e434f20e8afd1d5339a43cc9d3897d9a094daca55c5dcfb7c5012d1cac8a969a76c164021c5de6feba43dfd7a85acc0b7dc74ba8c20407a005c756672760a7ad93a03c485674f232af80cd0c99f42c2b6f07012e345cde11d5455d9db5ae1d0ce07a380d6b2bcd6b5602b403b4ec2813add5c761fb197ff8e43f4174078a7bac5d893e8feb83f8cbad2e76095f4aa89aed395c3972b3aff306dff61f7f981d1b756c83bdcd10ef818e2872359f15f06d0609164307eeb9fed99a9913afe3442c6e2c2ef17abf90895a73447881370cd2e5adc61a0f350226089988f30d14065ac6df178e30e0722a5773ecdb082b6d37017c63c8ad48f2cb7f553470643d8fdc59a2abd25200514c27af02c0dfc33a21bf8c1374d109bd817073bf068e35a99c1b65a74b83c384fd1d0d6504074507015a763d80dd3986fd6c6736652762d516015b2f4d99215e4d46ca509c328b4a143c3aeb839ffc077f4b07fcc39bee1b3929a54b07488263ef7a88c1dad745149a10a4b65d781de8852fa01f9d1d8be8f5faf141fca16a0feaa4238c61634d34bbe22da5a0a5e5d9f72df2112f682680f15d960de9ca6c61bca17e286857ba75dfffff38442f587b7097bda0e7a01ecec6af0af45bb2d6f5090f5a80bf3305b3de7b422461bd8cef3d49655e4342941f0f05c74b1036489e5634491048f2e5904eb69726ad0df9e8e3a5351aeb4b8fc0d0f7a3023c98d378de98a6fd933be5ccdf34e1324dad3b32a3cba9747081c7ebbd382e12df686927d78b080d5ebeb3c7767960902c37a13ce6004b78ab482305c228a4ec5870858e325a5f5c5c30f8c30552467fefa12693c77b264e7ac8cfe02e492f497680bd4f402487d1cf4d19882486d64aa865173a28f1a8a46d646edf8b5c74a7d2ba5e1ba3c80e78c8f8ea9766bc46990301a90b15b2fa8bb4c20bfbc85b1e75fb1597188877fafeab239452f0f95ec54246a97e3602ff1cdd1774c75659380ca36ffdc3d1734bc155d4c9317b9b766bef7532cfd94851ce8849afb11067b9d210e4b6579d6bc06fbd8eeb2f0d496200bdc4e63ca4362a6990e0100006ba3955f4befc7b760c186bba013cfdc6d90ee7092a52d1527932baac777f113a0b62d3ad0d3dc58c171022f5a88d99d06bfe4922156a90307013fb1b72c40d8e5691efc10da9cb945aed2781d6b65a063e8b6c99a062500d878fd0c199bfd51ca7fe19d2eff372ba767de72d3d02f19fbb5ca31a7f3d3fbfb4e38e5f04f7b5a48a2e22ce6bea15573656adacb26c6f390299f5850b405b870bff74a02ace0198c1eb9332245ff651df0297bd3f0c1f380347a215f71c17639073be9a993fcd7c9545660dc4a999f8bfc3d9f3222c0ed7fb0f9584c05882f37292e9dfe0bcbe2c6ddc720d5a841c74fdd5b231d57e6a933e0c5a77f5bdad848f7df0d7e40fdd8ca3574bcb2a25a2de225e93c04a55ef0006f37d844d396d1334ad000bd8cf02acd1cd699adf1f5be1adfaf1eeb12a5e8d7d30c3", 0x1000}, {&(0x7f0000004440)="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", 0xfc}, {&(0x7f0000004540)="aef9a4327b823b9d623bc5464f40a8479199e7cf6133e250b9d5e6009874d366a757f6efe3113cfe010acefd7a71fcf9366c9a89342fdaae0e5d61609149f2573e6cba1b6f319a8bb8a1a96cd2885803d3afad4f86e196f58ef92c2717f0527615d886ddc3ddb412215bc4c0f4db67023b3c2a04cb2fd8ac2abe6d244a8792c75ba7fa45b729f6646e0a7b52f813cb28cc729ef05f5bba627ebff6c50c673e601106121f79c1480269c6ee8274ae59b63b5608e24e10e3aad13cb9044128ed903e63074b778b86afca10e366", 0xcc}], 0x5}}, {{&(0x7f00000046c0)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000004800)=[{&(0x7f0000004700)="71d7993d28c25339b3951c52765e3b0fa01c67b6325fd744e9a757cf97574504057c7348d5e3", 0x26}, {&(0x7f0000004740)="b87a954a1763e822f679e5ad58b908f679d2a0c63666f5162865bf3818f12e46783d4c649ef908857a5583a45c92ed0210c17bffbf3566", 0x37}, {&(0x7f0000004780)="894008aab1ba2e2fca2b2912b32019b40d5ee3c5e9451eda3063c2557fe2a123a3eb6c5e922c91e337985b0537da530739b2deb725e58041fff1975c90ac059fdd3e406f347c68", 0x47}], 0x3, &(0x7f0000004840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14}}], 0x60}}], 0x7, 0x4800) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000004a80), 0x800, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000004ac0)=0x2, 0x4) syz_open_dev$usbfs(&(0x7f0000004b00), 0x40, 0x48002) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000004b40)='wg0\x00', 0x4) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000004b80)) sendmsg$inet(r2, &(0x7f0000004f00)={&(0x7f0000004bc0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000004d40)=[{&(0x7f0000004c00)="035be92a00cfa82ddb10d544ad1b96b68ed3a44ff10531e1d6ddda4756ac63b8912ed96e3e363b22586881d04047a897495e1513f64fdd6beca9f8d80b5753943748fc4500ae8b6d1ad8ab53ee66b10257853b2533782d29570bfe025d2dc9371975b0e0c1f3e2fbb3fceacdc92a363acfb8ed4ecd95ddfaf7dea73318c2", 0x7e}, {&(0x7f0000004c80)="034e89fdace3dbdef5c2f59c6c5a5c6b75bddedc4fd0a6b4548e01bffbb992b216d9f5703459bfe544d0593db156c6e7bdf10a5a458e642f876e8e2efe3a02999d80937ffe70e7380d635f2e98108e0209c851a9b38b7ffd0ad7ad4cfc82d6f9254b45aba6107a2463d4d7b3167c90907b9e669d49b3767226b0b896479b7ff255da696b9775affa5fddaf33768898c4ccdd46354addfcf6db9cfcb584b4d3de5026dd03862284583518e9e872131aebf0", 0xb1}], 0x2, &(0x7f0000004d80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_retopts={{0x88, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x80, [@loopback]}, @timestamp_addr={0x44, 0xc, 0xfe, 0x1, 0x9, [{@remote, 0x5}]}, @timestamp={0x44, 0x10, 0xe4, 0x0, 0x4, [0x0, 0x4, 0x40000000]}, @rr={0x7, 0x7, 0x2c, [@multicast2]}, @generic={0x86, 0x6, "21f05a53"}, @lsrr={0x83, 0xb, 0xf9, [@multicast2, @private=0xa010102]}, @generic={0x94, 0x6, "073e0f5a"}, @timestamp_prespec={0x44, 0x14, 0xe5, 0x3, 0x9, [{@private=0xa010102, 0xfffffe00}, {@empty, 0xffffffff}]}, @rr={0x7, 0x13, 0x37, [@remote, @loopback, @broadcast, @rand_addr=0x64010100]}, @lsrr={0x83, 0xf, 0xa8, [@broadcast, @private=0xa010102, @multicast1]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}, @ip_retopts={{0x74, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x13, 0xc3, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty]}, @timestamp_addr={0x44, 0x14, 0xca, 0x1, 0x9, [{@local, 0x48}, {@remote, 0x4}]}, @generic={0x86, 0x8, "9226832af2ab"}, @ssrr={0x89, 0x2b, 0x4, [@dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0x39}, @rand_addr=0x64010102, @empty, @private=0xa010101, @private=0xa010102, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x42}, @broadcast, @multicast1]}, @lsrr={0x83, 0x7, 0xce, [@remote]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x148}, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000004f40)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) sendmsg$nl_netfilter(r7, &(0x7f0000005280)={&(0x7f0000004f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000005240)={&(0x7f0000004fc0)={0x274, 0x1, 0xa, 0x5, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x3}, [@typed={0x8, 0x11b, 0x0, 0x0, @fd=r2}, @typed={0x8, 0xf1, 0x0, 0x0, @str='wg0\x00'}, @generic="8c33dbb2e8e450e11caa485bf843f4c54ded4a70dff120e0c7e95f4e9827deb44b3f6e83e1e8b5b76800e1857c832090", @typed={0x8, 0x100, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="f474f33a2da369845967b481212444a17172ef4cb1e19d38da064a6f71d4adaa6bbdc2ef9121e5c2705125cec6057b0582d33c2c6228aebc7501192f53b06de90d393408b85a1eb45d00f3fe83df093fb82a16436787bdf12a8c5e5174fb7c56faed69b47eb2268117429a8e76f2259370935361a61be69c87ec61d4fdfdf8f84f9080f6800ce40c49b6ab7fb0a17fc56e4ac113b602a3d34eaa28d51ec1a96539633d366ed21b3c3debc6c24c36f213c8749d9c6791e611d378a1e55db378dc4aec0135b0d9d14464020665318baabadb9fb5d1af06e94fc06f584f93cf", @generic="b3e396c526bec7a598c98a54c58583f224df57346acb62f5d1f5f409618ff33f25b6a7cf2921479b8d9a5aedb4f82ea751fc4ef6e58df7a03137179ff822dc580c7f972d5a55305961655d2c03f167e04929ccebbec4da5496d550c17214fb5817a0c95c2a52e29e63d6f753ddca7971b0f12877ddd6d73567987f7e597435f9bbfefaeac4c4c88616495f20ce3f5b16625d06420b098ebe73f5861f8c6ddb77b6687156b3e362e0f98521d5b91b89e2a87e675e315d0305466851465f57a59f37311c9d57ee8ec78852b21606", @generic="412c76cef9e4574ef5de6b0c699fe78457665a8891e7815b3d03de637d9f6a5345a766f39c322d9cb13b3abb6131bdadd3d0a435e209519f58fe1cb021335ca596efad74f20ae4b255e00c37d7c0fc469d16178dca9ce3fe97dd7468be7f566db2e216", @typed={0x8, 0xff, 0x0, 0x0, @fd=r6}]}, 0x274}, 0x1, 0x0, 0x0, 0x50004}, 0x8010) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f00000052c0)={r1, 0xfffffff9}, 0x8) pipe2$9p(&(0x7f0000005380)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000005300)='./file0\x00', &(0x7f0000005340), 0x800010, &(0x7f00000053c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_mmap}, {@version_u}], [{@smackfsfloor}, {@dont_hash}, {@context={'context', 0x3d, 'user_u'}}]}}) getegid() openat$audio(0xffffffffffffff9c, &(0x7f0000005440), 0x10002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000054c0)=0x101) 1.067785964s ago: executing program 0 (id=1674): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, 0x0, 0x0, 0x40000001, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x6, 0x9, &(0x7f0000000100)={{0x0, @empty, 0x0, 0x0, 'sh\x00'}, {@remote}}, 0x44) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4004001) sendmmsg$alg(r5, &(0x7f00000021c0)=[{0x0, 0x0, 0x0}], 0x1, 0x8091) 995.20406ms ago: executing program 3 (id=1675): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1000, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x80) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 981.622353ms ago: executing program 0 (id=1676): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000380)=@req3={0x7b, 0x38de65dc, 0x0, 0x26, 0x8, 0xd8}, 0x1c) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000d00)=[{{0xfffffffffffffffe, 0x0, &(0x7f0000000e40)=[{0x0}], 0x1}}], 0x1, 0x0) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000000600)=""/38, 0x26}, {&(0x7f0000000640)=""/49, 0x31}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000680)=""/66, 0x42}], 0x5}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, &(0x7f0000000040)={'macvlan0\x00', &(0x7f0000000100)=@ethtool_channels={0x3c, 0xf53, 0x2, 0x1, 0x5, 0x40, 0x3, 0x6, 0x4}}) 959.900768ms ago: executing program 4 (id=1677): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0x38000000, 0x0, '\x00', {0x0, @reserved}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x16, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b400000000000000791090000000000079000000000000009500000000000000a43abba0b245385a1964b904e462de529745a4cd61a7a0d25ddfd38b8b9a36c14ae1ee5ae29051b28b53a4182deb5ae03bc264746b0025abb901765f30c1d039e73af80f39ba982e44fe40c17211db9c82e6da61712f41775115599d65c29cfcd0bffd10d2c62aebfbf41dd375c71938ddfaa1df3017a99ecbddbfee7f7abeba22c29a9cb001001079a87ed58d2cbaf30b8fc3b5fd1fb63bafef7d7bdd5bad81e40379623de900000000002d306a2ab944935390685cfc1e57a6e5d4a1d4456cd3631013f8"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f00000008c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000800)={0x4, 0x8, {0x0}, {0xee01}, 0xd, 0x2}) setpriority(0x0, r2, 0x81) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x160, 0x4c, 0x1a, 0x160, 0x73, 0x238, 0x258, 0x258, 0x238, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x19}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'veth0_macvtap\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x368) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000018b40000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="000400000000003202c1f00100db1f1a826cf6c243864c2b2c703734f40ab7c577e6bab90753962d8c5b7f00"], &(0x7f00000004c0)='syzkaller\x00', 0x80000001, 0x18, &(0x7f0000000500)=""/24, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, r4, 0x8, &(0x7f0000000540)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x1, 0x9, 0xbf5}, 0x10, 0xffffffffffffffff, r4, 0x3, &(0x7f00000005c0)=[r4], &(0x7f0000000600)=[{0x0, 0x2, 0x3, 0x5}, {0x1, 0x1, 0x3, 0xa}, {0x4, 0x3, 0x2, 0x17}], 0x10, 0x4, @void, @value}, 0x94) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x14, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000400)='reclaim_retry_zone\x00', r5, 0x0, 0x9a1}, 0x18) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f00000001c0)={@my=0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) io_uring_setup(0x1131, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 954.314472ms ago: executing program 3 (id=1678): syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000020601040000000000000000000000000500040000000000070001000600000016000300686173683a6e65742c706f72742c6e657400000005000500020000000c000780050015000f0000000900020073797a31"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x44, 0xb, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}}, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1d, 0x501100) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000"/37], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xffffffff, "27d85592b4bfee2be57c8a209e5cfc1aa505abcc55a7faffafc200", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000080)={"fe0d1acce4a37ef94acd000200", r9, 0xffffffffffffffff}) dup(r10) 890.912488ms ago: executing program 1 (id=1679): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x2, 0xd, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x38}}, 0x0) syz_usb_connect$uac1(0x4, 0xa4, &(0x7f0000000340)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8, @ANYRESOCT=r0], 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1}, 0x18) (async) sendmmsg(r2, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000500)="bd9593e9b985b0f3", 0x8}], 0x1, &(0x7f0000001700)=ANY=[], 0x2d0}}], 0x1, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xcff}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x50) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f00000002c0)='kfree\x00', r7}, 0x18) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000ed77749b3f503d971d4f4", @ANYRES32=r8, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x603, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x48880) 418.434879ms ago: executing program 1 (id=1680): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0xd8, 0x3, 0xd0e7500, 0x0, 0x60, 0x168, 0x1d8, 0x1d8, 0x168, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd}, 0x0, 0x0, 'nr0\x00', 'vxcan1\x00', {}, {}, 0x11}, 0x0, 0x70, 0xd8, 0x0, {0x60000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x36c, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @bcast, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) bind$ax25(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x4, 0x0) mremap(&(0x7f0000713000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000a09000/0x1000)=nil) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x10, 0x2, 0x4) getsockopt$sock_buf(r4, 0x1, 0x3b, &(0x7f0000000500)=""/158, &(0x7f00000005c0)=0x9e) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r6 = msgget(0x0, 0x20) r7 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x0) fstat(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r8, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)=0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000480)={{0x3, r8, r9, r10, r11, 0x192, 0x401}, 0x0, 0x0, 0xfffffffffffffff8, 0x9, 0x1, 0x7, 0xfffffffffffffffe, 0x1, 0x2, 0x2, r2, r2}) 380.562566ms ago: executing program 4 (id=1681): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000980)={0x0, 0x15, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0}}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r4, &(0x7f0000000500)="6104c7", 0x0}, 0x20) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000700)={0x14, &(0x7f00000005c0)={0x90, 0xb, 0xf0, {0xf0, 0x30, "0ae18a3cd8f8f6509994159ed20ead13486bd1f08376878c2fb1bb48c0732ef19e71fdb715617a6fe2bde79c6dd48afff4f1449478d2f883a8e87f22993f508b372c6a126b7680bc7abf079e5557d10e8d97c1b635e91c655e3fb9570210bd1dd76bf908aa5e2003e11fb370c833f8bc12e1df5083365751fe1f1a354a32270868b8a9246cc2bd29456200482b43a05878f2e87ba1a4b6358b009c72afdbb43e2b237ffaa66b5074ec32a14d315408a9f7685c88016ab06bb518ddac93faedd6ab9e59145c93a3ee10ad219e7f9db91fcdf6dbb9d770ae062cd8888b607e07ae64f1431cc964478319c097ce9070"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x1c, &(0x7f0000000740)={0x0, 0x17, 0x96, "5eb2a2eb9f6d079e655d3ae5c606f1395a54b655138e37a40f506ec5c50b6597c7423c28f61771c951f7fff0a0dbcbefb68e78575088578037659f45bc455a308f63ed77fa6cf3f3328612cbd0c9f274f9eecce957fdd6d0dc3159f5605f3de5fa543689f5e9a8bcad22a6f20fc84c5ee2f5af146dfe749df4ef37ea39a0c05dc4bc1fb08a73fcbe5a3190ec7aeb90d86980224ef533"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x1c}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000080)={0x20, 0xe, 0xe6, {0xe6, 0x24, "ff26fa821c97cc3eac9089e9b90febea28af633ba68da65ce2c61e39edf9ac4dd887ed5fe90575abb4c8cc42a172ac2ffc49e1b5ff894d48027eafd8d3395588336c5ae7e9472cac069b4472ba468118bc884c71b6f142ee288c96cb7edfe08e171fb68036b624d2210d981ce5a3ddbed6bba4a8d19db44321f229469c55799840640bbff27d95e75ca92babd2b04dc5221b83404eab21e518db4db80a3b77a3c508201ca3117d47bf772e932d8ab52071ba542f50136ab4ea94737a919f72db11deb2cea3fdff1aad8f0cbd8e2a09f3b1ddcd2a360b083975335ef3eed54e5356362881"}}, &(0x7f00000001c0)={0x0, 0x3, 0x55, @string={0x55, 0x3, "4770f560084cd7f7961ecd3998dccd4255fc2f57386de27da8a7f8e26ddab35fbc0b60573068905cf2cca6ac97166e603ed716c9aba59aec370b570c3e90210b1a61e2959d8469554caa01375c036b86daabaa"}}, &(0x7f0000000000)={0x0, 0x22, 0x16, {[@main=@item_012={0x1, 0x0, 0x9, "f8"}, @local=@item_012={0x1, 0x2, 0x2, "c9"}, @global=@item_012={0x2, 0x1, 0x7, "4999"}, @main=@item_4={0x3, 0x0, 0xb, "2744c1ed"}, @global=@item_4={0x3, 0x1, 0x6, "6e11b6eb"}, @main=@item_4={0x3, 0x0, 0x8, "fa413209"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x47, 0x1, {0x22, 0xaad}}}}, &(0x7f0000000580)={0x2c, &(0x7f00000002c0)={0x20, 0x15, 0x8c, "a9fd32348b120dd23d7d4d7927312aa4dbad845619d27775cf7472d081296f2e7be3cf05f86173896914ab19336dce05285ee9e58380503eca4d639d48f2f618ecfa7702af9d0d40d34c2009f4d6548d99cbc5aa65c9c6e374a3e47dde5cffdeb7e65b10fbf6edbcd5a96a0da48bf39e574f2709a3ec44d8c936bfa0aa54f4ebb7ce611adf0aae5a9528ec71"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000400)={0x20, 0x1, 0x94, "899776b1ca7e6138b9c52df05d3bae5a18dab0fcb7994c9ffec9d2788f567efb8d4c24fb737f12ac1f8da659852dfd3fdb1bcad7969d0a0adf278bc1f9abfc814269fb748762a0f6fa2de6f4247e0ecfdcf732932afc598c35f0db6e5d0e842af06168914cc6e415211727df8866cc6faffc96835a9826becb5690ecb3cc946d2fa768e1c8adce92ee36b71a538d4a2e742afb0d"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x4}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 315.052367ms ago: executing program 3 (id=1682): timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) (async) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @short}, 0x8) (async, rerun: 64) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x8}) (rerun: 64) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac1(r1, 0x0, 0x0) (rerun: 32) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac1(r1, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) r2 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000140)="580000001400192340834b80040d8c5602067fffffff81000000000000dca8f76d8ea513dfb08c00940805891550f4a8000000006700008000f00002000009000080fff5dd000000100001000004", 0x4e}, {&(0x7f00000002c0)="b0c2095cb9131f972a2e", 0xa}], 0x2) socketpair(0x1d, 0x4, 0x9, &(0x7f0000000000)) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x0, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x21}, 0x40000, 0x0, 0x1, 0x1, 0x3f}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x30, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x38}, 0x40000, 0x0, 0x1, 0x1, 0x3f}, 0x20) (async) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f0000000180)={@empty, 0x0, r9}) (async) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@local, 0x29, r9}) 0s ago: executing program 0 (id=1683): mkdir(&(0x7f0000000180)='./file0\x00', 0xb5) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x4800) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x121080, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="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"]) r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000200)={0x1, 0xf5, 0xfffffffffffffffa, 0x0, 0x8}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x82862, &(0x7f00000001c0)={[], [], 0x2f}) socket$kcm(0x29, 0x2, 0x0) 0s ago: executing program 2 (id=1687): socket$kcm(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x1000000, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) kernel console output (not intermixed with test programs): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.2.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f2b17e31b code=0x7ffc0000 [ 405.398201][ T29] audit: type=1326 audit(1731759700.971:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.2.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f2b17e31b code=0x7ffc0000 [ 405.398235][ T29] audit: type=1326 audit(1731759700.981:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.2.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f2b17e31b code=0x7ffc0000 [ 405.417209][ T46] usb 1-1: device descriptor read/8, error -71 [ 405.429950][ T29] audit: type=1326 audit(1731759700.981:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.2.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f2b17e31b code=0x7ffc0000 [ 405.429988][ T29] audit: type=1326 audit(1731759701.141:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.2.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f2b17e31b code=0x7ffc0000 [ 405.430022][ T29] audit: type=1326 audit(1731759701.211:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10873 comm="syz.2.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f2b17e31b code=0x7ffc0000 [ 405.481160][ T5877] usb 4-1: device descriptor read/64, error -71 [ 405.483016][ T25] usb 2-1: Product: syz [ 405.565319][ T25] usb 2-1: Manufacturer: syz [ 405.570000][ T25] usb 2-1: SerialNumber: syz [ 405.575834][ T25] usb 2-1: config 0 descriptor?? [ 405.581525][ T5163] usb 3-1: Using ep0 maxpacket: 32 [ 405.594148][ T25] peak_usb 2-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 405.601992][ T25] peak_usb 2-1:0.0: unable to read PCAN-USB serial number (err -22) [ 405.611716][ T5877] usb usb4-port1: attempt power cycle [ 405.613153][ T5163] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 405.626594][ T5163] usb 3-1: config 0 has no interface number 0 [ 405.632772][ T5163] usb 3-1: config 0 interface 107 altsetting 128 endpoint 0xB has an invalid bInterval 57, changing to 9 [ 405.644135][ T5163] usb 3-1: config 0 interface 107 has no altsetting 0 [ 405.654320][ T5163] usb 3-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=f6.e4 [ 405.663475][ T5163] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.672413][ T25] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 405.680918][ T46] usb usb1-port1: unable to enumerate USB device [ 405.691336][ T5163] usb 3-1: Product: syz [ 405.695487][ T5163] usb 3-1: Manufacturer: syz [ 405.700054][ T5163] usb 3-1: SerialNumber: syz [ 405.705918][ T5163] usb 3-1: config 0 descriptor?? [ 405.822060][T10872] 9pnet_fd: Insufficient options for proto=fd [ 405.834921][ T25] usb 2-1: USB disconnect, device number 38 [ 405.950746][ T5877] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 405.983788][ T5877] usb 4-1: device descriptor read/8, error -71 [ 406.220781][ T5877] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 406.243400][ T5877] usb 4-1: device descriptor read/8, error -71 [ 406.351186][ T5877] usb usb4-port1: unable to enumerate USB device [ 407.082121][T10886] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 407.632431][T10894] overlayfs: missing 'lowerdir' [ 408.251121][ T5163] HFC-S_USB 3-1:0.107: probe with driver HFC-S_USB failed with error -5 [ 408.259644][ T5163] usbhid 3-1:0.107: couldn't find an input interrupt endpoint [ 408.269793][ T5163] usb 3-1: USB disconnect, device number 56 [ 408.398139][T10897] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1280'. [ 408.536872][T10906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1279'. [ 409.180764][ T25] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 409.188980][T10923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1288'. [ 409.360744][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 409.372135][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.395866][ T25] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 409.416397][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.448746][ T25] usb 4-1: Product: syz [ 409.453079][ T25] usb 4-1: Manufacturer: syz [ 409.457689][ T25] usb 4-1: SerialNumber: syz [ 409.491217][ T25] usb 4-1: config 0 descriptor?? [ 409.527475][ T25] peak_usb 4-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 409.535461][ T25] peak_usb 4-1:0.0: unable to read PCAN-USB serial number (err -22) [ 409.591776][ T25] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 409.963717][T10935] netlink: 209192 bytes leftover after parsing attributes in process `syz.1.1291'. [ 409.965292][T10936] overlayfs: missing 'lowerdir' [ 409.973230][T10935] netlink: get zone limit has 8 unknown bytes [ 410.037292][T10915] 9pnet_fd: Insufficient options for proto=fd [ 410.054741][ T5163] usb 4-1: USB disconnect, device number 44 [ 410.214667][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 410.429728][T10942] IPv6: Can't replace route, no match found [ 412.495033][T10988] overlayfs: missing 'lowerdir' [ 412.560936][ T25] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 412.801971][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.909979][ T25] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 412.999463][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.025090][ T25] usb 3-1: config 0 descriptor?? [ 413.290724][ T5163] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 413.307392][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 413.307407][ T29] audit: type=1400 audit(1731759709.301:718): avc: denied { mounton } for pid=10991 comm="syz.3.1307" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 413.321660][T10992] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1307'. [ 413.338669][ T29] audit: type=1400 audit(1731759709.301:719): avc: denied { mount } for pid=10991 comm="syz.3.1307" name="/" dev="pstore" ino=3596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 413.380920][T10995] Cannot find set identified by id 0 to match [ 413.387717][T10992] openvswitch: netlink: Tunnel attr 1792 out of range max 16 [ 413.408662][T10995] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 413.453181][ T5163] usb 2-1: Using ep0 maxpacket: 8 [ 413.458397][ T29] audit: type=1400 audit(1731759709.431:720): avc: denied { write } for pid=10991 comm="syz.3.1307" path="socket:[30780]" dev="sockfs" ino=30780 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 413.475698][ T25] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 413.502309][ T5163] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=18.37 [ 413.517154][ T5163] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.528788][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0019/input/input17 [ 413.542575][ T46] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 413.553686][ T5163] usb 2-1: Product: syz [ 413.557990][ T5163] usb 2-1: Manufacturer: syz [ 413.564968][ T5163] usb 2-1: SerialNumber: syz [ 413.571769][ T5163] usb 2-1: config 0 descriptor?? [ 413.579957][ T5163] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 413.587914][ T5163] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 413.652037][ T25] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 413.675179][T11001] FAULT_INJECTION: forcing a failure. [ 413.675179][T11001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.688528][T11001] CPU: 0 UID: 0 PID: 11001 Comm: syz.3.1312 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 413.699309][T11001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 413.709375][T11001] Call Trace: [ 413.712647][T11001] [ 413.715571][T11001] dump_stack_lvl+0x16c/0x1f0 [ 413.720251][T11001] should_fail_ex+0x497/0x5b0 [ 413.724930][T11001] _copy_from_user+0x2e/0xd0 [ 413.729519][T11001] do_ipv6_setsockopt+0x350b/0x4790 [ 413.734721][T11001] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 413.740285][T11001] ? __pfx_lock_release+0x10/0x10 [ 413.745304][T11001] ? lock_acquire+0x2f/0xb0 [ 413.749795][T11001] ? avc_has_perm_noaudit+0x61/0x3a0 [ 413.755102][T11001] ? avc_has_perm_noaudit+0x143/0x3a0 [ 413.760479][T11001] ? avc_has_perm+0x11b/0x1c0 [ 413.765160][T11001] ? __pfx_avc_has_perm+0x10/0x10 [ 413.770196][T11001] ? __lock_acquire+0xbdd/0x3ce0 [ 413.775144][T11001] ? sock_has_perm+0x25d/0x2f0 [ 413.779929][T11001] ? ipv6_setsockopt+0xcb/0x170 [ 413.784782][T11001] ipv6_setsockopt+0xcb/0x170 [ 413.789470][T11001] rawv6_setsockopt+0xd7/0x680 [ 413.794234][T11001] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 413.799607][T11001] ? selinux_socket_setsockopt+0x6a/0x80 [ 413.805234][T11001] ? sock_common_setsockopt+0x2e/0xf0 [ 413.810614][T11001] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 413.816514][T11001] do_sock_setsockopt+0x222/0x480 [ 413.821541][T11001] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 413.827096][T11001] ? fdget+0x176/0x210 [ 413.831178][T11001] __sys_setsockopt+0x1a4/0x270 [ 413.836027][T11001] ? __pfx___sys_setsockopt+0x10/0x10 [ 413.841394][T11001] ? fput+0x30/0x390 [ 413.845285][T11001] ? ksys_write+0x1ad/0x260 [ 413.849778][T11001] ? __pfx_ksys_write+0x10/0x10 [ 413.854621][T11001] __x64_sys_setsockopt+0xbd/0x160 [ 413.859723][T11001] ? do_syscall_64+0x91/0x250 [ 413.864393][T11001] ? lockdep_hardirqs_on+0x7c/0x110 [ 413.869589][T11001] do_syscall_64+0xcd/0x250 [ 413.874087][T11001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.879977][T11001] RIP: 0033:0x7f5c1fb7e719 [ 413.884386][T11001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.903996][T11001] RSP: 002b:00007f5c208d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 413.912408][T11001] RAX: ffffffffffffffda RBX: 00007f5c1fd35f80 RCX: 00007f5c1fb7e719 [ 413.920373][T11001] RDX: 000000000000003b RSI: 0000000000000029 RDI: 0000000000000003 [ 413.928341][T11001] RBP: 00007f5c208d3090 R08: 00000000000000c0 R09: 0000000000000000 [ 413.936309][T11001] R10: 0000000020000300 R11: 0000000000000246 R12: 0000000000000001 [ 413.944273][T11001] R13: 0000000000000000 R14: 00007f5c1fd35f80 R15: 00007ffe76d4aad8 [ 413.952261][T11001] [ 413.986191][ T5163] radio-raremono 2-1:0.0: this is not Thanko's Raremono. [ 413.993764][ T5163] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 414.004248][ T46] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 414.012975][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.030719][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 414.039765][ T46] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.051095][ T5163] usb 2-1: USB disconnect, device number 39 [ 414.064436][ T46] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 414.073665][ T46] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 414.081934][ T46] usb 1-1: Product: syz [ 414.086109][ T46] usb 1-1: Manufacturer: syz [ 414.122305][ T46] cdc_wdm 1-1:1.0: skipping garbage [ 414.127686][ T46] cdc_wdm 1-1:1.0: skipping garbage [ 414.137848][ T46] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 414.144984][ T46] cdc_wdm 1-1:1.0: Unknown control protocol [ 414.404504][ T5877] usb 1-1: USB disconnect, device number 49 [ 414.477569][T11020] FAULT_INJECTION: forcing a failure. [ 414.477569][T11020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.530599][T11020] CPU: 1 UID: 0 PID: 11020 Comm: syz.3.1316 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 414.541403][T11020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 414.551459][T11020] Call Trace: [ 414.554744][T11020] [ 414.557679][T11020] dump_stack_lvl+0x16c/0x1f0 [ 414.562373][T11020] should_fail_ex+0x497/0x5b0 [ 414.567074][T11020] _copy_from_user+0x2e/0xd0 [ 414.571683][T11020] vmci_host_unlocked_ioctl+0xb7e/0x1fb0 [ 414.577332][T11020] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 414.583429][T11020] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 414.589955][T11020] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 414.596480][T11020] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 414.603355][T11020] ? trace_lock_acquire+0x14a/0x1d0 [ 414.608584][T11020] ? selinux_file_ioctl+0x180/0x270 [ 414.613801][T11020] ? selinux_file_ioctl+0xb4/0x270 [ 414.618931][T11020] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 414.625017][T11020] __x64_sys_ioctl+0x18f/0x220 [ 414.629806][T11020] do_syscall_64+0xcd/0x250 [ 414.634323][T11020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.640225][T11020] RIP: 0033:0x7f5c1fb7e719 [ 414.644634][T11020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.664244][T11020] RSP: 002b:00007f5c208d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.672655][T11020] RAX: ffffffffffffffda RBX: 00007f5c1fd35f80 RCX: 00007f5c1fb7e719 [ 414.680619][T11020] RDX: 0000000020000140 RSI: 00000000000007a0 RDI: 0000000000000004 [ 414.688583][T11020] RBP: 00007f5c208d3090 R08: 0000000000000000 R09: 0000000000000000 [ 414.696545][T11020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.704505][T11020] R13: 0000000000000000 R14: 00007f5c1fd35f80 R15: 00007ffe76d4aad8 [ 414.712479][T11020] [ 414.916826][T11030] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 414.926623][T11030] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 416.171157][ T5163] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 416.399899][ T8] usb 3-1: USB disconnect, device number 57 [ 416.460841][ T5163] usb 1-1: Using ep0 maxpacket: 32 [ 416.473394][ T5163] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 416.483915][ T5163] usb 1-1: config 0 has no interface number 0 [ 416.490630][ T5877] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 416.508114][ T5163] usb 1-1: config 0 interface 12 has no altsetting 0 [ 416.534419][ T5163] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 416.543901][ T5163] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.552268][ T5163] usb 1-1: Product: syz [ 416.556886][ T5163] usb 1-1: Manufacturer: syz [ 416.586830][ T5163] usb 1-1: SerialNumber: syz [ 416.624575][ T5163] usb 1-1: config 0 descriptor?? [ 416.731611][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 416.744372][ T5877] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 416.763226][ T5877] usb 4-1: config 0 has no interface number 0 [ 416.773739][ T5877] usb 4-1: config 0 interface 12 has no altsetting 0 [ 416.784457][ T5877] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 416.797324][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.807845][ T5877] usb 4-1: Product: syz [ 416.815122][ T5877] usb 4-1: Manufacturer: syz [ 416.819915][ T5877] usb 4-1: SerialNumber: syz [ 416.840365][ T5877] usb 4-1: config 0 descriptor?? [ 417.240604][ T5866] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 417.390718][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 417.407733][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.427070][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.439667][ T5866] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 417.455418][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.466732][ T5866] usb 3-1: config 0 descriptor?? [ 417.622383][T11071] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 417.631580][T11071] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 418.184695][ T5866] ft260 0003:0403:6030.001A: unknown main item tag 0x0 [ 418.361300][ T5866] ft260 0003:0403:6030.001A: chip code: 0000 0000 [ 418.570380][ T5866] ft260 0003:0403:6030.001A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 418.692428][T11083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1334'. [ 418.811558][ T5866] ft260 0003:0403:6030.001A: failed to retrieve status: -32, no wakeup [ 419.549727][ T5866] usb 3-1: reset high-speed USB device number 58 using dummy_hcd [ 419.566405][ T5163] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 419.574248][ T5163] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 419.585515][ T5163] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 419.710034][ T5877] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 419.717721][ T5877] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 419.725447][ T5877] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 419.737709][ T5877] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 419.739634][ T5163] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 419.759862][ T5163] usb 1-1: USB disconnect, device number 50 [ 419.777679][ T5877] usb 4-1: USB disconnect, device number 45 [ 420.304469][ T5877] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 420.722112][T11111] batman_adv: batadv0: Adding interface: dummy0 [ 420.728537][T11111] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.756054][T11111] batman_adv: batadv0: Interface activated: dummy0 [ 421.323765][T11115] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 421.332582][T11115] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 421.368971][ T5912] usb 3-1: USB disconnect, device number 58 [ 422.167567][T11123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1345'. [ 423.028941][ T5877] usb 5-1: unable to get BOS descriptor or descriptor too short [ 423.036997][ T5877] usb 5-1: too many configurations: 113, using maximum allowed: 8 [ 423.160757][ T5877] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 423.179319][ T5877] usb 5-1: can't read configurations, error -71 [ 423.680641][ T5912] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 423.866305][ T8] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 424.007339][T11153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1352'. [ 424.222275][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 424.319690][ T8] usb 4-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 424.418449][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.442225][ T5912] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 424.443260][ T8] usb 4-1: Product: syz [ 424.451073][ T5912] usb 3-1: config 0 has no interface number 0 [ 424.461200][ T5912] usb 3-1: config 0 interface 235 has no altsetting 0 [ 424.477400][ T8] usb 4-1: Manufacturer: syz [ 424.484568][ T8] usb 4-1: SerialNumber: syz [ 424.488909][ T5912] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 424.499349][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.510487][ T5912] usb 3-1: Product: syz [ 424.514668][ T5912] usb 3-1: Manufacturer: syz [ 424.519267][ T5912] usb 3-1: SerialNumber: syz [ 424.552740][ T5912] usb 3-1: config 0 descriptor?? [ 424.567508][ T8] usb 4-1: config 0 descriptor?? [ 424.569997][ T5912] keyspan 3-1:0.235: Keyspan 1 port adapter converter detected [ 424.575746][ T8] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 424.597095][ T5912] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 87 [ 424.620751][ T5912] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 7 [ 424.634548][ T5912] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 81 [ 424.643705][ T5912] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 1 [ 424.651558][ T5912] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 2 [ 424.659996][ T5912] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 85 [ 424.669362][ T5912] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 424.684901][T11164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 424.783059][ T5912] usb 3-1: USB disconnect, device number 59 [ 424.792106][ T5912] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 424.807115][ T5912] keyspan 3-1:0.235: device disconnected [ 424.874447][ T5163] usb 4-1: USB disconnect, device number 46 [ 424.880851][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 425.060664][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 425.080190][ T9] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 425.101529][ T9] usb 1-1: config 0 has no interface number 0 [ 425.137335][ T9] usb 1-1: config 0 interface 12 has no altsetting 0 [ 425.234543][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 425.255812][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.314785][ T9] usb 1-1: Product: syz [ 425.338736][ T9] usb 1-1: Manufacturer: syz [ 425.440459][ T9] usb 1-1: SerialNumber: syz [ 425.459838][ T9] usb 1-1: config 0 descriptor?? [ 426.211715][ T29] audit: type=1400 audit(1731759722.201:721): avc: denied { map } for pid=11184 comm="syz.1.1363" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 426.980746][ T29] audit: type=1400 audit(1731759722.201:722): avc: denied { execute } for pid=11184 comm="syz.1.1363" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 427.017580][T11185] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 428.335329][ T29] audit: type=1400 audit(1731759724.331:723): avc: denied { getopt } for pid=11194 comm="syz.1.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 428.496250][ T29] audit: type=1400 audit(1731759724.371:724): avc: denied { shutdown } for pid=11200 comm="syz.4.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 428.921013][ T9] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 428.930992][ T9] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 428.950627][ T9] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 428.958902][ T9] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 428.961641][T11205] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1369'. [ 429.001032][ T9] usb 1-1: USB disconnect, device number 51 [ 429.061673][T11206] syzkaller0: entered promiscuous mode [ 429.068093][T11206] syzkaller0: entered allmulticast mode [ 429.334040][T11216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1370'. [ 429.801054][ T5163] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 430.070666][ T5866] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 430.257119][ T5163] usb 5-1: Using ep0 maxpacket: 16 [ 430.290486][ T5163] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.312521][ T5866] usb 3-1: config 52 has an invalid descriptor of length 74, skipping remainder of the config [ 430.333135][ T5866] usb 3-1: config 52 has 0 interfaces, different from the descriptor's value: 1 [ 430.342375][ T5163] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 430.351559][ T5163] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.359553][ T5163] usb 5-1: Product: syz [ 430.363883][ T5866] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 430.372955][ T5163] usb 5-1: Manufacturer: syz [ 430.377545][ T5163] usb 5-1: SerialNumber: syz [ 430.382246][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.394822][ T5163] usb 5-1: config 0 descriptor?? [ 430.406939][ T5163] peak_usb 5-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 430.414554][ T5163] peak_usb 5-1:0.0: unable to read PCAN-USB serial number (err -22) [ 430.591861][ T5163] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 430.688198][T11223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1372'. [ 430.802536][ T46] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 431.110597][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 431.118233][ T46] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.123793][T11210] 9pnet_fd: Insufficient options for proto=fd [ 431.130191][ T46] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.145279][ T46] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 431.149692][ T9] usb 5-1: USB disconnect, device number 58 [ 431.158201][ T46] usb 4-1: config 0 interface 0 has no altsetting 0 [ 431.158258][ T46] usb 4-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 431.185589][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.205315][ T46] usb 4-1: config 0 descriptor?? [ 431.665223][T11233] netlink: 'syz.1.1375': attribute type 18 has an invalid length. [ 431.800054][ T46] wacom 0003:056A:002A.001B: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 432.071991][ T46] wacom 0003:056A:002A.001B: hidraw0: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.3-1/input0 [ 432.092057][ T46] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:002A.001B/input/input19 [ 432.113558][ T46] usb 4-1: USB disconnect, device number 47 [ 432.126512][ T5866] usb 3-1: string descriptor 0 read error: -71 [ 432.139216][ T5866] usb 3-1: USB disconnect, device number 60 [ 432.175431][T11230] ceph: No mds server is up or the cluster is laggy [ 432.667169][T11247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1379'. [ 433.891514][T11255] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1382'. [ 433.952950][ T29] audit: type=1400 audit(1731759729.941:725): avc: denied { getopt } for pid=11256 comm="syz.1.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 433.993940][ T5877] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 434.200700][ T46] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 434.305395][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 434.328114][ T5877] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 434.337429][ T5877] usb 4-1: config 0 has no interface number 0 [ 434.345775][ T5877] usb 4-1: config 0 interface 12 has no altsetting 0 [ 434.362113][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 434.402689][ T46] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 434.446453][ T46] usb 2-1: config 0 has no interface number 0 [ 434.457936][ T5877] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 434.470838][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.496775][ T5877] usb 4-1: Product: syz [ 434.497021][ T46] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 434.513165][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.513330][ T5877] usb 4-1: Manufacturer: syz [ 434.543273][ T46] usb 2-1: Product: syz [ 434.553357][ T46] usb 2-1: Manufacturer: syz [ 434.553531][ T5877] usb 4-1: SerialNumber: syz [ 434.565557][ T46] usb 2-1: SerialNumber: syz [ 434.579095][ T46] usb 2-1: config 0 descriptor?? [ 434.591152][ T46] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 434.641024][ T5877] usb 4-1: config 0 descriptor?? [ 434.791176][T11259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.800175][T11259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.183323][ T46] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 435.308309][ T46] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 436.902908][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 436.903282][ T9] usb 2-1: USB disconnect, device number 40 [ 436.937272][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 437.377242][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 437.389178][ T9] quatech2 2-1:0.51: device disconnected [ 437.612208][ T29] audit: type=1400 audit(1731759733.551:726): avc: denied { read write } for pid=11282 comm="syz.4.1390" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 437.636870][ T5877] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 437.644780][ T5877] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 437.652438][ T5877] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 437.660361][ T5877] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 437.676605][T11284] kvm: pic: non byte write [ 437.695394][ T29] audit: type=1400 audit(1731759733.551:727): avc: denied { open } for pid=11282 comm="syz.4.1390" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 437.707730][ T5877] usb 4-1: USB disconnect, device number 48 [ 437.740563][ T8] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 437.781212][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 437.802058][T11288] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1391'. [ 437.893111][ T8] usb 1-1: Invalid ep0 maxpacket: 16 [ 437.942098][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 437.949117][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.972951][ T9] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 437.987683][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.998251][ T9] usb 2-1: Product: syz [ 438.008805][ T9] usb 2-1: Manufacturer: syz [ 438.013842][ T9] usb 2-1: SerialNumber: syz [ 438.020734][ T8] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 438.036540][ T9] usb 2-1: config 0 descriptor?? [ 438.048666][ T9] peak_usb 2-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 438.068887][ T9] peak_usb 2-1:0.0: unable to read PCAN-USB serial number (err -22) [ 438.141315][ T9] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 438.750574][ T8] usb 1-1: Invalid ep0 maxpacket: 16 [ 438.762930][ T8] usb usb1-port1: attempt power cycle [ 438.769769][ T46] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 438.822819][T11278] 9pnet_fd: Insufficient options for proto=fd [ 438.875674][ T9] usb 2-1: USB disconnect, device number 41 [ 439.000687][T11308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.009450][ T29] audit: type=1400 audit(1731759735.001:728): avc: denied { ioctl } for pid=11307 comm="syz.2.1397" path="socket:[30458]" dev="sockfs" ino=30458 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 439.038137][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 439.044893][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 439.056485][ T46] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 439.068300][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.100710][ T46] usb 5-1: config 0 descriptor?? [ 439.161020][ T8] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 439.203438][ T8] usb 1-1: Invalid ep0 maxpacket: 16 [ 439.316538][ T46] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 439.340507][ T8] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 439.370938][ T8] usb 1-1: Invalid ep0 maxpacket: 16 [ 439.377016][ T8] usb usb1-port1: unable to enumerate USB device [ 439.422424][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.429906][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.587228][ T8] usb 5-1: USB disconnect, device number 59 [ 439.603836][ T8] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 439.977649][ T46] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 440.129714][T11325] bridge0: port 3(erspan0) entered blocking state [ 440.136584][T11325] bridge0: port 3(erspan0) entered disabled state [ 440.144091][T11325] erspan0: entered allmulticast mode [ 440.154361][T11325] erspan0: entered promiscuous mode [ 440.161916][T11325] bridge0: port 3(erspan0) entered blocking state [ 440.168413][T11325] bridge0: port 3(erspan0) entered forwarding state [ 440.542950][T11328] FAULT_INJECTION: forcing a failure. [ 440.542950][T11328] name failslab, interval 1, probability 0, space 0, times 0 [ 440.555853][T11328] CPU: 0 UID: 0 PID: 11328 Comm: syz.3.1401 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 440.566628][T11328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 440.576675][T11328] Call Trace: [ 440.579943][T11328] [ 440.582869][T11328] dump_stack_lvl+0x16c/0x1f0 [ 440.587544][T11328] should_fail_ex+0x497/0x5b0 [ 440.592226][T11328] ? fs_reclaim_acquire+0xae/0x150 [ 440.597330][T11328] should_failslab+0xc2/0x120 [ 440.602004][T11328] kmem_cache_alloc_node_noprof+0x71/0x310 [ 440.607805][T11328] ? __alloc_skb+0x2b1/0x380 [ 440.612407][T11328] __alloc_skb+0x2b1/0x380 [ 440.616817][T11328] ? __pfx___alloc_skb+0x10/0x10 [ 440.621750][T11328] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 440.627736][T11328] netlink_alloc_large_skb+0x69/0x130 [ 440.633104][T11328] netlink_sendmsg+0x689/0xd70 [ 440.637863][T11328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.643147][T11328] ____sys_sendmsg+0xaaf/0xc90 [ 440.647912][T11328] ? copy_msghdr_from_user+0x10b/0x160 [ 440.653365][T11328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.658653][T11328] ? __pfx___lock_acquire+0x10/0x10 [ 440.663847][T11328] ___sys_sendmsg+0x135/0x1e0 [ 440.668520][T11328] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.673723][T11328] ? lock_acquire+0x2f/0xb0 [ 440.678213][T11328] ? __fget_files+0x40/0x3f0 [ 440.682810][T11328] ? fdget+0x176/0x210 [ 440.686878][T11328] __sys_sendmsg+0x117/0x1f0 [ 440.691460][T11328] ? __pfx___sys_sendmsg+0x10/0x10 [ 440.696562][T11328] ? __fget_files+0x244/0x3f0 [ 440.701256][T11328] do_syscall_64+0xcd/0x250 [ 440.705753][T11328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.711651][T11328] RIP: 0033:0x7f5c1fb7e719 [ 440.716058][T11328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.735659][T11328] RSP: 002b:00007f5c208d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.744068][T11328] RAX: ffffffffffffffda RBX: 00007f5c1fd35f80 RCX: 00007f5c1fb7e719 [ 440.752029][T11328] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 440.759988][T11328] RBP: 00007f5c208d3090 R08: 0000000000000000 R09: 0000000000000000 [ 440.767948][T11328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.775930][T11328] R13: 0000000000000000 R14: 00007f5c1fd35f80 R15: 00007ffe76d4aad8 [ 440.783916][T11328] [ 440.822607][ T46] usb 2-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 440.832727][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.846769][ T46] usb 2-1: config 0 descriptor?? [ 440.858087][ T46] usb-storage 2-1:0.0: USB Mass Storage device detected [ 440.871141][T11330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.886783][T11330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.910536][ T29] audit: type=1326 audit(1731759736.891:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.2.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2b17e719 code=0x7ffc0000 [ 440.935084][ T29] audit: type=1326 audit(1731759736.921:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.2.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2b17e719 code=0x7ffc0000 [ 440.968732][ T29] audit: type=1326 audit(1731759736.921:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.2.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f2b17e719 code=0x7ffc0000 [ 440.997668][ T29] audit: type=1326 audit(1731759736.921:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.2.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2b17e719 code=0x7ffc0000 [ 441.051483][ T29] audit: type=1326 audit(1731759736.921:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.2.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2b17e719 code=0x7ffc0000 [ 441.092003][ T29] audit: type=1326 audit(1731759736.921:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.2.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f2b17e719 code=0x7ffc0000 [ 441.114031][T11319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1399'. [ 441.121447][ T29] audit: type=1326 audit(1731759736.921:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.2.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2b17e719 code=0x7ffc0000 [ 441.128937][ T8] usb 2-1: USB disconnect, device number 42 [ 441.158071][ T29] audit: type=1326 audit(1731759736.921:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.2.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2b17e719 code=0x7ffc0000 [ 441.182125][ T29] audit: type=1326 audit(1731759736.921:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.2.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5f2b17e719 code=0x7ffc0000 [ 441.247739][ T1202] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 441.472615][ T1202] usb 4-1: Using ep0 maxpacket: 32 [ 441.499474][ T1202] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 441.600057][ T1202] usb 4-1: config 0 has no interface number 0 [ 441.653134][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 441.755320][ T1202] usb 4-1: config 0 interface 12 has no altsetting 0 [ 441.859699][ T1202] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 441.869108][ T1202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.878339][ T1202] usb 4-1: Product: syz [ 441.882570][ T1202] usb 4-1: Manufacturer: syz [ 441.887201][ T1202] usb 4-1: SerialNumber: syz [ 441.893589][ T1202] usb 4-1: config 0 descriptor?? [ 442.183383][T11349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1405'. [ 443.781989][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 443.950527][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 443.957209][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 443.967104][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 443.984604][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 444.032865][T11365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1411'. [ 444.169955][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 444.348498][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 444.403201][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 444.430291][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 444.447043][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 444.460299][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 444.469562][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.479025][ T9] usb 2-1: config 0 descriptor?? [ 444.498494][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 444.498508][ T29] audit: type=1326 audit(1731759740.481:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11343 comm="syz.0.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f0b7e719 code=0x7fc00000 [ 444.528338][ T5163] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 444.627324][ T29] audit: type=1326 audit(1731759740.611:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11343 comm="syz.0.1407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f58f0b7e719 code=0x7fc00000 [ 444.711353][ T5163] usb 5-1: Using ep0 maxpacket: 32 [ 444.773654][T11368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1413'. [ 444.810620][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 444.841891][ T5163] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 444.850251][ T5163] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 444.869798][ T5163] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 444.898579][ T5163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 444.898683][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 444.910316][ T5163] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 444.953292][ T5163] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 444.979345][ T5163] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 444.996593][ T5163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.024858][ T5163] usb 5-1: config 0 descriptor?? [ 445.090707][ T46] usb 2-1: USB disconnect, device number 43 [ 445.100102][ T46] usblp0: removed [ 445.321033][ T5163] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 445.476099][ T1202] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 445.484182][ T1202] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 445.510022][ T1202] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 445.557837][ T1202] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 445.576050][ T1202] usb 4-1: USB disconnect, device number 49 [ 446.967960][ T9] usb 5-1: USB disconnect, device number 60 [ 446.976745][ T9] usblp0: removed [ 449.027283][T11432] Driver unsupported XDP return value 0 on prog (id 363) dev N/A, expect packet loss! [ 449.091199][ T29] audit: type=1400 audit(1731759745.061:762): avc: denied { relabelfrom } for pid=11433 comm="syz.1.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 449.410624][ T29] audit: type=1400 audit(1731759745.111:763): avc: denied { relabelto } for pid=11433 comm="syz.1.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 451.717161][ T29] audit: type=1400 audit(1731759747.701:764): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 452.360543][ T46] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 452.524556][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.634372][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.678098][ T46] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 452.746306][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.823654][ T46] usb 5-1: config 0 descriptor?? [ 453.990693][ T46] usbhid 5-1:0.0: can't add hid device: -32 [ 453.996773][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 454.634371][T11503] FAULT_INJECTION: forcing a failure. [ 454.634371][T11503] name failslab, interval 1, probability 0, space 0, times 0 [ 454.647625][T11503] CPU: 0 UID: 0 PID: 11503 Comm: syz.2.1462 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 454.658410][T11503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 454.668471][T11503] Call Trace: [ 454.671753][T11503] [ 454.672964][ T46] usb 5-1: USB disconnect, device number 61 [ 454.674672][T11503] dump_stack_lvl+0x16c/0x1f0 [ 454.685259][T11503] should_fail_ex+0x497/0x5b0 [ 454.689949][T11503] ? fs_reclaim_acquire+0xae/0x150 [ 454.695075][T11503] should_failslab+0xc2/0x120 [ 454.699764][T11503] __kmalloc_cache_noprof+0x6b/0x300 [ 454.705056][T11503] ? shrinker_alloc+0xfb/0xbb0 [ 454.709821][T11503] shrinker_alloc+0xfb/0xbb0 [ 454.714408][T11503] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 454.720215][T11503] ? rcu_is_watching+0x12/0xc0 [ 454.724975][T11503] ? __pfx_shrinker_alloc+0x10/0x10 [ 454.730167][T11503] ? lockdep_init_map_type+0x16d/0x7d0 [ 454.735619][T11503] ? lockdep_init_map_type+0x16d/0x7d0 [ 454.741075][T11503] ? __raw_spin_lock_init+0x3a/0x110 [ 454.746358][T11503] ? __init_rwsem+0x12d/0x1b0 [ 454.751037][T11503] alloc_super+0x7cc/0xbd0 [ 454.755453][T11503] ? __pfx_afs_dynroot_test_super+0x10/0x10 [ 454.761353][T11503] sget_fc+0x116/0xc20 [ 454.765419][T11503] ? __pfx_afs_set_super+0x10/0x10 [ 454.770526][T11503] ? __pfx_afs_dynroot_test_super+0x10/0x10 [ 454.776420][T11503] afs_get_tree+0x5aa/0x14c0 [ 454.781003][T11503] ? security_capable+0x7e/0x260 [ 454.785943][T11503] vfs_get_tree+0x8f/0x380 [ 454.790359][T11503] path_mount+0x14e6/0x1f20 [ 454.794855][T11503] ? kmem_cache_free+0x152/0x4b0 [ 454.799786][T11503] ? __pfx_path_mount+0x10/0x10 [ 454.804633][T11503] ? putname+0x12e/0x170 [ 454.808871][T11503] __x64_sys_mount+0x294/0x320 [ 454.813624][T11503] ? __pfx___x64_sys_mount+0x10/0x10 [ 454.818904][T11503] do_syscall_64+0xcd/0x250 [ 454.823400][T11503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.829299][T11503] RIP: 0033:0x7f5f2b17e719 [ 454.833721][T11503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.853318][T11503] RSP: 002b:00007f5f2bea2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 454.861729][T11503] RAX: ffffffffffffffda RBX: 00007f5f2b335f80 RCX: 00007f5f2b17e719 [ 454.869688][T11503] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000020000200 [ 454.877646][T11503] RBP: 00007f5f2bea2090 R08: 0000000020000400 R09: 0000000000000000 [ 454.885605][T11503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 454.893562][T11503] R13: 0000000000000000 R14: 00007f5f2b335f80 R15: 00007ffe08c65938 [ 454.901545][T11503] [ 455.365049][T11513] binder: 11512:11513 ioctl 4018620d 0 returned -22 [ 455.434936][T11513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1466'. [ 455.444041][T11513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1466'. [ 455.491291][T11520] binder: 11518:11520 ioctl 4018620d 0 returned -22 [ 455.521544][T11520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1465'. [ 455.530806][T11520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1465'. [ 457.158224][T11535] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.840480][ T1202] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 457.992151][ T1202] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 458.026812][ T1202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.688062][ T1202] usb 4-1: config 0 descriptor?? [ 458.695761][ T1202] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 458.886169][T11562] can0: slcan on ttyS3. [ 459.611011][ T46] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 460.062157][T11562] can0 (unregistered): slcan off ttyS3. [ 460.070253][T11562] Falling back ldisc for ttyS3. [ 460.190665][ T9] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 460.300525][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 460.308188][ T46] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 460.319944][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 460.331442][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 460.340614][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 460.342898][ T46] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 460.350267][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.357127][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.432459][T11582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1483'. [ 460.455272][ T46] usb 2-1: config 0 descriptor?? [ 460.464311][T11560] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 460.478415][ T46] hub 2-1:0.0: USB hub found [ 460.878803][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.903587][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 460.912835][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.923685][ T9] usb 5-1: config 0 descriptor?? [ 461.172101][ T1202] usb 4-1: USB disconnect, device number 50 [ 461.270592][T11586] binder: 11585:11586 ioctl 4018620d 0 returned -22 [ 461.289607][T11586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1486'. [ 461.298742][T11586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1486'. [ 461.594640][T11597] FAULT_INJECTION: forcing a failure. [ 461.594640][T11597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.607823][T11597] CPU: 1 UID: 0 PID: 11597 Comm: syz.3.1488 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 461.618598][T11597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 461.628649][T11597] Call Trace: [ 461.631917][T11597] [ 461.634841][T11597] dump_stack_lvl+0x16c/0x1f0 [ 461.639516][T11597] should_fail_ex+0x497/0x5b0 [ 461.644191][T11597] _copy_to_user+0x32/0xd0 [ 461.648607][T11597] simple_read_from_buffer+0xd0/0x160 [ 461.653978][T11597] proc_fail_nth_read+0x198/0x270 [ 461.658996][T11597] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.664536][T11597] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.670076][T11597] vfs_read+0x1df/0xbe0 [ 461.674232][T11597] ? __fget_files+0x23a/0x3f0 [ 461.678906][T11597] ? fdget_pos+0x24c/0x360 [ 461.683312][T11597] ? __pfx_lock_release+0x10/0x10 [ 461.688322][T11597] ? trace_lock_acquire+0x14a/0x1d0 [ 461.693520][T11597] ? __pfx_vfs_read+0x10/0x10 [ 461.698193][T11597] ? __pfx___mutex_lock+0x10/0x10 [ 461.703221][T11597] ? __fget_files+0x244/0x3f0 [ 461.707908][T11597] ksys_read+0x12f/0x260 [ 461.712155][T11597] ? __pfx_ksys_read+0x10/0x10 [ 461.716920][T11597] do_syscall_64+0xcd/0x250 [ 461.721419][T11597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.727313][T11597] RIP: 0033:0x7f5c1fb7d15c [ 461.731719][T11597] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 461.751317][T11597] RSP: 002b:00007f5c20891030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 461.759718][T11597] RAX: ffffffffffffffda RBX: 00007f5c1fd36130 RCX: 00007f5c1fb7d15c [ 461.767692][T11597] RDX: 000000000000000f RSI: 00007f5c208910a0 RDI: 0000000000000006 [ 461.775665][T11597] RBP: 00007f5c20891090 R08: 0000000000000000 R09: 0000000000000000 [ 461.783634][T11597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.791599][T11597] R13: 0000000000000000 R14: 00007f5c1fd36130 R15: 00007ffe76d4aad8 [ 461.799578][T11597] [ 462.043214][T11600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1489'. [ 462.311405][ T9] ft260 0003:0403:6030.001C: unknown main item tag 0x0 [ 462.328534][ T46] hub 2-1:0.0: 2 ports detected [ 462.352530][ T5912] IPVS: starting estimator thread 0... [ 462.440599][T11603] IPVS: using max 22 ests per chain, 52800 per kthread [ 462.460587][ T5866] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 462.512167][T11573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.555596][T11573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.334453][ T29] audit: type=1400 audit(1731759758.591:765): avc: denied { watch watch_reads } for pid=11601 comm="syz.3.1490" path="/proc/1035/fdinfo" dev="proc" ino=32193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 463.351577][T11560] netlink: 'syz.1.1478': attribute type 9 has an invalid length. [ 463.400500][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 463.407590][ T5866] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 463.433351][ T9] ft260 0003:0403:6030.001C: chip code: 0000 0000 [ 463.471259][ T5866] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 463.479877][ T5866] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 463.500583][T11560] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1478'. [ 463.510024][T11605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1491'. [ 463.535603][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 463.584215][ T5866] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 463.587283][T11595] netlink: 'syz.1.1478': attribute type 9 has an invalid length. [ 463.602499][T11595] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1478'. [ 463.612298][ T9] ft260 0003:0403:6030.001C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 463.637447][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 463.658317][ T5866] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 463.871568][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.882214][ T5866] usb 3-1: config 0 descriptor?? [ 464.291042][T11619] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 464.574835][T11619] FAULT_INJECTION: forcing a failure. [ 464.574835][T11619] name failslab, interval 1, probability 0, space 0, times 0 [ 464.588732][T11619] CPU: 0 UID: 0 PID: 11619 Comm: syz.3.1494 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 464.599516][T11619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 464.609570][T11619] Call Trace: [ 464.612850][T11619] [ 464.615781][T11619] dump_stack_lvl+0x16c/0x1f0 [ 464.620468][T11619] should_fail_ex+0x497/0x5b0 [ 464.625148][T11619] ? fs_reclaim_acquire+0xae/0x150 [ 464.630266][T11619] should_failslab+0xc2/0x120 [ 464.634958][T11619] __kmalloc_noprof+0xcb/0x400 [ 464.639731][T11619] ovl_cache_entry_new+0x3d/0x730 [ 464.644776][T11619] ovl_fill_merge+0x2b5/0xa80 [ 464.649470][T11619] kernfs_fop_readdir+0x39b/0x880 [ 464.654514][T11619] iterate_dir+0x52f/0xb40 [ 464.658946][T11619] ovl_dir_read_merged+0x3f1/0x5d0 [ 464.664073][T11619] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 464.669718][T11619] ? irqentry_exit+0x3b/0x90 [ 464.674310][T11619] ? __pfx_ovl_fill_merge+0x10/0x10 [ 464.679531][T11619] ? override_creds+0x4a/0xa0 [ 464.684222][T11619] ovl_check_empty_dir+0xb0/0x4d0 [ 464.689258][T11619] ? __pfx_avc_has_perm+0x10/0x10 [ 464.694295][T11619] ? __pfx_ovl_check_empty_dir+0x10/0x10 [ 464.699939][T11619] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 464.705583][T11619] ovl_do_remove+0xc5/0xde0 [ 464.710092][T11619] ? lock_acquire+0x2f/0xb0 [ 464.714598][T11619] ? __pfx_may_link+0x10/0x10 [ 464.719284][T11619] ? __pfx_ovl_do_remove+0x10/0x10 [ 464.724411][T11619] vfs_rmdir+0x203/0x690 [ 464.728669][T11619] do_rmdir+0x3a2/0x410 [ 464.732829][T11619] ? __might_fault+0xe3/0x190 [ 464.737520][T11619] ? __pfx_do_rmdir+0x10/0x10 [ 464.742383][T11619] ? getname_flags.part.0+0x1c5/0x550 [ 464.747775][T11619] __x64_sys_rmdir+0xc5/0x110 [ 464.752458][T11619] do_syscall_64+0xcd/0x250 [ 464.756966][T11619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.762878][T11619] RIP: 0033:0x7f5c1fb7e719 [ 464.767293][T11619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.787000][T11619] RSP: 002b:00007f5c1dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 464.795516][T11619] RAX: ffffffffffffffda RBX: 00007f5c1fd36130 RCX: 00007f5c1fb7e719 [ 464.803501][T11619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 464.811479][T11619] RBP: 00007f5c1dff6090 R08: 0000000000000000 R09: 0000000000000000 [ 464.819455][T11619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 464.827430][T11619] R13: 0000000000000000 R14: 00007f5c1fd36130 R15: 00007ffe76d4aad8 [ 464.835422][T11619] [ 465.456215][ T46] usb 2-1: USB disconnect, device number 44 [ 465.500466][ T29] audit: type=1400 audit(1731759761.471:766): avc: denied { unmount } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 465.525517][ T5866] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 61 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 465.558032][ T5866] usb 3-1: USB disconnect, device number 61 [ 465.605782][ T5866] usblp0: removed [ 465.650518][ T29] audit: type=1400 audit(1731759761.611:767): avc: denied { execmem } for pid=11620 comm="syz.0.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 465.826292][ T9] ft260 0003:0403:6030.001C: failed to retrieve status: -71, no wakeup [ 465.834998][ T9] ft260 0003:0403:6030.001C: failed to retrieve status: -71 [ 465.843468][ T9] ft260 0003:0403:6030.001C: failed to reset I2C controller: -71 [ 465.855875][ T9] usb 5-1: USB disconnect, device number 62 [ 465.964205][T11633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1497'. [ 466.542720][T11634] binder: 11629:11634 ioctl 4018620d 0 returned -22 [ 466.550659][ T5866] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 466.582076][T11634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1499'. [ 466.591777][T11634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1499'. [ 466.723421][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 466.740186][ T5866] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.768103][ T5866] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.809877][ T5866] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 466.824707][ T5866] usb 3-1: config 0 interface 0 has no altsetting 0 [ 466.844256][ T5866] usb 3-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 466.853781][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.862545][ T5912] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 466.880537][ T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 467.036121][ T5866] usb 3-1: config 0 descriptor?? [ 467.040579][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 467.052783][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 467.065340][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 467.077163][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 467.093388][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 467.105115][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.118187][ T9] usb 5-1: config 0 descriptor?? [ 467.126197][T11632] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 467.138496][ T9] hub 5-1:0.0: USB hub found [ 467.155770][T11643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1501'. [ 467.180591][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 467.187547][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.210435][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.220214][ T5912] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 467.229347][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.239805][ T5912] usb 1-1: config 0 descriptor?? [ 467.909831][ T5912] ft260 0003:0403:6030.001D: unknown main item tag 0x0 [ 468.103843][T11649] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1505'. [ 468.114424][ T5912] ft260 0003:0403:6030.001D: chip code: 0000 0000 [ 468.126285][ T5866] usbhid 3-1:0.0: can't add hid device: -71 [ 468.140501][ T5866] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 468.160744][ T5866] usb 3-1: USB disconnect, device number 62 [ 468.221170][ T8] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 468.274882][ T9] hub 5-1:0.0: 2 ports detected [ 468.317327][ T5912] ft260 0003:0403:6030.001D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 468.360717][ T8] usb 2-1: device descriptor read/64, error -71 [ 468.520096][ T5912] ft260 0003:0403:6030.001D: failed to retrieve status: -32, no wakeup [ 468.630759][ T8] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 468.706862][T11632] netlink: 'syz.4.1500': attribute type 9 has an invalid length. [ 468.751363][T11632] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1500'. [ 468.858516][T11651] netlink: 'syz.4.1500': attribute type 9 has an invalid length. [ 468.871592][T11651] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1500'. [ 468.980562][ T8] usb 2-1: device descriptor read/64, error -71 [ 469.100827][ T5912] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 469.100999][ T8] usb usb2-port1: attempt power cycle [ 469.390868][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 469.430176][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.448248][ T5912] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 469.457540][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.465670][ T5912] usb 3-1: Product: syz [ 469.470021][ T5912] usb 3-1: Manufacturer: syz [ 469.474964][ T5912] usb 3-1: SerialNumber: syz [ 469.487919][ T5912] usb 3-1: config 0 descriptor?? [ 469.505506][ T5912] peak_usb 3-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 469.513344][ T5912] peak_usb 3-1:0.0: unable to read PCAN-USB serial number (err -22) [ 469.660701][ T8] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 469.670813][ T5912] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 469.683014][ T8] usb 2-1: device descriptor read/8, error -71 [ 469.941632][ T8] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 470.149042][ T8] usb 2-1: device descriptor read/8, error -71 [ 470.195848][ T46] usb 1-1: USB disconnect, device number 56 [ 470.241290][ T5866] usb 3-1: USB disconnect, device number 63 [ 470.254954][ T9] hub 5-1:0.0: hub_ext_port_status failed (err = 0) [ 470.331019][ T8] usb usb2-port1: unable to enumerate USB device [ 470.466621][T11677] binder: 11676:11677 ioctl 4018620d 0 returned -22 [ 470.476679][T11677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1513'. [ 470.485707][T11677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1513'. [ 470.746376][ T29] audit: type=1400 audit(1731759766.731:768): avc: denied { read } for pid=11686 comm="syz.2.1517" path="socket:[33524]" dev="sockfs" ino=33524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 470.820945][ T8] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 470.982132][ T5866] usb 5-1: USB disconnect, device number 63 [ 470.982775][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.016436][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.054141][ T8] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 471.089124][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.139157][ T8] usb 1-1: config 0 descriptor?? [ 471.418087][T11699] binder: 11698:11699 ioctl 4018620d 0 returned -22 [ 471.601532][ T8] hid-retrode 0003:0403:97C1.001E: unbalanced collection at end of report description [ 471.726097][T11716] FAULT_INJECTION: forcing a failure. [ 471.726097][T11716] name failslab, interval 1, probability 0, space 0, times 0 [ 471.739038][T11716] CPU: 0 UID: 0 PID: 11716 Comm: syz.4.1525 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 471.746693][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1526'. [ 471.749794][T11716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 471.749809][T11716] Call Trace: [ 471.749816][T11716] [ 471.749825][T11716] dump_stack_lvl+0x16c/0x1f0 [ 471.779589][T11716] should_fail_ex+0x497/0x5b0 [ 471.784278][T11716] ? fs_reclaim_acquire+0xae/0x150 [ 471.789402][T11716] should_failslab+0xc2/0x120 [ 471.794090][T11716] __kmalloc_noprof+0xcb/0x400 [ 471.798868][T11716] ? __pfx_dh_set_secret+0x10/0x10 [ 471.803993][T11716] __keyctl_dh_compute+0x5b6/0xf50 [ 471.809126][T11716] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 471.814782][T11716] ? find_held_lock+0x2d/0x110 [ 471.819574][T11716] ? __pfx_lock_release+0x10/0x10 [ 471.824607][T11716] ? vfs_write+0x306/0x1150 [ 471.829227][T11716] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 471.835221][T11716] keyctl_dh_compute+0xd3/0x140 [ 471.840091][T11716] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 471.845563][T11716] ? ksys_write+0x1ad/0x260 [ 471.850059][T11716] ? __pfx_ksys_write+0x10/0x10 [ 471.854907][T11716] __do_sys_keyctl+0x4df/0x590 [ 471.859670][T11716] do_syscall_64+0xcd/0x250 [ 471.864171][T11716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.870066][T11716] RIP: 0033:0x7fa8f357e719 [ 471.874472][T11716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.894072][T11716] RSP: 002b:00007fa8f43c9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 471.902477][T11716] RAX: ffffffffffffffda RBX: 00007fa8f3736058 RCX: 00007fa8f357e719 [ 471.910446][T11716] RDX: 00000000200000c0 RSI: 0000000020000140 RDI: 0000000000000017 [ 471.918407][T11716] RBP: 00007fa8f43c9090 R08: 0000000000000000 R09: 0000000000000000 [ 471.926370][T11716] R10: fffffffffffffe4f R11: 0000000000000246 R12: 0000000000000002 [ 471.934331][T11716] R13: 0000000000000000 R14: 00007fa8f3736058 R15: 00007ffd1351f7a8 [ 471.942317][T11716] [ 471.968012][ T8] hid-retrode 0003:0403:97C1.001E: probe with driver hid-retrode failed with error -22 [ 472.100851][ T8] usb 1-1: USB disconnect, device number 57 [ 472.990587][ T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 473.271040][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 473.287368][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.355132][ T9] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 473.774232][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.782849][ T9] usb 3-1: Product: syz [ 473.787091][ T9] usb 3-1: Manufacturer: syz [ 473.792160][ T9] usb 3-1: SerialNumber: syz [ 473.798684][ T9] usb 3-1: config 0 descriptor?? [ 473.812180][ T9] peak_usb 3-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 473.827036][ T9] peak_usb 3-1:0.0: unable to read PCAN-USB serial number (err -22) [ 473.908036][ T66] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 474.012142][ T9] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 474.069891][ T9] usb 3-1: USB disconnect, device number 64 [ 474.123827][ T29] audit: type=1400 audit(1731759770.101:769): avc: denied { bind } for pid=11736 comm="syz.0.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 475.178310][T11767] capability: warning: `syz.1.1545' uses deprecated v2 capabilities in a way that may be insecure [ 475.514126][ T29] audit: type=1400 audit(1731759771.491:770): avc: denied { create } for pid=11765 comm="syz.0.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 475.676027][ T29] audit: type=1400 audit(1731759771.491:771): avc: denied { bind } for pid=11765 comm="syz.0.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 475.988172][ T29] audit: type=1400 audit(1731759771.971:772): avc: denied { accept } for pid=11777 comm="syz.3.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 476.008826][ T5877] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 476.039999][ T29] audit: type=1400 audit(1731759772.011:773): avc: denied { ioctl } for pid=11777 comm="syz.3.1542" path="socket:[34910]" dev="sockfs" ino=34910 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 476.126080][ T29] audit: type=1400 audit(1731759772.111:774): avc: denied { create } for pid=11779 comm="syz.3.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 476.152200][ T29] audit: type=1400 audit(1731759772.141:775): avc: denied { getopt } for pid=11779 comm="syz.3.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 476.170639][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 476.172143][ T29] audit: type=1400 audit(1731759772.141:776): avc: denied { getopt } for pid=11779 comm="syz.3.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 476.178250][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 476.218614][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 476.231534][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 476.244015][ T5877] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 476.254512][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.266202][ T5877] usb 3-1: config 0 descriptor?? [ 476.275318][T11771] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 476.283443][ T5877] hub 3-1:0.0: USB hub found [ 476.365124][T11790] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 476.430721][ T8] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 476.703580][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 476.710460][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.742077][ T8] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 476.762417][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.770588][ T8] usb 1-1: Product: syz [ 476.780605][ T8] usb 1-1: Manufacturer: syz [ 476.785556][ T8] usb 1-1: SerialNumber: syz [ 476.792679][ T8] usb 1-1: config 0 descriptor?? [ 476.805153][ T8] peak_usb 1-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 476.812760][ T8] peak_usb 1-1:0.0: unable to read PCAN-USB serial number (err -22) [ 477.081221][ T8] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22 [ 477.210509][ T5163] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 477.219060][T11782] 9pnet: Could not find request transport: fd0x0000000000000008 [ 477.248141][ T46] usb 1-1: USB disconnect, device number 58 [ 477.372192][ T5877] hub 3-1:0.0: 2 ports detected [ 477.381236][ T5163] usb 5-1: Using ep0 maxpacket: 16 [ 477.397601][ T5163] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 477.406708][ T5163] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.417352][ T5163] usb 5-1: config 0 has no interface number 0 [ 477.436775][ T5163] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 477.484233][ T5163] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.531969][ T5163] usb 5-1: Product: syz [ 477.552575][ T5163] usb 5-1: Manufacturer: syz [ 477.594577][ T8] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 477.601591][ T5163] usb 5-1: SerialNumber: syz [ 477.656449][ T5163] usb 5-1: config 0 descriptor?? [ 477.820012][T11771] netlink: 'syz.2.1546': attribute type 9 has an invalid length. [ 477.840746][ T8] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 477.850311][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.850999][T11771] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1546'. [ 477.859410][ T8] usb 2-1: Product: syz [ 477.885646][ T8] usb 2-1: Manufacturer: syz [ 477.901320][ T8] usb 2-1: SerialNumber: syz [ 477.912114][ T8] usb 2-1: config 0 descriptor?? [ 477.929463][ T8] ch341 2-1:0.0: ch341-uart converter detected [ 477.973540][T11807] netlink: 'syz.2.1546': attribute type 9 has an invalid length. [ 477.985503][T11815] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.989094][T11807] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1546'. [ 477.992786][T11815] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.212977][T11815] bridge0: left promiscuous mode [ 478.366593][T11819] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1555'. [ 479.538875][ T29] audit: type=1400 audit(1731759775.521:777): avc: denied { connect } for pid=11825 comm="syz.3.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 479.760523][ T8] usb 2-1: failed to receive control message: -110 [ 479.767164][ T8] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 479.807933][ T5877] hub 3-1:0.0: hub_ext_port_status failed (err = 0) [ 479.914784][ T5163] usb 5-1: USB disconnect, device number 64 [ 480.468715][ T46] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 480.539424][ T8] usb 3-1: USB disconnect, device number 65 [ 480.545850][ T5877] usb 3-1: Failed to suspend device, error -71 [ 480.620526][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 480.632004][ T46] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 480.640818][ T46] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 480.649518][ T46] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 480.668144][ T29] audit: type=1400 audit(1731759776.651:778): avc: denied { setopt } for pid=11849 comm="syz.2.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 480.670796][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 480.697670][ T46] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 480.740789][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 480.750816][ T46] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 480.761685][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 480.775953][ T46] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 480.785613][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.878436][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'. [ 480.888694][ T46] usb 4-1: config 0 descriptor?? [ 480.896432][ T8] usb 2-1: USB disconnect, device number 49 [ 480.903406][ T8] ch341 2-1:0.0: device disconnected [ 480.912544][ T5163] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 481.556659][T11860] FAULT_INJECTION: forcing a failure. [ 481.556659][T11860] name failslab, interval 1, probability 0, space 0, times 0 [ 481.574591][T11860] CPU: 0 UID: 0 PID: 11860 Comm: syz.0.1567 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 481.585465][T11860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 481.595525][T11860] Call Trace: [ 481.598805][T11860] [ 481.601734][T11860] dump_stack_lvl+0x16c/0x1f0 [ 481.606421][T11860] should_fail_ex+0x497/0x5b0 [ 481.611103][T11860] ? fs_reclaim_acquire+0xae/0x150 [ 481.616222][T11860] should_failslab+0xc2/0x120 [ 481.620909][T11860] __kmalloc_node_noprof+0xd1/0x430 [ 481.625649][ T46] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 481.626102][T11860] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 481.642219][T11860] __kvmalloc_node_noprof+0xad/0x1a0 [ 481.643372][ T46] usb 4-1: USB disconnect, device number 51 [ 481.647504][T11860] bucket_table_alloc.isra.0+0x86/0x460 [ 481.658924][T11860] rhashtable_init_noprof+0x41a/0x7e0 [ 481.664309][T11860] ? __init_waitqueue_head+0xca/0x150 [ 481.667642][ T46] usblp0: removed [ 481.669686][T11860] rhltable_init_noprof+0x20/0x60 [ 481.678329][T11860] sta_info_init+0x5f/0x160 [ 481.680806][ T5163] usb 5-1: Using ep0 maxpacket: 16 [ 481.682839][T11860] ieee80211_alloc_hw_nm+0x840/0x2260 [ 481.691140][ T5163] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.693264][T11860] ? __local_bh_enable_ip+0xa4/0x120 [ 481.708619][T11860] mac80211_hwsim_new_radio+0x1d6/0x54d0 [ 481.712381][ T5163] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 481.714259][T11860] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 481.729166][T11860] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 481.729652][ T5163] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.735238][T11860] hwsim_new_radio_nl+0xb42/0x12b0 [ 481.735267][T11860] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 481.735297][T11860] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 481.735322][T11860] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 481.735349][T11860] genl_family_rcv_msg_doit+0x202/0x2f0 [ 481.735381][T11860] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 481.747691][ T5163] usb 5-1: Product: syz [ 481.748405][T11860] ? bpf_lsm_capable+0x9/0x10 [ 481.754322][ T5163] usb 5-1: Manufacturer: syz [ 481.761273][T11860] ? security_capable+0x7e/0x260 [ 481.761309][T11860] ? ns_capable+0xd7/0x110 [ 481.761333][T11860] genl_rcv_msg+0x565/0x800 [ 481.769229][ T5163] usb 5-1: SerialNumber: syz [ 481.774208][T11860] ? __pfx_genl_rcv_msg+0x10/0x10 [ 481.774236][T11860] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 481.822581][T11860] ? __pfx___lock_acquire+0x10/0x10 [ 481.827787][T11860] netlink_rcv_skb+0x16b/0x440 [ 481.832550][T11860] ? __pfx_genl_rcv_msg+0x10/0x10 [ 481.837583][T11860] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 481.842870][T11860] ? down_read+0xc9/0x330 [ 481.847196][T11860] ? __pfx_down_read+0x10/0x10 [ 481.851956][T11860] ? netlink_deliver_tap+0x1ae/0xd90 [ 481.857243][T11860] ? selinux_nlmsg_lookup+0x265/0x4b0 [ 481.862611][T11860] genl_rcv+0x28/0x40 [ 481.866592][T11860] netlink_unicast+0x53c/0x7f0 [ 481.871351][T11860] ? __pfx_netlink_unicast+0x10/0x10 [ 481.876633][T11860] netlink_sendmsg+0x8b8/0xd70 [ 481.881395][T11860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.886684][T11860] ____sys_sendmsg+0xaaf/0xc90 [ 481.891448][T11860] ? copy_msghdr_from_user+0x10b/0x160 [ 481.896906][T11860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.902207][T11860] ? __pfx___lock_acquire+0x10/0x10 [ 481.907406][T11860] ___sys_sendmsg+0x135/0x1e0 [ 481.912080][T11860] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.917285][T11860] ? lock_acquire+0x2f/0xb0 [ 481.921780][T11860] ? __fget_files+0x40/0x3f0 [ 481.926399][T11860] ? fdget+0x176/0x210 [ 481.930494][T11860] __sys_sendmsg+0x117/0x1f0 [ 481.935094][T11860] ? __pfx___sys_sendmsg+0x10/0x10 [ 481.940208][T11860] ? __fget_files+0x244/0x3f0 [ 481.944910][T11860] do_syscall_64+0xcd/0x250 [ 481.949412][T11860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.955311][T11860] RIP: 0033:0x7f58f0b7e719 [ 481.959719][T11860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.979323][T11860] RSP: 002b:00007f58f19e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.987822][T11860] RAX: ffffffffffffffda RBX: 00007f58f0d35f80 RCX: 00007f58f0b7e719 [ 481.995784][T11860] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 482.003747][T11860] RBP: 00007f58f19e8090 R08: 0000000000000000 R09: 0000000000000000 [ 482.011709][T11860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 482.019667][T11860] R13: 0000000000000000 R14: 00007f58f0d35f80 R15: 00007ffcea24ebe8 [ 482.027639][T11860] [ 482.035415][ T5163] usb 5-1: config 0 descriptor?? [ 482.054511][ T5163] peak_usb 5-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 482.063851][ T5163] peak_usb 5-1:0.0: unable to read PCAN-USB serial number (err -22) [ 482.142447][ T5163] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 482.145536][T11867] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1568'. [ 482.165120][ T29] audit: type=1400 audit(1731759778.131:779): avc: denied { write } for pid=11861 comm="syz.1.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 482.199755][ T29] audit: type=1400 audit(1731759778.131:780): avc: denied { nlmsg_write } for pid=11861 comm="syz.1.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 482.440708][ T5163] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 482.614344][T11853] 9pnet: Could not find request transport: fd0x0000000000000008 [ 482.640610][ T5163] usb 3-1: Using ep0 maxpacket: 32 [ 482.673421][ T46] usb 5-1: USB disconnect, device number 65 [ 482.680690][ T29] audit: type=1400 audit(1731759778.651:781): avc: denied { setattr } for pid=11871 comm="syz.0.1572" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 482.694751][ T5163] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 482.707676][ T29] audit: type=1400 audit(1731759778.671:782): avc: denied { read write } for pid=11871 comm="syz.0.1572" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 482.712053][ T5163] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.743981][ T29] audit: type=1400 audit(1731759778.671:783): avc: denied { open } for pid=11871 comm="syz.0.1572" path="/307/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 482.760236][ T5163] usb 3-1: Product: syz [ 482.770927][ T5163] usb 3-1: Manufacturer: syz [ 482.775750][ T5163] usb 3-1: SerialNumber: syz [ 482.778352][ T29] audit: type=1800 audit(1731759778.681:784): pid=11872 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1572" name="/" dev="9p" ino=2 res=0 errno=0 [ 482.783017][ T5163] usb 3-1: config 0 descriptor?? [ 482.807351][ T29] audit: type=1400 audit(1731759778.701:785): avc: denied { lock } for pid=11871 comm="syz.0.1572" path="/307/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 482.937860][T11882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 483.933639][T11892] pim6reg: entered allmulticast mode [ 483.949786][T11892] pim6reg: left allmulticast mode [ 483.958442][ T5163] airspy 3-1:0.0: Board ID: 00 [ 483.968465][ T5163] airspy 3-1:0.0: Firmware version: [ 484.006745][ T29] audit: type=1400 audit(1731759779.951:786): avc: denied { ioctl } for pid=11897 comm="syz.4.1580" path="socket:[35276]" dev="sockfs" ino=35276 ioctlcmd=0x7ac scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 484.061501][ T5877] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 484.081313][ T29] audit: type=1400 audit(1731759780.071:787): avc: denied { map } for pid=11899 comm="syz.3.1579" path="socket:[34122]" dev="sockfs" ino=34122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 484.150715][ T5163] airspy 3-1:0.0: usb_control_msg() failed -71 request 11 [ 484.174050][ T5163] airspy 3-1:0.0: Registered as swradio24 [ 484.179803][ T5163] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 484.194582][ T5163] usb 3-1: USB disconnect, device number 66 [ 484.212033][ T5877] usb 2-1: Using ep0 maxpacket: 32 [ 484.218832][ T5877] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.234364][ T5877] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 484.245597][ T5877] usb 2-1: config 1 has no interface number 1 [ 484.257219][ T5877] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 484.277241][ T5877] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 484.286873][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.295257][ T5877] usb 2-1: Product: syz [ 484.299562][ T5877] usb 2-1: Manufacturer: syz [ 484.304615][ T5877] usb 2-1: SerialNumber: syz [ 484.330512][ T8] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 484.330512][ T5866] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 484.482110][ T8] usb 1-1: config 0 has an invalid interface number: 46 but max is 8 [ 484.490342][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 484.499342][ T8] usb 1-1: config 0 has no interface number 0 [ 484.505586][ T8] usb 1-1: config 0 interface 46 altsetting 128 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 484.510635][ T5866] usb 5-1: Using ep0 maxpacket: 32 [ 484.520479][ T8] usb 1-1: config 0 interface 46 altsetting 128 endpoint 0x82 has invalid maxpacket 12320, setting to 64 [ 484.539898][ T5866] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 484.543197][ T8] usb 1-1: config 0 interface 46 has no altsetting 0 [ 484.550023][ T5866] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 484.569708][ T5866] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 484.573137][ T8] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 484.580142][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 484.603015][ T5866] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 484.603035][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.613291][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 484.633025][ T5866] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 484.645049][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 484.658123][ T8] usb 1-1: Product: syz [ 484.658170][ T8] usb 1-1: Manufacturer: syz [ 485.030510][ T8] usb 1-1: SerialNumber: syz [ 485.050514][ T5866] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 485.062134][ T8] usb 1-1: config 0 descriptor?? [ 485.081391][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.087737][T11905] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 485.091351][ T5866] usb 5-1: config 0 descriptor?? [ 485.098667][ T8] ums-karma 1-1:0.46: USB Mass Storage device detected [ 485.144442][ T29] audit: type=1400 audit(1731759781.131:788): avc: denied { ioctl } for pid=11911 comm="syz.2.1584" path="socket:[35304]" dev="sockfs" ino=35304 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 485.186465][ T8] ums-karma 1-1:0.46: probe with driver ums-karma failed with error -5 [ 485.236358][ T5877] usb 2-1: USB disconnect, device number 50 [ 485.371341][ T8] usb 1-1: USB disconnect, device number 59 [ 485.381355][ T5866] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 66 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 485.996752][ T1202] usb 5-1: USB disconnect, device number 66 [ 486.006992][ T1202] usblp0: removed [ 486.122579][T11927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 486.865913][T11934] batadv_slave_0: entered promiscuous mode [ 486.874042][T11933] batadv_slave_0: left promiscuous mode [ 487.369816][T11960] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 487.730807][ T1202] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 487.880619][ T1202] usb 1-1: Using ep0 maxpacket: 32 [ 487.893052][ T1202] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 487.901597][ T1202] usb 1-1: config 0 has no interface number 0 [ 487.911708][ T1202] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 487.940298][ T1202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.958793][ T1202] usb 1-1: Product: syz [ 487.972364][ T1202] usb 1-1: Manufacturer: syz [ 487.986147][ T1202] usb 1-1: SerialNumber: syz [ 488.021464][ T1202] usb 1-1: config 0 descriptor?? [ 488.234308][ T1202] f81534a_ctrl 1-1:0.88: failed to set register 0x116: -5 [ 488.255045][ T1202] f81534a_ctrl 1-1:0.88: failed to enable ports: -5 [ 488.280780][ T1202] f81534a_ctrl 1-1:0.88: probe with driver f81534a_ctrl failed with error -5 [ 488.299804][ T1202] usb 1-1: USB disconnect, device number 60 [ 488.452641][T11975] FAULT_INJECTION: forcing a failure. [ 488.452641][T11975] name failslab, interval 1, probability 0, space 0, times 0 [ 488.465394][T11975] CPU: 1 UID: 0 PID: 11975 Comm: syz.4.1604 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 488.476171][T11975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 488.486242][T11975] Call Trace: [ 488.489532][T11975] [ 488.492469][T11975] dump_stack_lvl+0x16c/0x1f0 [ 488.497170][T11975] should_fail_ex+0x497/0x5b0 [ 488.501857][T11975] ? fs_reclaim_acquire+0xae/0x150 [ 488.506991][T11975] should_failslab+0xc2/0x120 [ 488.511686][T11975] __kmalloc_noprof+0xcb/0x400 [ 488.516473][T11975] tomoyo_encode2+0x100/0x3e0 [ 488.521168][T11975] tomoyo_encode+0x29/0x50 [ 488.525599][T11975] tomoyo_realpath_from_path+0x19d/0x720 [ 488.531253][T11975] ? tomoyo_path_number_perm+0x232/0x590 [ 488.536903][T11975] tomoyo_path_number_perm+0x245/0x590 [ 488.542372][T11975] ? tomoyo_path_number_perm+0x232/0x590 [ 488.548011][T11975] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 488.554007][T11975] ? trace_lock_acquire+0x14a/0x1d0 [ 488.559205][T11975] ? lock_acquire+0x2f/0xb0 [ 488.563700][T11975] ? __fget_files+0x40/0x3f0 [ 488.568305][T11975] ? __fget_files+0x244/0x3f0 [ 488.572985][T11975] security_file_ioctl+0x9b/0x240 [ 488.578006][T11975] __x64_sys_ioctl+0xbb/0x220 [ 488.582681][T11975] do_syscall_64+0xcd/0x250 [ 488.587179][T11975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.593094][T11975] RIP: 0033:0x7fa8f357e719 [ 488.597512][T11975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.617134][T11975] RSP: 002b:00007fa8f43ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 488.625543][T11975] RAX: ffffffffffffffda RBX: 00007fa8f3735f80 RCX: 00007fa8f357e719 [ 488.633506][T11975] RDX: 0000000020000280 RSI: 000000004040aea0 RDI: 0000000000000005 [ 488.641468][T11975] RBP: 00007fa8f43ea090 R08: 0000000000000000 R09: 0000000000000000 [ 488.649428][T11975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.657390][T11975] R13: 0000000000000000 R14: 00007fa8f3735f80 R15: 00007ffd1351f7a8 [ 488.665367][T11975] [ 488.738352][T11981] FAULT_INJECTION: forcing a failure. [ 488.738352][T11981] name failslab, interval 1, probability 0, space 0, times 0 [ 488.751608][T11981] CPU: 1 UID: 0 PID: 11981 Comm: syz.1.1603 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 488.762390][T11981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 488.772485][T11981] Call Trace: [ 488.775772][T11981] [ 488.778706][T11981] dump_stack_lvl+0x16c/0x1f0 [ 488.783399][T11981] should_fail_ex+0x497/0x5b0 [ 488.788088][T11981] ? fs_reclaim_acquire+0xae/0x150 [ 488.793213][T11981] should_failslab+0xc2/0x120 [ 488.797905][T11981] __kmalloc_cache_noprof+0x6b/0x300 [ 488.803200][T11981] ? autofs_new_ino+0x45/0x240 [ 488.807974][T11981] autofs_new_ino+0x45/0x240 [ 488.812568][T11981] autofs_lookup+0x5b9/0xc30 [ 488.817162][T11981] ? do_raw_spin_unlock+0x172/0x230 [ 488.822365][T11981] ? _raw_spin_unlock+0x28/0x50 [ 488.827232][T11981] lookup_one_qstr_excl+0x11d/0x190 [ 488.832440][T11981] ? mnt_want_write+0x161/0x450 [ 488.837301][T11981] filename_create+0x1ed/0x530 [ 488.842080][T11981] ? __pfx_filename_create+0x10/0x10 [ 488.847374][T11981] ? __pfx_lock_release+0x10/0x10 [ 488.852401][T11981] ? trace_lock_acquire+0x14a/0x1d0 [ 488.857616][T11981] ? lock_acquire+0x2f/0xb0 [ 488.862127][T11981] ? __might_fault+0xe3/0x190 [ 488.866829][T11981] do_mknodat+0x18e/0x5d0 [ 488.871186][T11981] ? __pfx_do_mknodat+0x10/0x10 [ 488.876054][T11981] ? getname_flags.part.0+0x1c5/0x550 [ 488.881462][T11981] __x64_sys_mknod+0x87/0xb0 [ 488.886080][T11981] do_syscall_64+0xcd/0x250 [ 488.890597][T11981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.896505][T11981] RIP: 0033:0x7f964a57e719 [ 488.900930][T11981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.920559][T11981] RSP: 002b:00007f964b38e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 488.928985][T11981] RAX: ffffffffffffffda RBX: 00007f964a736130 RCX: 00007f964a57e719 [ 488.936962][T11981] RDX: 0000000000000703 RSI: 0000000000000000 RDI: 00000000200000c0 [ 488.944937][T11981] RBP: 00007f964b38e090 R08: 0000000000000000 R09: 0000000000000000 [ 488.952911][T11981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.960891][T11981] R13: 0000000000000000 R14: 00007f964a736130 R15: 00007ffe4adfc6d8 [ 488.968887][T11981] [ 488.971615][T11975] ERROR: Out of memory at tomoyo_realpath_from_path. [ 489.110969][ T8] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 489.271808][ T8] usb 3-1: config 0 has too many interfaces: 254, using maximum allowed: 32 [ 489.285532][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.326985][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 254 [ 489.341915][ T8] usb 3-1: config 0 has no interface number 0 [ 489.348537][ T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 489.359413][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.370100][ T8] usb 3-1: config 0 descriptor?? [ 489.375199][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 489.394712][ T29] audit: type=1400 audit(1731759785.391:789): avc: denied { nlmsg_read } for pid=11992 comm="syz.4.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 489.440798][ T29] audit: type=1400 audit(1731759785.391:790): avc: denied { ioctl } for pid=11992 comm="syz.4.1610" path="socket:[34339]" dev="sockfs" ino=34339 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 489.582990][T11996] kvm: pic: non byte write [ 489.602844][ T8] usb 3-1: reset high-speed USB device number 67 using dummy_hcd [ 489.730572][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 489.794955][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1611'. [ 489.901869][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 489.915776][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 489.925614][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 489.939466][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 489.949735][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 489.959889][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 489.969958][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 489.980018][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 489.995387][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 489.999774][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1611'. [ 490.004960][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.019261][ T9] usb 4-1: config 0 descriptor?? [ 490.070792][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1611'. [ 490.234456][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 490.292154][ T8] usb 3-1: device descriptor read/64, error -71 [ 490.454197][ T5866] usb 4-1: USB disconnect, device number 52 [ 490.462175][ T5866] usblp0: removed [ 490.530684][ T8] usb 3-1: reset high-speed USB device number 67 using dummy_hcd [ 490.722885][ T9] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 490.889530][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 490.903411][ T29] audit: type=1400 audit(1731759786.901:791): avc: denied { read } for pid=11978 comm="syz.2.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 490.923823][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 490.923852][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 490.926086][ T9] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 490.956885][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.958775][ T5866] usb 3-1: USB disconnect, device number 67 [ 490.999425][ T9] usb 5-1: Product: syz [ 491.026913][ T9] usb 5-1: Manufacturer: syz [ 491.032219][ T9] usb 5-1: SerialNumber: syz [ 491.049291][ T9] usb 5-1: config 0 descriptor?? [ 491.156923][T12018] overlayfs: failed to resolve './file1': -2 [ 491.275014][ T5877] usb 5-1: USB disconnect, device number 67 [ 491.282188][T12007] ALSA: mixer_oss: invalid OSS volume 'ELF' [ 491.288184][T12007] ALSA: mixer_oss: invalid OSS volume 'ԩ6~f`{XSԒj?)]0\' [ 491.298849][T12007] ALSA: mixer_oss: invalid OSS volume ']qM3T=\S12$*' [ 491.307607][T12007] ALSA: mixer_oss: invalid OSS volume ' ;*7 c+PqgU' [ 491.316705][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 491.320525][T12007] ALSA: mixer_oss: invalid OSS volume 'hv9gO= RpрH[t77' [ 491.440486][ T8] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 491.471929][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 491.481121][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.501040][ T9] usb 2-1: config 0 descriptor?? [ 491.511574][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 491.564060][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1619'. [ 491.593636][ T8] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 491.601790][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 491.612756][ T8] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 491.625164][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 491.636824][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 491.651005][ T8] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 491.658434][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 491.669531][ T8] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 491.681730][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 491.693108][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 491.705426][ T8] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 491.713483][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 491.725428][ T8] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 491.737314][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 491.748733][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 491.763354][ T8] usb 4-1: string descriptor 0 read error: -22 [ 491.769862][ T8] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 491.779677][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.328105][ T8] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 492.490299][T12020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.576912][T12020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.587972][T12020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.600812][T12020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.652756][ T5866] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 492.672181][T12020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.681019][T12020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.692679][ T46] usb 4-1: USB disconnect, device number 53 [ 492.718211][ T29] audit: type=1400 audit(1731759788.701:792): avc: denied { connect } for pid=12031 comm="syz.4.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 492.750512][T12040] Bluetooth: MGMT ver 1.23 [ 492.757856][T12040] SELinux: security_context_str_to_sid (J^c䇝p?/˚5'Q uG@M=vp@9) failed with errno=-22 [ 492.784167][T12037] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1624'. [ 492.833872][ T5866] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.846020][ T5866] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 492.857246][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.870324][ T5866] usb 1-1: config 0 descriptor?? [ 492.885702][ T5866] pwc: Askey VC010 type 2 USB webcam detected. [ 493.120548][ T5163] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 493.280733][ T5163] usb 3-1: Using ep0 maxpacket: 32 [ 493.298551][ T5163] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 493.308242][ T5866] pwc: recv_control_msg error -32 req 02 val 2b00 [ 493.326618][ T5163] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 493.384155][ T5163] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 493.425360][T12047] syz.0.1621 (12047): attempted to duplicate a private mapping with mremap. This is not supported. [ 493.462585][ T5163] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 493.552171][ T5866] pwc: recv_control_msg error -32 req 02 val 2700 [ 493.619170][ T5163] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 493.751525][ T5163] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 493.869794][ T5163] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 493.950463][ T5163] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 494.022972][ T5163] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 494.040463][ T5163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.077921][ T5163] usb 3-1: config 0 descriptor?? [ 494.129922][ T9] usb 2-1: USB disconnect, device number 51 [ 494.143986][ T5866] pwc: recv_control_msg error -71 req 04 val 1000 [ 494.160933][ T5866] pwc: recv_control_msg error -71 req 04 val 1300 [ 494.184019][ T5866] pwc: recv_control_msg error -71 req 04 val 1400 [ 494.199385][ T5866] pwc: recv_control_msg error -71 req 02 val 2000 [ 494.209565][ T5866] pwc: recv_control_msg error -71 req 02 val 2100 [ 494.217283][ T5866] pwc: recv_control_msg error -71 req 04 val 1500 [ 494.225295][ T5866] pwc: recv_control_msg error -71 req 02 val 2500 [ 494.235295][ T5866] pwc: recv_control_msg error -71 req 02 val 2400 [ 494.243190][ T5866] pwc: recv_control_msg error -71 req 02 val 2600 [ 494.251029][ T5866] pwc: recv_control_msg error -71 req 02 val 2900 [ 494.257844][ T5866] pwc: recv_control_msg error -71 req 02 val 2800 [ 494.266223][ T5866] pwc: recv_control_msg error -71 req 04 val 1100 [ 494.273833][ T5866] pwc: recv_control_msg error -71 req 04 val 1200 [ 494.295255][ T5163] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 68 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 494.307207][ T5866] pwc: Registered as video103. [ 494.318808][ T5866] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22 [ 494.345251][ T5866] usb 1-1: USB disconnect, device number 61 [ 494.485759][T12052] openvswitch: netlink: Actions may not be safe on all matching packets [ 494.496515][T12052] SELinux: Context system_u:object_r:udev_rules_t:s0 is not valid (left unmapped). [ 494.501449][ T5163] usb 3-1: USB disconnect, device number 68 [ 494.508638][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1628'. [ 494.517424][ T29] audit: type=1400 audit(1731759790.501:793): avc: denied { relabelto } for pid=12051 comm="syz.4.1628" name="file0" dev="tmpfs" ino=1730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:udev_rules_t:s0" [ 494.521680][T12052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1628'. [ 494.554570][ T29] audit: type=1400 audit(1731759790.501:794): avc: denied { associate } for pid=12051 comm="syz.4.1628" name="file0" dev="tmpfs" ino=1730 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:udev_rules_t:s0" [ 494.584899][ T5163] usblp0: removed [ 494.635571][ T29] audit: type=1400 audit(1731759790.621:795): avc: denied { rmdir } for pid=5827 comm="syz-executor" name="file0" dev="tmpfs" ino=1730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:udev_rules_t:s0" [ 495.854361][ T8] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 497.418122][ T8] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 497.453449][ T8] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 497.493530][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 497.508123][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 497.519974][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 497.664645][ T8] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 497.673910][ T8] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 497.682067][ T8] usb 1-1: Product: syz [ 497.686295][ T8] usb 1-1: Manufacturer: syz [ 497.697143][ T8] cdc_wdm 1-1:1.0: skipping garbage [ 497.702451][ T8] cdc_wdm 1-1:1.0: skipping garbage [ 497.709664][ T8] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 497.720931][ T8] cdc_wdm 1-1:1.0: Unknown control protocol [ 497.753552][T12081] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1637'. [ 497.780651][ T5163] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 497.874452][ T9] usb 1-1: USB disconnect, device number 62 [ 497.969649][ T29] audit: type=1400 audit(1731759793.951:796): avc: denied { execute } for pid=12094 comm="syz.3.1644" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=34597 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 498.000542][ T5163] usb 3-1: Using ep0 maxpacket: 16 [ 498.029210][ T5163] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.040511][ T5163] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.050245][ T5163] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 498.072267][ T5163] usb 3-1: config 0 interface 0 has no altsetting 0 [ 498.079161][ T5163] usb 3-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 498.089803][ T5163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.100768][ T5163] usb 3-1: config 0 descriptor?? [ 498.181741][T12102] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1645'. [ 498.250506][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 498.410864][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 498.439103][ T9] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 498.465081][ T9] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 498.533363][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 498.542294][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 498.550322][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 498.550331][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 498.550640][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 498.574394][ T5163] usbhid 3-1:0.0: can't add hid device: -32 [ 498.581024][ T5163] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 498.651804][ T5163] usb 3-1: USB disconnect, device number 69 [ 498.800560][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 498.811067][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 498.820975][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 498.831051][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 498.844289][ T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 498.853491][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.863830][ T9] usb 1-1: config 0 descriptor?? [ 498.876824][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1648'. [ 499.085261][ T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 63 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 499.302879][ T5163] usb 1-1: USB disconnect, device number 63 [ 499.310834][ T5163] usblp0: removed [ 499.485414][T12121] FAULT_INJECTION: forcing a failure. [ 499.485414][T12121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.503442][T12121] CPU: 0 UID: 0 PID: 12121 Comm: syz.2.1651 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 499.514227][T12121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 499.524287][T12121] Call Trace: [ 499.527565][T12121] [ 499.530497][T12121] dump_stack_lvl+0x16c/0x1f0 [ 499.535183][T12121] should_fail_ex+0x497/0x5b0 [ 499.539874][T12121] _copy_from_user+0x2e/0xd0 [ 499.544473][T12121] do_ip_vs_get_ctl+0x2b1/0x1300 [ 499.549416][T12121] ? __pfx_do_ip_vs_get_ctl+0x10/0x10 [ 499.554804][T12121] ? trace_contention_end+0xea/0x140 [ 499.560095][T12121] ? __mutex_lock+0x1a6/0x9c0 [ 499.564781][T12121] ? __mutex_unlock_slowpath+0x164/0x650 [ 499.570423][T12121] ? __pfx___mutex_lock+0x10/0x10 [ 499.575450][T12121] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 499.581451][T12121] ? nf_getsockopt+0x79/0xe0 [ 499.586054][T12121] nf_getsockopt+0x79/0xe0 [ 499.590483][T12121] ip_getsockopt+0x18e/0x1e0 [ 499.595078][T12121] ? __pfx_ip_getsockopt+0x10/0x10 [ 499.600203][T12121] ipv6_getsockopt+0x230/0x280 [ 499.604980][T12121] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 499.610275][T12121] ? __pfx_mark_lock+0x10/0x10 [ 499.615050][T12121] sctp_getsockopt+0x1d2/0x74a0 [ 499.619916][T12121] ? avc_has_perm_noaudit+0x119/0x3a0 [ 499.625302][T12121] ? __pfx_lock_release+0x10/0x10 [ 499.630328][T12121] ? trace_lock_acquire+0x14a/0x1d0 [ 499.635537][T12121] ? __pfx_mark_lock+0x10/0x10 [ 499.640305][T12121] ? __pfx_sctp_getsockopt+0x10/0x10 [ 499.645602][T12121] ? __lock_acquire+0x163e/0x3ce0 [ 499.650649][T12121] ? __pfx___lock_acquire+0x10/0x10 [ 499.655862][T12121] ? find_held_lock+0x2d/0x110 [ 499.660643][T12121] ? __might_fault+0x13b/0x190 [ 499.665425][T12121] ? __pfx_lock_release+0x10/0x10 [ 499.670457][T12121] ? trace_lock_acquire+0x14a/0x1d0 [ 499.675667][T12121] ? lock_acquire+0x2f/0xb0 [ 499.680175][T12121] ? __might_fault+0xe3/0x190 [ 499.684868][T12121] ? __might_fault+0xe3/0x190 [ 499.689561][T12121] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 499.695469][T12121] ? do_sock_getsockopt+0x3fe/0x800 [ 499.700681][T12121] do_sock_getsockopt+0x3fe/0x800 [ 499.705726][T12121] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 499.711287][T12121] ? __fget_files+0x244/0x3f0 [ 499.715989][T12121] __sys_getsockopt+0x1a1/0x270 [ 499.720855][T12121] ? __pfx___sys_getsockopt+0x10/0x10 [ 499.726237][T12121] ? fput+0x30/0x390 [ 499.730147][T12121] ? ksys_write+0x1ad/0x260 [ 499.734658][T12121] ? __pfx_ksys_write+0x10/0x10 [ 499.739516][T12121] __x64_sys_getsockopt+0xbd/0x160 [ 499.744639][T12121] ? do_syscall_64+0x91/0x250 [ 499.749330][T12121] ? lockdep_hardirqs_on+0x7c/0x110 [ 499.754547][T12121] do_syscall_64+0xcd/0x250 [ 499.759067][T12121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.764983][T12121] RIP: 0033:0x7f5f2b17e719 [ 499.769407][T12121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.789033][T12121] RSP: 002b:00007f5f2bea2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 499.797463][T12121] RAX: ffffffffffffffda RBX: 00007f5f2b335f80 RCX: 00007f5f2b17e719 [ 499.805448][T12121] RDX: 0000000000000486 RSI: 0000000000000000 RDI: 0000000000000003 [ 499.813425][T12121] RBP: 00007f5f2bea2090 R08: 00000000200010c0 R09: 0000000000000000 [ 499.821406][T12121] R10: 0000000020001040 R11: 0000000000000246 R12: 0000000000000001 [ 499.829385][T12121] R13: 0000000000000000 R14: 00007f5f2b335f80 R15: 00007ffe08c65938 [ 499.837377][T12121] [ 500.045522][T12123] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 500.052073][T12123] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 500.085420][T12123] vhci_hcd vhci_hcd.0: Device attached [ 500.122020][T12124] vhci_hcd: connection closed [ 500.123770][ T3539] vhci_hcd: stop threads [ 500.164009][ T3539] vhci_hcd: release socket [ 500.168498][ T3539] vhci_hcd: disconnect device [ 500.206897][T12131] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 500.261195][T12134] FAULT_INJECTION: forcing a failure. [ 500.261195][T12134] name failslab, interval 1, probability 0, space 0, times 0 [ 500.276115][T12134] CPU: 0 UID: 0 PID: 12134 Comm: syz.4.1655 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 500.286903][T12134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 500.296962][T12134] Call Trace: [ 500.300241][T12134] [ 500.303171][T12134] dump_stack_lvl+0x16c/0x1f0 [ 500.307857][T12134] should_fail_ex+0x497/0x5b0 [ 500.312540][T12134] ? fs_reclaim_acquire+0xae/0x150 [ 500.317659][T12134] should_failslab+0xc2/0x120 [ 500.322342][T12134] kmem_cache_alloc_node_noprof+0x71/0x310 [ 500.328158][T12134] ? __alloc_skb+0x2b1/0x380 [ 500.332759][T12134] ? __pfx_mark_lock+0x10/0x10 [ 500.337534][T12134] __alloc_skb+0x2b1/0x380 [ 500.341958][T12134] ? __pfx___alloc_skb+0x10/0x10 [ 500.346922][T12134] ? find_held_lock+0x2d/0x110 [ 500.351699][T12134] ? __might_fault+0x13b/0x190 [ 500.356476][T12134] alloc_skb_with_frags+0xe4/0x850 [ 500.361604][T12134] ? __might_fault+0xe3/0x190 [ 500.366308][T12134] sock_alloc_send_pskb+0x7f1/0x980 [ 500.371493][T12134] ? _copy_from_iter+0x15e/0x1560 [ 500.376503][T12134] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 500.382212][T12134] ? __lock_acquire+0xbdd/0x3ce0 [ 500.387151][T12134] ? hlock_class+0x4e/0x130 [ 500.391651][T12134] ? __lock_acquire+0xbdd/0x3ce0 [ 500.396577][T12134] ? iov_iter_advance+0x7d/0x6c0 [ 500.401511][T12134] tun_get_user+0xd3d/0x3d80 [ 500.406115][T12134] ? __pfx_tun_get_user+0x10/0x10 [ 500.411138][T12134] ? find_held_lock+0x2d/0x110 [ 500.415917][T12134] ? __pfx_lock_release+0x10/0x10 [ 500.420941][T12134] tun_chr_write_iter+0xdc/0x210 [ 500.425878][T12134] vfs_write+0x5ae/0x1150 [ 500.430210][T12134] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 500.435758][T12134] ? trace_lock_acquire+0x14a/0x1d0 [ 500.440954][T12134] ? __pfx_vfs_write+0x10/0x10 [ 500.445720][T12134] ? __fget_files+0x40/0x3f0 [ 500.450317][T12134] ksys_write+0x12f/0x260 [ 500.454633][T12134] ? __pfx_ksys_write+0x10/0x10 [ 500.459477][T12134] do_syscall_64+0xcd/0x250 [ 500.463972][T12134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.469866][T12134] RIP: 0033:0x7fa8f357e719 [ 500.474269][T12134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.493866][T12134] RSP: 002b:00007fa8f43ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 500.502269][T12134] RAX: ffffffffffffffda RBX: 00007fa8f3735f80 RCX: 00007fa8f357e719 [ 500.510229][T12134] RDX: 000000000000004e RSI: 0000000020000280 RDI: 0000000000000003 [ 500.518187][T12134] RBP: 00007fa8f43ea090 R08: 0000000000000000 R09: 0000000000000000 [ 500.526148][T12134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.534109][T12134] R13: 0000000000000000 R14: 00007fa8f3735f80 R15: 00007ffd1351f7a8 [ 500.542085][T12134] [ 500.628945][T12139] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1657'. [ 500.900945][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.914372][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.441359][ T29] audit: type=1400 audit(1731759797.841:797): avc: denied { write } for pid=12143 comm="syz.3.1660" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 503.877046][T12177] binder: 12171:12177 ioctl c0306201 20000080 returned -11 [ 503.998097][ T29] audit: type=1400 audit(1731759799.981:798): avc: denied { write } for pid=12167 comm="syz.3.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 504.040674][T12169] UBIFS error (pid: 12169): cannot open "(null)", error -22 [ 504.426734][T12182] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1668'. [ 505.345241][ T8460] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 505.555655][T12205] xt_l2tp: unknown flags: 19 [ 505.614874][T12212] netlink: 'syz.3.1678': attribute type 1 has an invalid length. [ 505.685215][ T9] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 505.894365][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 506.051047][ T9] usb 3-1: config 1 has an invalid interface number: 63 but max is 1 [ 506.059403][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 506.088275][ T9] usb 3-1: config 1 has an invalid interface number: 152 but max is 1 [ 506.101060][ T29] audit: type=1400 audit(1731759802.091:799): avc: denied { bind } for pid=12219 comm="syz.1.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 506.140589][ T9] usb 3-1: config 1 has no interface number 0 [ 506.146703][ T9] usb 3-1: config 1 has no interface number 1 [ 506.225073][ T9] usb 3-1: config 1 interface 63 altsetting 5 endpoint 0xD has an invalid bInterval 202, changing to 11 [ 506.324870][ T29] audit: type=1400 audit(6927040232.851:800): avc: denied { getopt } for pid=12219 comm="syz.1.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 506.477155][ T29] audit: type=1400 audit(6927040233.001:801): avc: denied { mount } for pid=12227 comm="syz.0.1683" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 506.482743][ T29] audit: type=1400 audit(6927040233.001:802): avc: denied { remount } for pid=12227 comm="syz.0.1683" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 506.522360][ T29] audit: type=1400 audit(6927040233.051:803): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 506.526521][T12230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1684'. [ 508.470323][T12234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.470500][T12234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.850447][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 611.240378][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 611.240409][ C1] rcu: 0-...!: (1 GPs behind) idle=1efc/1/0x4000000000000000 softirq=47364/47365 fqs=46 [ 611.241182][ C1] rcu: (detected by 1, t=10502 jiffies, g=42597, q=518 ncpus=2) [ 611.241213][ C1] Sending NMI from CPU 1 to CPUs 0: [ 611.241243][ C0] NMI backtrace for cpu 0 [ 611.241256][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 611.241283][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 611.241298][ C0] Workqueue: usb_hub_wq hub_event [ 611.241330][ C0] RIP: 0010:advance_sched+0x88/0xc60 [ 611.241357][ C0] Code: ea 03 80 3c 02 00 0f 85 42 0b 00 00 48 8b 44 24 20 48 8b 58 40 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 80 3c 02 00 <0f> 85 32 0b 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 1b 48 8d 7b [ 611.241375][ C0] RSP: 0018:ffffc90000007d80 EFLAGS: 00000046 [ 611.241389][ C0] RAX: dffffc0000000000 RBX: ffff88807e5d4000 RCX: 1ffff110038d2a69 [ 611.241403][ C0] RDX: 1ffff1100fcba800 RSI: ffffffff8932a84a RDI: ffff88803582c040 [ 611.241417][ C0] RBP: 000000000003dc0c R08: 0000000000000001 R09: 0000000000000000 [ 611.241430][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88803582c340 [ 611.241442][ C0] R13: ffff8880b862cac0 R14: ffff88803582c340 R15: ffffffff8932a830 [ 611.241456][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 611.241475][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 611.241489][ C0] CR2: 00007f5c1fb62220 CR3: 000000005b772000 CR4: 00000000003526f0 [ 611.241502][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 611.241514][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 611.241527][ C0] Call Trace: [ 611.241533][ C0] [ 611.241541][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 611.241572][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 611.241601][ C0] ? nmi_handle+0x1a9/0x5c0 [ 611.241622][ C0] ? advance_sched+0x88/0xc60 [ 611.241645][ C0] ? default_do_nmi+0x6a/0x160 [ 611.241670][ C0] ? exc_nmi+0x170/0x1e0 [ 611.241694][ C0] ? end_repeat_nmi+0xf/0x53 [ 611.241713][ C0] ? __pfx_advance_sched+0x10/0x10 [ 611.241739][ C0] ? advance_sched+0x1a/0xc60 [ 611.241762][ C0] ? advance_sched+0x88/0xc60 [ 611.241785][ C0] ? advance_sched+0x88/0xc60 [ 611.241809][ C0] ? advance_sched+0x88/0xc60 [ 611.241832][ C0] [ 611.241838][ C0] [ 611.241847][ C0] ? timerqueue_del+0x83/0x150 [ 611.241872][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 611.241897][ C0] ? __pfx_advance_sched+0x10/0x10 [ 611.241919][ C0] __hrtimer_run_queues+0x20a/0xae0 [ 611.241944][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 611.241965][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 611.241996][ C0] hrtimer_interrupt+0x31b/0x800 [ 611.242023][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 611.242045][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 611.242074][ C0] [ 611.242081][ C0] [ 611.242087][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 611.242106][ C0] RIP: 0010:console_flush_all+0x9a4/0xc60 [ 611.242131][ C0] Code: 00 e8 f0 98 27 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 7e ee 1f 00 48 85 db 0f 85 55 01 00 00 e8 00 ec 1f 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 d5 97 81 [ 611.242149][ C0] RSP: 0018:ffffc900000e71e8 EFLAGS: 00000287 [ 611.242164][ C0] RAX: ffffffff8ee8edd8 RBX: 0000000000000000 RCX: ffffc90018816000 [ 611.242177][ C0] RDX: 0000000000100000 RSI: ffffffff816d8f60 RDI: 0000000000000007 [ 611.242189][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 611.242201][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8ee8edd8 [ 611.242213][ C0] R13: ffffffff8ee8ed80 R14: ffffc900000e7278 R15: dffffc0000000000 [ 611.242230][ C0] ? console_flush_all+0x9a0/0xc60 [ 611.242254][ C0] ? console_flush_all+0x9a0/0xc60 [ 611.242284][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 611.242310][ C0] ? printk_percpu_data_ready+0x9/0x20 [ 611.242332][ C0] ? nbcon_get_cpu_emergency_nesting+0x3b/0x50 [ 611.242358][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 611.242390][ C0] console_unlock+0xd9/0x210 [ 611.242413][ C0] ? __pfx_console_unlock+0x10/0x10 [ 611.242436][ C0] ? lock_acquire+0x2f/0xb0 [ 611.242454][ C0] ? dev_printk_emit+0xfb/0x140 [ 611.242480][ C0] ? __down_trylock_console_sem+0xb0/0x140 [ 611.242501][ C0] vprintk_emit+0x424/0x6f0 [ 611.242525][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 611.242551][ C0] dev_printk_emit+0xfb/0x140 [ 611.242577][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 611.242602][ C0] ? worker_thread+0x6c8/0xf00 [ 611.242631][ C0] __dev_printk+0xf5/0x270 [ 611.242657][ C0] _dev_notice+0xe5/0x120 [ 611.242685][ C0] ? __pfx__dev_notice+0x10/0x10 [ 611.242714][ C0] ? rcu_is_watching+0x12/0xc0 [ 611.242738][ C0] ? trace_kmalloc+0x2d/0xe0 [ 611.242763][ C0] ? __kmalloc_noprof+0x207/0x400 [ 611.242787][ C0] usb_get_configuration+0x42c2/0x5e50 [ 611.242825][ C0] ? __pfx_usb_get_configuration+0x10/0x10 [ 611.242849][ C0] ? __pfx_lock_release+0x10/0x10 [ 611.242869][ C0] ? mark_held_locks+0x9f/0xe0 [ 611.242888][ C0] usb_new_device+0x1189/0x1a10 [ 611.242917][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 611.242939][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 611.242970][ C0] hub_event+0x2d9a/0x4e10 [ 611.243009][ C0] ? __pfx_hub_event+0x10/0x10 [ 611.243039][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 611.243057][ C0] ? rcu_is_watching+0x12/0xc0 [ 611.243080][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 611.243105][ C0] ? process_one_work+0x921/0x1ba0 [ 611.243124][ C0] ? lock_acquire+0x2f/0xb0 [ 611.243141][ C0] ? process_one_work+0x921/0x1ba0 [ 611.243160][ C0] process_one_work+0x9c5/0x1ba0 [ 611.243183][ C0] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 611.243211][ C0] ? __pfx_process_one_work+0x10/0x10 [ 611.243234][ C0] ? assign_work+0x1a0/0x250 [ 611.243263][ C0] worker_thread+0x6c8/0xf00 [ 611.243289][ C0] ? __kthread_parkme+0x148/0x220 [ 611.243314][ C0] ? __pfx_worker_thread+0x10/0x10 [ 611.243333][ C0] kthread+0x2c1/0x3a0 [ 611.243355][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 611.243382][ C0] ? __pfx_kthread+0x10/0x10 [ 611.243406][ C0] ret_from_fork+0x45/0x80 [ 611.243423][ C0] ? __pfx_kthread+0x10/0x10 [ 611.243447][ C0] ret_from_fork_asm+0x1a/0x30 [ 611.243480][ C0] [ 611.244236][ C1] rcu: rcu_preempt kthread starved for 10270 jiffies! g42597 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 611.244263][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 611.244274][ C1] rcu: RCU grace-period kthread stack dump: [ 611.244283][ C1] task:rcu_preempt state:R running task stack:27408 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 611.244359][ C1] Call Trace: [ 611.244367][ C1] [ 611.244379][ C1] __schedule+0xe55/0x5740 [ 611.244413][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 611.244448][ C1] ? __pfx___schedule+0x10/0x10 [ 611.244482][ C1] ? schedule+0x298/0x350 [ 611.244514][ C1] ? __pfx_lock_release+0x10/0x10 [ 611.244535][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 611.244568][ C1] ? lock_acquire+0x2f/0xb0 [ 611.244589][ C1] ? schedule+0x1fd/0x350 [ 611.244624][ C1] schedule+0xe7/0x350 [ 611.244657][ C1] schedule_timeout+0x136/0x2a0 [ 611.244687][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 611.244718][ C1] ? __pfx_process_timeout+0x10/0x10 [ 611.244751][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 611.244785][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 611.244814][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 611.244840][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 611.244863][ C1] ? rcu_gp_init+0xc82/0x1630 [ 611.244889][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 611.244928][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 611.244966][ C1] rcu_gp_kthread+0x271/0x380 [ 611.244990][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 611.245021][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 611.245057][ C1] ? __kthread_parkme+0x148/0x220 [ 611.245088][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 611.245112][ C1] kthread+0x2c1/0x3a0 [ 611.245138][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 611.245170][ C1] ? __pfx_kthread+0x10/0x10 [ 611.245199][ C1] ret_from_fork+0x45/0x80 [ 611.245220][ C1] ? __pfx_kthread+0x10/0x10 [ 611.245249][ C1] ret_from_fork_asm+0x1a/0x30 [ 611.245293][ C1] [ 611.245302][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 611.245311][ C1] CPU: 1 UID: 0 PID: 12240 Comm: syz.2.1687 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 611.245337][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 611.245350][ C1] RIP: 0010:write_comp_data+0x11/0x90 [ 611.245384][ C1] Code: cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 0f 60 76 7e <65> 8b 05 10 60 76 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 [ 611.245406][ C1] RSP: 0018:ffffc9000efc7b28 EFLAGS: 00000202 [ 611.245425][ C1] RAX: 0000000000000001 RBX: ffff8880b8646bc0 RCX: ffffffff81815ffc [ 611.245441][ C1] RDX: ffff88802a4aa440 RSI: 0000000000000000 RDI: 0000000000000005 [ 611.245457][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 611.245472][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170c8d79 [ 611.245487][ C1] R13: 0000000000000001 R14: ffff8880b8646bc8 R15: ffff8880b8740140 [ 611.245503][ C1] FS: 00007f5f2bea26c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 611.245526][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 611.245543][ C1] CR2: 0000000020000140 CR3: 000000005f4d6000 CR4: 00000000003526f0 [ 611.245558][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 611.245573][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 611.245588][ C1] Call Trace: [ 611.245596][ C1] [ 611.245605][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 611.245635][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 611.245665][ C1] ? rcu_sched_clock_irq+0x23d7/0x32a0 [ 611.245704][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 611.245733][ C1] ? __asan_memcpy+0x3c/0x60 [ 611.245756][ C1] ? __asan_memcpy+0x3c/0x60 [ 611.245779][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 611.245820][ C1] ? update_process_times+0x178/0x220 [ 611.245856][ C1] ? __pfx_update_process_times+0x10/0x10 [ 611.245893][ C1] ? update_wall_time+0x1c/0x40 [ 611.245926][ C1] ? tick_nohz_handler+0x376/0x530 [ 611.245956][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 611.245982][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 611.246021][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 611.246048][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 611.246086][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 611.246123][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 611.246151][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 611.246184][ C1] [ 611.246193][ C1] [ 611.246202][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 611.246233][ C1] ? smp_call_function_many_cond+0x47c/0x1300 [ 611.246259][ C1] ? write_comp_data+0x11/0x90 [ 611.246293][ C1] smp_call_function_many_cond+0x47c/0x1300 [ 611.246319][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 611.246353][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 611.246382][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 611.246408][ C1] text_poke_bp_batch+0x22b/0x760 [ 611.246439][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 611.246475][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 611.246503][ C1] ? __jump_label_patch+0x1db/0x400 [ 611.246534][ C1] ? text_poke_queue+0xef/0x180 [ 611.246565][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 611.246605][ C1] text_poke_finish+0x30/0x40 [ 611.246634][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 611.246667][ C1] jump_label_update+0x1d7/0x400 [ 611.246694][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 611.246719][ C1] static_key_enable+0x1a/0x20 [ 611.246742][ C1] sched_core_get+0x8a/0xa0 [ 611.246762][ C1] sched_core_share_pid+0x41f/0xa00 [ 611.246793][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 611.246832][ C1] ? __pfx_sched_core_share_pid+0x10/0x10 [ 611.246864][ C1] ? static_key_count+0x5a/0x70 [ 611.246885][ C1] ? security_task_prctl+0x11c/0x160 [ 611.246922][ C1] __do_sys_prctl+0xeee/0x1eb0 [ 611.246947][ C1] ? __pfx___do_sys_prctl+0x10/0x10 [ 611.246978][ C1] do_syscall_64+0xcd/0x250 [ 611.247004][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.247043][ C1] RIP: 0033:0x7f5f2b17e719 [ 611.247062][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.247084][ C1] RSP: 002b:00007f5f2bea2038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 611.247106][ C1] RAX: ffffffffffffffda RBX: 00007f5f2b335f80 RCX: 00007f5f2b17e719 [ 611.247122][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 611.247137][ C1] RBP: 00007f5f2b1f175e R08: 0000000000000000 R09: 0000000000000000 [ 611.247152][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 611.247167][ C1] R13: 0000000000000000 R14: 00007f5f2b335f80 R15: 00007ffe08c65938 [ 611.247196][ C1] [ 749.698903][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 226s! [syz.2.1687:12240] [ 749.698933][ C1] Modules linked in: [ 749.698947][ C1] irq event stamp: 650650 [ 749.698956][ C1] hardirqs last enabled at (650649): [] irqentry_exit+0x3b/0x90 [ 749.698990][ C1] hardirqs last disabled at (650650): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 749.699029][ C1] softirqs last enabled at (650648): [] handle_softirqs+0x5bb/0x8f0 [ 749.699061][ C1] softirqs last disabled at (650583): [] irq_exit_rcu+0xbb/0x120 [ 749.699108][ C1] CPU: 1 UID: 0 PID: 12240 Comm: syz.2.1687 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 749.699135][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 749.699150][ C1] RIP: 0010:smp_call_function_many_cond+0x458/0x1300 [ 749.699179][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 8a 1b 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 a4 0c 00 00 8b 43 08 31 [ 749.699201][ C1] RSP: 0018:ffffc9000efc7b30 EFLAGS: 00000246 [ 749.699221][ C1] RAX: 0000000000040000 RBX: ffff8880b8646bc0 RCX: ffffc9000bb51000 [ 749.699238][ C1] RDX: 0000000000040000 RSI: ffffffff81815fd6 RDI: 0000000000000005 [ 749.699253][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 749.699272][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170c8d79 [ 749.699288][ C1] R13: 0000000000000001 R14: ffff8880b8646bc8 R15: ffff8880b8740140 [ 749.699304][ C1] FS: 00007f5f2bea26c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 749.699327][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 749.699344][ C1] CR2: 0000000020000140 CR3: 000000005f4d6000 CR4: 00000000003526f0 [ 749.699360][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 749.699374][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 749.699390][ C1] Call Trace: [ 749.699398][ C1] [ 749.699408][ C1] ? watchdog_timer_fn+0x570/0x7d0 [ 749.699435][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 749.699458][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 749.699491][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 749.699518][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 749.699556][ C1] ? hrtimer_interrupt+0x31b/0x800 [ 749.699593][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 749.699622][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 749.699655][ C1] [ 749.699663][ C1] [ 749.699673][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 749.699705][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 749.699730][ C1] ? smp_call_function_many_cond+0x458/0x1300 [ 749.699759][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 749.699793][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 749.699822][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 749.699849][ C1] text_poke_bp_batch+0x22b/0x760 [ 749.699881][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 749.699917][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 749.699945][ C1] ? __jump_label_patch+0x1db/0x400 [ 749.699976][ C1] ? text_poke_queue+0xef/0x180 [ 749.700008][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 749.700047][ C1] text_poke_finish+0x30/0x40 [ 749.700076][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 749.700108][ C1] jump_label_update+0x1d7/0x400 [ 749.700134][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 749.700160][ C1] static_key_enable+0x1a/0x20 [ 749.700182][ C1] sched_core_get+0x8a/0xa0 [ 749.700203][ C1] sched_core_share_pid+0x41f/0xa00 [ 749.700234][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 749.700278][ C1] ? __pfx_sched_core_share_pid+0x10/0x10 [ 749.700311][ C1] ? static_key_count+0x5a/0x70 [ 749.700331][ C1] ? security_task_prctl+0x11c/0x160 [ 749.700369][ C1] __do_sys_prctl+0xeee/0x1eb0 [ 749.700394][ C1] ? __pfx___do_sys_prctl+0x10/0x10 [ 749.700426][ C1] do_syscall_64+0xcd/0x250 [ 749.700452][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.700486][ C1] RIP: 0033:0x7f5f2b17e719 [ 749.700506][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.700528][ C1] RSP: 002b:00007f5f2bea2038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 749.700551][ C1] RAX: ffffffffffffffda RBX: 00007f5f2b335f80 RCX: 00007f5f2b17e719 [ 749.700567][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 749.700582][ C1] RBP: 00007f5f2b1f175e R08: 0000000000000000 R09: 0000000000000000 [ 749.700598][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 749.700612][ C1] R13: 0000000000000000 R14: 00007f5f2b335f80 R15: 00007ffe08c65938 [ 749.700642][ C1] [ 749.700653][ C1] Sending NMI from CPU 1 to CPUs 0: [ 749.700679][ C0] NMI backtrace for cpu 0 [ 749.700688][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 749.700710][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 749.700722][ C0] Workqueue: usb_hub_wq hub_event [ 749.700751][ C0] RIP: 0010:__kasan_check_read+0x0/0x20 [ 749.700772][ C0] Code: c3 cc cc cc cc 48 83 c4 60 48 c7 c7 e0 8e 7b 8d 5b 5d 41 5c e9 31 fe 7d ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 89 f6 31 d2 e9 2f f1 ff ff 66 66 2e 0f 1f [ 749.700789][ C0] RSP: 0018:ffffc90000007958 EFLAGS: 00000046 [ 749.700803][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000008 [ 749.700815][ C0] RDX: 1ffff110038d2a8e RSI: 0000000000000008 RDI: ffffffff96e2ec40 [ 749.700828][ C0] RBP: ffffc90000007aa8 R08: 0000000000000000 R09: fffffbfff2dc5d88 [ 749.700841][ C0] R10: ffffffff96e2ec47 R11: 0000000000000000 R12: ffff88801c694880 [ 749.700854][ C0] R13: 0000000000000100 R14: 0000000000000008 R15: 1ffff92000000f34 [ 749.700866][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 749.700885][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 749.700899][ C0] CR2: 00007f5c1fb62220 CR3: 000000005b772000 CR4: 00000000003526f0 [ 749.700912][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 749.700923][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 749.700935][ C0] Call Trace: [ 749.700941][ C0] [ 749.700948][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 749.700996][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 749.701038][ C0] ? nmi_handle+0x1a9/0x5c0 [ 749.701057][ C0] ? __pfx_nmi_cpu_backtrace_handler+0x10/0x10 [ 749.701087][ C0] ? __pfx___kasan_check_read+0x10/0x10 [ 749.701106][ C0] ? default_do_nmi+0x6a/0x160 [ 749.701130][ C0] ? exc_nmi+0x170/0x1e0 [ 749.701154][ C0] ? end_repeat_nmi+0xf/0x53 [ 749.701175][ C0] ? __pfx___kasan_check_read+0x10/0x10 [ 749.701194][ C0] ? __pfx___kasan_check_read+0x10/0x10 [ 749.701215][ C0] ? __pfx___kasan_check_read+0x10/0x10 [ 749.701234][ C0] [ 749.701240][ C0] [ 749.701246][ C0] hlock_class+0x4e/0x130 [ 749.701269][ C0] mark_lock+0xb5/0xc60 [ 749.701286][ C0] ? hlock_class+0x4e/0x130 [ 749.701309][ C0] ? mark_lock+0xb5/0xc60 [ 749.701325][ C0] ? __pfx_mark_lock+0x10/0x10 [ 749.701342][ C0] ? hlock_class+0x4e/0x130 [ 749.701365][ C0] ? mark_lock+0xb5/0xc60 [ 749.701383][ C0] ? __pfx_mark_lock+0x10/0x10 [ 749.701401][ C0] __lock_acquire+0x906/0x3ce0 [ 749.701422][ C0] ? hlock_class+0x4e/0x130 [ 749.701446][ C0] ? __lock_acquire+0xbdd/0x3ce0 [ 749.701463][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 749.701484][ C0] lock_acquire.part.0+0x11b/0x380 [ 749.701503][ C0] ? debug_object_activate+0x13e/0x540 [ 749.701531][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 749.701550][ C0] ? rcu_is_watching+0x12/0xc0 [ 749.701573][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 749.701597][ C0] ? debug_object_activate+0x13e/0x540 [ 749.701625][ C0] ? lock_acquire+0x2f/0xb0 [ 749.701642][ C0] ? debug_object_activate+0x13e/0x540 [ 749.701669][ C0] ? debug_object_activate+0x13e/0x540 [ 749.701696][ C0] ? __pfx_advance_sched+0x10/0x10 [ 749.701720][ C0] debug_object_activate+0x14c/0x540 [ 749.701747][ C0] ? debug_object_activate+0x13e/0x540 [ 749.701776][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 749.701805][ C0] ? rcu_is_watching+0x12/0xc0 [ 749.701828][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 749.701851][ C0] ? __pfx_advance_sched+0x10/0x10 [ 749.701874][ C0] ? enqueue_hrtimer+0x25/0x3c0 [ 749.701891][ C0] enqueue_hrtimer+0x25/0x3c0 [ 749.701909][ C0] __hrtimer_run_queues+0x903/0xae0 [ 749.701932][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 749.701953][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 749.701984][ C0] hrtimer_interrupt+0x31b/0x800 [ 749.702009][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 749.702035][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 749.702064][ C0] [ 749.702069][ C0] [ 749.702076][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 749.702095][ C0] RIP: 0010:console_flush_all+0x9a4/0xc60 [ 749.702120][ C0] Code: 00 e8 f0 98 27 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 7e ee 1f 00 48 85 db 0f 85 55 01 00 00 e8 00 ec 1f 00 fb 4c 89 e0 <48> c1 e8 03 42 80 3c 38 00 0f 84 11 ff ff ff 4c 89 e7 e8 d5 97 81 [ 749.702138][ C0] RSP: 0018:ffffc900000e71e8 EFLAGS: 00000287 [ 749.702152][ C0] RAX: ffffffff8ee8edd8 RBX: 0000000000000000 RCX: ffffc90018816000 [ 749.702164][ C0] RDX: 0000000000100000 RSI: ffffffff816d8f60 RDI: 0000000000000007 [ 749.702177][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 749.702188][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8ee8edd8 [ 749.702201][ C0] R13: ffffffff8ee8ed80 R14: ffffc900000e7278 R15: dffffc0000000000 [ 749.702217][ C0] ? console_flush_all+0x9a0/0xc60 [ 749.702242][ C0] ? console_flush_all+0x9a0/0xc60 [ 749.702267][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 749.702294][ C0] ? printk_percpu_data_ready+0x9/0x20 [ 749.702315][ C0] ? nbcon_get_cpu_emergency_nesting+0x3b/0x50 [ 749.702341][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 749.702373][ C0] console_unlock+0xd9/0x210 [ 749.702396][ C0] ? __pfx_console_unlock+0x10/0x10 [ 749.702418][ C0] ? lock_acquire+0x2f/0xb0 [ 749.702436][ C0] ? dev_printk_emit+0xfb/0x140 [ 749.702462][ C0] ? __down_trylock_console_sem+0xb0/0x140 [ 749.702483][ C0] vprintk_emit+0x424/0x6f0 [ 749.702507][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 749.702533][ C0] dev_printk_emit+0xfb/0x140 [ 749.702559][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 749.702584][ C0] ? worker_thread+0x6c8/0xf00 [ 749.702611][ C0] __dev_printk+0xf5/0x270 [ 749.702637][ C0] _dev_notice+0xe5/0x120 [ 749.702664][ C0] ? __pfx__dev_notice+0x10/0x10 [ 749.702693][ C0] ? rcu_is_watching+0x12/0xc0 [ 749.702716][ C0] ? trace_kmalloc+0x2d/0xe0 [ 749.702739][ C0] ? __kmalloc_noprof+0x207/0x400 [ 749.702763][ C0] usb_get_configuration+0x42c2/0x5e50 [ 749.702799][ C0] ? __pfx_usb_get_configuration+0x10/0x10 [ 749.702823][ C0] ? __pfx_lock_release+0x10/0x10 [ 749.702842][ C0] ? mark_held_locks+0x9f/0xe0 [ 749.702862][ C0] usb_new_device+0x1189/0x1a10 [ 749.702891][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 749.702913][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 749.702944][ C0] hub_event+0x2d9a/0x4e10 [ 749.702983][ C0] ? __pfx_hub_event+0x10/0x10 [ 749.703012][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 749.703034][ C0] ? rcu_is_watching+0x12/0xc0 [ 749.703057][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 749.703081][ C0] ? process_one_work+0x921/0x1ba0 [ 749.703100][ C0] ? lock_acquire+0x2f/0xb0 [ 749.703116][ C0] ? process_one_work+0x921/0x1ba0 [ 749.703136][ C0] process_one_work+0x9c5/0x1ba0 [ 749.703158][ C0] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 749.703187][ C0] ? __pfx_process_one_work+0x10/0x10 [ 749.703208][ C0] ? assign_work+0x1a0/0x250 [ 749.703238][ C0] worker_thread+0x6c8/0xf00 [ 749.703259][ C0] ? __kthread_parkme+0x148/0x220 [ 749.703284][ C0] ? __pfx_worker_thread+0x10/0x10 [ 749.703302][ C0] kthread+0x2c1/0x3a0 [ 749.703324][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 749.703351][ C0] ? __pfx_kthread+0x10/0x10 [ 749.703374][ C0] ret_from_fork+0x45/0x80 [ 749.703392][ C0] ? __pfx_kthread+0x10/0x10 [ 749.703415][ C0] ret_from_fork_asm+0x1a/0x30 [ 749.703447][ C0] [ 749.703675][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 749.703689][ C1] CPU: 1 UID: 0 PID: 12240 Comm: syz.2.1687 Tainted: G L 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 749.703721][ C1] Tainted: [L]=SOFTLOCKUP [ 749.703730][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 749.703743][ C1] Call Trace: [ 749.703750][ C1] [ 749.703759][ C1] dump_stack_lvl+0x3d/0x1f0 [ 749.703784][ C1] panic+0x71d/0x800 [ 749.703816][ C1] ? __pfx_panic+0x10/0x10 [ 749.703846][ C1] ? __pfx__printk+0x10/0x10 [ 749.703871][ C1] ? __irq_work_queue_local+0x136/0x440 [ 749.703907][ C1] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 749.703940][ C1] ? irq_work_queue+0x2a/0x80 [ 749.703973][ C1] ? watchdog_timer_fn+0x5f2/0x7d0 [ 749.703995][ C1] ? watchdog_timer_fn+0x5e5/0x7d0 [ 749.704022][ C1] watchdog_timer_fn+0x603/0x7d0 [ 749.704046][ C1] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 749.704068][ C1] __hrtimer_run_queues+0x5fb/0xae0 [ 749.704100][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 749.704126][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 749.704164][ C1] hrtimer_interrupt+0x31b/0x800 [ 749.704200][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 749.704227][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 749.704261][ C1] [ 749.704273][ C1] [ 749.704282][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 749.704304][ C1] RIP: 0010:smp_call_function_many_cond+0x458/0x1300 [ 749.704330][ C1] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 8a 1b 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 a4 0c 00 00 8b 43 08 31 [ 749.704351][ C1] RSP: 0018:ffffc9000efc7b30 EFLAGS: 00000246 [ 749.704369][ C1] RAX: 0000000000040000 RBX: ffff8880b8646bc0 RCX: ffffc9000bb51000 [ 749.704385][ C1] RDX: 0000000000040000 RSI: ffffffff81815fd6 RDI: 0000000000000005 [ 749.704400][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 749.704415][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170c8d79 [ 749.704429][ C1] R13: 0000000000000001 R14: ffff8880b8646bc8 R15: ffff8880b8740140 [ 749.704453][ C1] ? smp_call_function_many_cond+0x456/0x1300 [ 749.704483][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 749.704517][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 749.704544][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 749.704570][ C1] text_poke_bp_batch+0x22b/0x760 [ 749.704601][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 749.704637][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 749.704666][ C1] ? __jump_label_patch+0x1db/0x400 [ 749.704696][ C1] ? text_poke_queue+0xef/0x180 [ 749.704727][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 749.704766][ C1] text_poke_finish+0x30/0x40 [ 749.704795][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 749.704827][ C1] jump_label_update+0x1d7/0x400 [ 749.704852][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 749.704887][ C1] static_key_enable+0x1a/0x20 [ 749.704910][ C1] sched_core_get+0x8a/0xa0 [ 749.704929][ C1] sched_core_share_pid+0x41f/0xa00 [ 749.704960][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 749.704998][ C1] ? __pfx_sched_core_share_pid+0x10/0x10 [ 749.705030][ C1] ? static_key_count+0x5a/0x70 [ 749.705051][ C1] ? security_task_prctl+0x11c/0x160 [ 749.705087][ C1] __do_sys_prctl+0xeee/0x1eb0 [ 749.705111][ C1] ? __pfx___do_sys_prctl+0x10/0x10 [ 749.705142][ C1] do_syscall_64+0xcd/0x250 [ 749.705167][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.705201][ C1] RIP: 0033:0x7f5f2b17e719 [ 749.705217][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.705238][ C1] RSP: 002b:00007f5f2bea2038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 749.705259][ C1] RAX: ffffffffffffffda RBX: 00007f5f2b335f80 RCX: 00007f5f2b17e719 [ 749.705281][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 749.705295][ C1] RBP: 00007f5f2b1f175e R08: 0000000000000000 R09: 0000000000000000 [ 749.705309][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 749.705324][ C1] R13: 0000000000000000 R14: 00007f5f2b335f80 R15: 00007ffe08c65938 [ 749.705352][ C1] [ 750.795083][ C1] Shutting down cpus with NMI [ 750.795317][ C1] Kernel Offset: disabled