last executing test programs: 5m51.176482787s ago: executing program 2 (id=4437): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0xfffffffffffffeb6) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'team_slave_1\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4699, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x8200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x3, &(0x7f0000000180)=[{0x2, 0x5c, 0xc, 0xfffffff9}, {0x1, 0xbb, 0xde, 0x7fff}, {0x8, 0x8, 0x9, 0x76d1}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x98, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xb0}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}]}, 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 5m50.70894559s ago: executing program 2 (id=4440): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth0_to_team\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 5m49.784093282s ago: executing program 2 (id=4442): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0x541b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0x95, 0x3e, &(0x7f00000003c0)="96279dfbc8b72c5797bdcf1f7a3a4b1971d5eedcee840286d61dff7c0a16e960c95642fae7c73024a7567c28cf23fc52b8851dff092f7a31968013f8e9d5e1edc3d415bc8e239d2f34811a7429dfb667c836b929866e026d5251b24517c141e9403c33915f42fbe1e0ea13850b532bda275898fe47341e84e3d19da914ceadfcbccfe4e8fa097bade664c1aec8ea23c586505f5ed5", &(0x7f0000000040)=""/62, 0x3eb, 0x0, 0x2f, 0xef, &(0x7f0000000100)="6a7488cf636592a3fdc7189686cc2032757f97e4218fae47e223a9de0c0a7073e7183e095854c214be1f94e78e8e33", &(0x7f0000000480)="9f41c8b9192912ccfe46e2502157022ba8ecc721ca1d31e1d4a7f272559ecea838e4a85f35555937981977ca654ff2e84a02b569adba37aa897e44d4780be9ace9045fed63e47b03a20f6da6ceefb326a11abfdbcf9b843b0722f736544e9f176bef37034bcc31dd4942a9746ec07e9f84a42238953ece31175f3b160684399061b572f9621a07332821c637b4de65c0c62030b5997a69a227e43b3bb3685832752ffc1f0e9b2bd89283d60e5fc9c38c90403be0c08d8ec3403f340ea19713677371a359d3ccf7afe41ab64d8d6d77b05300818bf839267683f633b683033e19f395364458ab8f54ce510f3ee1c17c", 0x1, 0x0, 0xbc2f}, 0x50) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r5, 0x6, 0x19, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 5m48.579112727s ago: executing program 2 (id=4446): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0x2, 0x0, "8ddbb51a3cfd954e41e8ccb2650fa60067fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71b43b828c7de258b6b9ca1fc52bcc83e2a016a00"}, 0xd8) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x22020400) r1 = syz_pidfd_open(0x0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 5m47.155180922s ago: executing program 2 (id=4450): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x40010) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000140)='-3', 0x2}]) r8 = memfd_create(0x0, 0x0) fsetxattr$security_ima(r8, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r8], 0x9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_getevents(r7, 0xe, 0x2, &(0x7f0000000240)=[{}, {}], &(0x7f0000000280)={0x77359400}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x510, 0x0, 0x940c, 0x3002, 0x320, 0x2c0, 0x440, 0x3d8, 0x3d8, 0x440, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x320, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@loopback, [0xffffff00, 0xffff00, 0x0, 0xff000000], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff, 0x0, 0xffffff00], 0x4d6, 0x3505, 0x5e, 0x1, 0x7, 0x1e}, {@ipv6=@local, [0x0, 0x0, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0x0, 0xff000000], 0x4d4, 0x3504, 0x33, 0x1, 0x12}, {@ipv4=@remote, [0x0, 0xff, 0x0, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, [0xff, 0xffffff, 0xff, 0xffffffff], 0x4d3, 0x3502, 0x2c, 0x1, 0xb, 0x7}, {@ipv4=@private=0xa010102, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], @ipv6=@remote, [0xef7a3ce5cc6f2af0, 0x0, 0xffffff00, 0xffffff00], 0x4d2, 0x3507, 0x5e, 0x1, 0xa, 0x1e}], 0x3, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffff00, 0xffffff00], [0xff000000, 0xff, 0xc33e1565a1dcd696, 0xff000000], 'veth1_to_bond\x00', 'erspan0\x00', {}, {0xff}, 0xc, 0x8, 0x2, 0x10}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x33, 0x1, 0x2, 0x0, 0x1, 0x182, 0x2214}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x9, 0x7, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 5m46.656747572s ago: executing program 2 (id=4453): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth0_to_team\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 5m45.828731449s ago: executing program 32 (id=4453): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth0_to_team\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 5m18.545559023s ago: executing program 4 (id=4544): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x804) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x99f}, 0x1c) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) setxattr$incfs_id(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x880e, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x602, 0x0) fsopen(0x0, 0x1) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r4}, 0x10) r5 = dup(r0) sendmsg$netlink(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}], 0x1}, 0x0) msgsnd(0x0, 0x0, 0x8, 0x0) msgctl$IPC_RMID(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="1800ecff000000000000000000000000851200006d0000d3862025d4cf0ad1a9f8754b0d1da7537c47dfea558d8325e5fe6f9660051e61ba972986476ccca04cb5bce7bfb317414454af52a27f0ffc96095baf76aa2788ef7caf00c32909f7b770460dc36df269959f203625b3e5b9466e2737f260861a1cf9cd08238725ebe2c3fe79b371f9acc3baca2def10160cf0af8513be07252504b3d83a144aa9361188bbebadc4095578873e84a5b66d90ea408ff45f332328e03ff1224ef941302678680bf8a0677632d99d8be2cb04c3646ffa9ae8f5705031c3e2d67715a9e73d8253aa21cf5239e81119098f8af5c01970d0028c7cd4cc43120fab92f33de1a810978794db8d823d5002be429150fd264ee30344e530b1938b0884511f7798a4063444fab3fb7dc1ef1d2eb784a2744119cce7678451e92dc1925f4c9836fd0eaf43a3e400"/339, @ANYRES32, @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040000001c00018006000600800a0000100007"], 0x34}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x8, 0x2, 0x9a, 0x0, {{0xb, 0x4, 0x0, 0x4, 0x2c, 0x68, 0x0, 0x7, 0x0, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x6, 0xffffffffffffffff}, @lsrr={0x83, 0xf, 0x64, [@empty, @remote, @multicast2]}]}}}}}) 5m16.988062528s ago: executing program 4 (id=4549): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getpid() lstat(0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) listen(r1, 0x1ff) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f0000000500)="ab", 0x34000, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 5m16.03781828s ago: executing program 4 (id=4552): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) getdents(r0, &(0x7f00000002c0)=""/58, 0x3a) 5m15.100149378s ago: executing program 4 (id=4555): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0x2, 0x0, "8ddbb51a3cfd954e41e8ccb2650fa60067fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71b43b828c7de258b6b9ca1fc52bcc83e2a016a00"}, 0xd8) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x22020400) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 5m14.29098682s ago: executing program 4 (id=4558): syz_init_net_socket$llc(0x1a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xfff) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r3 = socket$inet(0x2, 0xa, 0x7) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000300)={0x73, @loopback, 0x4e20, 0x0, 'wrr\x00', 0x28, 0x1000, 0x7f}, 0x2c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000000), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="7393b4f8e0000000"], 0x8) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000280)={'broute\x00', 0x0, 0x0, 0x0, [0xffff, 0x3, 0x0, 0x8, 0x2, 0x5]}, &(0x7f0000000180)=0x78) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket$nl_generic(0x10, 0x3, 0x10) 5m12.850492972s ago: executing program 4 (id=4563): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getpid() lstat(0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) listen(r1, 0x1ff) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f0000000500)="ab", 0x34000, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 5m12.385748124s ago: executing program 33 (id=4563): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getpid() lstat(0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) listen(r1, 0x1ff) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f0000000500)="ab", 0x34000, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 7.827142585s ago: executing program 1 (id=5806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id, &(0x7f0000000240)=0x10, 0x0) sendmsg$tipc(r0, &(0x7f00000015c0)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x3, 0x2}}, 0x10, &(0x7f0000000480)=[{&(0x7f00000003c0)="a889eb42001e5ace62bb9a209a5e3aae425e6ad72716ef98e421bdb589a325c71de6c26f30a8ac15d049f58ccd08cdd4fd588c10834f3529ff2c09efd6d647dafd47bc72aeac2fa7ce4200a3bf5d7f4d081b1d1d36b0dc001e83bd22b6f026872675d47e48bb3b15", 0x68}, {&(0x7f0000000500)="0a1011565f2a2976f2c76144a535a5e359d9f61edea1a8b84c1ac1549f5bef02d4055d408879f6434c6f2dc3a4df2e4582f4ffd99f5bc2bd49077ec6d91ddcdee3553d80472bfe12d7b88d746466e5fa0d8f727f25793ceddbfb9f323ec8ac992a460f62d6d23d697cfc3b63e830fde9be1bd82e50e1b2367560d4a936f1e973498824fb1c52a4dc6a40534878692c59bb058288e1c2ea64c27a355d7cd69f7d40afe5320cdb0ff64ad5a16b8ced3522609e3b54518d608959dc129e", 0xbc}], 0x2, &(0x7f00000005c0)="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", 0x1000, 0x4814}, 0x80) ioperm(0x2, 0x7fb, 0x100) process_mrelease(0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) socket$inet(0x2, 0x1, 0x9688) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r4, &(0x7f00000000c0)=0x58, 0x9) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r6, &(0x7f000000a900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r8}, &(0x7f0000000440), 0x0}, 0x20) 7.826534524s ago: executing program 0 (id=5808): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc9, 0x80}}}, 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000280)={0x1, 0x0, 0xb, 0x5, 0x168, &(0x7f0000001680)}) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x56, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x4a, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa236e13e478cea7d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="dc2000003d0007010000000000000000017c0000040000000c00018006000600800a0000b8200280b12006"], 0x20dc}}, 0x10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x10, &(0x7f0000000040), 0x4) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[], 0xfdef) 6.772747191s ago: executing program 1 (id=5811): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x5) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2067) syz_usb_control_io(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x12}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0xf, 0x0, 0x0, @pid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(r1, &(0x7f0000000b80)={0x2c, &(0x7f0000000080)={0x0, 0xf, 0x8, {0x8, 0x5, "4d8188a6c50f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) 5.579280678s ago: executing program 0 (id=5814): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x1) sched_setaffinity(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) prlimit64(r2, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000540)={0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd, 0x4a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000c5}, 0x8050) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580), 0x0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r5, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) listen(r4, 0x1ff) socket$inet_sctp(0x2, 0x5, 0x84) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11012, r7, 0xffffd000) 5.234136336s ago: executing program 5 (id=5815): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0x43403d0e, &(0x7f0000000340)={'\x00', 0x4, 0x1, 0x1}) 4.84219904s ago: executing program 3 (id=5816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000000)={'veth0_vlan\x00', 0xf78}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setrlimit(0x4, &(0x7f00000000c0)={0x8, 0xb768}) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89, 0xc00}, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x0, r6, 0x0, 0x0, 0x0, 0x101, 0x0, {0x1}}) 4.611492026s ago: executing program 0 (id=5818): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0xfe37, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x2000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.595754562s ago: executing program 5 (id=5819): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r6, 0x0, 0x10d00, 0x0) 4.458671934s ago: executing program 0 (id=5821): syz_open_dev$dri(0x0, 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xf0ff, 0x0) ioprio_set$pid(0x1, 0x0, 0x4000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)=0xb4d8) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}, 0x1, 0x0, 0x0, 0x4048890}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 4.430730327s ago: executing program 0 (id=5822): r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x8) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000180), &(0x7f0000000000)=@ng={0x4, 0x11}, 0x2, 0x1) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x1000000) 4.326335777s ago: executing program 6 (id=5824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000e40000000000900020073797a32000000000900010073797a30000000000800054000000002580000000e0a0102000000000000004001000000096aff0073797a32000000001800038014000080100001800400028006000180000000000900"], 0xc8}}, 0x4c811) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x20000015) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x88, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 4.24337309s ago: executing program 0 (id=5825): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0xa) r2 = socket(0x2a, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0xd3c7330f7af1c381, &(0x7f0000000180), &(0x7f0000000280)=0x4) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x2, {0x0, 0xf0, 0x3}, 0x2}, 0x18) close(r7) 3.55908325s ago: executing program 5 (id=5826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = add_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000180)='(', 0x1, 0xfffffffffffffffb) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) keyctl$chown(0x4, r3, r4, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)={0x38, r1, 0x101, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 3.477365826s ago: executing program 5 (id=5827): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0xfffffffffffffeb6) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'team_slave_1\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4699, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x8200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x98, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xb0}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}]}, 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 3.397230872s ago: executing program 6 (id=5828): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x1) sched_setaffinity(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) prlimit64(r2, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000540)={0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd, 0x4a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000c5}, 0x8050) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) r6 = add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r5, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) listen(r4, 0x1ff) socket$inet_sctp(0x2, 0x5, 0x84) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11012, r7, 0xffffd000) 3.344554067s ago: executing program 3 (id=5829): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x1000000, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@loopback, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa0, 0x20}, {0x8, 0x0, 0x800000000002, 0x0, 0x5, 0x0, 0x800000000, 0xffffffffffffffff}, {0x100000000, 0x200, 0x367b, 0x3}, 0x0, 0x6e6bb0, 0x0, 0x1, 0x3}}, [@policy_type={0xa}]}, 0xcc}}, 0x40040c0) 3.292914844s ago: executing program 1 (id=5830): mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) io_setup(0x9, &(0x7f0000000300)) setxattr$security_capability(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0) request_key(&(0x7f0000000340)='.request_key_auth\x00', 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_gettime(0x0, &(0x7f0000002400)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000000640)={0x81, 0x0, 'client0\x00', 0x0, "1e1dc136d6f4bdda", "a973ee4846d9504bc69a10238bcd150b0e95547bd679f139106e78e15913759d"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000840), 0x6000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) 3.202437518s ago: executing program 6 (id=5831): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000200000000000000000000200180100002020702500000000002020207b1a90ce2c4078ff86c720b2cecfd5eb128898faf6c8fe1100c067b9ae25edc3fcd3f2478bfdeb8b30bb9d2716f21416a4b162161699f9323e093473c57e3517d1b6c6e1926ceffddf01bd4d737df239013dccf139bfba57ef"], 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0x7, 0x5, 0x0, 0x1000, &(0x7f00000f0000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4140aecd, &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3.035311166s ago: executing program 3 (id=5832): r0 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5', 0x6) fallocate(r0, 0x4000, 0x0, 0x400001) 2.269812198s ago: executing program 1 (id=5833): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x6, 0x17b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x8e, 0x180000504) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x41, 0x0) ioctl$TCSETS(r5, 0x40045431, 0x0) listen(r3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204"], 0x0) 2.156108056s ago: executing program 3 (id=5834): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x1) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) prlimit64(r2, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lstat(0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000540)={0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd, 0x4a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000c5}, 0x8050) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580), 0x0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r5, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) listen(r4, 0x1ff) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r7, &(0x7f0000000500)="ab", 0x34000, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 2.067106748s ago: executing program 6 (id=5835): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb45fd629100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db220100002600000000000080622ea74b2b7f6a0cad8c93"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100)={0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008420000005010000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000004c0), &(0x7f00000004c0), 0x4, r1}, 0xffffffffffffff47) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000280)={r3, 0x5bbf, 0x4, 0x20010001, 0x2, [], [0x0, 0x7ff], [0x0, 0x10001, 0x100, 0x101], [0x0, 0x0, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000540)={r3, 0x14027370, 0x100, 0x2, 0x1, [], [0xfffffffd, 0x4, 0x3, 0x7], [0x3, 0x3, 0x3, 0x80], [0x0, 0x4, 0x3, 0xfe]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={0x0, &(0x7f0000000a40)="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"}}, &(0x7f0000000040)) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r0, 0x4068aea3, &(0x7f00000003c0)={0xdf, 0x0, 0x8000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x81, 0xfffffffb}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x5) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f00000000c0)}, 0x1c) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f00000004c0), &(0x7f0000000480)="176823bc88343eaee4c38f85b58d04df009519e5dbacd87000000000000000000000000000010000", 0x6c, r1}, 0x38) 1.835881955s ago: executing program 1 (id=5836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)=0x100000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000100), &(0x7f0000000240)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000340), 0x10) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 1.687728878s ago: executing program 3 (id=5837): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32], 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044850}, 0x2004c080) ioctl$KVM_RUN(r3, 0xae80, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1a\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa09\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x20000) ioctl$VIDIOC_SUBDEV_G_EDID(r6, 0xc0285628, &(0x7f0000000040)={0x0, 0x306, 0x9, '\x00', &(0x7f0000000000)=0x2}) r7 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x7, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={r8, 0x400}, &(0x7f0000000240)=0x8) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) read$usbmon(r5, &(0x7f0000000a00)=""/4096, 0x1000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r10}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000540)={'erspan0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x80, 0x20, 0xe, 0x6, {{0x1f, 0x4, 0x2, 0x28, 0x7c, 0x64, 0x0, 0x9, 0x2f, 0x0, @broadcast, @empty, {[@generic={0x94, 0x3, 'j'}, @end, @ssrr={0x89, 0x17, 0x81, [@multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast2]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0xb6, [@dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010102, @local, @loopback]}, @generic={0x0, 0x3, '\a'}, @noop, @end, @lsrr={0x83, 0x27, 0x45, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty, @remote, @broadcast, @loopback]}]}}}}}) 1.522995897s ago: executing program 1 (id=5838): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) write$sndseq(r0, &(0x7f0000000600)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x2}, {}, @addr={0x5b, 0x5d}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x5}, @quote={{0x5, 0x5}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x5, {}, {0x0, 0xfd}, @connect={{0x7, 0x5f}, {0x2, 0x1}}}, {0x1, 0x0, 0x1, 0x0, @tick=0x2, {0x4, 0x1}, {0x4, 0x8}, @quote={{0x2, 0xd8}, 0x8}}], 0x70) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000001c0)=ANY=[@ANYRES16=r1], 0xa) r4 = socket(0x2a, 0x2, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r6, 0x40049366, &(0x7f0000000180)) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r9) r10 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000040000211200000000000000", @ANYRES32=r10, @ANYBLOB='\x00'/20, @ANYRES64=r4, @ANYRES8=r5, @ANYBLOB="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", @ANYBLOB="d8814d46676ed8479dbe729ec4f96302ba19e7ede149933eb8e2a40260bf240897512c7d52d6a2eb931c34e42c58931c701d0776a71ce297826c2bb26437b80d7f05d4e01736966f39acbf8b583e92687e4c4bc4db59fb8e192d9b26df4ec1dc5457b0c8920eb89ad127c89eebbc64aa28480a59c9412f3d1e7e13f1c3de6615440e4e89b4f1ac926ff0fde317d521f385b4a20a9d5af6d43ee57775442a323aa60e554d9ebdf081af8ba1b0efa4a40d95d759ca8662ca3a95f563905462444739b6493946cc912d41ae2cd18c6dfc7907b7"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20) 1.479080861s ago: executing program 6 (id=5839): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a00000d00000000000000000000000b0018"], 0x68}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$alg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000780)="23721f6568d62efe0d332e3d880d88dde17bc9451e26001ab07c141300382518020c98245b27528c6e8621cb5b9d7a97cd5b038f6f45e196b770064cb285fec9ffa86050eb7501628b62f8334dcb543596bc4011786558c1c2ed1a4ada34da506b1efef1f0c12ff676c3e27035015bfeb66630fe216ad6cbe5b9420aa757f143392acb6d2448033d7297396ceb22d6c6ad924ddd722db5db2d5c5e5e78a30fd3a7e2357b51ac67edcaf1fd1cdfe190bb18532cf26079b514ccf15d0c15705c42326e872de72578655fb33a283a818c378a951e169b40d30fd3eb5425d41544ca27e22bfd1bca07fb89cbaf0b74e9f52387c8b885ab", 0xf5}, {&(0x7f0000000880)="fd5259bfa168b556cb71c8700aff13d73e9c622df848f27dfe2bd9e5005dc36f0945a51dc7a0a80127ababedb2a1cd707336610775e13824b8456082783a20a088275e94228f14c4c35de6076511497298b4dc88570559119ae10b90ac4ea5aa8a57cd52407b9161f32f4d329e8af0e2100401a3eef55946bf03c23441b02312cd18db5ab4fbfd9885e6ff8414448b85bce33cf673f81b0000000000000000", 0x9f}, {&(0x7f0000000c40)="b0947c59d26005f4136f21bfa1e94739db3dc52c15b5006af8f2ed5106c3e8fb129cf8bbc756957fcc940b5dbbe920183935c0c5748984bc01e27f2e06a351f3a408e3ffffffffffff6785776876a99a3045ed0c75c2b0001385fcec5e1c002762a2be8c96e2341a6f21f5ce1ae091e36f18b73730981180b0452422b97326ea7863e7a033ad4501888c35a784172ceca48a6838eed5ec5e59d293d5909ec3d878804a8e24897ec1ef581c060681c76b3258cddb77efc383f694f7947442d4976fa6118b24276c131441a42159bf91fb404acfb1c07c74318476c800000000b7279ba24969677817850a89461028befa52018dc597f30fe4037629debe2251cb9c813af26f7d72da0b45e62b7d150b31627102868b1ec64c43efbed318eab163b417dfebe7b2f8601e2bc73bc2a8897acf84cc9784507d3a8cd043fc7ba178715c860612e36dad19401d57637acb4252530d70ecc87bbc36a4adb800d40b4e93f8c037b4e27b17e60abaeaefd2e25171334743c97b57452600b2437d23a83d0224558517d27004d69676e7c22c2a9f5a408e012099e9ddb2d6b4f925fb4416767a000000000000", 0x1a7}], 0x3, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}, 0x4000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000a00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x62}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4c091}, 0x40800) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x690, 0xd0, 0xd0, 0x448, 0x300, 0x1b8, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x44}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) 605.490581ms ago: executing program 6 (id=5840): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="872e"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r1, &(0x7f0000003240)={0x2020}, 0x2020) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x5e, &(0x7f0000000580)}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(0x0, 0x840, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x4) open(0x0, 0x14927e, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r5, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r5, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff}, {0x4, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtclass={0x24, 0x28, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffff}, {0x0, 0x8}, {0x3}}}, 0x24}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x4}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 519.035735ms ago: executing program 3 (id=5841): r0 = syz_usb_connect$cdc_ncm(0x0, 0x73, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109026100020101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x1, 0xf8f, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x9a, 0x54, 0x12, 0x8, 0x3011, 0xb012, 0x485c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf7d, 0x3, 0x6, 0x54, 0x40, 0x5, [{{0x9, 0x4, 0x53, 0x80, 0x2, 0x5a, 0x91, 0xd1, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x7f, 0x7}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x1ff, 0x1, 0xf, 0xffff, 0x3, 0x6}, @processing_unit={0xa, 0x24, 0x7, 0x5, 0x0, 0x7, "1223c1"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x10, 0x3, 0xb0, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x3}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x6, 0x8, 0x7, [@generic={0x76, 0xb, "47c6e088de547fec38c9e3937dae62fbe98a4f083f0c6e85604d2e742375dd462f5bd08ba66c8877aea84f867ba4b325604129c813a171f02bbcea9269dfcccd3efebb6fbd948457ac6ac238c45468da5d140fe4d2513323dd3833b8903a766491587a24311503cfdde5232198129b6aadeeb274"}]}}]}}, {{0x9, 0x4, 0x81, 0x8, 0x10, 0x9f, 0xb7, 0x39, 0x3, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "58d9"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0xfffffffb, 0x8, 0x1, 0x8}, [@obex={0x5, 0x24, 0x15, 0x8}]}], [{{0x9, 0x5, 0x1, 0x10, 0x10, 0x8, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xa, 0x2}]}}, {{0x9, 0x5, 0xf, 0x8, 0x20, 0x4, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0xc2, 0x93, 0xff}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x4, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xd}, @generic={0x97, 0xb, "fbb25bfef589172e5d9f8c6ae7acf4ccced1157432c7d9fdb6a9e10042a607b74f2db19d0835269d72faf1e2eca07c95ade81d6c477df0637e85c402a8b4dd6817e2701e4be1ee40d8e90f94ca3af07ea6a32c4365e63523b18f00f5f5198a202846411518250cf0ceb3d8b8bb8f98fcf28ebe45a5d966ddea2d5bac4e6c862d20a40862006fe892dac33e730e57dfaa1d9ff15760"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x6, 0x5, 0x1, [@generic={0xe0, 0x23, "9d6fd847e1053b11c9da109eff9f8fbfe0f1f4a0f539be74d5213800ab733403430187022cf3bc7ea23e2aada99d17c83b12a22d29f1b5675e61e9c9d26508c9ebbe1e255077f5411ced06ae56b71b8e055a72274a677f034d93245cff897219fef4758dfb5df58d197c447d7965faad6b8d2217eb0ac9564778a87ae99c2f7214f36ab1f9ad52a93501ed5952dfa50cd2593edc99d4e67a06108bf51ba4d6db1c65a5694189b9fb50f34e83895065fdf9d08d5e7db26992d483a1bdf74fe67ecabd29fa52ec9c17909955cba98ffc673f9703e75f7457880a1a2a5514fd"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x3, 0x8, 0x6, [@generic={0x33, 0x3, "05ba273ea346575acb22160d12b84b7defcc961043eddc02a2a874a78d17936a2da169f81422acabebac13ddf99d5242cb"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x16ef}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x2, 0xb, 0xd, [@generic={0xec, 0x23, "50d00428bcaf328395ba09d02d16d70d8b38fd6ea52757138f62f49bbc12e76cd2c0945df37c011e5c74c0c3ac8ec1e163379d83101855535d150b1901c2e6f3102dee0a790432d32936adc81fc463f8bc173ffaaf7a6e5fc059704a24b0535a00850d1b3cb71add3f8d19ac3d817338f10cedcbbd1dc8e9072835f022fc9b7460dead656616f41347056aec549367654426d876fb276e28fd0d10c59080491a8f02a2f688da175b02e6f3c814a4cc585d24e4ccb6c46bef3c4888cfc918b0ef180352bf7c2d368731038a96c9b3ce50fd103c990d1fff33cfbf97eb626ac58948f8d1a6736dab82a586"}, @generic={0xa7, 0xe, "f686de43037d095328f12445e5ae4ca4f08f5ed610c1b63bde6850ecde73bf541306afbedb253f145d47fadac0752553730f11d25149c8f7c0568486e54c749bac537c18cd78139d91adc95be578fdf13df8f53763bcd360639e3d5dc27066292ce37f06ff8fc9b7502a0d9c3ec9f36983cc1dc765792916a0e9f39e9aef89739a0086eeb1c82fe9c31a9996d452defdde460999b69dd0822e457c18173f4b3cfa120acf58"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x8, 0x7b, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x4}]}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x1, 0x4, 0x9, [@generic={0x61, 0x22, "d1f266e2a2204eb3f9e416b402dd71a8087f378e4ba4d5d78d962131df7facfc9c99b25c79187a46598773f9bd6ca2e8f1454a8931b58b0bf8a61eaa63fc6448fd3fc3f45d3104cde3619d50b48c2c55d9ca51ddaea68aa1a875f4e60fd72b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x1, 0x0, 0x79, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0xfffc}, @generic={0xc0, 0x8, "5a78378a7b80ef5f5eed14b2db9c3008620c286c394674163ca381b47a0c75229ed1d9d0093ccf2473ba657a03da0644baa8791d0d2a0a183a616c9111c5b40e90183e684290219998872a097cb6769e95938d8b5ba2f7969a0ff1076c8b060e3950d734ccc756fc75692401c939b8523c8072a5c2443cd3fb71b6e9d039bcac4b8fec6f88a18e5101116d28077bc6b549a2747c6b3ac287befa2ac0f738b2a4139b8741f2241917a6517a23944faa68054c3c5603aa40500c20f53b7e9d"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x0, 0x7, 0x66, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x54, 0x8}]}}, {{0x9, 0x5, 0x84, 0xc, 0x420, 0x7, 0xa, 0x1, [@generic={0xa7, 0x22, "54d559968aede47c1beccea4dfa932ecb80db0f8c9029055542b5f4be2e3f63c478899bb4f3657ad38c2328eb6d4dfc9866eacc7ee18dc355dc9c6df2bf11a185376ccb1a196fcb5e45da005cad58080722364bf01ff69d0605c569cfaa7e4b1d204722c74e258327caa76e5e1f750b10eeadfbe31c0fcc97271099e37218fd89cc72b5a3e9a0bee4a6542104aa76c8b09fc8f56050ffd67e3871cb13e151c98902aa6a21c"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0xd7, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x1000}, @generic={0xa3, 0x21, "cd09aa04e6428c59d74b5d06304ee2585b11853b88f257ecdfdbee654b1777de13dda481af7704ac1740bf81e6ffbc2b6ab51b7dcacf707fc9022e78e8a8af4c594fbd458a3804d63f8002c3d4b9c31a6d72bc37e8f7a864e9334968cb959ade41180ffb84e96b6fcd5741d3ec64b005c12455229a3f6b0711ff90eaa25aad43f28eab7c3b9f206e917b95146ae6b539102641f49d0bb49febd5e9f2490b796f83"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0xab, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa9, 0xd9}, @generic={0x64, 0x2, "172552002b4f6f0a19785971286da2a1c1003adcb04c225a588c64bd72cbf4687c9d0e5f9288b58f7e2ba96ea74136c96dbc260a0084496a1a2bef5fb47cbcd7683483aad548c7d43c4084ac303e52835db8a0fbc91f46674fa6291d4ecc56bf5b42"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x4, 0x10, 0x6, [@generic={0x1d, 0x8, "36e6315eab1269d9ffae23f697680d30da35d5759bb6d9a7d1fc5b"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x4}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x4, 0xb, 0x3, [@generic={0x3b, 0x4, "5825311b59ab330927a9d26ca46437c0188032c9088253123dbf533405d28a328c592af63d2e1024dc58a9ac4bef8a0cbcfea48d0b34f77c01"}]}}, {{0x9, 0x5, 0x6, 0x11, 0x8, 0x3, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3}, @generic={0xdd, 0xd, "7da6ef6dc78edac7a01825cc66dc3054b9b466c77aef22fa4965b5872446e55f3338178bc40cd8e3afdcb6ed1d5a9d38ffb9a74d772f0f70de144ec671bbe74ac9716e24b597f144c764f93b6d757bebd55ce54c7947cd196753e25aa278372a6493c47e2aa5f652b2a6d5073fcd5e2fedf0269479dbe231c5a97bae2367381e318f97d257512a3f968c64b01cde227148059fea38de5f029af91e800ab0f52d7ccc6dac0f6b49c0a86bd524b6c546a0e93c8ed326401cad216e95ddf367214b1d4c47b7ff8f76e2a5f1ed9884a37a285483777305aef98c8c8f92"}]}}]}}, {{0x9, 0x4, 0x5, 0x1, 0xf, 0x3a, 0x4b, 0xe3, 0x39, [@hid_hid={0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x8fc}}], [{{0x9, 0x5, 0x5, 0x3, 0x40, 0x2, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7fff}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x7, 0x7, 0x5, [@generic={0xf3, 0x22, "54f3ea74a17f05f5048dbbe33a7c85029a469e8d75a92ccab42ec117df690cd50b3e125bc917029fd76e2213f0f7dcfccc9e5df04f3e38de3b5cab6e0563ed43e4c02b29edba82fb182a0ffda61d7a3aa0118631fff6df6b4d7ff90b272c8592d85fef76ac07fa562996f5f13c45b19276d804025416cde2a79edc79faf7fb35f80bdc997ac173ed79dcdb84425551e605b0071fbea7e83e4197a7fd6d31564a5d6b1f7585ad4b089152531382170b2e247df7d09d3ff8b203d36dfd6b0344fff48c533945bd4dfa1665ae8a763a2c8b92ba6b468e5340c3ffbcd7bdac312dbb7cb80024583694cc1b19c0bb00ede09102"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x10, 0x9, 0xf, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x5, 0x5}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x9, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xe3, 0xfff7}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x7, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x5}, @generic={0xaf, 0x24, "5011eb316e412b193e321deb1a241e8a49b2bb448f6a6ef92b3256d19d908e030eedae313a8c47f7d62160ce4353579b6f9156d8c2710be466de74d4e26f49a4c05c862afc794af81877cd87f985cc1577ab7d784bfb493b4a2215baa3a29222f663d60ef1dcaa442cdfc8c91ecfbf8ebbb0c57e46d647b7cf663f4cfe0c0f6c52327b28d72485722c3a40f2c09e7bf84c769f474817c3e74f9c96a1621edf2f7fd590db97c54ba77294dcfb7e"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x440, 0x6, 0xf2, 0x1, [@generic={0x7, 0x12, "c271f5d5ae"}, @uac_iso={0x7, 0x25, 0x1, 0xc0, 0x7, 0xa59e}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x1, 0xf7, 0x1, [@generic={0x97, 0x23, "14d0585fd3b3e241ab059fbf60a166ea51c5ccc6dbb444e2e69191b2e605263683cbbbcb8aaba8f349e738112ad05a66833719bcab71049e358ff8981d2c20522c095d23ee69c85d2339976ca3c885f58d6bc0e96b423647fa9fed64335b65bfc70f5932c47e008781784d05a320fc7e1d170c442c5ff0541f1ede20922bb4431f41a5f7923a0a524fd86ebeffae3160a20ff0a5e0"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x400, 0x2, 0x7, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x10, 0x5}, @generic={0x12, 0x1, "9f4dc63a1a94e9792dfb1d47e1dafa00"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x4, 0xfa, 0x1, [@generic={0xa6, 0x23, "9bde2ac92c2eeb6afc9d9eb297e9991895e3c3e2c7b24fd82c0e1ba0aa2c915a70aac7ec63b3b4dd1973d3dca7fdf9ecd30d871a55fd44f479f0cdead4013bdc739760c14e69bbbcae553bf60b5528f51054f95bf83be61bdd91fdfd16c12eb4412c617d613816cbaf63886bdf5dc0f74a7f99f01a8c9ca6c99495c389bc785a3a8f6a41f4db36cd466516a57c058417b5967bb837881e7df0ef5ebfb52327570933d855"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x4, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x1}]}}, {{0x9, 0x5, 0x80, 0x4, 0x3ff, 0xe6, 0x0, 0x9, [@generic={0xb, 0x8, "01587bc3bd1d1d1580"}, @generic={0xd, 0xa, "d300f64b56f30a769b80fb"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x60, 0x39, 0x10, 0xff, [@generic={0xb7, 0x4, "f6d58008076b2f543d94301b883b91927312d28851a6e05d52fee11e1734d17fae9acabe376aa016f3b8bb99a1d16da25ec3d8ca06109ad3bd1364675f4c4f7a1f54f68b05b44032b7ab1aebe7032900ad516ffac1168fc988025e20fb88fa50c23993e5cde13aef2de85bff0d130b5caf472bf8596f52a9213c89677cbf91be021fe37be4db4998d13c405bad7dd7ed53fb0c4d57aec165a0777cb862348845cae29501df82c5a92ed56fab51781ca60ec7b29074"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x2}]}}, {{0x9, 0x5, 0xb, 0x2, 0x400, 0xee, 0xf2, 0x7, [@generic={0xea, 0x9, "d7b787f5718a9a6ec54a20c9dc643458384280fbf4586cb3e56a7eb1a458b774e0aa1d53db540292c21ba81fa5329290c0d040373dbfaa4060ed850a267f2dcd8814d17031468464d7cc4d64f8bb6a0a72cddf884308f0692577bb61bf20c7184578c02357c752ef78d9c1c84c0da85fdf60f3f6eb8253aad735aef08bd76b19ddaade3547ce8ebcdbdd36344a2623421beaa4085ac50959ac9b9bb42783759f332b23192ae27da4722f5be389ecc9dd0177116db0dcb784a8923e2ba79452b385a99a9eea46e7191995194162655d8d2942687b65c4ead9e87ee3a38e3fb4cec63e0f5ba325af5d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x9, 0x8, 0xf7, [@generic={0xe1, 0x10, "f151856a6ed6a9c7813cce2e0eb2f4941d545c2cd0e98f8891095ba2955c8009201c7591fdbf9dbece5af970c488edf2a529dee7b3dbb6d3bdbb556184c192ddca3615948c05b01200bd08498514c81f24f890438de83ef45268e2a09cc136045e7e138fecc1b7f8d8cf595ba72dff5d7c28309b71f36708bd0ba551b79301ee6df5834eaf298cd0128cc6267bf42aec06bfc513888d02cc32900f6a466f59c88bebd4ec82a6436e216e8359b362138ea4d8b1e02b77bfbf20d7799a385cc72d05b54e3b7ffa5cd77d2cb5fb53854629bd656ba1349f17c290bc44483b2705"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x0, 0x71, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x8}]}}]}}]}}]}}, &(0x7f00000015c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x1, 0x6, 0x1, 0x10, 0x8}, 0x29, &(0x7f0000000140)={0x5, 0xf, 0x29, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x1ff, 0xf, 0x81, [0x3f]}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "c6d231ef0de900dca93026b2fe6b92d6"}]}, 0x9, [{0x9a, &(0x7f0000000180)=@string={0x9a, 0x3, "7e97201f5bd25476649273dfece557113293f311d10bbc9cb68726a82e798fa3304daca5fd0ac010e65d1b7caf203603b812d421634112caaeaf4928e79e991f93f81ab5412b663a07933187cf6d4dff8056453df9ddccea68e0e3f04e8855b7da5cb17228f4f82a13c494348b4237ce859623979084eff549f1c40bddc704682f0d20da4d7877d223b900ac5d170f6bc5e565017ba95b53"}}, {0x9b, &(0x7f0000000240)=@string={0x9b, 0x3, "d5244730e122d2f6f8370aefdabde0cd5871b133092cd555e87645116ab45d8f4cde40a6a5618758f825696d948e9d02f2a714cf247da3c548f8787c9d91055ee30e81b0a901bc53116ea0bca9e3a9a05785ab31635b7d4bfe6c66f4db55fef0b9785acdf49ddb927ceee2085ff05368a084b731ce0a9cd1325c905dc0eaa73cff11dee754bf7b320523739f3d52485cad8cf8a3331c0f649e"}}, {0x31, &(0x7f0000000340)=@string={0x31, 0x3, "8d8a1ad92c49679f29053b2a204db71c66424a1754941d6e4222a68553b82c6083875b74d52c121309e448092c6ddc"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x43f}}, {0x15, &(0x7f0000000440)=@string={0x15, 0x3, "a8c22f1be9aeb00ee256b15c6990824d8b38e3"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x96, &(0x7f0000001500)=@string={0x96, 0x3, "2ccd773e47d61b7c7b0dfa847dc40c659f9b3756677cedcb78be3920e4717ed79e282bbf363b49f5d045330c7c8d5a17a4974aeb90420187a32de1c4b8e8b12f8d54ff8a50b4d143b7cdab928835c20b28fa97d9ebf0452965724456ceada23ff318468bf3e0f63de4b37cdfa18939b74abf3068eb300e699eed9f71f8b884dc1e228674082cea3fc5ffea8c130cdfcb13b02a39"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000001780)={0x24, &(0x7f0000001680)={0x40, 0xa, 0x43, {0x43, 0x22, "61e15cac6f99406b8f6f545d4bc83932677bd33562dd1fb949f228fcca338e13b48e617e79daca1cbfd4637441cce65fa6061bb553c6c823637b587eb6487ea478"}}, &(0x7f00000004c0)={0x0, 0x3, 0xf, @string={0xf, 0x3, "5b48d89e42d5c9f933d3fb82d2"}}, &(0x7f0000001700)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x3, "03"}]}}, &(0x7f0000001740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x10, 0x9, 0x1, {0x22, 0xa77}}}}, &(0x7f0000001a80)={0x2c, &(0x7f00000017c0)={0x0, 0x9, 0xc6, "a6d470ab49d969a9ea62bd604b7973177a6668ca9d017d5060965b55c9574669b7b14ebc11306083534755ace767c33d099c33ad0e31911507575c34ae1037750a88453a4e05b7911ab1f913e365922a461188d1c818ce4a22fe1dbfb4c970b40f0074f76a1e22f171acc08866b041ba6443a2b0d40c855b68a5b6881ca7ec023811766c59c66a23d3a495fdf832969ac3b3de2c5b18d68d1cc18d600ed6a6952ed0430e4f2344e57ea99d5bc98181655d1e516093da09378a06671162851fb33b1e213820d9"}, &(0x7f00000018c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001900)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001940)={0x20, 0x1, 0xfa, "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"}, &(0x7f0000001a40)={0x20, 0x3, 0x1, 0x97}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0) 401.107931ms ago: executing program 5 (id=5842): syz_open_dev$MSR(0x0, 0xea9, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioprio_set$pid(0x0, 0xffffffffffffffff, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r3], 0x20) close(0x3) close(r1) 0s ago: executing program 5 (id=5843): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x1, 0x1, r4}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000053c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f0000005480)={0x0, 0x8, 0x3cdb, {0x0, 0x10000}}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'dummy0\x00', 0x3}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'pim6reg1\x00'}, 0x18) kernel console output (not intermixed with test programs): 14.929890][ T5939] usb 7-1: USB disconnect, device number 7 [ 1715.365223][ T29] audit: type=1326 audit(1738726706.760:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.1.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f38c158cda9 code=0x7ffc0000 [ 1715.456268][ T29] audit: type=1326 audit(1738726706.760:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24764 comm="syz.1.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c158cda9 code=0x7ffc0000 [ 1717.971023][T24820] overlayfs: failed to clone lowerpath [ 1718.065361][T24820] overlayfs: failed to clone upperpath [ 1718.150551][T12824] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1718.320523][T12824] usb 1-1: Using ep0 maxpacket: 8 [ 1718.327716][T12824] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1718.336887][T12824] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1718.370352][T12824] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1718.399265][T12824] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1718.436888][T12824] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1718.450764][T12824] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1718.475261][T12824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.705817][T12824] usb 1-1: usb_control_msg returned -32 [ 1718.837416][T12824] usbtmc 1-1:16.0: can't read capabilities [ 1718.958555][T24841] xt_policy: output policy not valid in PREROUTING and INPUT [ 1719.848285][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 1719.848329][ T29] audit: type=1326 audit(1738726712.650:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24844 comm="syz.5.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1720.085482][ T29] audit: type=1326 audit(1738726712.650:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24844 comm="syz.5.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1720.183238][ T29] audit: type=1326 audit(1738726712.700:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24844 comm="syz.5.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1720.220440][ T29] audit: type=1326 audit(1738726712.710:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24844 comm="syz.5.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1720.262049][ T29] audit: type=1326 audit(1738726712.710:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24844 comm="syz.5.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1720.297403][ T29] audit: type=1326 audit(1738726712.710:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24844 comm="syz.5.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1720.325477][ T29] audit: type=1326 audit(1738726712.710:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24844 comm="syz.5.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1720.353761][ T29] audit: type=1326 audit(1738726712.710:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24844 comm="syz.5.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1720.385720][ T29] audit: type=1326 audit(1738726712.710:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24844 comm="syz.5.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1720.415982][ T29] audit: type=1326 audit(1738726712.710:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24844 comm="syz.5.5168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1721.031414][ T5939] usb 1-1: USB disconnect, device number 53 [ 1721.145854][T24868] netlink: 'syz.0.5174': attribute type 1 has an invalid length. [ 1721.280950][T24868] netlink: 216 bytes leftover after parsing attributes in process `syz.0.5174'. [ 1722.971254][T24881] [U] : [ 1722.974666][T24881] [U] [ 1722.977373][T24881] [U] [ 1722.980082][T24881] [U] [ 1723.001046][T24881] [U] [ 1723.003777][T24881] [U] [ 1723.006479][T24881] [U] [ 1723.009187][T24881] [U] [ 1723.053262][T24881] [U] [ 1723.056001][T24881] [U] [ 1723.058705][T24881] [U] [ 1723.061412][T24881] [U] [ 1723.072094][T24881] [U] [ 1723.074815][T24881] [U] [ 1723.077516][T24881] [U] [ 1723.080215][T24881] [U] [ 1723.117048][T24881] [U] [ 1723.119805][T24881] [U] [ 1723.122520][T24881] [U] [ 1723.125229][T24881] [U] [ 1723.166114][T24881] [U] [ 1723.168850][T24881] [U] [ 1723.171554][T24881] [U] [ 1723.174255][T24881] [U] [ 1723.197808][T24881] [U] [ 1723.200550][T24881] [U] [ 1723.203253][T24881] [U] [ 1723.205952][T24881] [U] [ 1723.333090][T24881] [U] [ 1723.335833][T24881] [U] [ 1723.338542][T24881] [U] [ 1723.341242][T24881] [U] [ 1723.353837][T24881] [U] [ 1723.356560][T24881] [U] [ 1723.359259][T24881] [U] [ 1723.361955][T24881] [U] [ 1723.370301][T24881] [U] [ 1723.373025][T24881] [U] [ 1723.375738][T24881] [U] [ 1723.378450][T24881] [U] [ 1723.398252][T24881] [U] [ 1723.400983][T24881] [U] [ 1723.403691][T24881] [U] [ 1723.406407][T24881] [U] [ 1723.409276][T24881] [U] [ 1723.411980][T24881] [U] [ 1723.414678][T24881] [U] [ 1723.417380][T24881] [U] [ 1723.420254][T24881] [U] [ 1723.422961][T24881] [U] [ 1723.425663][T24881] [U] [ 1723.428362][T24881] [U] [ 1723.465000][T24881] [U] [ 1723.467734][T24881] [U] [ 1723.470423][T24881] [U] [ 1723.473123][T24881] [U] [ 1723.478126][T24881] [U] [ 1723.480850][T24881] [U] [ 1723.483551][T24881] [U] [ 1723.486246][T24881] [U] [ 1723.560049][T24903] siw: device registration error -23 [ 1724.098153][T24881] [U] [ 1724.100898][T24881] [U] [ 1724.103604][T24881] [U] [ 1724.106301][T24881] [U] [ 1724.180069][T24881] [U] [ 1724.182819][T24881] [U] [ 1724.185522][T24881] [U] [ 1724.188224][T24881] [U] [ 1724.436729][T24881] [U] [ 1725.387494][T24933] netlink: 'syz.3.5195': attribute type 6 has an invalid length. [ 1725.395929][T24933] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5195'. [ 1726.650498][ T5869] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1726.861389][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1726.879242][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1726.910777][ T5869] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1726.930336][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.954751][ T5869] usb 1-1: config 0 descriptor?? [ 1728.032499][ T5869] usbhid 1-1:0.0: can't add hid device: -71 [ 1728.041945][ T5869] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1728.075805][ T5869] usb 1-1: USB disconnect, device number 54 [ 1729.600498][T24743] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1729.780465][T24743] usb 1-1: Using ep0 maxpacket: 16 [ 1729.805126][T24743] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1729.813796][T24743] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1729.822409][T24743] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1729.830926][T24743] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1729.839160][T24743] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1729.848907][T24743] usb 1-1: config 0 has no interface number 0 [ 1729.855285][T24743] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1729.875980][T24743] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1729.886602][T24743] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1729.926829][T24743] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1729.940474][T24743] usb 1-1: config 0 interface 125 has no altsetting 2 [ 1729.983437][T24743] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1730.014833][T24743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.033847][T24743] usb 1-1: Product: syz [ 1730.048448][T24743] usb 1-1: Manufacturer: syz [ 1730.053805][T24743] usb 1-1: SerialNumber: syz [ 1730.060243][T24743] usb 1-1: config 0 descriptor?? [ 1730.067986][T24743] usb 1-1: selecting invalid altsetting 2 [ 1730.194114][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.013541][ T5869] usb 1-1: USB disconnect, device number 55 [ 1733.035658][T24997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5211'. [ 1733.407560][T25009] overlayfs: failed to clone upperpath [ 1735.118092][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 1735.118109][ T29] audit: type=1400 audit(1738726727.970:3241): avc: denied { mount } for pid=25018 comm="syz.6.5221" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1735.168318][ T29] audit: type=1400 audit(1738726728.000:3242): avc: denied { unmount } for pid=25018 comm="syz.6.5221" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1735.306752][T25027] : renamed from bond0 [ 1735.371550][ T5939] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1735.531599][ T5939] usb 6-1: Using ep0 maxpacket: 16 [ 1735.545000][ T5939] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1735.556301][ T5939] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1735.574296][ T5939] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1735.613454][ T5939] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1735.679357][ T5939] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1735.809897][ T12] bridge_slave_1: left allmulticast mode [ 1735.827639][ T5939] usb 6-1: config 0 has no interface number 0 [ 1735.843013][ T5939] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1735.888834][ T12] bridge_slave_1: left promiscuous mode [ 1735.894891][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.910206][ T12] bridge_slave_0: left allmulticast mode [ 1735.916229][ T12] bridge_slave_0: left promiscuous mode [ 1735.926371][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.227228][ T5939] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1736.279092][ T5939] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1736.407523][T25047] libceph: resolve '4' (ret=-3): failed [ 1736.510454][ T5939] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1736.551693][ T5939] usb 6-1: config 0 interface 125 has no altsetting 2 [ 1736.569536][ T5939] usb 6-1: string descriptor 0 read error: -71 [ 1736.701537][ T5939] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1736.736551][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.456859][T25056] FAULT_INJECTION: forcing a failure. [ 1737.456859][T25056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1737.469992][T25056] CPU: 0 UID: 0 PID: 25056 Comm: syz.6.5229 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 1737.470016][T25056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1737.470032][T25056] Call Trace: [ 1737.470038][T25056] [ 1737.470045][T25056] dump_stack_lvl+0x16c/0x1f0 [ 1737.470071][T25056] should_fail_ex+0x50a/0x650 [ 1737.470103][T25056] _copy_to_user+0x32/0xd0 [ 1737.470122][T25056] __htab_map_lookup_and_delete_batch+0x1874/0x2290 [ 1737.470164][T25056] ? lock_acquire+0x2f/0xb0 [ 1737.470187][T25056] ? __fget_files+0x40/0x3a0 [ 1737.470206][T25056] ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10 [ 1737.470230][T25056] ? __fget_files+0x206/0x3a0 [ 1737.470252][T25056] ? __pfx_htab_map_lookup_and_delete_batch+0x10/0x10 [ 1737.470276][T25056] bpf_map_do_batch+0x4af/0x670 [ 1737.470306][T25056] __sys_bpf+0x494f/0x49c0 [ 1737.470326][T25056] ? __pfx_lock_release+0x10/0x10 [ 1737.470352][T25056] ? __pfx___sys_bpf+0x10/0x10 [ 1737.470374][T25056] ? vfs_write+0x306/0x1150 [ 1737.470403][T25056] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 1737.470440][T25056] ? fput+0x67/0x440 [ 1737.470462][T25056] ? ksys_write+0x1ba/0x250 [ 1737.470488][T25056] ? __pfx_ksys_write+0x10/0x10 [ 1737.470520][T25056] __x64_sys_bpf+0x78/0xc0 [ 1737.470540][T25056] ? lockdep_hardirqs_on+0x7c/0x110 [ 1737.470560][T25056] do_syscall_64+0xcd/0x250 [ 1737.470582][T25056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.470608][T25056] RIP: 0033:0x7f935cd8cda9 [ 1737.470623][T25056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1737.470642][T25056] RSP: 002b:00007f935db68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1737.470660][T25056] RAX: ffffffffffffffda RBX: 00007f935cfa6160 RCX: 00007f935cd8cda9 [ 1737.470673][T25056] RDX: 0000000000000038 RSI: 0000000020000800 RDI: 0000000000000019 [ 1737.470685][T25056] RBP: 00007f935db68090 R08: 0000000000000000 R09: 0000000000000000 [ 1737.470696][T25056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1737.470708][T25056] R13: 0000000000000000 R14: 00007f935cfa6160 R15: 00007fff6b552a88 [ 1737.470732][T25056] [ 1737.682806][ C0] vkms_vblank_simulate: vblank timer overrun [ 1737.729784][ T5939] usb 6-1: config 0 descriptor?? [ 1737.739104][ T5939] usb 6-1: can't set config #0, error -71 [ 1737.753800][ T5939] usb 6-1: USB disconnect, device number 13 [ 1738.245567][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1738.660009][ T29] audit: type=1326 audit(1738726731.490:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.1.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c158cda9 code=0x7ffc0000 [ 1738.728785][T25070] xt_policy: output policy not valid in PREROUTING and INPUT [ 1739.086915][ T29] audit: type=1326 audit(1738726731.490:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.1.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c158cda9 code=0x7ffc0000 [ 1739.110429][ C0] vkms_vblank_simulate: vblank timer overrun [ 1739.238784][ T29] audit: type=1326 audit(1738726731.490:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.1.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f38c158cda9 code=0x7ffc0000 [ 1739.262541][ T29] audit: type=1326 audit(1738726731.490:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.1.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c158cda9 code=0x7ffc0000 [ 1739.286891][ T29] audit: type=1326 audit(1738726731.490:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.1.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c158cda9 code=0x7ffc0000 [ 1739.318286][ T29] audit: type=1326 audit(1738726731.490:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.1.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f38c158cda9 code=0x7ffc0000 [ 1739.341848][ C0] vkms_vblank_simulate: vblank timer overrun [ 1739.348886][ T29] audit: type=1326 audit(1738726731.490:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.1.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c158cda9 code=0x7ffc0000 [ 1739.372389][ C0] vkms_vblank_simulate: vblank timer overrun [ 1739.378788][ T29] audit: type=1326 audit(1738726731.490:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25066 comm="syz.1.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c158cda9 code=0x7ffc0000 [ 1739.569286][T25083] xt_socket: unknown flags 0x4 [ 1739.594358][ T12] bond1 (unregistering): Released all slaves [ 1740.311895][ T12] bond2 (unregistering): Released all slaves [ 1740.507258][ T12] bond0 (unregistering): Released all slaves [ 1740.520159][ T5869] wg2 speed is unknown, defaulting to 1000 [ 1740.526238][ T5869] wg2 speed is unknown, defaulting to 1000 [ 1740.537745][T25081] @: renamed from vlan0 (while UP) [ 1740.556996][T25084] IPv6: NLM_F_CREATE should be specified when creating new route [ 1740.708249][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 1740.708265][ T29] audit: type=1400 audit(1738726733.560:3289): avc: denied { setopt } for pid=25092 comm="syz.0.5240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1740.817312][T25098] overlayfs: failed to resolve './file1/file0': -2 [ 1740.980523][ T5869] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1741.232899][ T5869] usb 7-1: Using ep0 maxpacket: 16 [ 1741.252772][ T5869] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1741.268343][ T12] hsr_slave_0: left promiscuous mode [ 1741.290526][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1741.308513][ T12] hsr_slave_1: left promiscuous mode [ 1741.315832][ T5869] usb 7-1: config 0 descriptor?? [ 1741.321423][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1741.328853][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1741.339190][ T5869] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1741.411176][ T12] veth1_macvtap: left promiscuous mode [ 1741.416844][ T12] veth0_macvtap: left promiscuous mode [ 1741.425394][ T12] veth1_vlan: left promiscuous mode [ 1741.431072][ T12] veth0_vlan: left promiscuous mode [ 1741.925175][T25113] xt_policy: output policy not valid in PREROUTING and INPUT [ 1742.580482][ T5869] gspca_sonixj: reg_w1 err -110 [ 1742.585428][ T5869] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 1742.741000][ T29] audit: type=1326 audit(1738726735.570:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25116 comm="syz.0.5247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1742.963445][ T29] audit: type=1326 audit(1738726735.580:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25116 comm="syz.0.5247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1743.146519][ T29] audit: type=1326 audit(1738726735.600:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25116 comm="syz.0.5247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1743.188165][ T29] audit: type=1326 audit(1738726735.600:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25116 comm="syz.0.5247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1743.211619][ C0] vkms_vblank_simulate: vblank timer overrun [ 1743.220482][ T29] audit: type=1326 audit(1738726735.600:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25116 comm="syz.0.5247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1743.244034][ C0] vkms_vblank_simulate: vblank timer overrun [ 1743.251387][ T29] audit: type=1326 audit(1738726735.600:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25116 comm="syz.0.5247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1743.278359][ C0] vkms_vblank_simulate: vblank timer overrun [ 1743.347289][ T29] audit: type=1326 audit(1738726735.600:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25116 comm="syz.0.5247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1743.368248][T25125] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5250'. [ 1743.402556][T25126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5249'. [ 1743.482598][T12824] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1743.548809][ T29] audit: type=1326 audit(1738726735.600:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25116 comm="syz.0.5247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1743.572344][ C0] vkms_vblank_simulate: vblank timer overrun [ 1743.579469][ T29] audit: type=1326 audit(1738726735.600:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25116 comm="syz.0.5247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1743.680508][T12824] usb 6-1: Using ep0 maxpacket: 16 [ 1743.689096][T12824] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1743.714763][T12824] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.739201][T12824] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1743.766911][T12824] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1743.778245][T12824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.786473][ T5870] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1743.794516][T12824] usb 6-1: Product: syz [ 1743.798814][T12824] usb 6-1: Manufacturer: syz [ 1743.804246][T12824] usb 6-1: SerialNumber: syz [ 1743.983734][ T5870] usb 1-1: Using ep0 maxpacket: 8 [ 1744.005228][ T5870] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1744.019278][ T5870] usb 1-1: config 6 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1744.059347][ T5870] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1744.068769][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.094865][ T5870] usb 1-1: Product: syz [ 1744.099118][ T5870] usb 1-1: Manufacturer: syz [ 1744.104254][ T5870] usb 1-1: SerialNumber: syz [ 1744.113585][ T5870] hso 1-1:6.0: Can't find BULK IN endpoint [ 1744.207813][ T5870] usb 7-1: USB disconnect, device number 8 [ 1744.242003][T12824] usb 6-1: 0:2 : does not exist [ 1744.250681][T12824] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1744.278942][T12824] usb 6-1: USB disconnect, device number 14 [ 1744.319351][T25128] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5251'. [ 1744.371946][T25139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1744.384837][T25139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1744.502457][T13345] smc: removing ib device syz2 [ 1744.605824][ T5870] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1744.779055][ T5870] usb 7-1: Using ep0 maxpacket: 8 [ 1744.819625][ T5870] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1744.858785][ T5870] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1744.877747][ T5870] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1744.888268][ T5870] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1745.007871][ T5870] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1745.029473][ T5870] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1745.039259][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.743878][T25148] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1747.164911][T25154] xt_policy: output policy not valid in PREROUTING and INPUT [ 1747.303325][ T5870] usb 7-1: usb_control_msg returned -32 [ 1747.707773][ T5870] usbtmc 7-1:16.0: can't read capabilities [ 1747.750578][T25153] IPv6: NLM_F_CREATE should be specified when creating new route [ 1747.978614][ T5870] usb 1-1: USB disconnect, device number 56 [ 1748.381887][T25175] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1748.587974][ T5870] usb 7-1: USB disconnect, device number 9 [ 1749.093046][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 1749.093065][ T29] audit: type=1400 audit(1738726741.930:3325): avc: denied { map } for pid=25183 comm="syz.6.5266" path="socket:[81826]" dev="sockfs" ino=81826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1749.122323][ C0] vkms_vblank_simulate: vblank timer overrun [ 1749.235746][T25190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5267'. [ 1749.311446][ T12] IPVS: stop unused estimator thread 0... [ 1749.352139][ T29] audit: type=1400 audit(1738726741.930:3326): avc: denied { read } for pid=25183 comm="syz.6.5266" path="socket:[81826]" dev="sockfs" ino=81826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1749.532406][T25194] 9pnet_fd: Insufficient options for proto=fd [ 1749.841849][ T29] audit: type=1326 audit(1738726742.690:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25202 comm="syz.0.5269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1750.010755][ T29] audit: type=1326 audit(1738726742.690:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25202 comm="syz.0.5269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1750.115366][ T29] audit: type=1326 audit(1738726742.700:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25202 comm="syz.0.5269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1750.151985][ T29] audit: type=1326 audit(1738726742.700:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25202 comm="syz.0.5269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1750.175454][ C0] vkms_vblank_simulate: vblank timer overrun [ 1750.193285][ T29] audit: type=1326 audit(1738726742.700:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25202 comm="syz.0.5269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1750.220914][ T29] audit: type=1326 audit(1738726742.720:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25202 comm="syz.0.5269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1750.244266][ C0] vkms_vblank_simulate: vblank timer overrun [ 1750.283731][ T29] audit: type=1326 audit(1738726742.720:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25202 comm="syz.0.5269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1750.307239][ C0] vkms_vblank_simulate: vblank timer overrun [ 1750.589605][ T29] audit: type=1326 audit(1738726742.720:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25202 comm="syz.0.5269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1750.759506][T25217] wlan0 speed is unknown, defaulting to 1000 [ 1750.781519][T25217] virt_wifi0 speed is unknown, defaulting to 1000 [ 1752.059303][T25238] afs: Unknown parameter '˙˙˙˙' [ 1753.033872][T25255] siw: device registration error -23 [ 1753.870720][T25259] wlan0 speed is unknown, defaulting to 1000 [ 1753.877677][T25259] virt_wifi0 speed is unknown, defaulting to 1000 [ 1754.933161][T25273] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1754.960481][T25273] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1754.968944][T25273] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1755.102720][T25280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5291'. [ 1755.130785][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 1755.130798][ T29] audit: type=1400 audit(1738726747.990:3367): avc: denied { listen } for pid=25275 comm="syz.5.5291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1755.580480][ T5913] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1756.290639][ T5913] usb 7-1: Using ep0 maxpacket: 8 [ 1756.363246][ T5913] usb 7-1: config 0 has an invalid interface number: 141 but max is 12 [ 1756.390572][ T5913] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1756.410650][ T5913] usb 7-1: config 0 has no interface number 0 [ 1756.426267][ T5913] usb 7-1: too many endpoints for config 0 interface 141 altsetting 32: 177, using maximum allowed: 30 [ 1757.104778][ T5913] usb 7-1: config 0 interface 141 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 177 [ 1757.118152][ T5913] usb 7-1: config 0 interface 141 has no altsetting 0 [ 1757.150339][ T5913] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1757.200006][ T5913] usb 7-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 1757.261466][ T5913] usb 7-1: Product: syz [ 1757.265678][ T5913] usb 7-1: Manufacturer: syz [ 1757.400034][ T5913] usb 7-1: SerialNumber: syz [ 1757.422726][ T5913] usb 7-1: config 0 descriptor?? [ 1759.058014][ T5913] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1759.103103][ T5913] gspca_zc3xx: reg_w_i err -71 [ 1759.520047][ T29] audit: type=1400 audit(1738726752.370:3368): avc: denied { setopt } for pid=25343 comm="syz.1.5314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1760.240478][ T5913] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1760.246805][ T5913] gspca_zc3xx 7-1:0.141: probe with driver gspca_zc3xx failed with error -71 [ 1760.259613][ T29] audit: type=1400 audit(1738726753.120:3369): avc: denied { map } for pid=25338 comm="syz.3.5312" path="socket:[82835]" dev="sockfs" ino=82835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1760.286300][ T5913] usb 7-1: USB disconnect, device number 10 [ 1760.307141][ T29] audit: type=1400 audit(1738726753.120:3370): avc: denied { read } for pid=25338 comm="syz.3.5312" path="socket:[82835]" dev="sockfs" ino=82835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1761.109632][T25362] wlan0 speed is unknown, defaulting to 1000 [ 1761.331447][T25362] virt_wifi0 speed is unknown, defaulting to 1000 [ 1762.668624][T25390] xt_policy: output policy not valid in PREROUTING and INPUT [ 1763.240463][ T29] audit: type=1400 audit(1738726756.040:3371): avc: denied { write } for pid=25383 comm="syz.0.5323" path="socket:[83309]" dev="sockfs" ino=83309 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1763.409635][T25371] siw: device registration error -23 [ 1763.510483][ T5869] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1763.690823][ T5869] usb 1-1: device descriptor read/64, error -71 [ 1763.981773][ T5869] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1764.007257][ T29] audit: type=1326 audit(1738726756.860:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25393 comm="syz.5.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1764.290832][ T5869] usb 1-1: device descriptor read/64, error -71 [ 1764.400924][ T5869] usb usb1-port1: attempt power cycle [ 1764.438124][ T29] audit: type=1326 audit(1738726756.860:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25393 comm="syz.5.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1764.553931][ T29] audit: type=1326 audit(1738726756.880:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25393 comm="syz.5.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1764.633067][ T29] audit: type=1326 audit(1738726756.880:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25393 comm="syz.5.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1764.740531][ T29] audit: type=1326 audit(1738726756.880:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25393 comm="syz.5.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1764.780490][ T5869] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1764.799826][ T29] audit: type=1326 audit(1738726756.880:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25393 comm="syz.5.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1764.829973][ T5869] usb 1-1: device descriptor read/8, error -71 [ 1764.860585][ T29] audit: type=1326 audit(1738726756.880:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25393 comm="syz.5.5320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1765.132087][ T5869] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1765.171461][ T5869] usb 1-1: device descriptor read/8, error -71 [ 1765.190442][T25408] tmpfs: Unknown parameter '“s' [ 1765.215362][T25408] FAULT_INJECTION: forcing a failure. [ 1765.215362][T25408] name failslab, interval 1, probability 0, space 0, times 0 [ 1765.228435][T25408] CPU: 0 UID: 0 PID: 25408 Comm: syz.5.5328 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 1765.228458][T25408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1765.228469][T25408] Call Trace: [ 1765.228475][T25408] [ 1765.228482][T25408] dump_stack_lvl+0x16c/0x1f0 [ 1765.228507][T25408] should_fail_ex+0x50a/0x650 [ 1765.228533][T25408] ? tomoyo_realpath_from_path+0xb9/0x720 [ 1765.228555][T25408] should_failslab+0xc2/0x120 [ 1765.228575][T25408] __kmalloc_noprof+0xcb/0x510 [ 1765.228593][T25408] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1765.228622][T25408] tomoyo_realpath_from_path+0xb9/0x720 [ 1765.228644][T25408] ? tomoyo_path_number_perm+0x235/0x590 [ 1765.228666][T25408] ? tomoyo_path_number_perm+0x235/0x590 [ 1765.228690][T25408] tomoyo_path_number_perm+0x248/0x590 [ 1765.228711][T25408] ? tomoyo_path_number_perm+0x235/0x590 [ 1765.228737][T25408] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1765.228789][T25408] ? irqentry_exit+0x3b/0x90 [ 1765.228806][T25408] ? lockdep_hardirqs_on+0x7c/0x110 [ 1765.228829][T25408] ? from_kgid+0x8b/0xd0 [ 1765.228847][T25408] ? __pfx_from_kgid+0x10/0x10 [ 1765.228864][T25408] ? tomoyo_path_chown+0xdf/0x1b0 [ 1765.228897][T25408] tomoyo_path_chown+0x14d/0x1b0 [ 1765.228925][T25408] ? __pfx_tomoyo_path_chown+0x10/0x10 [ 1765.228958][T25408] ? chown_common+0x35f/0x670 [ 1765.228982][T25408] security_path_chown+0x12a/0x2e0 [ 1765.229006][T25408] chown_common+0x3bc/0x670 [ 1765.229033][T25408] ? __pfx_chown_common+0x10/0x10 [ 1765.229055][T25408] ? preempt_schedule_common+0x44/0xc0 [ 1765.229094][T25408] ? mnt_get_write_access+0x20c/0x300 [ 1765.229130][T25408] do_fchownat+0x1ac/0x200 [ 1765.229153][T25408] ? __pfx_do_fchownat+0x10/0x10 [ 1765.229182][T25408] __x64_sys_chown+0x7b/0xc0 [ 1765.229204][T25408] do_syscall_64+0xcd/0x250 [ 1765.229228][T25408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1765.229253][T25408] RIP: 0033:0x7f712098cda9 [ 1765.229268][T25408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1765.229283][T25408] RSP: 002b:00007f711e7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 1765.229299][T25408] RAX: ffffffffffffffda RBX: 00007f7120ba6160 RCX: 00007f712098cda9 [ 1765.229310][T25408] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000020000240 [ 1765.229321][T25408] RBP: 00007f711e7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1765.229332][T25408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1765.229343][T25408] R13: 0000000000000000 R14: 00007f7120ba6160 R15: 00007ffd42924378 [ 1765.229370][T25408] [ 1765.483170][ C0] vkms_vblank_simulate: vblank timer overrun [ 1765.489412][T25408] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1765.503739][ T5869] usb usb1-port1: unable to enumerate USB device [ 1766.116012][T25414] mkiss: ax0: crc mode is auto. [ 1766.847999][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 1766.848015][ T29] audit: type=1326 audit(1738726759.660:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25418 comm="syz.0.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1766.925910][ T29] audit: type=1326 audit(1738726759.660:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25418 comm="syz.0.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1767.009264][ T29] audit: type=1326 audit(1738726759.660:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25418 comm="syz.0.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1767.357517][ T29] audit: type=1326 audit(1738726759.660:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25418 comm="syz.0.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1767.720840][ T29] audit: type=1326 audit(1738726759.660:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25418 comm="syz.0.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1767.755878][ T29] audit: type=1326 audit(1738726759.660:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25418 comm="syz.0.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1767.795684][ T29] audit: type=1326 audit(1738726759.660:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25418 comm="syz.0.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1767.899751][ T29] audit: type=1326 audit(1738726759.660:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25418 comm="syz.0.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1767.965413][ T29] audit: type=1326 audit(1738726759.660:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25418 comm="syz.0.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1768.005108][ T29] audit: type=1326 audit(1738726759.660:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25418 comm="syz.0.5332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1768.138987][T25435] netlink: 160 bytes leftover after parsing attributes in process `syz.0.5339'. [ 1769.050505][T22735] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1769.210477][T22735] usb 6-1: Using ep0 maxpacket: 8 [ 1769.321839][T22735] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1769.340230][T22735] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1769.404354][T22735] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1769.438214][T22735] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1769.461268][T22735] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1769.502264][T22735] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1769.514476][T25467] wg2 speed is unknown, defaulting to 1000 [ 1769.523675][T25467] wg2 speed is unknown, defaulting to 1000 [ 1769.530569][T22735] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1769.535711][T25467] wg2 speed is unknown, defaulting to 1000 [ 1769.706138][T25467] infiniband syz2: set active [ 1769.713709][ T5869] wg2 speed is unknown, defaulting to 1000 [ 1769.723887][T25467] infiniband syz2: added wg2 [ 1769.752056][T22735] usb 6-1: usb_control_msg returned -32 [ 1769.775032][T25467] RDS/IB: syz2: added [ 1769.787201][T25467] smc: adding ib device syz2 with port count 1 [ 1769.868000][T22735] usbtmc 6-1:16.0: can't read capabilities [ 1769.933919][T25467] smc: ib device syz2 port 1 has pnetid [ 1769.940710][T22735] wg2 speed is unknown, defaulting to 1000 [ 1769.953673][T25467] wg2 speed is unknown, defaulting to 1000 [ 1771.854915][T24743] usb 6-1: USB disconnect, device number 15 [ 1772.328910][T25497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5353'. [ 1772.353998][T25497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5353'. [ 1772.823861][T25501] syz.5.5352 (25501): drop_caches: 2 [ 1772.830483][T25501] syz.5.5352 (25501): drop_caches: 2 [ 1772.837140][T25467] wg2 speed is unknown, defaulting to 1000 [ 1773.140497][T22735] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1773.304672][T22735] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1773.334435][T22735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.362511][T25467] wg2 speed is unknown, defaulting to 1000 [ 1773.375960][T22735] usb 1-1: Product: syz [ 1773.396103][T22735] usb 1-1: Manufacturer: syz [ 1773.940852][T22735] usb 1-1: SerialNumber: syz [ 1773.953895][T22735] usb 1-1: config 0 descriptor?? [ 1773.980563][T22735] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1774.089580][T25467] wg2 speed is unknown, defaulting to 1000 [ 1774.804524][T25467] wg2 speed is unknown, defaulting to 1000 [ 1774.861944][ T5913] usb 1-1: USB disconnect, device number 61 [ 1775.172647][T25467] wg2 speed is unknown, defaulting to 1000 [ 1776.011040][T25516] siw: device registration error -23 [ 1777.240927][T25546] 9pnet_fd: Insufficient options for proto=fd [ 1777.242279][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 1777.242294][ T29] audit: type=1400 audit(1738726770.090:3458): avc: denied { view } for pid=25545 comm="syz.5.5368" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1777.284698][T25546] netlink: 'syz.5.5368': attribute type 2 has an invalid length. [ 1777.321750][T25546] netlink: 244 bytes leftover after parsing attributes in process `syz.5.5368'. [ 1777.413918][ T29] audit: type=1400 audit(1738726770.090:3459): avc: denied { accept } for pid=25545 comm="syz.5.5368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1777.681024][ T29] audit: type=1326 audit(1738726770.520:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25558 comm="syz.1.5372" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38c158cda9 code=0x0 [ 1777.703884][ C0] vkms_vblank_simulate: vblank timer overrun [ 1777.740845][ T5913] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1777.891673][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 1777.925368][ T5913] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1777.950464][ T5913] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.989298][ T5913] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1778.053429][ T5913] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1778.071440][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.096656][ T5913] usb 1-1: Product: syz [ 1778.135054][ T5913] usb 1-1: Manufacturer: syz [ 1778.153911][ T5913] usb 1-1: SerialNumber: syz [ 1778.462503][T25573] siw: device registration error -23 [ 1778.974148][ T5913] usb 1-1: 0:2 : does not exist [ 1779.702983][T25591] autofs: Unknown parameter '' [ 1780.349320][T25592] netlink: 'syz.6.5380': attribute type 39 has an invalid length. [ 1780.615311][ T5913] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 1780.769505][T25595] netlink: 'syz.5.5381': attribute type 6 has an invalid length. [ 1780.777450][T25595] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5381'. [ 1780.901573][ T5913] usb 1-1: USB disconnect, device number 62 [ 1781.676829][T25607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1782.710156][T25615] netlink: 208 bytes leftover after parsing attributes in process `syz.0.5387'. [ 1783.902515][T25599] tmpfs: Unknown parameter 'hys(Řb†Nj{' [ 1783.994287][ T29] audit: type=1401 audit(1738726776.200:3461): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1784.756818][T25637] netlink: 'syz.0.5393': attribute type 6 has an invalid length. [ 1784.764993][T25637] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5393'. [ 1785.869609][T25650] FAULT_INJECTION: forcing a failure. [ 1785.869609][T25650] name failslab, interval 1, probability 0, space 0, times 0 [ 1785.986924][T25650] CPU: 0 UID: 0 PID: 25650 Comm: syz.6.5398 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 1785.986951][T25650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1785.986961][T25650] Call Trace: [ 1785.986967][T25650] [ 1785.986974][T25650] dump_stack_lvl+0x16c/0x1f0 [ 1785.986999][T25650] should_fail_ex+0x50a/0x650 [ 1785.987022][T25650] ? fs_reclaim_acquire+0xae/0x150 [ 1785.987050][T25650] ? sock_kmalloc+0x111/0x170 [ 1785.987074][T25650] should_failslab+0xc2/0x120 [ 1785.987093][T25650] __kmalloc_noprof+0xcb/0x510 [ 1785.987118][T25650] sock_kmalloc+0x111/0x170 [ 1785.987144][T25650] skcipher_recvmsg+0x49d/0x1020 [ 1785.987179][T25650] ? lock_acquire+0x2f/0xb0 [ 1785.987202][T25650] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1785.987236][T25650] sock_recvmsg+0x1f6/0x250 [ 1785.987264][T25650] __sys_recvfrom+0x204/0x310 [ 1785.987287][T25650] ? __pfx___sys_recvfrom+0x10/0x10 [ 1785.987306][T25650] ? reacquire_held_locks+0x20b/0x4c0 [ 1785.987330][T25650] ? do_user_addr_fault+0xdc7/0x13f0 [ 1785.987383][T25650] __x64_sys_recvfrom+0xe0/0x1c0 [ 1785.987405][T25650] ? do_syscall_64+0x91/0x250 [ 1785.987433][T25650] ? lockdep_hardirqs_on+0x7c/0x110 [ 1785.987452][T25650] do_syscall_64+0xcd/0x250 [ 1785.987473][T25650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.987499][T25650] RIP: 0033:0x7f935cd8eb74 [ 1785.987514][T25650] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 1785.987530][T25650] RSP: 002b:00007f935dba8ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1785.987547][T25650] RAX: ffffffffffffffda RBX: 00007f935dba8fc0 RCX: 00007f935cd8eb74 [ 1785.987560][T25650] RDX: 0000000000001000 RSI: 00007f935dba9010 RDI: 0000000000000004 [ 1785.987571][T25650] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1785.987582][T25650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1785.987593][T25650] R13: 00007f935dba8f68 R14: 00007f935dba9010 R15: 0000000000000000 [ 1785.987618][T25650] [ 1786.190526][ C0] vkms_vblank_simulate: vblank timer overrun [ 1786.387758][T25655] Process accounting resumed [ 1786.497135][ T29] audit: type=1326 audit(1738726779.350:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25666 comm="syz.3.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x50000 [ 1786.560453][ T29] audit: type=1326 audit(1738726779.350:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25666 comm="syz.3.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x50000 [ 1786.590544][T18282] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1786.616625][ T29] audit: type=1326 audit(1738726779.350:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25666 comm="syz.3.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x50000 [ 1786.639821][ C0] vkms_vblank_simulate: vblank timer overrun [ 1786.658181][ T29] audit: type=1326 audit(1738726779.350:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25666 comm="syz.3.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x50000 [ 1786.682441][ T29] audit: type=1326 audit(1738726779.350:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25666 comm="syz.3.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x50000 [ 1786.705630][ C0] vkms_vblank_simulate: vblank timer overrun [ 1786.722959][ T29] audit: type=1326 audit(1738726779.350:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25666 comm="syz.3.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x50000 [ 1786.747874][ T29] audit: type=1326 audit(1738726779.350:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25666 comm="syz.3.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x50000 [ 1786.771084][ C0] vkms_vblank_simulate: vblank timer overrun [ 1786.783227][T18282] usb 6-1: config 0 has no interfaces? [ 1786.789905][T18282] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1786.789975][ T29] audit: type=1326 audit(1738726779.350:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25666 comm="syz.3.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x50000 [ 1786.822453][ C0] vkms_vblank_simulate: vblank timer overrun [ 1786.825417][T18282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.836571][ T29] audit: type=1326 audit(1738726779.350:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25666 comm="syz.3.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x50000 [ 1786.862451][T25671] FAULT_INJECTION: forcing a failure. [ 1786.862451][T25671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1786.875731][T25671] CPU: 0 UID: 0 PID: 25671 Comm: syz.6.5404 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 1786.875755][T25671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1786.875766][T25671] Call Trace: [ 1786.875773][T25671] [ 1786.875780][T25671] dump_stack_lvl+0x16c/0x1f0 [ 1786.875805][T25671] should_fail_ex+0x50a/0x650 [ 1786.875836][T25671] _copy_from_user+0x2e/0xd0 [ 1786.875864][T25671] memdup_user+0x71/0xd0 [ 1786.875892][T25671] strndup_user+0x78/0xe0 [ 1786.875918][T25671] __x64_sys_mount+0x181/0x310 [ 1786.875940][T25671] ? __pfx___x64_sys_mount+0x10/0x10 [ 1786.875969][T25671] do_syscall_64+0xcd/0x250 [ 1786.875991][T25671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.876016][T25671] RIP: 0033:0x7f935cd8cda9 [ 1786.876031][T25671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1786.876049][T25671] RSP: 002b:00007f935db89038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1786.876066][T25671] RAX: ffffffffffffffda RBX: 00007f935cfa6080 RCX: 00007f935cd8cda9 [ 1786.876078][T25671] RDX: 0000000020000300 RSI: 0000000020000280 RDI: 0000000020000240 [ 1786.876090][T25671] RBP: 00007f935db89090 R08: 0000000000000000 R09: 0000000000000000 [ 1786.876102][T25671] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001 [ 1786.876113][T25671] R13: 0000000000000000 R14: 00007f935cfa6080 R15: 00007fff6b552a88 [ 1786.876138][T25671] [ 1786.889162][T25656] netlink: 'syz.0.5396': attribute type 2 has an invalid length. [ 1787.091393][T18282] usb 6-1: config 0 descriptor?? [ 1787.162683][T25656] netlink: 16138 bytes leftover after parsing attributes in process `syz.0.5396'. [ 1787.419525][T24743] usb 6-1: USB disconnect, device number 16 [ 1788.398063][T25684] netlink: 'syz.5.5406': attribute type 6 has an invalid length. [ 1788.406141][T25684] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5406'. [ 1789.649573][T24743] IPVS: starting estimator thread 0... [ 1789.690603][ T29] kauditd_printk_skb: 1388 callbacks suppressed [ 1789.690644][ T29] audit: type=1326 audit(1738726782.540:4859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25666 comm="syz.3.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x50000 [ 1789.762375][ T29] audit: type=1326 audit(1738726782.540:4860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25666 comm="syz.3.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x50000 [ 1789.792631][ T29] audit: type=1326 audit(1738726782.650:4861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25666 comm="syz.3.5403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x50000 [ 1789.860521][T25689] IPVS: using max 35 ests per chain, 84000 per kthread [ 1790.012085][T24743] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1790.170589][ T5870] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 1790.230458][T24743] usb 7-1: Using ep0 maxpacket: 8 [ 1790.237162][T24743] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 1790.247137][T24743] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1790.257029][T24743] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1790.267441][T24743] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1790.283037][T24743] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1790.300992][T24743] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.311107][T24743] usb 7-1: config 0 descriptor?? [ 1790.317880][T25685] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1790.321902][ T5870] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1790.341031][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.359217][ T5870] usb 1-1: config 0 descriptor?? [ 1790.947004][ T29] audit: type=1326 audit(1738726783.770:4862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25707 comm="syz.1.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c158cda9 code=0x7ffc0000 [ 1790.970639][ C0] vkms_vblank_simulate: vblank timer overrun [ 1791.017613][ T29] audit: type=1326 audit(1738726783.770:4863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25707 comm="syz.1.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c158cda9 code=0x7ffc0000 [ 1791.041107][ C0] vkms_vblank_simulate: vblank timer overrun [ 1791.097105][ T29] audit: type=1326 audit(1738726783.780:4864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25707 comm="syz.1.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f38c158cda9 code=0x7ffc0000 [ 1791.120565][ C0] vkms_vblank_simulate: vblank timer overrun [ 1791.174169][ T29] audit: type=1326 audit(1738726783.780:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25707 comm="syz.1.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c158cda9 code=0x7ffc0000 [ 1791.255806][ T29] audit: type=1326 audit(1738726783.780:4866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25707 comm="syz.1.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c158cda9 code=0x7ffc0000 [ 1791.368839][ T29] audit: type=1326 audit(1738726783.780:4867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25707 comm="syz.1.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f38c158cda9 code=0x7ffc0000 [ 1791.460058][T25714] siw: device registration error -23 [ 1791.651270][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.008360][ T29] audit: type=1326 audit(1738726783.780:4868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25707 comm="syz.1.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c158cda9 code=0x7ffc0000 [ 1792.032370][ T5870] pegasus 1-1:0.0: can't reset MAC [ 1792.037672][ T5870] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 1792.049058][ T5870] usb 1-1: USB disconnect, device number 63 [ 1792.733180][T25731] overlayfs: missing 'lowerdir' [ 1793.591604][T25742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5428'. [ 1793.630733][T24743] usb 7-1: USB disconnect, device number 11 [ 1793.728931][T25742] netlink: 'syz.3.5428': attribute type 8 has an invalid length. [ 1793.748402][T25742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5428'. [ 1794.150485][T24743] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1794.390473][T24743] usb 7-1: Using ep0 maxpacket: 8 [ 1794.971294][T24743] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1794.979518][T24743] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1795.040405][T24743] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1795.089593][T24743] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1795.166997][T24743] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1795.230544][T24743] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1795.239877][T24743] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.337965][T25780] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5440'. [ 1795.353527][T25780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5440'. [ 1795.763997][T25787] Bluetooth: hci5: Frame reassembly failed (-84) [ 1796.313201][T24743] usb 7-1: usb_control_msg returned -32 [ 1796.318815][T24743] usbtmc 7-1:16.0: can't read capabilities [ 1797.196708][T25795] xt_policy: output policy not valid in PREROUTING and INPUT [ 1797.758351][ T5869] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1797.990489][ T5869] usb 6-1: Using ep0 maxpacket: 16 [ 1797.998298][ T5869] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1798.007585][ T5869] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1798.016113][ T5869] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1798.024647][ T5869] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1798.033182][ T5869] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1798.042409][ T5869] usb 6-1: config 0 has no interface number 0 [ 1798.048531][ T5869] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1798.060125][ T5869] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1798.070493][ T5869] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1798.088309][ T5869] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1798.551093][T14859] Bluetooth: hci5: command 0xfc11 tx timeout [ 1798.557821][ T5869] usb 6-1: config 0 interface 125 has no altsetting 2 [ 1798.561653][ T5825] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1798.609724][ T5869] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1798.619024][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.627235][ T5869] usb 6-1: Product: syz [ 1798.645442][ T5869] usb 6-1: Manufacturer: syz [ 1798.666785][ T5869] usb 6-1: SerialNumber: syz [ 1798.679260][ T5869] usb 6-1: config 0 descriptor?? [ 1798.730677][ T5869] usb 6-1: can't set config #0, error -71 [ 1798.812380][ T5869] usb 6-1: USB disconnect, device number 17 [ 1798.913790][T22735] usb 7-1: USB disconnect, device number 12 [ 1799.040453][ T5913] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1799.094520][T25828] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1799.117281][T25828] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1799.129538][T25828] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1799.367033][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 1799.375861][ T5913] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1799.392025][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.400114][ T5913] usb 1-1: Product: syz [ 1799.413207][ T5913] usb 1-1: Manufacturer: syz [ 1799.423294][ T5913] usb 1-1: SerialNumber: syz [ 1799.431152][ T5913] usb 1-1: config 0 descriptor?? [ 1799.676467][ T5913] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1802.984190][ T5913] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1803.123119][ T5913] usb 1-1: USB disconnect, device number 64 [ 1803.400587][T25873] xt_policy: output policy not valid in PREROUTING and INPUT [ 1804.201109][ T5869] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1804.885632][T25893] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5467'. [ 1805.300570][ T5869] usb 7-1: Using ep0 maxpacket: 16 [ 1805.334344][ T5869] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 1805.372732][ T5869] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 1805.389667][ T5869] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 1805.400306][ T5869] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 1805.412262][ T5869] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1805.498576][ T5869] usb 7-1: config 0 has no interface number 0 [ 1805.665377][ T5869] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1805.678593][ T5869] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1805.688667][ T5869] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1805.698630][ T5869] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1805.711859][ T5869] usb 7-1: config 0 interface 125 has no altsetting 2 [ 1805.742311][ T5869] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1805.769301][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.792835][ T5869] usb 7-1: Product: syz [ 1805.805412][ T5869] usb 7-1: Manufacturer: syz [ 1805.830139][ T5869] usb 7-1: SerialNumber: syz [ 1805.854013][ T5869] usb 7-1: config 0 descriptor?? [ 1805.882062][ T5869] usb 7-1: selecting invalid altsetting 2 [ 1806.732915][T25914] IPv6: NLM_F_CREATE should be specified when creating new route [ 1808.410657][T18075] usb 7-1: USB disconnect, device number 13 [ 1808.732417][T25930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5478'. [ 1810.442390][T25946] netlink: 'syz.6.5480': attribute type 8 has an invalid length. [ 1810.541172][T24743] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1810.573997][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 1810.580079][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 1810.759733][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 1810.759749][ T29] audit: type=1400 audit(1738726803.610:4903): avc: denied { getopt } for pid=25933 comm="syz.6.5480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1810.785628][ C0] vkms_vblank_simulate: vblank timer overrun [ 1810.840924][T24743] usb 1-1: Using ep0 maxpacket: 8 [ 1810.990416][T25942] ceph: No mds server is up or the cluster is laggy [ 1811.302957][T24743] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1811.346249][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 1811.351090][T24743] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1811.357699][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 1811.544080][T24743] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1811.554599][T24743] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1811.566941][T24743] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1811.597101][T24743] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1812.227232][T24743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.258187][T25954] FAULT_INJECTION: forcing a failure. [ 1812.258187][T25954] name failslab, interval 1, probability 0, space 0, times 0 [ 1812.258710][T24743] usb 1-1: can't set config #16, error -71 [ 1812.330630][T25954] CPU: 0 UID: 0 PID: 25954 Comm: syz.6.5485 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 1812.330664][T25954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1812.330676][T25954] Call Trace: [ 1812.330682][T25954] [ 1812.330690][T25954] dump_stack_lvl+0x16c/0x1f0 [ 1812.330717][T25954] should_fail_ex+0x50a/0x650 [ 1812.330747][T25954] ? fs_reclaim_acquire+0xae/0x150 [ 1812.330775][T25954] ? tomoyo_encode2+0x100/0x3e0 [ 1812.330799][T25954] should_failslab+0xc2/0x120 [ 1812.330820][T25954] __kmalloc_noprof+0xcb/0x510 [ 1812.330838][T25954] ? d_absolute_path+0x137/0x1b0 [ 1812.330861][T25954] ? rcu_is_watching+0x12/0xc0 [ 1812.330884][T25954] tomoyo_encode2+0x100/0x3e0 [ 1812.330910][T25954] tomoyo_encode+0x29/0x50 [ 1812.330932][T25954] tomoyo_realpath_from_path+0x19d/0x720 [ 1812.330964][T25954] tomoyo_path_number_perm+0x248/0x590 [ 1812.330986][T25954] ? tomoyo_path_number_perm+0x235/0x590 [ 1812.331010][T25954] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1812.331059][T25954] ? __pfx_lock_release+0x10/0x10 [ 1812.331083][T25954] ? trace_lock_acquire+0x14e/0x1f0 [ 1812.331109][T25954] ? lock_acquire+0x2f/0xb0 [ 1812.331131][T25954] ? __fget_files+0x40/0x3a0 [ 1812.331153][T25954] ? __fget_files+0x206/0x3a0 [ 1812.331176][T25954] security_file_ioctl+0x9b/0x240 [ 1812.331203][T25954] __x64_sys_ioctl+0xb7/0x200 [ 1812.331232][T25954] do_syscall_64+0xcd/0x250 [ 1812.331256][T25954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1812.331282][T25954] RIP: 0033:0x7f935cd8cda9 [ 1812.331298][T25954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1812.331316][T25954] RSP: 002b:00007f935dbaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1812.331334][T25954] RAX: ffffffffffffffda RBX: 00007f935cfa5fa0 RCX: 00007f935cd8cda9 [ 1812.331347][T25954] RDX: 0000000020000300 RSI: 0000000000003b8c RDI: 0000000000000003 [ 1812.331359][T25954] RBP: 00007f935dbaa090 R08: 0000000000000000 R09: 0000000000000000 [ 1812.331371][T25954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1812.331382][T25954] R13: 0000000000000000 R14: 00007f935cfa5fa0 R15: 00007fff6b552a88 [ 1812.331408][T25954] [ 1812.331565][T25954] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1812.365409][T24743] usb 1-1: USB disconnect, device number 65 [ 1814.251607][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 1815.260458][ T5913] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1815.740513][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 1815.765771][ T5913] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1815.794864][ T5913] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1815.815102][ T5913] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1815.843383][ T5913] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1815.861962][ T5913] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1815.901690][ T5913] usb 1-1: config 0 has no interface number 0 [ 1815.935537][ T5913] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1815.980524][ T5913] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1816.005481][ T5913] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1816.038969][ T5913] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1816.068157][ T5913] usb 1-1: config 0 interface 125 has no altsetting 2 [ 1816.097550][ T5913] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1816.110458][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.129029][ T5913] usb 1-1: Product: syz [ 1816.138021][ T5913] usb 1-1: Manufacturer: syz [ 1816.144718][ T5913] usb 1-1: SerialNumber: syz [ 1816.174507][ T5913] usb 1-1: config 0 descriptor?? [ 1816.191050][ T5913] usb 1-1: selecting invalid altsetting 2 [ 1816.329898][ T29] audit: type=1326 audit(1738726809.180:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25989 comm="syz.3.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1816.393871][ T29] audit: type=1326 audit(1738726809.180:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25989 comm="syz.3.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1816.417394][ C0] vkms_vblank_simulate: vblank timer overrun [ 1816.497716][ T29] audit: type=1326 audit(1738726809.210:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25989 comm="syz.3.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1816.521035][ C0] vkms_vblank_simulate: vblank timer overrun [ 1816.568322][ T29] audit: type=1326 audit(1738726809.210:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25989 comm="syz.3.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1816.606987][ T29] audit: type=1326 audit(1738726809.210:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25989 comm="syz.3.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1816.641591][ T29] audit: type=1326 audit(1738726809.210:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25989 comm="syz.3.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1816.672853][ T29] audit: type=1326 audit(1738726809.210:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25989 comm="syz.3.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1816.705215][ T29] audit: type=1326 audit(1738726809.210:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25989 comm="syz.3.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1816.737510][ T29] audit: type=1326 audit(1738726809.210:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25989 comm="syz.3.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1816.776928][ T29] audit: type=1326 audit(1738726809.210:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25989 comm="syz.3.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1816.800495][ C0] vkms_vblank_simulate: vblank timer overrun [ 1818.142536][ T5913] usb 1-1: USB disconnect, device number 66 [ 1819.327136][T26016] siw: device registration error -23 [ 1820.889028][T26041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5511'. [ 1821.277265][T26041] ip6gretap0: entered promiscuous mode [ 1821.313522][T26041] batadv_slave_0: entered promiscuous mode [ 1821.352731][T26041] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1821.372796][T26041] Cannot create hsr debugfs directory [ 1821.500023][T22735] libceph: connect (1)[c::]:6789 error -101 [ 1821.521258][T22735] libceph: mon0 (1)[c::]:6789 connect error [ 1821.522209][T24743] IPVS: starting estimator thread 0... [ 1821.640836][T26058] IPVS: using max 23 ests per chain, 55200 per kthread [ 1821.759350][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 1821.759392][ T29] audit: type=1326 audit(1738726814.610:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26056 comm="syz.6.5516" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f935cd8cda9 code=0x0 [ 1821.789873][T22735] libceph: connect (1)[c::]:6789 error -101 [ 1821.818753][ C0] vkms_vblank_simulate: vblank timer overrun [ 1821.860147][T26062] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1821.860488][T26062] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1821.860596][T26062] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1821.882640][T26053] ceph: No mds server is up or the cluster is laggy [ 1821.956179][T22735] libceph: mon0 (1)[c::]:6789 connect error [ 1822.361504][T26071] siw: device registration error -23 [ 1823.222344][T26076] veth0_to_bridge: entered promiscuous mode [ 1823.228911][T26075] veth0_to_bridge: left promiscuous mode [ 1824.761532][ T5869] IPVS: starting estimator thread 0... [ 1824.881944][T26110] IPVS: using max 26 ests per chain, 62400 per kthread [ 1825.092315][T26111] could not allocate digest TFM handle tgr160-generic [ 1825.610583][T26129] siw: device registration error -23 [ 1826.486352][ T29] audit: type=1326 audit(1738726819.340:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26136 comm="syz.3.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1826.541732][ T29] audit: type=1326 audit(1738726819.340:4945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26136 comm="syz.3.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1826.566614][ T29] audit: type=1326 audit(1738726819.370:4946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26136 comm="syz.3.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1826.603178][T26139] overlayfs: failed to clone upperpath [ 1826.719933][ T29] audit: type=1326 audit(1738726819.370:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26136 comm="syz.3.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1827.029784][ T29] audit: type=1326 audit(1738726819.370:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26136 comm="syz.3.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1827.053348][ C0] vkms_vblank_simulate: vblank timer overrun [ 1827.060323][ T29] audit: type=1326 audit(1738726819.370:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26136 comm="syz.3.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1827.083855][ C0] vkms_vblank_simulate: vblank timer overrun [ 1827.091241][ T29] audit: type=1326 audit(1738726819.370:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26136 comm="syz.3.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1827.118686][ T29] audit: type=1326 audit(1738726819.370:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26136 comm="syz.3.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1827.684535][ T29] audit: type=1326 audit(1738726819.370:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26136 comm="syz.3.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1827.746057][ T29] audit: type=1326 audit(1738726819.370:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26136 comm="syz.3.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1827.769535][ C0] vkms_vblank_simulate: vblank timer overrun [ 1827.776653][ T29] audit: type=1326 audit(1738726819.370:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26136 comm="syz.3.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1827.800124][ C0] vkms_vblank_simulate: vblank timer overrun [ 1827.855120][T24743] IPVS: starting estimator thread 0... [ 1827.876314][ T29] audit: type=1326 audit(1738726819.370:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26136 comm="syz.3.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1827.919238][ C0] vkms_vblank_simulate: vblank timer overrun [ 1827.951526][ T29] audit: type=1326 audit(1738726819.370:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26136 comm="syz.3.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1828.010606][T26152] IPVS: using max 25 ests per chain, 60000 per kthread [ 1828.048081][ T29] audit: type=1326 audit(1738726819.370:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26136 comm="syz.3.5538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1828.071572][ C0] vkms_vblank_simulate: vblank timer overrun [ 1828.138262][T26162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5544'. [ 1829.740171][T26164] uprobe: syz.5.5545:26164 failed to unregister, leaking uprobe [ 1830.256258][T26192] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1830.368039][T26195] overlayfs: failed to clone upperpath [ 1831.697038][T26206] fuse: Unknown parameter 'fd0x0000000000000004' [ 1833.172325][T26211] tmpfs: Unknown parameter 'usrquota_block_hmit' [ 1834.047553][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 1834.047568][ T29] audit: type=1326 audit(1738726826.900:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26228 comm="syz.5.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1834.083457][ T29] audit: type=1326 audit(1738726826.900:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26228 comm="syz.5.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1834.830839][ T29] audit: type=1326 audit(1738726827.590:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26228 comm="syz.5.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1834.854301][ C0] vkms_vblank_simulate: vblank timer overrun [ 1835.071081][ T29] audit: type=1326 audit(1738726827.590:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26228 comm="syz.5.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f712098cde3 code=0x7ffc0000 [ 1835.180695][ T29] audit: type=1326 audit(1738726827.590:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26228 comm="syz.5.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f712098cde3 code=0x7ffc0000 [ 1835.204000][ C0] vkms_vblank_simulate: vblank timer overrun [ 1835.237028][ T29] audit: type=1326 audit(1738726827.590:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26228 comm="syz.5.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1835.262054][ T29] audit: type=1326 audit(1738726827.590:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26228 comm="syz.5.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1835.285497][ C0] vkms_vblank_simulate: vblank timer overrun [ 1835.297153][ T29] audit: type=1326 audit(1738726827.690:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26228 comm="syz.5.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1835.320597][ C0] vkms_vblank_simulate: vblank timer overrun [ 1835.403189][ T29] audit: type=1326 audit(1738726827.690:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26228 comm="syz.5.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1835.501189][ T29] audit: type=1326 audit(1738726827.690:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26228 comm="syz.5.5562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712098cda9 code=0x7ffc0000 [ 1836.127621][T26261] overlayfs: failed to clone upperpath [ 1837.316240][T26271] afs: Unknown parameter 'dyn€' [ 1837.560770][T26282] FAULT_INJECTION: forcing a failure. [ 1837.560770][T26282] name failslab, interval 1, probability 0, space 0, times 0 [ 1837.573738][T26282] CPU: 0 UID: 0 PID: 26282 Comm: syz.5.5575 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 1837.573760][T26282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1837.573771][T26282] Call Trace: [ 1837.573776][T26282] [ 1837.573783][T26282] dump_stack_lvl+0x16c/0x1f0 [ 1837.573807][T26282] should_fail_ex+0x50a/0x650 [ 1837.573833][T26282] ? fs_reclaim_acquire+0xae/0x150 [ 1837.573857][T26282] ? __register_sysctl_table+0xb4/0x1910 [ 1837.573877][T26282] should_failslab+0xc2/0x120 [ 1837.573896][T26282] __kmalloc_noprof+0xcb/0x510 [ 1837.573920][T26282] __register_sysctl_table+0xb4/0x1910 [ 1837.573947][T26282] ? rcu_is_watching+0x12/0xc0 [ 1837.573970][T26282] ? __pfx___register_sysctl_table+0x10/0x10 [ 1837.573988][T26282] ? register_pidns_sysctls+0x4b/0x1b0 [ 1837.574013][T26282] ? __asan_memcpy+0x3c/0x60 [ 1837.574042][T26282] register_pidns_sysctls+0x117/0x1b0 [ 1837.574068][T26282] copy_pid_ns+0x59e/0xd30 [ 1837.574090][T26282] ? __pfx_copy_pid_ns+0x10/0x10 [ 1837.574112][T26282] ? copy_mnt_ns+0xab/0xa70 [ 1837.574135][T26282] ? copy_ipcs+0xb6/0x610 [ 1837.574160][T26282] create_new_namespaces+0x2aa/0xad0 [ 1837.574193][T26282] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1837.574222][T26282] ksys_unshare+0x45d/0xa40 [ 1837.574241][T26282] ? __pfx_ksys_unshare+0x10/0x10 [ 1837.574260][T26282] ? ksys_write+0x1ba/0x250 [ 1837.574292][T26282] __x64_sys_unshare+0x31/0x40 [ 1837.574310][T26282] do_syscall_64+0xcd/0x250 [ 1837.574333][T26282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1837.574357][T26282] RIP: 0033:0x7f712098cda9 [ 1837.574373][T26282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1837.574391][T26282] RSP: 002b:00007f7121703038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1837.574408][T26282] RAX: ffffffffffffffda RBX: 00007f7120ba6080 RCX: 00007f712098cda9 [ 1837.574420][T26282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 1837.574431][T26282] RBP: 00007f7121703090 R08: 0000000000000000 R09: 0000000000000000 [ 1837.574443][T26282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1837.574453][T26282] R13: 0000000000000000 R14: 00007f7120ba6080 R15: 00007ffd42924378 [ 1837.574477][T26282] [ 1837.801278][ C0] vkms_vblank_simulate: vblank timer overrun [ 1838.560801][T24743] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1838.770551][T24743] usb 1-1: Using ep0 maxpacket: 8 [ 1838.787525][T24743] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1838.852545][T24743] usb 1-1: config 8 has an invalid interface number: 24 but max is 1 [ 1838.890192][T24743] usb 1-1: config 8 has an invalid interface number: 242 but max is 1 [ 1838.930496][T24743] usb 1-1: config 8 has no interface number 0 [ 1838.949500][T24743] usb 1-1: config 8 has no interface number 1 [ 1838.959184][T24743] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 1839.001841][T24743] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 1839.290406][T24743] usb 1-1: config 8 interface 24 has no altsetting 0 [ 1839.297141][T24743] usb 1-1: config 8 interface 242 has no altsetting 0 [ 1839.322571][T24743] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 1840.300406][T24743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.308451][T24743] usb 1-1: Product: syz [ 1840.320408][T24743] usb 1-1: Manufacturer: syz [ 1840.325334][T24743] usb 1-1: SerialNumber: syz [ 1840.393852][T26315] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5585'. [ 1840.616689][T24743] usb 1-1: can't set config #8, error -71 [ 1840.630396][T24743] usb 1-1: USB disconnect, device number 67 [ 1841.043948][T26329] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1841.238958][T26329] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1841.263738][T26329] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1841.325805][T26333] uprobe: syz.1.5588:26333 failed to unregister, leaking uprobe [ 1841.781353][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 1841.781369][ T29] audit: type=1326 audit(1738726834.630:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26345 comm="syz.6.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1841.856188][ T29] audit: type=1326 audit(1738726834.630:5081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26345 comm="syz.6.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1841.881270][ T29] audit: type=1326 audit(1738726834.670:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26345 comm="syz.6.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1841.904632][ C0] vkms_vblank_simulate: vblank timer overrun [ 1841.912913][ T29] audit: type=1326 audit(1738726834.670:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26345 comm="syz.6.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1841.936361][ C0] vkms_vblank_simulate: vblank timer overrun [ 1841.960465][ T29] audit: type=1326 audit(1738726834.670:5084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26345 comm="syz.6.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1841.983988][ C0] vkms_vblank_simulate: vblank timer overrun [ 1842.040680][ T29] audit: type=1326 audit(1738726834.670:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26345 comm="syz.6.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1842.080144][ T29] audit: type=1326 audit(1738726834.670:5086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26345 comm="syz.6.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1843.035351][T26364] siw: device registration error -23 [ 1843.079186][ T29] audit: type=1326 audit(1738726834.670:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26345 comm="syz.6.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1843.102907][ T29] audit: type=1326 audit(1738726834.670:5088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26345 comm="syz.6.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1843.130662][ T29] audit: type=1326 audit(1738726834.670:5089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26345 comm="syz.6.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1843.455706][T26368] tipc: Enabling of bearer rejected, failed to enable media [ 1843.528792][T26376] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5604'. [ 1844.542036][T26403] overlayfs: missing 'lowerdir' [ 1845.415949][T26417] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5616'. [ 1846.842774][T24743] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1847.523447][T24743] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1847.532172][T24743] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1847.541491][T24743] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1847.553151][T24743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.562835][T24743] usb 1-1: Product: syz [ 1847.567064][T24743] usb 1-1: Manufacturer: syz [ 1847.620776][T24743] usb 1-1: SerialNumber: syz [ 1847.649983][T26454] 9pnet_fd: Insufficient options for proto=fd [ 1847.673435][T26454] IPv4: Oversized IP packet from 127.202.26.0 [ 1848.340793][T18075] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1848.627786][T24743] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 1848.646806][T24743] usb 1-1: 2:1 : sample bitwidth 128 in over sample bytes 3 [ 1848.661192][T24743] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1848.701441][T24743] usb 1-1: USB disconnect, device number 68 [ 1848.738322][T26470] wlan0 speed is unknown, defaulting to 1000 [ 1848.746450][T26470] virt_wifi0 speed is unknown, defaulting to 1000 [ 1849.376778][T18075] usb 6-1: Using ep0 maxpacket: 32 [ 1849.384825][T18075] usb 6-1: config index 0 descriptor too short (expected 3364, got 36) [ 1849.393783][T26470] wg2 speed is unknown, defaulting to 1000 [ 1849.400494][T18075] usb 6-1: config 241 has too many interfaces: 66, using maximum allowed: 32 [ 1849.413558][T18075] usb 6-1: config 241 has an invalid descriptor of length 90, skipping remainder of the config [ 1849.434483][T18075] usb 6-1: config 241 has 0 interfaces, different from the descriptor's value: 66 [ 1849.458520][T18075] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1849.475312][T18075] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.492078][T18075] usb 6-1: Product: syz [ 1849.503513][T18075] usb 6-1: Manufacturer: syz [ 1849.515035][T18075] usb 6-1: SerialNumber: syz [ 1849.724252][T26485] overlayfs: failed to clone upperpath [ 1849.743443][T14859] Bluetooth: hci3: unexpected event for opcode 0x2002 [ 1850.330577][ T5913] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1850.502257][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1850.545004][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1850.584327][ T5913] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1850.659331][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.728170][ T5913] usb 1-1: config 0 descriptor?? [ 1851.145853][T18075] usb 6-1: USB disconnect, device number 18 [ 1851.357366][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 1851.357377][ T29] audit: type=1326 audit(1738726844.210:5135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26504 comm="syz.3.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1851.589341][ T29] audit: type=1326 audit(1738726844.210:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26504 comm="syz.3.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1851.617952][ T29] audit: type=1326 audit(1738726844.210:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26504 comm="syz.3.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1851.678280][ T29] audit: type=1326 audit(1738726844.210:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26504 comm="syz.3.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1852.201213][ T29] audit: type=1326 audit(1738726844.210:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26504 comm="syz.3.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1852.224785][ T29] audit: type=1326 audit(1738726844.210:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26504 comm="syz.3.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1852.335473][ T5913] uclogic 0003:256C:006D.0020: failed retrieving string descriptor #100: -71 [ 1852.336142][ T29] audit: type=1326 audit(1738726844.210:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26504 comm="syz.3.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1852.372851][ T29] audit: type=1326 audit(1738726844.210:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26504 comm="syz.3.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1852.398406][ T29] audit: type=1326 audit(1738726844.210:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26504 comm="syz.3.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1852.421907][ T5913] uclogic 0003:256C:006D.0020: failed retrieving pen parameters: -71 [ 1852.421932][ T5913] uclogic 0003:256C:006D.0020: failed probing pen v1 parameters: -71 [ 1852.421966][ T5913] uclogic 0003:256C:006D.0020: failed probing parameters: -71 [ 1852.422028][ T5913] uclogic 0003:256C:006D.0020: probe with driver uclogic failed with error -71 [ 1852.429794][ T5913] usb 1-1: USB disconnect, device number 69 [ 1852.495711][ T29] audit: type=1326 audit(1738726844.210:5144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26504 comm="syz.3.5645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1852.672348][T26516] overlayfs: failed to clone upperpath [ 1853.870788][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.164721][T26521] FAULT_INJECTION: forcing a failure. [ 1854.164721][T26521] name failslab, interval 1, probability 0, space 0, times 0 [ 1854.177574][T26521] CPU: 0 UID: 0 PID: 26521 Comm: syz.5.5648 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 1854.177599][T26521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1854.177607][T26521] Call Trace: [ 1854.177611][T26521] [ 1854.177616][T26521] dump_stack_lvl+0x16c/0x1f0 [ 1854.177631][T26521] should_fail_ex+0x50a/0x650 [ 1854.177647][T26521] ? fs_reclaim_acquire+0xae/0x150 [ 1854.177663][T26521] should_failslab+0xc2/0x120 [ 1854.177676][T26521] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1854.177687][T26521] ? security_inode_alloc+0x3b/0x2b0 [ 1854.177702][T26521] security_inode_alloc+0x3b/0x2b0 [ 1854.177715][T26521] inode_init_always_gfp+0xce4/0x1030 [ 1854.177728][T26521] alloc_inode+0x82/0x230 [ 1854.177739][T26521] sock_alloc+0x40/0x280 [ 1854.177755][T26521] __sock_create+0xc1/0x8d0 [ 1854.177767][T26521] __sys_socketpair+0x1d9/0x5a0 [ 1854.177778][T26521] ? __pfx___sys_socketpair+0x10/0x10 [ 1854.177797][T26521] __x64_sys_socketpair+0x96/0x100 [ 1854.177807][T26521] ? lockdep_hardirqs_on+0x7c/0x110 [ 1854.177818][T26521] do_syscall_64+0xcd/0x250 [ 1854.177830][T26521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1854.177845][T26521] RIP: 0033:0x7f712098cda9 [ 1854.177854][T26521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1854.177864][T26521] RSP: 002b:00007f711e7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1854.177875][T26521] RAX: ffffffffffffffda RBX: 00007f7120ba6160 RCX: 00007f712098cda9 [ 1854.177882][T26521] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 1854.177888][T26521] RBP: 00007f711e7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1854.177895][T26521] R10: 0000000020001480 R11: 0000000000000246 R12: 0000000000000001 [ 1854.177901][T26521] R13: 0000000000000000 R14: 00007f7120ba6160 R15: 00007ffd42924378 [ 1854.177915][T26521] [ 1854.178057][T26521] socket: no more sockets [ 1854.416426][ C0] vkms_vblank_simulate: vblank timer overrun [ 1855.771063][ T5913] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1855.985281][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 1856.079819][T26541] siw: device registration error -23 [ 1856.590969][ T5913] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1856.599381][ T5913] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1856.609602][ T5913] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1856.620535][ T5913] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1856.628815][ T5913] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1856.728501][ T5913] usb 1-1: config 0 has no interface number 0 [ 1856.734747][ T5913] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1856.746061][ T5913] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1856.756223][ T5913] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1856.808628][ T5913] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1857.008207][ T5913] usb 1-1: config 0 interface 125 has no altsetting 2 [ 1857.017445][ T5913] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1857.026612][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.050420][ T5913] usb 1-1: Product: syz [ 1857.054620][ T5913] usb 1-1: Manufacturer: syz [ 1857.060105][ T5913] usb 1-1: SerialNumber: syz [ 1857.408524][T26550] overlayfs: failed to clone upperpath [ 1857.481600][ T5913] usb 1-1: config 0 descriptor?? [ 1857.505900][ T5913] usb 1-1: selecting invalid altsetting 2 [ 1859.014587][T26571] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5663'. [ 1859.048903][T26571] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5663'. [ 1859.835864][ T5868] usb 1-1: USB disconnect, device number 70 [ 1861.260430][T18075] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1862.590572][T18075] usb 1-1: Using ep0 maxpacket: 8 [ 1862.634343][T26608] overlayfs: failed to clone upperpath [ 1863.085795][T18075] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1863.128916][T18075] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1863.177498][T18075] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1863.187616][T18075] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1863.209349][T18075] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1863.330511][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 1863.330526][ T29] audit: type=1400 audit(1738726856.130:5173): avc: denied { map } for pid=26609 comm="syz.6.5675" path="socket:[87292]" dev="sockfs" ino=87292 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1863.359774][T18075] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.565958][ T29] audit: type=1400 audit(1738726856.420:5174): avc: denied { connect } for pid=26624 comm="syz.1.5679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1863.590439][T18075] usb 1-1: usb_control_msg returned -32 [ 1863.596276][T18075] usbtmc 1-1:16.0: can't read capabilities [ 1863.662541][T26628] overlayfs: failed to clone upperpath [ 1864.839070][T26648] overlayfs: failed to clone upperpath [ 1865.405148][ T5913] usb 1-1: USB disconnect, device number 71 [ 1866.519334][T26664] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5692'. [ 1866.592975][T26662] wlan0 speed is unknown, defaulting to 1000 [ 1866.599861][T26662] virt_wifi0 speed is unknown, defaulting to 1000 [ 1866.703167][T26662] wg2 speed is unknown, defaulting to 1000 [ 1867.209069][ T29] audit: type=1400 audit(1738726860.060:5175): avc: denied { create } for pid=26668 comm="syz.3.5693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1867.244127][T26673] wlan0 speed is unknown, defaulting to 1000 [ 1867.251158][T26673] virt_wifi0 speed is unknown, defaulting to 1000 [ 1867.492921][T26673] wg2 speed is unknown, defaulting to 1000 [ 1868.423386][T18282] libceph: connect (1)[c::]:6789 error -101 [ 1868.441055][T18282] libceph: mon0 (1)[c::]:6789 connect error [ 1868.787041][T26686] ceph: No mds server is up or the cluster is laggy [ 1868.800856][T18075] libceph: connect (1)[c::]:6789 error -101 [ 1868.808234][T18075] libceph: mon0 (1)[c::]:6789 connect error [ 1869.070616][T18282] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1869.090193][ T29] audit: type=1326 audit(1738726861.920:5176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26703 comm="syz.6.5703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1869.114425][ C0] vkms_vblank_simulate: vblank timer overrun [ 1869.204149][ T29] audit: type=1326 audit(1738726861.920:5177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26703 comm="syz.6.5703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1869.253018][T18282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1869.280581][ T29] audit: type=1326 audit(1738726861.930:5178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26703 comm="syz.6.5703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1869.304262][T18282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1869.336637][T18282] usb 6-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1869.363638][ T29] audit: type=1326 audit(1738726861.930:5179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26703 comm="syz.6.5703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1869.380689][T18282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1869.387083][ C0] vkms_vblank_simulate: vblank timer overrun [ 1869.536830][T18282] usb 6-1: config 0 descriptor?? [ 1869.540988][ T29] audit: type=1326 audit(1738726861.930:5180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26703 comm="syz.6.5703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1869.565200][ C0] vkms_vblank_simulate: vblank timer overrun [ 1869.578784][ T29] audit: type=1326 audit(1738726861.930:5181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26703 comm="syz.6.5703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1869.602170][ C0] vkms_vblank_simulate: vblank timer overrun [ 1869.650403][ T29] audit: type=1326 audit(1738726861.930:5182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26703 comm="syz.6.5703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1870.381549][T26701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5702'. [ 1870.387299][T18282] wacom 0003:056A:0000.0021: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 1870.391168][ T29] audit: type=1326 audit(1738726861.930:5183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26703 comm="syz.6.5703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1870.435555][T26693] macvlan2: entered allmulticast mode [ 1870.448231][T26693] bond_slave_0: entered promiscuous mode [ 1870.454297][T26693] bond_slave_1: entered promiscuous mode [ 1870.460957][T26701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5702'. [ 1870.515990][T26701] raw_sendmsg: syz.1.5702 forgot to set AF_INET. Fix it! [ 1870.540929][T26693] bond0: entered allmulticast mode [ 1870.551692][T18282] wacom 0003:056A:0000.0021: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.5-1/input0 [ 1870.571386][T26693] bond_slave_0: entered allmulticast mode [ 1870.589480][T18282] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0000.0021/input/input124 [ 1870.629364][ T29] audit: type=1326 audit(1738726861.930:5184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26703 comm="syz.6.5703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1870.652807][ C0] vkms_vblank_simulate: vblank timer overrun [ 1870.669094][T26693] bond_slave_1: entered allmulticast mode [ 1870.718657][T26693] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1870.774281][T26693] team0: Port device macvlan2 added [ 1870.782044][ T29] audit: type=1326 audit(1738726861.930:5185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26703 comm="syz.6.5703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1870.894670][ T5868] usb 6-1: USB disconnect, device number 19 [ 1870.974305][T26734] netlink: 'syz.3.5711': attribute type 10 has an invalid length. [ 1872.121557][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880631b5000: rx timeout, send abort [ 1872.403510][T26751] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1872.632056][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880631b5000: abort rx timeout. Force session deactivation [ 1874.023731][T26763] fuse: Bad value for 'fd' [ 1874.290470][T22735] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1874.450050][T26777] vlan0: entered promiscuous mode [ 1874.532555][T22735] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1874.548016][T22735] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1874.577222][T22735] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1874.603165][T22735] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 1874.627921][T22735] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1874.639426][T22735] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1874.658563][T22735] usb 6-1: Product: syz [ 1874.667959][T22735] usb 6-1: Manufacturer: syz [ 1874.686901][T22735] cdc_wdm 6-1:1.0: skipping garbage [ 1874.692644][T22735] cdc_wdm 6-1:1.0: skipping garbage [ 1874.698072][T22735] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1875.412294][T26795] uprobe: syz.0.5733:26795 failed to unregister, leaking uprobe [ 1875.606727][T26800] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5735'. [ 1875.775787][ T5868] usb 6-1: USB disconnect, device number 20 [ 1876.770092][T26820] bridge_slave_0: left allmulticast mode [ 1877.345619][T26820] bridge_slave_0: left promiscuous mode [ 1877.379733][T26820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1877.669190][T26832] siw: device registration error -23 [ 1878.530607][T18282] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1878.705218][T18282] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1878.720624][T18282] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1878.733326][T18282] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1878.742848][T18282] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1878.751304][T18282] usb 6-1: Product: syz [ 1878.755566][T18282] usb 6-1: Manufacturer: syz [ 1878.760227][T18282] usb 6-1: SerialNumber: syz [ 1878.767256][T18282] usb 6-1: config 0 descriptor?? [ 1878.773213][T26838] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1878.780860][T26838] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1878.981928][T26853] uprobe: syz.1.5754:26853 failed to unregister, leaking uprobe [ 1878.997895][T26838] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1879.011255][T26838] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1879.808915][T18282] Error reading MAC address [ 1879.814649][T26860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5755'. [ 1879.872943][T18282] usb 6-1: USB disconnect, device number 21 [ 1880.133137][T26875] netlink: 'syz.0.5760': attribute type 21 has an invalid length. [ 1880.157764][T26875] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5760'. [ 1880.177759][T26875] netlink: 'syz.0.5760': attribute type 21 has an invalid length. [ 1880.186126][T26875] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5760'. [ 1880.752720][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 1880.752736][ T29] audit: type=1326 audit(1738726873.610:5216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26887 comm="syz.3.5763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1880.782341][ C0] vkms_vblank_simulate: vblank timer overrun [ 1880.900506][ T29] audit: type=1326 audit(1738726873.610:5217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26887 comm="syz.3.5763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1880.958642][ T29] audit: type=1326 audit(1738726873.640:5218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26887 comm="syz.3.5763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1880.982054][ C0] vkms_vblank_simulate: vblank timer overrun [ 1881.003743][ T29] audit: type=1326 audit(1738726873.640:5219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26887 comm="syz.3.5763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1881.066594][ T29] audit: type=1326 audit(1738726873.640:5220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26887 comm="syz.3.5763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1881.123552][ T29] audit: type=1326 audit(1738726873.660:5221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26887 comm="syz.3.5763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1881.186948][ T29] audit: type=1326 audit(1738726873.660:5222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26887 comm="syz.3.5763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1881.300640][ T5913] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1881.344145][ T29] audit: type=1326 audit(1738726873.660:5223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26887 comm="syz.3.5763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1881.370201][ T29] audit: type=1326 audit(1738726873.660:5224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26887 comm="syz.3.5763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1881.405559][ T29] audit: type=1326 audit(1738726873.660:5225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26887 comm="syz.3.5763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1eff8cda9 code=0x7ffc0000 [ 1881.730475][ T5913] usb 6-1: Using ep0 maxpacket: 16 [ 1881.740089][ T5913] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1882.242330][ T5913] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1882.290419][ T5913] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1882.313203][ T5913] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1882.323535][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.338343][ T5913] usb 6-1: Product: syz [ 1882.415373][ T5913] usb 6-1: Manufacturer: syz [ 1882.427463][ T5913] usb 6-1: SerialNumber: syz [ 1883.467562][ T5913] usb 6-1: 0:2 : does not exist [ 1883.559663][T26944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5781'. [ 1883.892801][T26956] cgroup: Invalid name [ 1884.586678][T26956] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1884.709187][T18282] usb 6-1: USB disconnect, device number 22 [ 1884.747379][T26965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5787'. [ 1884.833499][T26968] FAULT_INJECTION: forcing a failure. [ 1884.833499][T26968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1884.877889][T26968] CPU: 1 UID: 0 PID: 26968 Comm: syz.5.5789 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 1884.877916][T26968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1884.877933][T26968] Call Trace: [ 1884.877939][T26968] [ 1884.877947][T26968] dump_stack_lvl+0x16c/0x1f0 [ 1884.877972][T26968] should_fail_ex+0x50a/0x650 [ 1884.878004][T26968] strncpy_from_user+0x3b/0x2d0 [ 1884.878031][T26968] getname_flags.part.0+0x8f/0x550 [ 1884.878059][T26968] getname_flags+0x93/0xf0 [ 1884.878086][T26968] user_path_at+0x24/0x60 [ 1884.878115][T26968] __x64_sys_mount+0x1fd/0x310 [ 1884.878137][T26968] ? __pfx___x64_sys_mount+0x10/0x10 [ 1884.878165][T26968] do_syscall_64+0xcd/0x250 [ 1884.878188][T26968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1884.878214][T26968] RIP: 0033:0x7f712098cda9 [ 1884.878229][T26968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1884.878246][T26968] RSP: 002b:00007f7121724038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1884.878264][T26968] RAX: ffffffffffffffda RBX: 00007f7120ba5fa0 RCX: 00007f712098cda9 [ 1884.878277][T26968] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 00000000200000c0 [ 1884.878290][T26968] RBP: 00007f7121724090 R08: 0000000000000000 R09: 0000000000000000 [ 1884.878301][T26968] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 1884.878313][T26968] R13: 0000000000000001 R14: 00007f7120ba5fa0 R15: 00007ffd42924378 [ 1884.878338][T26968] [ 1885.044722][T26973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5790'. [ 1885.058765][T26956] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.221144][T26972] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1885.237182][T26972] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1885.249835][T26972] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1885.288584][T26978] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1885.305007][T26956] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.436363][T26956] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.797928][T26986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5794'. [ 1885.886687][T26956] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1885.954641][T26956] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.020457][T18282] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1886.094368][T26956] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.175382][T26995] netlink: 15 bytes leftover after parsing attributes in process `syz.6.5797'. [ 1886.191852][T26956] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.230829][T18282] usb 6-1: config 0 has an invalid interface number: 153 but max is 0 [ 1886.277178][T18282] usb 6-1: config 0 has no interface number 0 [ 1886.296687][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 1886.296698][ T29] audit: type=1400 audit(1738726879.140:5340): avc: denied { read } for pid=26994 comm="syz.6.5797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1886.340492][T18282] usb 6-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 1886.419900][T18282] usb 6-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1886.512229][T18282] usb 6-1: config 0 interface 153 has no altsetting 0 [ 1886.557160][T18282] usb 6-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 1886.619627][ T29] audit: type=1326 audit(1738726879.470:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27001 comm="syz.0.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1886.681204][T18282] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.740483][T18282] usb 6-1: Product: syz [ 1886.787495][T18282] usb 6-1: Manufacturer: syz [ 1886.801603][T18282] usb 6-1: SerialNumber: syz [ 1886.807024][ T29] audit: type=1326 audit(1738726879.470:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27001 comm="syz.0.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1886.836414][T18282] usb 6-1: config 0 descriptor?? [ 1886.843332][ T29] audit: type=1326 audit(1738726879.530:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27001 comm="syz.0.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1886.867881][T18282] hub 6-1:0.153: bad descriptor, ignoring hub [ 1886.882503][T18282] hub 6-1:0.153: probe with driver hub failed with error -5 [ 1886.891436][T18282] sierra 6-1:0.153: Sierra USB modem converter detected [ 1886.898568][ T29] audit: type=1326 audit(1738726879.530:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27001 comm="syz.0.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1886.925605][ T29] audit: type=1326 audit(1738726879.530:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27001 comm="syz.0.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1886.949797][ T29] audit: type=1326 audit(1738726879.530:5346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27001 comm="syz.0.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1886.977504][ T29] audit: type=1326 audit(1738726879.530:5347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27001 comm="syz.0.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1887.003776][ T29] audit: type=1326 audit(1738726879.530:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27001 comm="syz.0.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1887.027961][ T29] audit: type=1326 audit(1738726879.530:5349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27001 comm="syz.0.5800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc19598cda9 code=0x7ffc0000 [ 1887.323163][T18282] usb 6-1: USB disconnect, device number 23 [ 1887.329507][T18282] sierra 6-1:0.153: device disconnected [ 1888.464278][T27031] overlayfs: failed to clone upperpath [ 1888.474600][T27031] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5809'. [ 1889.332458][T27037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1890.618972][T27048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1891.472653][T27064] netlink: 'syz.0.5818': attribute type 2 has an invalid length. [ 1891.632993][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 1891.633008][ T29] audit: type=1326 audit(1738726884.490:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27073 comm="syz.6.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1891.706155][ T29] audit: type=1326 audit(1738726884.490:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27073 comm="syz.6.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1891.740267][ T29] audit: type=1326 audit(1738726884.520:5414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27073 comm="syz.6.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1891.864156][ T29] audit: type=1326 audit(1738726884.520:5415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27073 comm="syz.6.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1891.888039][ T29] audit: type=1326 audit(1738726884.520:5416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27073 comm="syz.6.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1892.083498][T27082] siw: device registration error -23 [ 1892.128451][ T29] audit: type=1326 audit(1738726884.520:5417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27073 comm="syz.6.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1892.158396][ T29] audit: type=1326 audit(1738726884.520:5418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27073 comm="syz.6.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1892.184766][ T29] audit: type=1326 audit(1738726884.520:5419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27073 comm="syz.6.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1892.217107][ T29] audit: type=1326 audit(1738726884.520:5420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27073 comm="syz.6.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1892.248939][ T29] audit: type=1326 audit(1738726884.520:5421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27073 comm="syz.6.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935cd8cda9 code=0x7ffc0000 [ 1893.770602][T27100] 9pnet_fd: Insufficient options for proto=fd [ 1894.988674][T27124] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1896.098646][T27138] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 1896.108846][T27137] IPVS: stopping backup sync thread 27138 ... [ 1896.126837][T27137] [ 1896.129157][T27137] ====================================================== [ 1896.136157][T27137] WARNING: possible circular locking dependency detected [ 1896.143171][T27137] 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 Not tainted [ 1896.150272][T27137] ------------------------------------------------------ [ 1896.157304][T27137] syz.5.5843/27137 is trying to acquire lock: [ 1896.163350][T27137] ffffffff8fef49a8 (rtnl_mutex){+.+.}-{4:4}, at: ip_mc_drop_socket+0x9b/0x290 [ 1896.172220][T27137] [ 1896.172220][T27137] but task is already holding lock: [ 1896.179563][T27137] ffff88807838e6a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x101/0xa00 [ 1896.189648][T27137] [ 1896.189648][T27137] which lock already depends on the new lock. [ 1896.189648][T27137] [ 1896.200034][T27137] [ 1896.200034][T27137] the existing dependency chain (in reverse order) is: [ 1896.209029][T27137] [ 1896.209029][T27137] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 1896.217620][T27137] __mutex_lock+0x19b/0xb10 [ 1896.222636][T27137] smc_switch_to_fallback+0x2d/0xa00 [ 1896.228433][T27137] smc_sendmsg+0x13d/0x520 [ 1896.233360][T27137] __sys_sendto+0x488/0x4f0 [ 1896.238374][T27137] __x64_sys_sendto+0xe0/0x1c0 [ 1896.243647][T27137] do_syscall_64+0xcd/0x250 [ 1896.248657][T27137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1896.255079][T27137] [ 1896.255079][T27137] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1896.262722][T27137] lock_sock_nested+0x3a/0xf0 [ 1896.267918][T27137] sockopt_lock_sock+0x54/0x70 [ 1896.273194][T27137] do_ip_setsockopt+0x101/0x3680 [ 1896.278649][T27137] ip_setsockopt+0x59/0xf0 [ 1896.283579][T27137] udp_setsockopt+0x7d/0xd0 [ 1896.288598][T27137] do_sock_setsockopt+0x222/0x480 [ 1896.294139][T27137] __sys_setsockopt+0x1a0/0x230 [ 1896.299511][T27137] __x64_sys_setsockopt+0xbd/0x160 [ 1896.305144][T27137] do_syscall_64+0xcd/0x250 [ 1896.310164][T27137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1896.316577][T27137] [ 1896.316577][T27137] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 1896.323777][T27137] __lock_acquire+0x249e/0x3c40 [ 1896.329143][T27137] lock_acquire.part.0+0x11b/0x380 [ 1896.334771][T27137] __mutex_lock+0x19b/0xb10 [ 1896.339782][T27137] ip_mc_drop_socket+0x9b/0x290 [ 1896.345140][T27137] inet_release+0xa3/0x280 [ 1896.350075][T27137] sock_release+0x8e/0x1d0 [ 1896.354996][T27137] stop_sync_thread+0x285/0x720 [ 1896.360374][T27137] do_ip_vs_set_ctl+0x4ec/0x11c0 [ 1896.365836][T27137] nf_setsockopt+0x8a/0xf0 [ 1896.370767][T27137] ip_setsockopt+0xcb/0xf0 [ 1896.375696][T27137] tcp_setsockopt+0xa4/0x100 [ 1896.380808][T27137] smc_setsockopt+0x1b4/0xa00 [ 1896.385996][T27137] do_sock_setsockopt+0x222/0x480 [ 1896.391537][T27137] __sys_setsockopt+0x1a0/0x230 [ 1896.396898][T27137] __x64_sys_setsockopt+0xbd/0x160 [ 1896.402521][T27137] do_syscall_64+0xcd/0x250 [ 1896.407534][T27137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1896.413939][T27137] [ 1896.413939][T27137] other info that might help us debug this: [ 1896.413939][T27137] [ 1896.424159][T27137] Chain exists of: [ 1896.424159][T27137] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 1896.424159][T27137] [ 1896.437709][T27137] Possible unsafe locking scenario: [ 1896.437709][T27137] [ 1896.445145][T27137] CPU0 CPU1 [ 1896.450493][T27137] ---- ---- [ 1896.455842][T27137] lock(&smc->clcsock_release_lock); [ 1896.461203][T27137] lock(sk_lock-AF_INET); [ 1896.468125][T27137] lock(&smc->clcsock_release_lock); [ 1896.476003][T27137] lock(rtnl_mutex); [ 1896.479969][T27137] [ 1896.479969][T27137] *** DEADLOCK *** [ 1896.479969][T27137] [ 1896.488139][T27137] 1 lock held by syz.5.5843/27137: [ 1896.493235][T27137] #0: ffff88807838e6a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x101/0xa00 [ 1896.503769][T27137] [ 1896.503769][T27137] stack backtrace: [ 1896.509643][T27137] CPU: 1 UID: 0 PID: 27137 Comm: syz.5.5843 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 1896.509665][T27137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1896.509676][T27137] Call Trace: [ 1896.509682][T27137] [ 1896.509689][T27137] dump_stack_lvl+0x116/0x1f0 [ 1896.509711][T27137] print_circular_bug+0x490/0x760 [ 1896.509736][T27137] check_noncircular+0x31a/0x400 [ 1896.509759][T27137] ? __pfx_check_noncircular+0x10/0x10 [ 1896.509781][T27137] ? __pfx_lock_release+0x10/0x10 [ 1896.509805][T27137] ? lockdep_lock+0xc6/0x200 [ 1896.509822][T27137] ? __pfx_lockdep_lock+0x10/0x10 [ 1896.509840][T27137] ? __pfx_mark_lock+0x10/0x10 [ 1896.509862][T27137] __lock_acquire+0x249e/0x3c40 [ 1896.509888][T27137] ? __pfx___lock_acquire+0x10/0x10 [ 1896.509911][T27137] ? __lock_acquire+0x15a9/0x3c40 [ 1896.509935][T27137] lock_acquire.part.0+0x11b/0x380 [ 1896.509958][T27137] ? ip_mc_drop_socket+0x9b/0x290 [ 1896.509977][T27137] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1896.510000][T27137] ? rcu_is_watching+0x12/0xc0 [ 1896.510017][T27137] ? trace_lock_acquire+0x14e/0x1f0 [ 1896.510036][T27137] ? ip_mc_drop_socket+0x9b/0x290 [ 1896.510053][T27137] ? lock_acquire+0x2f/0xb0 [ 1896.510075][T27137] ? ip_mc_drop_socket+0x9b/0x290 [ 1896.510093][T27137] __mutex_lock+0x19b/0xb10 [ 1896.510110][T27137] ? ip_mc_drop_socket+0x9b/0x290 [ 1896.510196][T27137] ? ip_mc_drop_socket+0x9b/0x290 [ 1896.510217][T27137] ? stop_sync_thread+0x23e/0x720 [ 1896.510236][T27137] ? __pfx___mutex_lock+0x10/0x10 [ 1896.510254][T27137] ? mark_held_locks+0x9f/0xe0 [ 1896.510277][T27137] ? _raw_spin_unlock_irq+0x23/0x50 [ 1896.510303][T27137] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 1896.510322][T27137] ? ip_mc_drop_socket+0x9b/0x290 [ 1896.510337][T27137] ? rtnl_lock+0x9/0x20 [ 1896.510359][T27137] ip_mc_drop_socket+0x9b/0x290 [ 1896.510378][T27137] inet_release+0xa3/0x280 [ 1896.510399][T27137] sock_release+0x8e/0x1d0 [ 1896.510416][T27137] stop_sync_thread+0x285/0x720 [ 1896.510438][T27137] do_ip_vs_set_ctl+0x4ec/0x11c0 [ 1896.510461][T27137] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 1896.510484][T27137] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 1896.510504][T27137] ? __pfx_lock_release+0x10/0x10 [ 1896.510525][T27137] ? rcu_is_watching+0x12/0xc0 [ 1896.510544][T27137] ? __mutex_lock+0x1cc/0xb10 [ 1896.510560][T27137] ? mark_held_locks+0x9f/0xe0 [ 1896.510584][T27137] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 1896.510610][T27137] ? nf_setsockopt+0x8a/0xf0 [ 1896.510627][T27137] nf_setsockopt+0x8a/0xf0 [ 1896.510645][T27137] ip_setsockopt+0xcb/0xf0 [ 1896.510668][T27137] tcp_setsockopt+0xa4/0x100 [ 1896.510693][T27137] smc_setsockopt+0x1b4/0xa00 [ 1896.510713][T27137] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1896.510739][T27137] ? __pfx_smc_setsockopt+0x10/0x10 [ 1896.510759][T27137] ? selinux_socket_setsockopt+0x6a/0x80 [ 1896.510780][T27137] ? __pfx_smc_setsockopt+0x10/0x10 [ 1896.510800][T27137] do_sock_setsockopt+0x222/0x480 [ 1896.510823][T27137] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1896.510847][T27137] ? lock_acquire+0x2f/0xb0 [ 1896.510874][T27137] __sys_setsockopt+0x1a0/0x230 [ 1896.510895][T27137] __x64_sys_setsockopt+0xbd/0x160 [ 1896.510914][T27137] ? do_syscall_64+0x91/0x250 [ 1896.510932][T27137] ? lockdep_hardirqs_on+0x7c/0x110 [ 1896.510949][T27137] do_syscall_64+0xcd/0x250 [ 1896.510967][T27137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1896.510991][T27137] RIP: 0033:0x7f712098cda9 [ 1896.511005][T27137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1896.511021][T27137] RSP: 002b:00007f7121724038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1896.511037][T27137] RAX: ffffffffffffffda RBX: 00007f7120ba5fa0 RCX: 00007f712098cda9 [ 1896.511049][T27137] RDX: 000000000000048c RSI: 0000000000000000 RDI: 0000000000000003 [ 1896.511059][T27137] RBP: 00007f7120a0e2a0 R08: 0000000000000018 R09: 0000000000000000 [ 1896.511070][T27137] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000000 [ 1896.511081][T27137] R13: 0000000000000000 R14: 00007f7120ba5fa0 R15: 00007ffd42924378 [ 1896.511097][T27137]