last executing test programs: 13m50.45977523s ago: executing program 1 (id=834): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffc}, 0x1c) listen(r2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000000c0)=0x7, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000240)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) 13m44.151778944s ago: executing program 1 (id=851): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="da2261875f58323cf5704ca92bdcc7e39a892ad9ce2e9482b397d74faa777043c79850203e844203a9e2442046a6d5429a7a66ed82d75475981032f61c1771fdfdafc95b6573e353000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mkdir(&(0x7f0000000340)='./file0\x00', 0x80) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000ce8cce93804500009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x518, 0x0, 0x18c, 0x203, 0x340, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2f8, 0x340, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x16}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x20}]}}, @common=@hl={{0x24}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x574) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r4}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, r6, 0x0, 0x2, 0x4}}, 0x20) close(r5) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) listen(r2, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) 13m42.972765075s ago: executing program 1 (id=852): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca9, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x2, 0x1, 0x2, 0x0, 0x5, 0x11, 0x3, 0x1ff, {0x4, 0x0, 0x0, 0x3, 0x30000000}}}}]}, 0x78}}, 0x0) 13m42.853351451s ago: executing program 1 (id=854): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff0000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0xa}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req={0x5, 0x36, 0x10, 0xf3b799ee}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x8b9, 0x80981) r4 = memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001980)={{0x2000, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c030000190001000000000000000000ac1414bb000000000000000000000000fe88000000000000000000000000000100000000000000040a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a7000000000000000000000000000000020000000a0010000100000000000000e0000600ffffffff000000000000000000000000fe8800000000000000000000000001014e2100014e2000000a0080006c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d432000000ac14140e0000000000000000000000000100000000000000860000000080000009000000000000000000008000000000f60100000000000002000000000000000800000000000000090000000000000001000000010000000800000000000000daf6000000000000090000000000000007000000b30500000900000025bd7000ff3400000200010cd20000000c001c00", @ANYRES32=0x0, @ANYBLOB="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"/467], 0x37c}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 13m37.763411249s ago: executing program 1 (id=863): socket$kcm(0x10, 0x400000002, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) pwritev2(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="d0600b401f39b97bf93ecf49759e94b4519a0de2f87e5c417273a5dce55efb335b22dce602ca972f116438489fdab766171401f130eb1c9e78ec70db15755f97ca197fc3da0b85ea0d2f7bdffcc1caa5810430b5448f4ae272489f5c7ac1e4660c4f7b0446d5457181924a3d4dbfdfee93a14379adfe7c1effdacb69a945", 0x7e}], 0x1, 0xa, 0x6e6f2b53, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00208500000070000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r3}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 13m22.293098971s ago: executing program 32 (id=863): socket$kcm(0x10, 0x400000002, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) pwritev2(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="d0600b401f39b97bf93ecf49759e94b4519a0de2f87e5c417273a5dce55efb335b22dce602ca972f116438489fdab766171401f130eb1c9e78ec70db15755f97ca197fc3da0b85ea0d2f7bdffcc1caa5810430b5448f4ae272489f5c7ac1e4660c4f7b0446d5457181924a3d4dbfdfee93a14379adfe7c1effdacb69a945", 0x7e}], 0x1, 0xa, 0x6e6f2b53, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00208500000070000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r3}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 3m27.914197602s ago: executing program 0 (id=2682): sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@fadd={0x58, 0x114, 0x6, {{0xc, 0xfffffffe}, 0x0, 0x0, 0xfffffffffffffff7, 0x10, 0x1ac, 0x0, 0x20, 0xe}}], 0x58}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000f3d, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 3m26.794032767s ago: executing program 0 (id=2689): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x98, 0x0, 0x40}, {0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x58, 0x0, 0x1, 0x8}, {0x3fe, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40}]}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x0) memfd_create(&(0x7f0000000100)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\xdb\x00p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x04\xc2\xb8I\xa3\xb9\xe2\xa2\xebw^I\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\xcf\xb7\"S\a\x04ry\x00#4\x87m\xf7\xe3\xf5\xa7\xda\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14\xbev\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb9\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8ez\x1eo\x18\xb6#@P&[\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6kYH+\xa5\xdcxUY30x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="010065bd7000fcdbdf254f00000008000300", @ANYRES32=r4, @ANYBLOB="48007a8014000100c396d979a8f802a09c5d7bfaeb3575f21c0002002c8b2ddcc0a3a020196b852ff1e5776edd2fed6a243a33220c000300b38b3e2d8514cc07080004000500000030007a800800040007000000240001006b367eca9776d5c92ac3b99cce28c8dbdebd62217f9c5f46d4b1a11c682b40d61c007a800c000300e028aa46e44ee6830c0003009cf7debf7cdf5a207c007a80080004003465e91c0c0003004a159160a275d9fa08000400ff0f0000080004000700000014000100"], 0x12c}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0x15f) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000000, 0x2010, r3, 0x56d01000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m26.313809482s ago: executing program 0 (id=2697): mkdir(0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES16=r1], 0xf4}, 0x1, 0x0, 0x0, 0x885}, 0x0) r2 = userfaultfd(0x80001) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r5 = syz_open_dev$cec(0x0, 0x0, 0x620c2) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000240)={"c6105ab0", 0x3, 0x10, 0x6, 0x3, 0xffff7fff, "25eeada12062cbfb1a162bb212ea25", '\a\x00', "774cd3b2", "f87c5268", ["32d0f65f93164e8608025cd5", "42deb4a0f37a734b50d94abf", "914eccbaec6c09365069d8a9", "0080000080000068c08b0c00"]}) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x3}}, 0x20) syz_emit_ethernet(0x2050, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x201a, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x0, 0x200, "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"}, {0x0, 0x1ff, "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"}, {0x1, 0x1, "a22d4ba30d6b"}]}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002140)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1}}, {0x8}}}]}]}, 0x7c}}, 0x20002040) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x1b34, 0x8, 0x40000}, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81400003d00010027bd82000000000002"], 0x14d8}}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 3m25.844110616s ago: executing program 0 (id=2700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/70, 0x46}, {&(0x7f0000000440)=""/100, 0x64}, {&(0x7f00000004c0)=""/78, 0x4e}], 0x3, &(0x7f0000000540)=""/176, 0xb0}, 0xe}, {{&(0x7f0000000600)=@tipc=@id, 0x80, &(0x7f0000001980)=[{&(0x7f0000000680)=""/85, 0x55}, {&(0x7f0000000280)=""/11, 0xb}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/172, 0xac}, {&(0x7f0000000700)=""/46, 0x2e}, {&(0x7f0000000740)=""/62, 0x3e}, {&(0x7f00000018c0)=""/183, 0xb7}], 0x7, &(0x7f0000001a00)=""/55, 0x37}, 0x7}, {{&(0x7f0000001a40)=@tipc, 0x80, &(0x7f0000002140)=[{&(0x7f0000001b40)=""/146, 0x92}, {&(0x7f0000001c00)=""/216, 0xd8}, {&(0x7f0000001d00)=""/139, 0x8b}, {&(0x7f0000001dc0)=""/184, 0xb8}, {&(0x7f0000001ac0)=""/4, 0x4}, {&(0x7f0000001e80)=""/66, 0x42}, {&(0x7f0000001f00)=""/115, 0x73}, {&(0x7f0000001f80)=""/165, 0xa5}, {&(0x7f0000002040)=""/242, 0xf2}], 0x9}, 0x9}, {{&(0x7f0000002200)=@x25, 0x80, &(0x7f0000002600)=[{&(0x7f0000002280)=""/74, 0x4a}, {&(0x7f0000002300)=""/179, 0xb3}, {&(0x7f00000023c0)=""/221, 0xdd}, {&(0x7f00000024c0)=""/125, 0x7d}, {&(0x7f0000002540)=""/150, 0x96}], 0x5, &(0x7f0000002680)=""/243, 0xf3}, 0x7}, {{&(0x7f0000002780)=@caif, 0x80, &(0x7f0000003980)=[{&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/97, 0x61}, {&(0x7f0000003880)=""/224, 0xe0}], 0x3, &(0x7f00000039c0)=""/117, 0x75}, 0x4}], 0x5, 0x2000, &(0x7f0000003b80)={0x77359400}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000340)='./bus\x00', r3, 0x0) setreuid(r1, r3) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000500)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000440), 0x1000a) sendfile(r5, r6, &(0x7f0000000000)=0x5, 0x20920c57) socket$rds(0x15, 0x5, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r8, r7, 0x0, 0x23b) mkdirat(r7, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0xe) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100008) r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) preadv(r9, &(0x7f0000001b00)=[{&(0x7f0000000000)=""/228, 0xe4}], 0x1, 0x2, 0xfffffffc) 3m25.622069136s ago: executing program 0 (id=2702): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x169802, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000000000000004000000fc00000000000000", @ANYBLOB="03000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x8000, 0x7, 0x0, 0x100, {{0x19, 0x4, 0x3, 0x2, 0x64, 0x67, 0x0, 0xa6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, @empty, {[@noop, @generic={0x94, 0x2}, @timestamp_prespec={0x44, 0x2c, 0x4c, 0x3, 0x4, [{@local, 0x3}, {@empty, 0xfffffffb}, {@loopback}, {@loopback, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x401}]}, @timestamp={0x44, 0x18, 0x87, 0x0, 0x2, [0x9, 0x2, 0x7fffffff, 0x35d, 0x0]}, @timestamp={0x44, 0x8, 0xe3, 0x0, 0x0, [0x6]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', r5, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = dup(r4) ioctl$BLKRRPART(r6, 0x125f, 0x0) 3m24.639577693s ago: executing program 0 (id=2705): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) (rerun: 64) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0x1) (async, rerun: 32) setuid(0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) 3m9.548392048s ago: executing program 33 (id=2705): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) (rerun: 64) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0x1) (async, rerun: 32) setuid(0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) 2m42.079176753s ago: executing program 6 (id=2919): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fanotify_init(0x200, 0x0) memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) syz_io_uring_setup(0x1831, &(0x7f0000000000)={0x0, 0x6630, 0x0, 0x2, 0x3aa}, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37438e486dd6317ce22080000fffe80000000000000101000007f0c08fcffffff"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYRES16=r1], 0x10) 2m41.642976701s ago: executing program 6 (id=2922): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 2m41.153845119s ago: executing program 6 (id=2926): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000001}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x4, 0x18}]}, &(0x7f00000003c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m40.968599053s ago: executing program 6 (id=2927): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) (async) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1) read$FUSE(r1, 0x0, 0x0) (async) r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) (async, rerun: 64) openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x80002, 0x0) (rerun: 64) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) (async) write$nci(r3, &(0x7f0000000640)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x1, 0x3, 0x3, 0x7, @b={0x7, 0x6, 0x1, 0x2, {0x3, "9ec3d6"}, 0x1}}, 0xc) (async) mknodat$loop(0xffffffffffffffff, 0x0, 0xe9e97264c95a4820, 0x0) (async) syz_usb_control_io$uac1(r2, &(0x7f0000000000)={0x52, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @remote, @local, {[], @mld={0x84, 0x0, 0x0, 0x3, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0xd1, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0xfffffffd, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async, rerun: 32) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400e02000000b77ffe77050000000000000000000000917342016b459992e7718dd929c25452251cce8d8541a707be6c653e57f69762f1182d32ef23c70b069c163eecafdc397214b4706e0973277c7da27fc964fbe7652e773850ba9c59be277a5655ec8be5fa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) 2m40.811791821s ago: executing program 6 (id=2928): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xd, 0x1, 0x670, 0x1, 0x0, r1, 0x7ffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000300), 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x6, 0x1c, &(0x7f0000000400)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x4}, @exit, @jmp={0x5, 0x0, 0x2, 0x6, 0x7, 0x8000000000000022, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8f8}, @map_val={0x18, 0x200872bcd5a1fe2e, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m40.553979173s ago: executing program 6 (id=2930): bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x7d7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b0400000008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080005000101fd"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r3, &(0x7f0000000300)='(', 0x1) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(0x0, 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdcf, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001cc0), 0x400000000000026, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x86, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x3, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x3, 0x5, 0x3c, 0x8f, 0x5, 0x6, 0x3, 0x5, 0x8, 0x3, 0x0, 0x80, 0x0, 0x5, 0xfffffff7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf6, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x9, 0x32, 0xe, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x800009, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x0, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x2, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x9, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0x0, 0x2f9, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x202, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x7, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x80000009, 0x1, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100003000000000000000000007400", @ANYRES32=r7, @ANYBLOB="00000000031201002c0012800b00010062726964676500001c000280050019000700000008000500010000000500170000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 2m25.111311834s ago: executing program 34 (id=2930): bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x7d7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b0400000008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080005000101fd"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r3, &(0x7f0000000300)='(', 0x1) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(0x0, 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdcf, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001cc0), 0x400000000000026, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x86, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x3, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x3, 0x5, 0x3c, 0x8f, 0x5, 0x6, 0x3, 0x5, 0x8, 0x3, 0x0, 0x80, 0x0, 0x5, 0xfffffff7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf6, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x9, 0x32, 0xe, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x800009, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x0, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x2, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x9, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0x0, 0x2f9, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x202, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x7, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x80000009, 0x1, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100003000000000000000000007400", @ANYRES32=r7, @ANYBLOB="00000000031201002c0012800b00010062726964676500001c000280050019000700000008000500010000000500170000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 2m10.667388103s ago: executing program 2 (id=3059): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095000000000025d6"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) read$eventfd(r1, 0x0, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x41) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) mlock2(&(0x7f00000df000/0x4000)=nil, 0x4000, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x240080e4) syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000ec0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) 2m9.85092677s ago: executing program 2 (id=3064): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x141000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0xffffffff}}}}}, 0x0) 2m9.667121721s ago: executing program 2 (id=3066): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) pipe(0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, 0x0, 0x0) ppoll(&(0x7f00000010c0)=[{}, {0xffffffffffffffff, 0xad0}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x18) syz_emit_ethernet(0x1a, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRESDEC=r3, @ANYRESOCT=r1, @ANYRES8=r3], 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r7, 0x40186f40, 0x20000502) clock_settime(0x3, &(0x7f0000000040)={0x77359400}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{0x0}], 0x1}, 0x0) poll(&(0x7f0000000040), 0x92, 0xffffffff) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0xcc61, 0x4) 2m7.912681211s ago: executing program 2 (id=3073): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 2m7.791961233s ago: executing program 2 (id=3075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x80}}, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 2m6.360281797s ago: executing program 2 (id=3080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0904fbff000000000000020000000900020073797a32000000000900010073797a3000000000340004803000018008000100636d700024000280080001"], 0x88}}, 0x0) (fail_nth: 1) 1m50.930417475s ago: executing program 35 (id=3080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0904fbff000000000000020000000900020073797a32000000000900010073797a3000000000340004803000018008000100636d700024000280080001"], 0x88}}, 0x0) (fail_nth: 1) 1m8.175333769s ago: executing program 8 (id=3342): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x4011) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x3, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x827}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x15}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) 1m8.066126343s ago: executing program 8 (id=3343): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) pipe(0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, 0x0, 0x0) ppoll(&(0x7f00000010c0)=[{}, {0xffffffffffffffff, 0xad0}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x18) syz_emit_ethernet(0x1a, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRESDEC=r3, @ANYRESOCT=r1, @ANYRES8=r3], 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0x40186f40, 0x20000502) clock_settime(0x3, &(0x7f0000000040)={0x77359400}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{0x0}], 0x1}, 0x0) poll(&(0x7f0000000040), 0x92, 0xffffffff) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0xcc61, 0x4) 1m7.033102919s ago: executing program 8 (id=3347): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000057c0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="32b972f898cf", 0x6}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x20000000) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, 0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1m6.89795683s ago: executing program 8 (id=3348): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x88901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f00000004c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x201) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipv6_getanyicast={0x14, 0x3e, 0x2, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x0) accept4(r4, &(0x7f00000002c0)=@ethernet={0x0, @local}, &(0x7f00000001c0)=0x80, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001cc0)={r2, 0x1, 0x6, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) keyctl$assume_authority(0x10, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="63c7e190d8e928c7912501000000180001801400020076657468305f6d616376746170000000100002800c0001"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r8, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffffffeaf, 0x0, &(0x7f0000001640), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001000000400e0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006d6163766c616e31000000000000000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) 1m6.756878299s ago: executing program 8 (id=3350): r0 = socket$inet6(0xa, 0x802, 0x0) syslog(0x3, &(0x7f00000006c0)=""/228, 0xe4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) fcntl$dupfd(r1, 0x406, r2) syz_usb_connect(0x0, 0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="120100009a6c8120450502800a0301a2c2c8347d4385ad0bc650210203010902120001000000000904000000582a740084e95fecbcd81c87bc2e360facd20e2006c08c5d21448e1bf5656784a9562e1f4c9e1dae62bb08efcc37f386335461e1d189eed445ef27772c211b0b77eb7695f844b47d039f937c9661c3eabb18d7044ad04de6fa28abde07b2f16350e7aa1818f4e1b4b2839421fa0192c067cfe173fbd892a22185579629c2560477dda94bef54116e7708dcfef0b146b1355f8c2c221fd0c0e1cce35ee729d747fde5db7753ef9e2996d9efcbe473503106a1eff13646922885c658ebec912194a8373d4428bac8b57ab150128f82ee3be459b7a7ded5721449a7b70ecf6d71a1a2331fde8e20436f3fc9322d65286a8b36e916c48b80d01a68ab86c8"], 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x19}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000180)=""/8, &(0x7f0000000240)=0x8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x44}, 0x1, 0xffffffff00000003}, 0x0) write(r0, &(0x7f0000000100)="46cc056cda7f58f859655687718119dc9984797d8ebeb7f998582b", 0x1b) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x31, 0x0}, 0x6}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r8 = getpgrp(0xffffffffffffffff) prlimit64(r8, 0x5, &(0x7f0000000000)={0x4000000005}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000000c0)=0x3b4d) read$msr(r9, &(0x7f0000032680)=""/102383, 0x18fef) ptrace$getenv(0x4201, 0x0, 0x5, &(0x7f0000000140)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000000000000000009de625eb1b00010000006c7e9d74a51b3e0d50ce92086708cb2928834909b5e9b6feafbeba4ec8f42158fffcfa3c2dffed94c90636c95e1ae871cd02a6b9ba1a6d937ebcbfc420a78fdc4c2224e6c29b802a1e6797d4cf195bb55c2f1ef602f79df4763819497fe9b57b96f3bfc1e258fe2c81c50c9bc712660797210088d37a5fb95fe61d60acc5304431bef1a60db885d7f5565823a5831f32ccae8b824d7a46381901d5fcf1ab46e0da7be76c527d7d5620bc4bade0a5dec7f2c68e6fd34ccaeb56cd7da1"], 0x24}}, 0x0) 1m6.365442384s ago: executing program 8 (id=3352): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000180)={0x8, &(0x7f0000000140)=[{0x3, 0x6, 0x2, 0x1}, {0x9, 0x3, 0x9, 0x800}, {0x6, 0xb3, 0x5, 0x9}, {0x1, 0x7, 0xde, 0x80}, {0xfff, 0x11, 0x8, 0x7ff}, {0x0, 0x6, 0x2, 0x9}, {0xb, 0xf, 0x3}, {0x1, 0x1, 0x7, 0x2}]}, 0x10) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffe, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1m5.559199878s ago: executing program 36 (id=3352): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000180)={0x8, &(0x7f0000000140)=[{0x3, 0x6, 0x2, 0x1}, {0x9, 0x3, 0x9, 0x800}, {0x6, 0xb3, 0x5, 0x9}, {0x1, 0x7, 0xde, 0x80}, {0xfff, 0x11, 0x8, 0x7ff}, {0x0, 0x6, 0x2, 0x9}, {0xb, 0xf, 0x3}, {0x1, 0x1, 0x7, 0x2}]}, 0x10) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffe, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 8.91334587s ago: executing program 3 (id=3533): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket(0x1e, 0x2, 0xffffffff) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) pselect6(0x40, &(0x7f0000000280)={0x7, 0x8, 0x8, 0xc4, 0x2, 0x7, 0x5a8c, 0x9}, &(0x7f0000000600)={0x9, 0x8, 0x2, 0x7, 0x7, 0x4, 0x7, 0xb}, &(0x7f0000000640)={0x7, 0x101, 0x8, 0x0, 0x8, 0x6, 0x1086, 0x7}, &(0x7f0000000680)={0x0, 0x989680}, &(0x7f0000000700)={&(0x7f00000006c0)={[0xa]}, 0x8}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x3) 7.769192372s ago: executing program 7 (id=3537): write$smackfs_change_rule(0xffffffffffffffff, &(0x7f0000000240)={',\xc4', 0x20, '+]', 0x20, 'rwxtb', 0x20, 'rwtl'}, 0x11) 7.634394462s ago: executing program 7 (id=3540): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r1, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) recvmsg(r1, 0x0, 0x10022) sendto$inet6(r0, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) 7.564256193s ago: executing program 7 (id=3544): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket(0x1e, 0x2, 0xffffffff) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) pselect6(0x40, &(0x7f0000000280)={0x7, 0x8, 0x8, 0xc4, 0x2, 0x7, 0x5a8c, 0x9}, &(0x7f0000000600)={0x9, 0x8, 0x2, 0x7, 0x7, 0x4, 0x7, 0xb}, &(0x7f0000000640)={0x7, 0x101, 0x8, 0x0, 0x8, 0x6, 0x1086, 0x7}, &(0x7f0000000680)={0x0, 0x989680}, &(0x7f0000000700)={&(0x7f00000006c0)={[0xa]}, 0x8}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x3) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$packet(0x11, 0x3, 0x300) r6 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$smackfs_change_rule(r6, &(0x7f0000000240)={',\xc4', 0x20, '+]', 0x20, 'rwxtb', 0x20, 'rwtl'}, 0x11) 6.732300493s ago: executing program 3 (id=3546): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="8f", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3}, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="6d2eb8fd000003eacca256a6245f60de00000000", @ANYRESOCT, @ANYBLOB="0000000000140000280012800b00010700000000000000000000000000000000100000009c9545d61ba90db0fe8a8fc9c7ca041a0dc009deedc6e3aa46382bfef91b70a6e3961aebf9b60925ae25fc0eec4bd90aa8f6fa4aefe008306e800371558d7b8ec4e3", @ANYRES16, @ANYRES16=r2, @ANYRES16=r1], 0x48}}, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x800) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xf67c, 0x5}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_SYMLINKAT={0x26, 0x48, 0x0, 0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='.\x00', 0x0, 0x0, 0x1}) syz_clone(0x4805cf0c237bbfc9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)="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") ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x2f8, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r9 = syz_open_pts(0xffffffffffffffff, 0x0) r10 = dup3(r9, 0xffffffffffffffff, 0x0) read$FUSE(r10, &(0x7f0000003f80)={0x2020}, 0x2020) 5.699051857s ago: executing program 4 (id=3550): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x3) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ff658c2034073b04ffb1010203010902120001000000000904", @ANYRESOCT=r0], 0x0) 5.614102382s ago: executing program 3 (id=3551): write$smackfs_change_rule(0xffffffffffffffff, &(0x7f0000000240)={',\xc4', 0x20, '+]', 0x20, 'rwxtb', 0x20, 'rwtl'}, 0x11) 4.973434249s ago: executing program 3 (id=3552): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket(0x1e, 0x2, 0xffffffff) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) pselect6(0x40, &(0x7f0000000280)={0x7, 0x8, 0x8, 0xc4, 0x2, 0x7, 0x5a8c, 0x9}, &(0x7f0000000600)={0x9, 0x8, 0x2, 0x7, 0x7, 0x4, 0x7, 0xb}, &(0x7f0000000640)={0x7, 0x101, 0x8, 0x0, 0x8, 0x6, 0x1086, 0x7}, &(0x7f0000000680)={0x0, 0x989680}, &(0x7f0000000700)={&(0x7f00000006c0)={[0xa]}, 0x8}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x3) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 4.87008126s ago: executing program 5 (id=3553): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d172a489e35e43f2ced9183d48b5850b9e1de2c492604f7b27f030d82cf14d7bcbe35579bfbfbcccc3dceb90fc0075c0c67c8b887bd9356b0fc5e5479c0133683c922e936e6d9431f80a38a5f819c00801d677445ad545dd77e14c9d2857682f09a6c774cb7fcbc75e4119f30ffbea7273f5530bff5b6d16b4a49ac80d277773b27d2782de52000af252e8a3512e0b28da697a318e2849d994", 0x106}, {&(0x7f0000001540)="b3da23cbcecb0b0107a496fbe0", 0xd}, {&(0x7f0000000380)="08d69fe50cd7a79471d8419b0bb9ae9b86ca44a80d0bd986922f24a62dd8eec5a0b561b310cdaa32d1cf3a8aa7e804b357ae5dd9eeb928195a18529d312903a94064febfa8ccfc631a0cded488fa8ca30ab8250663c2b424cf00c0ae599a053846", 0x61}, {0x0}, {0x0}], 0x5}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) 4.709329401s ago: executing program 5 (id=3555): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, 0x0) 4.533155742s ago: executing program 5 (id=3556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="8f", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3}, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="6d2eb8fd000003eacca256a6245f60de00000000", @ANYRESOCT, @ANYBLOB="0000000000140000280012800b00010700000000000000000000000000000000100000009c9545d61ba90db0fe8a8fc9c7ca041a0dc009deedc6e3aa46382bfef91b70a6e3961aebf9b60925ae25fc0eec4bd90aa8f6fa4aefe008306e800371558d7b8ec4e3", @ANYRES16, @ANYRES16=r2, @ANYRES16=r1], 0x48}}, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x800) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xf67c, 0x5}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_SYMLINKAT={0x26, 0x48, 0x0, 0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='.\x00', 0x0, 0x0, 0x1}) syz_clone(0x4805cf0c237bbfc9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)="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") r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r9, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x2f8, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r10 = syz_open_pts(r9, 0x0) r11 = dup3(r10, r9, 0x0) read$FUSE(r11, &(0x7f0000003f80)={0x2020}, 0x2020) 4.522154838s ago: executing program 7 (id=3557): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0xf) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c) shutdown(r1, 0x1) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x180, 0x0) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2, 0x14, 0x5, 0x9, 0x11, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xab}, @in={0x2, 0x4e23, @empty}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd27, 0x3500}, @sadb_x_nat_t_type={0x1}]}, 0x88}}, 0x4080) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000002c0)) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400040}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x128, 0x0, 0xae6ce5239b9841f1, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000500)=@gcm_128={{0x304}, "8698c63ad96942ee", "a6530f51490581566b8436c94aa16b67", "bc043432", "977fffe909b51fe1"}, 0x28) openat$mixer(0xffffffffffffff9c, &(0x7f0000000540), 0x420000, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000580), 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'ip6gre0\x00', r4, 0x4, 0x0, 0x2, 0x0, 0x20, @private0, @local, 0x8, 0x10, 0x0, 0x7}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000008c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x134, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x100, 0x7a}}}}, [@NL80211_ATTR_IE={0x2e, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1}}, @ssid={0x0, 0xc, @random="59ca4fbfb6980282cbae6248"}, @mesh_id={0x72, 0x6}, @challenge={0x10, 0x1, 0xb1}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7f}, @NL80211_ATTR_IE={0xbf, 0x2a, [@tim={0x5, 0x46, {0x2, 0x3d, 0x6, "47ef4e97f8d228cbaf366be11e060850bde4ad7dd32ee51f85c384e0b7401e6dc011ad0c2d4e1ea7a98729df9218086a7a5a41b133adbedaab06e4bdfa66f05dc35c23"}}, @ht={0x2d, 0x1a, {0x1, 0x1, 0x3, 0x0, {0x7fff, 0xb, 0x0, 0x8, 0x0, 0x1, 0x1, 0x3}, 0x6, 0x6, 0x2c}}, @rann={0x7e, 0x15, {{0x0, 0x2}, 0x0, 0x10, @broadcast, 0x9, 0x7fff, 0x5}}, @ht={0x2d, 0x1a, {0x0, 0x2, 0x6, 0x0, {0x3ff, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0x3, 0x7}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @channel_switch={0x25, 0x3, {0x1, 0x68, 0x6}}, @ht={0x2d, 0x1a, {0x20, 0x2, 0x5, 0x0, {0x4, 0xf03, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x4, 0x7}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1d4188dce9e7"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x134}, 0x1, 0x0, 0x0, 0x8800}, 0x48014) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, 0x3ed, 0x4, 0x70bd2b, 0x25dfdbfc, "134bb4eb156b2278225a8032ec1b96e54d71587b7971e01a4cac2cf796c2e85f29e0518eca9e35", ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x48404) timer_create(0x2, &(0x7f0000000a00)={0x0, 0x8, 0x1, @tid=r0}, &(0x7f0000000a40)=0x0) clock_gettime(0x0, &(0x7f0000000a80)={0x0, 0x0}) timer_settime(r7, 0x0, &(0x7f0000000ac0)={{r8, r9+60000000}, {0x77359400}}, &(0x7f0000000b00)) rt_sigsuspend(&(0x7f0000000b40)={[0xfff]}, 0x8) pselect6(0x40, &(0x7f0000000b80)={0xfff, 0x0, 0x2, 0x167, 0x1, 0x1, 0x3, 0x5}, &(0x7f0000000bc0)={0x46e4e1c3, 0x4, 0x0, 0x6, 0x3, 0xcd, 0xf, 0x2}, &(0x7f0000000c00)={0x2f, 0x2, 0x7, 0x5, 0xffffffffffffffff, 0x6, 0x2, 0x77}, &(0x7f0000000c40)={0x0, 0x989680}, &(0x7f0000000cc0)={&(0x7f0000000c80)={[0x1]}, 0x8}) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f0000000d00)={0x0, 0x401, @value=0x5}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000d40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001140)={0x0, 0x0, 0x8}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001540)={0x0, 0xab, 0x6, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000001940)={0x10, 0x4, {0xbe, @usage=0x100000000, r10, 0x3ff, 0x0, 0x7fffffffffffffff, 0x2e3f, 0x7f, 0x70, @usage=0x4, 0x7, 0xcc200000, [0xc, 0xffffffffffffffff, 0x9, 0x3, 0x3b, 0x7]}, {0xb, @struct={0x1000, 0x8}, r11, 0x0, 0x5, 0x8, 0x200, 0x1, 0x0, @struct={0x200, 0x3}, 0x357, 0x101, [0xfffffffffffffffc, 0x4, 0x7, 0x59, 0x2, 0x9]}, {0xcaef, @usage=0x9, r12, 0x195, 0x7ff, 0x3, 0x4, 0x0, 0x10, @struct={0x1ff, 0x3}, 0x40, 0x3, [0x9, 0x6, 0x8, 0x100000000, 0x9, 0x3bd1]}, {0x2, 0x3, 0xfffffffffffffff9}}) timer_gettime(r7, &(0x7f0000001d40)) clock_gettime(0x0, &(0x7f0000001d80)={0x0, 0x0}) timer_settime(r7, 0x1, &(0x7f0000001dc0)={{r13, r14+10000000}}, 0x0) 3.475571574s ago: executing program 5 (id=3559): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x8, 0x7, 0x4, 0x0, {{0xa, 0x4, 0x1, 0x7, 0x28, 0x4, 0x0, 0x5, 0x2f, 0x0, @multicast2, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x32, 0x1, 0x8, [{@multicast2, 0x400}, {@multicast1, 0x5}]}]}}}}}) ioperm(0x0, 0x5, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000680)="885a91a7dc9fda53437b934f85e2b6708bac3dc5ce017229da6dfd1aa3ad5b45acf541aaa05176ff260458a66638e9a5eb4fca5bdee3cbedea4d6ed36af0c01a0fe917ffa669688f3a3cdcffafd46f4b6e7b5ce94e6c32efb7c397fcf4c58b81b40e2d1f0f17ab75d40b4c83605ecf627e624ca10dcaf36ee820a9886758b5fdc124cff0d9f973c35cf03b6fd86b6f72afab", 0x92, 0x24000441, &(0x7f0000000500)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) 3.3990236s ago: executing program 7 (id=3560): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)="7c53ec16fb8fb971e149", 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x109040, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020"]) close_range(r3, r4, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x98, 0x4f, 0xec, 0x20, 0xc72, 0x14, 0x27b4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x94, 0x5, 0xd0, 0x5, [{{0x9, 0x4, 0xdf, 0x1, 0x2, 0x43, 0xd1, 0xcf, 0x7f, [], [{{0x9, 0x5, 0x2, 0x10, 0x200, 0x5, 0x9, 0x80}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0xc2, 0x6, 0xf}}]}}]}}]}}, 0x0) syz_usb_connect(0x5, 0x98, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x9f, 0xef, 0xa1, 0x20, 0x5c6, 0x9003, 0x6a01, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x9, 0x16, 0x80, 0x10, [{{0x9, 0x4, 0x4, 0x9, 0x0, 0xcf, 0x2e, 0x20, 0xa, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "a79db30384d3"}, {0x5, 0x24, 0x0, 0x9c}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x0, 0x5, 0x1}, {0x6, 0x24, 0x1a, 0xffff}, [@mbim_extended={0x8, 0x24, 0x1c, 0xa0dd, 0xf, 0x5}, @acm={0x4, 0x24, 0x2, 0xc}, @obex={0x5, 0x24, 0x15, 0x7}, @country_functional={0x12, 0x24, 0x7, 0x3, 0x655f, [0x8, 0xfff7, 0x401, 0x7c, 0x5, 0x10]}, @dmm={0x7, 0x24, 0x14, 0x1, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x6000, 0x4, 0x7, 0x93, 0x8, 0xfe}]}]}}, {{0x9, 0x4, 0x65, 0xd4, 0x1, 0x2, 0x2, 0xff, 0xf7, [@hid_hid={0x9, 0x21, 0x2, 0x7, 0x1, {0x22, 0xbc1}}], [{{0x9, 0x5, 0x3, 0x10, 0x40, 0x9, 0x9, 0x8d}}]}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x9, 0x8, 0x9e, 0x40, 0x62}, 0xf7, &(0x7f0000000100)={0x5, 0xf, 0xf7, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x7, 0xf, 0x8, [0x0, 0x30, 0xc0f0, 0xff00, 0xff603f]}, @generic={0x5b, 0x10, 0x9fb77d1e9746239e, "0c1d0d7555ec2a75d4fe761ede2f812a648ac4ba62d6f4005b4283f1c957ae243c5be491739b1366c5895d1cbfeac0eb24ceb64b5aef68c7a12ad7f3eb4ee72617c6f8bdb8dd2e737819efcd69e2e8f755616f4466cf2da0"}, @generic={0x69, 0x10, 0x0, "a38c9c20e323efbf422a54a59f3861e38aa997a6c670e7aae2f776db918447f100e373ef8c9fc2893d8d258b7ed95c59f07b82fbbc0f0ce9fc4de62ea145a5de4351397be7c5e9e0fab1d2e7cabb388024d974527a668d018037928794ccb8e67f2d651603a5"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xac, 0x8, 0x7, 0x2}]}, 0x3, [{0x9e, &(0x7f0000000200)=@string={0x9e, 0x3, "c340f3f588976d9481902b53a8e4aed68b6a9656473167e4a151356431501b10ef26bef2370a352151e8b8a15657486dd8e4b007378fbdbd078b8a0037ee9da935907468a2d163c96db354503f1c56348136f23522f13f1b2148ac68e965a0d759560c7f54a638937cd759f9d467fdac18fb10411e49fcd1fcaefd7deaa6e5ac3057bd7c63cf8536e70df29d3571433929461796b7727e3ce812cbf4"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x22d}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc09}}]}) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xc7, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x2, 0x1, 0x4}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x250, 0x0, 0xff, 0x9, 0x10, 0x8}, 0xf, &(0x7f0000000400)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x9, 0x1c0}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x413}}, {0x19, &(0x7f0000000500)=@string={0x19, 0x3, "620850d5d018b2967ed67c85d4fc811ff1d258f1816eb4"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc01}}]}) syz_usb_connect(0x3, 0x3d, &(0x7f0000001340)=ANY=[@ANYRES32=0x0], 0x0) 3.361288746s ago: executing program 5 (id=3561): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2.694057292s ago: executing program 9 (id=3563): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x169802, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000000000000004000000fc00000000000000", @ANYRES32, @ANYBLOB="03000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x8000, 0x7, 0x0, 0x100, {{0x18, 0x4, 0x3, 0x2, 0x60, 0x67, 0x0, 0xa6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, @empty, {[@noop, @generic={0x94, 0x2}, @timestamp_prespec={0x44, 0x2c, 0x4c, 0x3, 0x4, [{@local, 0x3}, {@empty, 0xfffffffb}, {@loopback}, {@loopback, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x401}]}, @timestamp={0x44, 0x14, 0x87, 0x0, 0x2, [0x9, 0x2, 0x7fffffff, 0x0]}, @timestamp={0x44, 0x8, 0xe3, 0x0, 0x0, [0x6]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', r5, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = dup(r4) ioctl$BLKRRPART(r6, 0x125f, 0x0) 2.440146334s ago: executing program 3 (id=3564): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='percpu_alloc_percpu\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000104000000000000008000000000", @ANYRES64=r4, @ANYBLOB="600000000040000008000300", @ANYRES32=r2, @ANYBLOB="f7334ef378b1fc46f7d270d222c4153493d76dc3d6cdf8120d8a3ae19ee7d720c3731b0bcab741dad643a5b7b8ea93a3d90464d3ea74638de3cb9d66fa395afe6955e6e01f5dbf1f1bdca7281d0c0b4b39ef2182f2551bb3d1c2ad1aca44e5128ef2c25687c2f3f7d1bc471d836fb352875fd169024964337859648bf9d0ca582364f553df48e54f9bf2c8dd81c248bda2f488abec0ba534e88eca40a96405602c75edc5ed83c651204eb44cf78a5a9dd9c60eccf8c117d8b6108e570117d1b40d1c7416ef86414e08e439bade71a171e4ccb359f4399e0c07394389e6", @ANYRESHEX=r4, @ANYRES16], 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x94) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='percpu_alloc_percpu\x00', r4}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000104000000000000008000000000", @ANYRES64=r4, @ANYBLOB="600000000040000008000300", @ANYRES32=r2, @ANYBLOB="f7334ef378b1fc46f7d270d222c4153493d76dc3d6cdf8120d8a3ae19ee7d720c3731b0bcab741dad643a5b7b8ea93a3d90464d3ea74638de3cb9d66fa395afe6955e6e01f5dbf1f1bdca7281d0c0b4b39ef2182f2551bb3d1c2ad1aca44e5128ef2c25687c2f3f7d1bc471d836fb352875fd169024964337859648bf9d0ca582364f553df48e54f9bf2c8dd81c248bda2f488abec0ba534e88eca40a96405602c75edc5ed83c651204eb44cf78a5a9dd9c60eccf8c117d8b6108e570117d1b40d1c7416ef86414e08e439bade71a171e4ccb359f4399e0c07394389e6", @ANYRESHEX=r4, @ANYRES16], 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x94) (async) 1.706342922s ago: executing program 4 (id=3565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x80}}, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000080)=""/90, 0x5a}], 0x1, 0x7, 0x0) r9 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) 1.606775905s ago: executing program 9 (id=3566): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, 0x0) 1.458859522s ago: executing program 5 (id=3567): r0 = socket$caif_stream(0x25, 0x1, 0x4) listen(r0, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000000100000f0000000000000000000000180001801400018008000100ac1414bb08000200ac0314bb04000280"], 0x30}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001940)={0x0, ""/256, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000aed50000000000000000000085000000d30000009508000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x3ff, 0x12) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001740)={0x0, ""/256, 0x0}) unshare(0x6020400) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000740)={r2, r5, "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", "a8efe2c98746a2307623430ed98672b82a42eff2ddeec755e0991ef903fbaeada1e3c8fe982a95c9a8ba3bf3a3fa164b12508972693e3cd6d8d33bb64462197b02b02fa9d378ec0226bd872710fa0a7b599fc9e8bcbd78f05247fa66e9b08d084d3955934d7d1f27b8ffb0cc052202a183404e4647a98e2221c6e63b2b47843c100d58f6842aa861f17ae9799b8be3a8228c8d1394ff78ddb34dc15871a27506ddb3c6f4d9b26634ad945a07f8e082c1cc4be0c486d41a326c2fd6eb1bc09234d4b43fabfa4130dc5ec6644d0065d75bb3cc04b2165620a2dca6d54e24f4bd8fa0d71f16458b2faaf2889a7fdb84ad6a3cab4aa85bac9ff6756542760f0ee062401b0c84ba36621140da5008eb59d07f7bb974d35c85562a310a713f6896176b45bbbb840c0e6a9147151bc81a49e3b111aa39ddbd29dec94a62ad2618f22b449ef8b13d728dbe1501963a690d25b29b50222e5d8b724e2801c44a83fe005340ea3a1c2770b970b04a8d97a0770361d34d28363878fd68fae0ba50ac07942c15d431dc9b268920eb8da5b1b7cb6e0b85f7925f934aae4508f6f7c033d2ca753f0d94526c2517e73824217f84b34b7c832eca046a8237a33de1351d02e50e666d8cdb27a5d1dcaf90b7e4a5931dc59af2f9e3d09b923a57b89e663368545aad977faf1160610310fada7a7815a0867388fe5b3b0bc72b923df686945f36dda7e38792ed6ef4d52de093f7d7dc7213f8a41cd170d02eb71580f1c5efcdf4b2b1897c9be6a074c2f821207af7ceb4e3bb7d90c170ee7a60fca50bc76e7194627b71e0d264c075fa3bebc9ba6dc047f562b10085e0ed6bde20bec530632c698bca5b8a33ecb6a32da3c44c45d2240a70b97d82da2cf916380e514968869b9c25b002b61627cf620dc610b41badf4a61ddf3e655da445da6260f9bfc95bf51ae5ea0d36263c320c37b06bc67d1fd12edd46ceded67d0f299d073a801f8869344054cabd845e52e8a25e5b3c92012225e7b0e9addb226e4f5ffed1579d1fd1daa202aa0052d954c63b9b483387e0cff43703cf240dc3a660dae0c4489bd2e9b7158c503bc55014be2e5f3fd2518d8d40b89e732f685674430e08990f6ae3f29d0548cd585b7d6b125f9473465513ef32cc0e6555804dfdf79465d5c8f6c81bc271735b55b0d7b57aa90bef2da5464af642ccb81d2b7bc06c14f0b0510b317ccf2857a2cd0c0a9a23ceef619915394f853a0b4514fe07493bf958d4cebe843bba21dcff393e5e380880c955666530a1e480d7c2aceff3e4f840d711736242c5e7d2617d37169a16d298786190fa32681bcc803b306483c7a55b5fb12f10011dd2811d3009fafeedc89a4d51c717c0ff6d9613a1f3f3bcd64f509d3f168d3f08b651fd841b8a7648f8704b8c760855eb40e627f93d5fe624020b449240f3bab29a697610647779e8bd471205e6c72085343499bb1b402fd34c626b4174ef54739ba6262a4f570e2750f39ebf7eb5fd00b837f742b029f70fa5691732da7abe6749df648e1467e1ae01078f3f4f400b69a236fa72b790bc9fe10ce60276c2057c279d25544a0a9a6f9699f584a828e8a390c7cc74743edc3952384ee12688e22d0137c487e0fb9f7b0c341b784ec68c391f759f6cc0a92cd8990425d51dd5d7c50360f2b79411b069de342ca1cbe12289bb49846103170406f4f3573d92f3269cf4e5280b6f1d1a27f5481facf702340c8e8bfea00b35f41525d6ec97ba4eb25d251e98cab71ac31ee31661515ac382e626969062e2bfcf51ab596a0b55d1fe6fd02bf35e207992f35bb2770a105fc4e890e03855e7e286a385c58193256e3155c588ff563f79921775aabda7d47611795b4c90d40672c65e874fc4f55d9d87d8a2bbe1f8948a7dbe4b41b24ababb4ab39f4caf899bd70d4189e1cbd7db2229c37e2f86363707a57acd414cb953044f4535c61155bda07fdd7d9e3305ef8b1b85a9d89425d0f1a9ef98e6ac95373a7715fa109c19072ef99610710ae36e17e24eab92d1f41c975fa782a5f3537b6320cd07d0190fe310d11c7dcfe47dacfd5ef1b112ec516d0eb128d4e354f152cb42acd7ff2a3c09766656214d1dee6a7b3eef2d6a8a38de696efc95ef2c53fcebef97ddfce045b9abffbb5fbb27d5b49d8969b88814c7797cd6a1ea23bbfa06883a193c516624c2a440384eba64a71b127c9669ad11414fe6cf4f3ed21749abe56e9febd92af24afc4fe26812ead335137ec8cb58d0ac5e7dbabeced3dc3afeb289c8becab51e587bae80ca90d4f23e756de41c155d140015bfcb899ce7b29ffca75ef718eaa17766daf1dc3882c0a8a777ebec5cf160acccc8d0d11c5db1bbed8bd3bca01a454ec8014f59af19870ff5a1c1f55f9eb181e9ddfa9da0b15a247a808584a5058885d83640b369a7691580e0486b2c25631a7d7f67b673548ca595a0eeb97e87618f4a47046122c57b7a35f944e39b860b38a9f2728b3dc66cb4f6b55d65cdd74be10b420800bbc44929d4b0f3f8cfb475576a14def08b5cf3b6d62644b33cea18de7d82ca9541604dee2c242eff645cd541ddcc36816d675ba9501e0b22684d1c7744fbf5262a6ad1985d4293bd84a3e10d0d1a33f9c9644597b7faa55f5bbbb26c2dce651838df320cfc2259f3b228d598ea6e0932419ae451035dfdc5556b45f687b944900a2f0c20d1516de7f66f2a1a097e509c9ae05737ba21d3377c30f7d2722a501f9512bb4f42c62d8f9e98afcfcc864d900bfad4425aa8400ea5e83a888f2a66db69788d7c4e3dffb40bdc3c902b5304810022fb6d64c6160e7c82e304995bfd05e9784318c01b49c74da45753393adfea0eb7fcb5f14bf45580b58e3a313f02e395203483974560f036c2f4e241b2c5adf40e40ad4aa1b7c311df9785288692add40809f014c8d8569f8e582690a656aeea33b31931d9fb2e29a1664ca734ee839e5cd1d7e8404c76aca02b86e64091e4537e66bd87f5208f9dca5d8d0cc97aee219e18e22020b22d7323342f42cfb888d333e5ba46165eaa59d7ea7ad822bcc497e8b6f6ce9ac7abd697ba2bc6d6f717a754daf28f703d4711e9b9266aece662866e156bb682ec2c08298f748d31f923fcd0116dd80b85f844bdf12a7e4c50dd64fe3949b03ec5566bb9e950485bb302c31b188924ac35179fad53a26a1d2f3d04c1caa2e550b272ffdd2fb0cc692c1a639b3430a494d8eae292f3205488938e0495c7f157b34053f4313777172bdda395f045af031cca06f5bf48cd1981662e555e24c08d920de4e975f91405903d050161ae9f91028157de011ea36d9407797366ade91276bd96b435da0f3e1abf2b490a11c88c45a5194df78237c9ee414da99da73a6d7aeef0431221c7a1eab9054b1455ef0964d3ef188b01b1b20d64fae9212112de7515c3072f18c8460fa42a2cf3920614d9bc2ff9f30eff27bbfd228179ec3835232ec2eaf3f6c7419de5b0c7cb05cc655be147e7ba95bd42f34a31032edc0d9032fe37201a55db98877f9277494f3ca6ae031bc1b1b071098debbe32cf3ce9db92932c87cac85d21bab9ca1d5bf885c3b9872fa3f7b0a1db1d89c22c1fea76f6d12476839162bfa7a1199e89d8d7229a97c1e63c2ebac6a27e07471b226c93ec02d0d6e2314f73201d03665150cc8987a3a18967cd7992700296267e457a6fbadbcacffc365457dd4c7f15316f1b9f3406cb3d4c43700c4e41fd554c7e8da80eec36dcdc42dac3e98e9c355be94af1dc253e00cfdb984a4e33988e0e540569b8e2bb737d70b1915708bc4f2e9c3a53ebdaa33f646d7bbffc35924286fdca7a46615069d02579f53fb9a050a0e836742e55b2cb8d48800290bc8c064fdfae25ed1889556a1bead78cfb7c1e64e8e92324eedd580e0b942efe554c167a2e401ed66e59dab27cdc764800a492130cc1cc5a19d9a51641f03249081d403833c7ae07afe68f59326b3dd3d44185923e8cc3827bca683474bce00bf77e7e9cc222876060ee2d9f257f02215581cb6333ab913f221a708336d4ba90505a07271cf3b1d93a16a166967d46fc9c1cfac2b2751e0492c6ac62ef56a8df70db84aaf9617352755abf6f83ba88372ce49245912d91c5d8f22c9b240ff3454fbdf19480aad884e90a2875c9f09dda8b399af0bdf4976c3a3999749b131f265f822fb5db854dc9a87158753e7cbadabb60dc4c98c657c0ec7b9d61525c42e380064aed4823a4ee1c46f6deae0f22ed4ac2d71ba4cfb789c007a1e16ccd9ce5f1f6653f86fac89839b2e48727d3db3da27f780a0d3455f8939d52cdc17b04314522260cff45f7ef88dbc4980c0832cf2fb8e40c3d002d0ae9f7ce4aeef0ae311d0544b36f4c1df580b3ea82895055688a8af6c7ecffc935647bafdf4f96888f0d14b39a9f1c8723d34fa23a4b93f6754a1a78631fa1b66b6069ba9817385863855e4919ac296cf028094a3dc5aefd4af80e655c821bfc0b145b96ee294a5d063f73ffb5b1251a9496aed55deb972f1149b60e426009317c267371f5ee5c609f70b2b7df6a2cae73360935cfc9f2f06ba575b39fd17aba5494e6bd9be54acbfbd710ad5bda41d444f6c857df3b1645d17fb66234373a00c92d1d16d277f95e5686d9d02c210e87994534841293fe25a5a14024027ad9e6a23c78165103e7cf10d0e50676d5877bb648fc6e7746b6bbbdd295c30f4273734ca254690c190f99ee5c3608c4ba63ed45933e62ea35c57caaad3c6a2c9d92700cd2d8c2f517b74faab4a10424070bd5378e3e2e2cbbc6de8834a027c05c6c77a0fd7865e32b7eddfe938a52ab2bcea96651f0c2ed04550b2ca40bf187a56fabe8ba903dbef9a5baf5c976ab277f097b5df942fbbb6d2c6bb2870ad6326043643daf06320b32a6287f6c51dd2b3512e26c92c8da07733558fdbc6a746a5589304139e26c252571d26047291fac0144cc30ae545640566d82f7df6a553f886c06ad3622647bef2f5c958e714ae2de0fbfead35692dfc214d3ea8f20c98e20b87ac1d3dea82025b2248527d1f6ff88c7a28f1394ed55cebdc18b71ac329f3d2c476731e65dc0d3899a3cc31c830c33e66290939933181c3bfde3b03352ad9471edad4c3520ceb7d1aa6ea0137bf126652ba9beb660e9c8f3f4f22a2dac12595c0369d5e10bf0a7c0f823ab5bac2706535bff7cc11172eb5d4e0db7789790ab58d9925d1f3bb1ddb2862932e8bf60d3c3652c9ba413c60f4e0d457fc03e9826483ee0d9a8214b52f6bb79c73ba5764fe766388c51407e9f281b7299e4b4fdcceb7d43d54c60f13fcb98de5b05832193c179594a832031d323bccb6fac86a1c7fe4fe18b4443808ab374c26ade200764a3009c5c0c8050131e41a54c9db3aaeb108ce55d444b813c23"}) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000003"], 0x24d8}], 0x1}, 0x0) 706.408224ms ago: executing program 4 (id=3568): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r1, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10022) sendto$inet6(r0, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) 671.472325ms ago: executing program 9 (id=3569): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002580)=@delchain={0x598, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x60}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_route={{0xa}, {0x548, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xc1}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x31}, @TCA_ROUTE4_CLASSID={0x8}, @TCA_ROUTE4_ACT={0x52c, 0x6, [@m_sample={0x3c, 0x6, 0x0, 0x0, {{0xb}, {0x4}, {0xd, 0x6, "e382c42ebd85b3baf2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0xd4, 0x10, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1ff}]}, {0x95, 0x6, "57eb9c56054fd807513303b3f4cf2159c55e35510c777ffa2014e7e694230809b9eb1ed7f293245aebba45a1ea878c207ab5b8ff73b3b3448048e6cac141f39cbeee17794690ddf0bca2ac2a249d9e877c1123d0f06c27f3ebee9569460b9f4d9f5b7b06cfe2883ba47b6dc50a2c7a24c96c854e7df0374432374ea02f1a278cd2549b201fcd47c4e8405d197cf796492a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x11c, 0xf, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x101}, @TCA_CT_ZONE={0x6, 0x4, 0x6}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ea4ceb0a2367847922314f8aa6c591ae"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "58f25e882ecebd3017a6274441c51594"}]}, {0x95, 0x6, "f84ebe84c2d9809d98cb12f2274b5e21a4b137a60d915bfb42d02d4976ad358f638df8594bc932b13ff21d61be8614c3e0d017d21773d441648e714188ceca643a7f306544ce1be061d95d94f171717e049609b7d2b065d9b018db93c08d3479edf5f057f3b5d682c142a7be2a698456dbb28b7070774e11cf4125dc778036c189ec187ceb923d94a23e0d32f0cda5d880"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0x144, 0x15, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x45df, 0x7ff, 0x20000000, 0x4, 0x5}, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x7, 0xffffffffffffffff, 0x6, 0xfffefffd}, @broadcast, @loopback, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x8, 0x20000000, 0x1, 0x6f4f}, @remote, @private=0xa010101, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xaa22, 0x1, 0x2, 0x6}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x10, 0x10000000, 0x8000, 0x1000}, @remote, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x4, 0xc519e6dcfc05c1ab, 0x60, 0x9}, @dev={0xac, 0x14, 0x14, 0x36}, @broadcast, 0xffff80, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x6, 0x5, 0xd5a, 0x7}, @local, @rand_addr=0x64010102, 0xff000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x50, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x2, 0x0, 0xfffffffe, 0xd067}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}, @m_vlan={0xc0, 0x12, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa89}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x2, 0x6, 0x0, 0x5}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x9}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcfc}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffeffff, 0x8001, 0xc4b946a17a8dc1c2, 0x8001, 0xe}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x9, 0x3, 0x8, 0x10}, 0x3}}]}, {0x5, 0x6, "e4"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0xa8, 0x0, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x3, 0x8, 0xf, 0x5}, 0xd}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}]}, {0x4d, 0x6, "1fc2b930a8ac3095779c3063dff3c4ea055ddb1fae9761fc8361da5826567d26fd0da9681eb7c715c2ee2018c7b19e566c8d0c23d042ef74b25c52720e4448e639a59c6db39e83fe45"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}}]}, 0x598}, 0x1, 0x0, 0x0, 0x4004014}, 0x40004) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 617.597409ms ago: executing program 3 (id=3570): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x2000c050) (async) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, 0x0, 0x0}, 0x20) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009210000000122010009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x300000b, 0x10, r1, 0xc4b17000) (async) listen(r4, 0x0) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f00000006c0)={0x24, &(0x7f0000000500)={0x20, 0x8, 0xe5, {0xe5, 0x10, "bf75432b5772df89a4929973f2afe616fb52c430bda3414ff0e9ccf0b64495f2fbf3fb81068a7c90a11dfd2ab7b1352454f3e17c25a62c60758ae5efa04ed04b7cfc279614105b98d83c754cc24d7aa75f78cdad84a92b0fa5cd3f9bf00b3d3a893d486e2e1b467331e3836fb1b111d030da381a0c7db7ff86b03bbecde6c054c8554129e93ee3bd88206c4f35efc7471d8ae8327c5435403e192e3469862441413d88699fdda9ec456bfe7cdb10affb4aa6087f067d3c87c3537dc58ab77fc362bae8f28ab525badf957f4cafbd63520d6562a82acb0058303a0b5cffe9dddfeebe34"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, &(0x7f0000000640)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x64, 0x1, {0x22, 0xad5}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x40, 0x15, 0x5f, "ad9ef0eead326630eed2860cd79379f955f802dd18a2328227963bac4ddd2293964d3c3e8d54c446aa436cd901cf4aae33cde0d0e8b8a57bfacc0cc68552f12c126debdc874298f2654e7c0084a496b4163a547346c34b74ec4fba3a26aa5e"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xf0}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000800)={0x20, 0x1, 0x7a, "f5b0eef84649c852e0f56d76adb862b8a883d1ab7b411a329253d3c7537a60ade885e2cd328ed896a533a794dd25ec2bb5358b9b19d1d3c9d21b68cf437248ec8c09d1799edc95341a88b247c0421845a533b5fc6359a4c5f0fc95b3542ec2239989bca9e29be0f20e144a9b8e77cd2b0fdc944c9f3569445edc"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0xaf}}) (async) r8 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x8000, 0x7800, 0x9, 0x7, {{0x12, 0x4, 0x2, 0x1b, 0x48, 0x65, 0x0, 0x2, 0x29, 0x0, @loopback, @private=0xa010101, {[@rr={0x7, 0x17, 0x3a, [@local, @loopback, @rand_addr=0x64010101, @multicast2, @local]}, @ssrr={0x89, 0xb, 0x4f, [@loopback, @broadcast]}, @end, @ssrr={0x89, 0xf, 0x6f, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}}}) sendto$packet(r8, &(0x7f0000000180)="6a37d3c7bb3ddc1a03ff6e95885a3b0227d050782a3c080d014551c580a9abf8c4b3b7206e48dbace1c10e2e97a37193347f0d76309ce52cbe4e57503df8aa1edbd8c4de308c07fbc34a3b3474cc61779805382972705ff7dfaf2e1e37ad4481bb2747cd144b5c14bf738108bb8aba1263bb5613a912f34cb27b3d92a340b9515c1c0819bd9a218f290d94751e18e520522507076c6b4603c8052d2a818fc95ebbdd1bb6d5139f12f5d6a5eba71d87b7f6110aeb2aaea607275a69ae1530fddd3c302d1fa4f01167abcefb07d8a0ed65", 0xd0, 0x4, &(0x7f0000000480)={0x11, 0x1b, r9, 0x1, 0x43, 0x6, @multicast}, 0x14) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r10, 0x80284504, &(0x7f0000000380)=""/250) 488.299521ms ago: executing program 9 (id=3571): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) ioperm(0x0, 0x5, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000680)="885a91a7dc9fda53437b934f85e2b6708bac3dc5ce017229da6dfd1aa3ad5b45acf541aaa05176ff260458a66638e9a5eb4fca5bdee3cbedea4d6ed36af0c01a0fe917ffa669688f3a3cdcffafd46f4b6e7b5ce94e6c32efb7c397fcf4c58b81b40e2d1f0f17ab75d40b4c83605ecf627e624ca10dcaf36ee820a9886758b5fdc124cff0d9f973c35cf03b6fd86b6f72afab", 0x92, 0x24000441, &(0x7f0000000500)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) 411.477098ms ago: executing program 4 (id=3572): openat$iommufd(0xffffffffffffff9c, 0x0, 0x88081, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet6(0xa, 0x806, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x588, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 298.12433ms ago: executing program 9 (id=3573): openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000090601020000000000000000000000000900020073797a31000000000500010007000000100007800c00"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 173.616827ms ago: executing program 4 (id=3574): r0 = openat$smackfs_change_rule(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_change_rule(r0, &(0x7f0000000240)={',\xc4', 0x20, '+]', 0x20, 'rwxtb', 0x20, 'rwtl'}, 0x11) 78.358446ms ago: executing program 4 (id=3575): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0xffffffff}}}}}, 0x0) 9.953044ms ago: executing program 7 (id=3576): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket(0x1e, 0x2, 0xffffffff) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) pselect6(0x40, &(0x7f0000000280)={0x7, 0x8, 0x8, 0xc4, 0x2, 0x7, 0x5a8c, 0x9}, &(0x7f0000000600)={0x9, 0x8, 0x2, 0x7, 0x7, 0x4, 0x7, 0xb}, &(0x7f0000000640)={0x7, 0x101, 0x8, 0x0, 0x8, 0x6, 0x1086, 0x7}, &(0x7f0000000680)={0x0, 0x989680}, &(0x7f0000000700)={&(0x7f00000006c0)={[0xa]}, 0x8}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x3) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 0s ago: executing program 9 (id=3577): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x3b, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/smackfs/access\x00', 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, 0x0, 0x0) connect$pptp(r4, &(0x7f0000000280)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f00000004c0)) close_range(0xffffffffffffffff, r2, 0x2) pselect6(0x40, &(0x7f0000004580), &(0x7f0000000080)={0x3fe, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000140)=""/53, 0x35}], 0x1, 0x2000000, 0x0) kernel console output (not intermixed with test programs): value: 3 [ 1117.528478][ T2146] usb 4-1: config 1 has no interface number 1 [ 1117.528521][ T2146] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1117.533219][ T2146] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1117.572702][T17665] overlayfs: failed to resolve './file0': -2 [ 1117.592844][ T2146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.630474][ T2146] usb 4-1: Product: syz [ 1117.649975][ T2146] usb 4-1: Manufacturer: syz [ 1117.661794][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 1117.669312][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.691076][ T2146] usb 4-1: SerialNumber: syz [ 1117.698216][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.710750][ T5886] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 1117.723903][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.743285][ T5886] usb 5-1: config 0 descriptor?? [ 1117.770429][T17674] openvswitch: netlink: Actions may not be safe on all matching packets [ 1117.862046][ T5887] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1117.946776][ T2146] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1117.961681][ T2146] usb 4-1: MIDIStreaming interface descriptor not found [ 1118.022386][ T5887] usb 9-1: Using ep0 maxpacket: 8 [ 1118.026112][ T2146] usb 4-1: USB disconnect, device number 57 [ 1118.029776][ T5887] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1118.054427][ T5887] usb 9-1: config 0 has no interface number 0 [ 1118.060558][ T5887] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1118.118092][ T5887] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1118.152509][ T5887] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.176433][ T5887] usb 9-1: config 0 descriptor?? [ 1118.217635][ T5887] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1118.325969][ T6491] udevd[6491]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1118.418521][T17688] FAULT_INJECTION: forcing a failure. [ 1118.418521][T17688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1118.432701][T17688] CPU: 1 UID: 0 PID: 17688 Comm: syz.7.3218 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1118.443149][T17688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1118.453214][T17688] Call Trace: [ 1118.456490][T17688] [ 1118.459420][T17688] dump_stack_lvl+0x241/0x360 [ 1118.464114][T17688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1118.469335][T17688] ? __pfx__printk+0x10/0x10 [ 1118.473934][T17688] ? __pfx_lock_release+0x10/0x10 [ 1118.478957][T17688] should_fail_ex+0x3b0/0x4e0 [ 1118.483634][T17688] _copy_from_user+0x2f/0xc0 [ 1118.488225][T17688] __sys_bpf+0x1a4/0x810 [ 1118.492474][T17688] ? __pfx___sys_bpf+0x10/0x10 [ 1118.497243][T17688] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1118.503228][T17688] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1118.509554][T17688] ? do_syscall_64+0x100/0x230 [ 1118.514318][T17688] __x64_sys_bpf+0x7c/0x90 [ 1118.518732][T17688] do_syscall_64+0xf3/0x230 [ 1118.523241][T17688] ? clear_bhb_loop+0x35/0x90 [ 1118.527916][T17688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.533809][T17688] RIP: 0033:0x7f7709b7e759 [ 1118.538218][T17688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1118.557818][T17688] RSP: 002b:00007f770a9bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1118.566231][T17688] RAX: ffffffffffffffda RBX: 00007f7709d35f80 RCX: 00007f7709b7e759 [ 1118.574196][T17688] RDX: 0000000000000020 RSI: 0000000020000040 RDI: 0000000000000009 [ 1118.582163][T17688] RBP: 00007f770a9bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1118.590127][T17688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1118.598088][T17688] R13: 0000000000000000 R14: 00007f7709d35f80 R15: 00007ffcb5c405a8 [ 1118.606063][T17688] [ 1118.657494][ T5887] usb 9-1: USB disconnect, device number 2 [ 1118.672933][ T5887] iowarrior 9-1:0.1: I/O-Warror #0 now disconnected [ 1120.081772][ T5886] usbhid 5-1:0.0: can't add hid device: -71 [ 1120.087809][ T5886] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1120.251795][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 1120.251813][ T29] audit: type=1326 audit(1732093515.200:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17694 comm="syz.5.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8777e759 code=0x7ffc0000 [ 1120.311715][ T5886] usb 5-1: USB disconnect, device number 32 [ 1120.331629][ T29] audit: type=1326 audit(1732093515.200:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17694 comm="syz.5.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8777e759 code=0x7ffc0000 [ 1120.371668][ T29] audit: type=1326 audit(1732093515.220:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17694 comm="syz.5.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fde8777e759 code=0x7ffc0000 [ 1120.386436][ T5832] Bluetooth: hci6: unexpected Set CIG Parameters response data [ 1120.393571][ T29] audit: type=1326 audit(1732093515.240:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17694 comm="syz.5.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8777e759 code=0x7ffc0000 [ 1120.402150][ T5832] Bluetooth: hci6: unexpected event for opcode 0x2062 [ 1120.422863][ T29] audit: type=1326 audit(1732093515.280:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17694 comm="syz.5.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fde8777e759 code=0x7ffc0000 [ 1120.422900][ T29] audit: type=1326 audit(1732093515.280:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17694 comm="syz.5.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8777e759 code=0x7ffc0000 [ 1120.422929][ T29] audit: type=1326 audit(1732093515.290:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17694 comm="syz.5.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde8777e759 code=0x7ffc0000 [ 1120.422958][ T29] audit: type=1326 audit(1732093515.290:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17694 comm="syz.5.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8777e759 code=0x7ffc0000 [ 1120.422988][ T29] audit: type=1326 audit(1732093515.290:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17694 comm="syz.5.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde8777e759 code=0x7ffc0000 [ 1120.591276][ T29] audit: type=1326 audit(1732093515.290:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17694 comm="syz.5.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8777e759 code=0x7ffc0000 [ 1120.685167][T17712] bridge_slave_1: left allmulticast mode [ 1120.691359][T17712] bridge_slave_1: left promiscuous mode [ 1120.698986][T17712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.521144][T17726] fuse: Unknown parameter '0x00000000000000040x0000000000000004' [ 1122.502869][ T5886] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1122.575444][T17743] FAULT_INJECTION: forcing a failure. [ 1122.575444][T17743] name failslab, interval 1, probability 0, space 0, times 0 [ 1122.614207][T17743] CPU: 0 UID: 0 PID: 17743 Comm: syz.3.3234 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1122.624670][T17743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1122.634746][T17743] Call Trace: [ 1122.638044][T17743] [ 1122.640988][T17743] dump_stack_lvl+0x241/0x360 [ 1122.645683][T17743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1122.650882][T17743] ? __pfx__printk+0x10/0x10 [ 1122.655476][T17743] ? fs_reclaim_acquire+0x93/0x130 [ 1122.660586][T17743] ? __pfx___might_resched+0x10/0x10 [ 1122.665873][T17743] should_fail_ex+0x3b0/0x4e0 [ 1122.670550][T17743] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1122.676272][T17743] should_failslab+0xac/0x100 [ 1122.680947][T17743] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1122.686667][T17743] __kmalloc_noprof+0xd8/0x400 [ 1122.691432][T17743] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1122.696984][T17743] tomoyo_path_number_perm+0x236/0x860 [ 1122.702443][T17743] ? __lock_acquire+0x1397/0x2100 [ 1122.707461][T17743] ? tomoyo_path_number_perm+0x206/0x860 [ 1122.713092][T17743] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1122.719096][T17743] ? __fget_files+0x2a/0x410 [ 1122.723688][T17743] ? __fget_files+0x2a/0x410 [ 1122.728278][T17743] security_file_ioctl+0xc6/0x2a0 [ 1122.733302][T17743] __se_sys_ioctl+0x46/0x170 [ 1122.737892][T17743] do_syscall_64+0xf3/0x230 [ 1122.742391][T17743] ? clear_bhb_loop+0x35/0x90 [ 1122.747065][T17743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.752959][T17743] RIP: 0033:0x7fc73ef7e759 [ 1122.757368][T17743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1122.776966][T17743] RSP: 002b:00007fc73fe43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1122.785377][T17743] RAX: ffffffffffffffda RBX: 00007fc73f135f80 RCX: 00007fc73ef7e759 [ 1122.793346][T17743] RDX: 0000000020000080 RSI: 00000000c02c564a RDI: 0000000000000003 [ 1122.801311][T17743] RBP: 00007fc73fe43090 R08: 0000000000000000 R09: 0000000000000000 [ 1122.809275][T17743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1122.817251][T17743] R13: 0000000000000000 R14: 00007fc73f135f80 R15: 00007ffce25feda8 [ 1122.825244][T17743] [ 1122.853924][T17743] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1123.098752][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 1123.249205][ T5886] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.261086][ T5886] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.271384][ T5886] usb 6-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1123.285649][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1123.293381][ T5886] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1123.302837][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.360925][T17760] 9pnet_fd: Insufficient options for proto=fd [ 1123.387836][ T5887] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1123.778848][ T5886] usb 6-1: config 0 descriptor?? [ 1124.247427][ T5886] hid (null): invalid report_count 593612431 [ 1124.262535][ T5887] usb 9-1: Using ep0 maxpacket: 8 [ 1124.269278][ T5887] usb 9-1: config 0 has an invalid interface number: 32 but max is 1 [ 1124.270048][ T5886] creative-sb0540 0003:041E:3100.000D: invalid report_count 593612431 [ 1124.277554][ T5887] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.315230][ T5887] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1124.330334][ T5887] usb 9-1: config 0 has no interface number 0 [ 1124.333646][ T5887] usb 9-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=96.af [ 1124.333676][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.333698][ T5887] usb 9-1: Product: syz [ 1124.333715][ T5887] usb 9-1: Manufacturer: syz [ 1124.333731][ T5887] usb 9-1: SerialNumber: syz [ 1124.335705][ T5887] usb 9-1: config 0 descriptor?? [ 1124.347042][ T5832] Bluetooth: hci6: unexpected Set CIG Parameters response data [ 1124.347068][ T5832] Bluetooth: hci6: unexpected event for opcode 0x2062 [ 1124.367155][ T5886] creative-sb0540 0003:041E:3100.000D: item 0 4 1 9 parsing failed [ 1124.367666][ T5886] creative-sb0540 0003:041E:3100.000D: parse failed [ 1124.367727][ T5886] creative-sb0540 0003:041E:3100.000D: probe with driver creative-sb0540 failed with error -22 [ 1124.481949][ T5832] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1124.482037][ T5832] Bluetooth: hci6: Injecting HCI hardware error event [ 1125.136827][ T5832] Bluetooth: hci6: hardware error 0x00 [ 1125.370015][ T5886] usb 6-1: USB disconnect, device number 31 [ 1126.132695][T17788] netlink: zone id is out of range [ 1126.133444][T17792] loop6: detected capacity change from 0 to 7 [ 1126.147916][T17792] Buffer I/O error on dev loop6, logical block 0, async page read [ 1126.173012][T17788] netlink: zone id is out of range [ 1126.178333][T17788] netlink: zone id is out of range [ 1126.186046][T17792] Buffer I/O error on dev loop6, logical block 0, async page read [ 1126.202149][T17788] netlink: zone id is out of range [ 1126.241897][T17792] Buffer I/O error on dev loop6, logical block 0, async page read [ 1126.250400][T17792] Buffer I/O error on dev loop6, logical block 0, async page read [ 1126.258936][T17792] Buffer I/O error on dev loop6, logical block 0, async page read [ 1126.269817][T17788] netlink: set zone limit has 4 unknown bytes [ 1126.277477][T17787] ipip0: entered promiscuous mode [ 1126.280171][T17792] Buffer I/O error on dev loop6, logical block 0, async page read [ 1126.291658][T17792] Buffer I/O error on dev loop6, logical block 0, async page read [ 1126.299542][T17792] ldm_validate_partition_table(): Disk read failed. [ 1126.328060][T17792] Buffer I/O error on dev loop6, logical block 0, async page read [ 1126.336290][T17792] Buffer I/O error on dev loop6, logical block 0, async page read [ 1126.344283][T17787] ipip0: entered allmulticast mode [ 1126.352101][T17792] Buffer I/O error on dev loop6, logical block 0, async page read [ 1126.364977][T17792] Dev loop6: unable to read RDB block 0 [ 1126.370829][T17792] loop6: unable to read partition table [ 1126.388070][T17792] loop6: partition table beyond EOD, truncated [ 1126.404291][T17792] loop_reread_partitions: partition scan of loop6 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 1126.404291][T17792] ) failed (rc=-5) [ 1126.595313][T17810] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1126.637825][T17808] FAULT_INJECTION: forcing a failure. [ 1126.637825][T17808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1126.693690][T17808] CPU: 0 UID: 0 PID: 17808 Comm: syz.3.3253 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1126.704144][T17808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1126.714218][T17808] Call Trace: [ 1126.717508][T17808] [ 1126.720457][T17808] dump_stack_lvl+0x241/0x360 [ 1126.725161][T17808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1126.730379][T17808] ? __pfx__printk+0x10/0x10 [ 1126.734995][T17808] ? __pfx_lock_release+0x10/0x10 [ 1126.740044][T17808] should_fail_ex+0x3b0/0x4e0 [ 1126.744751][T17808] _copy_from_user+0x2f/0xc0 [ 1126.749359][T17808] copy_msghdr_from_user+0xae/0x680 [ 1126.754579][T17808] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1126.760407][T17808] ? __fget_files+0x2a/0x410 [ 1126.765019][T17808] ? __fget_files+0x2a/0x410 [ 1126.769634][T17808] __sys_sendmsg+0x209/0x350 [ 1126.774238][T17808] ? __pfx_lock_release+0x10/0x10 [ 1126.779281][T17808] ? __pfx___sys_sendmsg+0x10/0x10 [ 1126.784421][T17808] ? __pfx_vfs_write+0x10/0x10 [ 1126.789236][T17808] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1126.795592][T17808] ? do_syscall_64+0x100/0x230 [ 1126.800378][T17808] ? do_syscall_64+0xb6/0x230 [ 1126.805077][T17808] do_syscall_64+0xf3/0x230 [ 1126.809595][T17808] ? clear_bhb_loop+0x35/0x90 [ 1126.814293][T17808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.820208][T17808] RIP: 0033:0x7fc73ef7e759 [ 1126.824641][T17808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1126.844262][T17808] RSP: 002b:00007fc73fe43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1126.852698][T17808] RAX: ffffffffffffffda RBX: 00007fc73f135f80 RCX: 00007fc73ef7e759 [ 1126.860688][T17808] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1126.868676][T17808] RBP: 00007fc73fe43090 R08: 0000000000000000 R09: 0000000000000000 [ 1126.876666][T17808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1126.884651][T17808] R13: 0000000000000000 R14: 00007fc73f135f80 R15: 00007ffce25feda8 [ 1126.892654][T17808] [ 1126.901224][T17800] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3251'. [ 1126.931614][T17793] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3247'. [ 1126.997055][T17823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3255'. [ 1127.022349][T17823] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3255'. [ 1127.144703][ T5832] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1127.171228][ T5832] Bluetooth: hci7: unexpected Set CIG Parameters response data [ 1128.110887][T15715] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1128.291674][T15715] usb 5-1: device descriptor read/64, error -71 [ 1128.432891][T17850] FAULT_INJECTION: forcing a failure. [ 1128.432891][T17850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1128.457641][T17850] CPU: 1 UID: 0 PID: 17850 Comm: syz.8.3265 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1128.468112][T17850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1128.478189][T17850] Call Trace: [ 1128.481485][T17850] [ 1128.484422][T17850] dump_stack_lvl+0x241/0x360 [ 1128.489101][T17850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1128.494299][T17850] ? __pfx__printk+0x10/0x10 [ 1128.498897][T17850] ? __pfx_lock_release+0x10/0x10 [ 1128.503916][T17850] ? validate_chain+0x11e/0x5920 [ 1128.508854][T17850] should_fail_ex+0x3b0/0x4e0 [ 1128.513534][T17850] _copy_from_user+0x2f/0xc0 [ 1128.518124][T17850] do_sys_poll+0x248/0x15d0 [ 1128.522655][T17850] ? mark_lock+0x9a/0x360 [ 1128.526997][T17850] ? _parse_integer_limit+0x1b5/0x200 [ 1128.532365][T17850] ? __pfx_do_sys_poll+0x10/0x10 [ 1128.537299][T17850] ? mark_lock+0x9a/0x360 [ 1128.541623][T17850] ? __lock_acquire+0x1397/0x2100 [ 1128.546688][T17850] ? rcu_read_lock_any_held+0xb7/0x160 [ 1128.552143][T17850] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1128.558037][T17850] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1128.563688][T17850] ? __pfx_do_sys_openat2+0x10/0x10 [ 1128.568893][T17850] __se_sys_poll+0x1c5/0x400 [ 1128.573479][T17850] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1128.579459][T17850] ? __pfx___se_sys_poll+0x10/0x10 [ 1128.584563][T17850] ? do_syscall_64+0x100/0x230 [ 1128.589325][T17850] ? do_syscall_64+0xb6/0x230 [ 1128.593997][T17850] do_syscall_64+0xf3/0x230 [ 1128.598491][T17850] ? clear_bhb_loop+0x35/0x90 [ 1128.603162][T17850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.609050][T17850] RIP: 0033:0x7fe44477e759 [ 1128.613461][T17850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1128.633060][T17850] RSP: 002b:00007fe445521038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1128.641472][T17850] RAX: ffffffffffffffda RBX: 00007fe444935f80 RCX: 00007fe44477e759 [ 1128.649442][T17850] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020001f80 [ 1128.657422][T17850] RBP: 00007fe445521090 R08: 0000000000000000 R09: 0000000000000000 [ 1128.665402][T17850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1128.673367][T17850] R13: 0000000000000000 R14: 00007fe444935f80 R15: 00007ffd56aa4798 [ 1128.681341][T17850] [ 1128.684486][ C1] vkms_vblank_simulate: vblank timer overrun [ 1128.771870][T15715] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1129.022732][T15715] usb 5-1: device descriptor read/64, error -71 [ 1129.165670][T17861] FAULT_INJECTION: forcing a failure. [ 1129.165670][T17861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1129.225072][T17861] CPU: 0 UID: 0 PID: 17861 Comm: syz.8.3267 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1129.235541][T17861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1129.245620][T17861] Call Trace: [ 1129.248912][T17861] [ 1129.251859][T17861] dump_stack_lvl+0x241/0x360 [ 1129.256558][T17861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1129.261781][T17861] ? __pfx__printk+0x10/0x10 [ 1129.266396][T17861] ? __pfx_lock_release+0x10/0x10 [ 1129.271450][T17861] should_fail_ex+0x3b0/0x4e0 [ 1129.276163][T17861] _copy_from_user+0x2f/0xc0 [ 1129.280775][T17861] copy_msghdr_from_user+0xae/0x680 [ 1129.286000][T17861] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1129.291823][T17861] ? __fget_files+0x2a/0x410 [ 1129.296435][T17861] ? __fget_files+0x2a/0x410 [ 1129.301048][T17861] __sys_sendmsg+0x209/0x350 [ 1129.305659][T17861] ? __pfx_lock_release+0x10/0x10 [ 1129.310709][T17861] ? __pfx___sys_sendmsg+0x10/0x10 [ 1129.311628][ T5886] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1129.315827][T17861] ? __pfx_vfs_write+0x10/0x10 [ 1129.328142][T17861] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1129.334473][T17861] ? do_syscall_64+0x100/0x230 [ 1129.339234][T17861] ? do_syscall_64+0xb6/0x230 [ 1129.343909][T17861] do_syscall_64+0xf3/0x230 [ 1129.348407][T17861] ? clear_bhb_loop+0x35/0x90 [ 1129.353076][T17861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.358966][T17861] RIP: 0033:0x7fe44477e759 [ 1129.363376][T17861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1129.382984][T17861] RSP: 002b:00007fe445521038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1129.391398][T17861] RAX: ffffffffffffffda RBX: 00007fe444935f80 RCX: 00007fe44477e759 [ 1129.399367][T17861] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1129.407350][T17861] RBP: 00007fe445521090 R08: 0000000000000000 R09: 0000000000000000 [ 1129.415323][T17861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1129.423293][T17861] R13: 0000000000000000 R14: 00007fe444935f80 R15: 00007ffd56aa4798 [ 1129.431271][T17861] [ 1129.462813][T15715] usb usb5-port1: attempt power cycle [ 1129.559585][T17867] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3270'. [ 1130.298018][ T5886] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1130.331749][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 18290, setting to 1024 [ 1130.351565][ T5886] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1130.369754][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.390566][ T5886] usb 4-1: config 0 descriptor?? [ 1130.701310][ T5886] ath6kl: Failed to submit usb control message: -71 [ 1130.711133][ T5886] ath6kl: unable to send the bmi data to the device: -71 [ 1130.725949][ T5886] ath6kl: Unable to send get target info: -71 [ 1130.754800][ T5886] ath6kl: Failed to init ath6kl core: -71 [ 1130.787312][ T5886] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1130.817687][ T5886] usb 4-1: USB disconnect, device number 58 [ 1131.041634][ T1200] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1131.231874][ T5832] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 1131.240911][ T5832] Bluetooth: hci7: Injecting HCI hardware error event [ 1131.252237][ T5832] Bluetooth: hci7: hardware error 0x00 [ 1131.320229][ T1200] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1131.537466][ T1200] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1131.690632][ T1200] usb 6-1: config 1 has no interface number 1 [ 1131.727419][ T1200] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1131.802733][ T1200] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1131.851093][ T1200] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1131.853304][T17907] veth2: entered allmulticast mode [ 1131.884430][ T1200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.902024][ T1200] usb 6-1: Product: syz [ 1131.915867][ T1200] usb 6-1: Manufacturer: syz [ 1131.939435][ T1200] usb 6-1: SerialNumber: syz [ 1132.014405][T17915] netlink: 'syz.3.3281': attribute type 10 has an invalid length. [ 1132.020030][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 1132.020054][ T29] audit: type=1326 audit(1732093527.010:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17919 comm="syz.8.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44477e759 code=0x7ffc0000 [ 1132.050102][ C1] vkms_vblank_simulate: vblank timer overrun [ 1132.136240][T17915] team0: Port device netdevsim0 added [ 1132.194731][ T1200] usb 6-1: 2:1: All rates were zero [ 1132.199977][ T1200] usb 6-1: 2:1 : invalid channels 0 [ 1132.290040][ T29] audit: type=1326 audit(1732093527.090:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17919 comm="syz.8.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fe44477e759 code=0x7ffc0000 [ 1132.366377][ T1200] usb 6-1: USB disconnect, device number 32 [ 1132.918577][ T29] audit: type=1326 audit(1732093527.090:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17919 comm="syz.8.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44477e759 code=0x7ffc0000 [ 1133.171854][ T29] audit: type=1326 audit(1732093527.090:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17919 comm="syz.8.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44477e759 code=0x7ffc0000 [ 1133.233162][ T29] audit: type=1326 audit(1732093527.090:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17919 comm="syz.8.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe44477e759 code=0x7ffc0000 [ 1133.270385][ T29] audit: type=1326 audit(1732093527.090:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17919 comm="syz.8.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44477e759 code=0x7ffc0000 [ 1133.297599][ T29] audit: type=1326 audit(1732093527.090:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17919 comm="syz.8.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe44477e759 code=0x7ffc0000 [ 1133.525815][ T5832] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1134.044431][ T29] audit: type=1326 audit(1732093527.090:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17919 comm="syz.8.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44477e759 code=0x7ffc0000 [ 1134.066420][ T29] audit: type=1326 audit(1732093527.090:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17919 comm="syz.8.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe44477e759 code=0x7ffc0000 [ 1134.119131][ T29] audit: type=1326 audit(1732093527.090:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17919 comm="syz.8.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44477e759 code=0x7ffc0000 [ 1134.193538][ T6493] udevd[6493]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1134.227389][T17948] netlink: 'syz.5.3291': attribute type 1 has an invalid length. [ 1134.243458][T17948] netlink: 157116 bytes leftover after parsing attributes in process `syz.5.3291'. [ 1134.263027][T17948] nbd: couldn't find a device at index 64 [ 1134.330591][T17948] syz_tun: entered promiscuous mode [ 1134.349557][T17948] batadv_slave_0: entered promiscuous mode [ 1134.359571][T17948] hsr1: entered allmulticast mode [ 1134.365925][T17948] syz_tun: entered allmulticast mode [ 1134.371398][T17948] batadv_slave_0: entered allmulticast mode [ 1134.742659][T17964] sp0: Synchronizing with TNC [ 1134.782907][T17964] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1135.031074][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 1135.134452][T17984] FAULT_INJECTION: forcing a failure. [ 1135.134452][T17984] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.147391][T17984] CPU: 1 UID: 0 PID: 17984 Comm: syz.8.3305 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1135.157828][T17984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1135.167894][T17984] Call Trace: [ 1135.171167][T17984] [ 1135.174090][T17984] dump_stack_lvl+0x241/0x360 [ 1135.178771][T17984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1135.183961][T17984] ? __pfx__printk+0x10/0x10 [ 1135.188549][T17984] ? fs_reclaim_acquire+0x93/0x130 [ 1135.193658][T17984] ? __pfx___might_resched+0x10/0x10 [ 1135.198944][T17984] should_fail_ex+0x3b0/0x4e0 [ 1135.203622][T17984] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1135.209343][T17984] should_failslab+0xac/0x100 [ 1135.214022][T17984] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1135.219740][T17984] __kmalloc_noprof+0xd8/0x400 [ 1135.224511][T17984] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1135.230100][T17984] tomoyo_path_number_perm+0x236/0x860 [ 1135.235558][T17984] ? __lock_acquire+0x1397/0x2100 [ 1135.240576][T17984] ? tomoyo_path_number_perm+0x206/0x860 [ 1135.246206][T17984] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1135.252211][T17984] ? __fget_files+0x2a/0x410 [ 1135.256799][T17984] ? __fget_files+0x2a/0x410 [ 1135.261385][T17984] security_file_ioctl+0xc6/0x2a0 [ 1135.266409][T17984] __se_sys_ioctl+0x46/0x170 [ 1135.271001][T17984] do_syscall_64+0xf3/0x230 [ 1135.275499][T17984] ? clear_bhb_loop+0x35/0x90 [ 1135.280170][T17984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.286063][T17984] RIP: 0033:0x7fe44477e759 [ 1135.290472][T17984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1135.310077][T17984] RSP: 002b:00007fe445521038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1135.318493][T17984] RAX: ffffffffffffffda RBX: 00007fe444935f80 RCX: 00007fe44477e759 [ 1135.326462][T17984] RDX: 00000000200000c0 RSI: 00000000c06c4124 RDI: 0000000000000004 [ 1135.334425][T17984] RBP: 00007fe445521090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.342388][T17984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1135.350351][T17984] R13: 0000000000000000 R14: 00007fe444935f80 R15: 00007ffd56aa4798 [ 1135.358328][T17984] [ 1135.381252][T17984] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1135.401721][ T5886] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1135.470673][T17987] netlink: 'syz.5.3307': attribute type 10 has an invalid length. [ 1135.478942][T17987] netlink: 210880 bytes leftover after parsing attributes in process `syz.5.3307'. [ 1135.490655][T17987] netlink: 134744 bytes leftover after parsing attributes in process `syz.5.3307'. [ 1135.512713][T13233] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1135.553164][ T5832] Bluetooth: hci5: unexpected Set CIG Parameters response data [ 1135.564436][ T5832] Bluetooth: hci5: unexpected event for opcode 0x2062 [ 1135.749240][ T5886] usb 4-1: config 1 has an invalid descriptor of length 22, skipping remainder of the config [ 1135.762856][ T5886] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1135.782358][ T5886] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1136.079828][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1136.273949][ T5886] usb 4-1: SerialNumber: syz [ 1136.312961][T13233] usb 8-1: Using ep0 maxpacket: 32 [ 1136.338503][T13233] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 1136.346675][T13233] usb 8-1: config 0 has no interface number 0 [ 1136.369627][T13233] usb 8-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1136.378792][T13233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.387332][T13233] usb 8-1: Product: syz [ 1136.416304][T13233] usb 8-1: Manufacturer: syz [ 1136.431223][T13233] usb 8-1: SerialNumber: syz [ 1136.448517][T17995] overlayfs: failed to resolve './file1': -2 [ 1136.493087][T13233] usb 8-1: config 0 descriptor?? [ 1136.510770][T13233] hub 8-1:0.89: bad descriptor, ignoring hub [ 1136.526698][T13233] hub 8-1:0.89: probe with driver hub failed with error -5 [ 1136.543312][T13233] option 8-1:0.89: GSM modem (1-port) converter detected [ 1136.544434][ T5886] usb 4-1: 0:2 : does not exist [ 1136.555396][ T5886] usb 4-1: unit 5 not found! [ 1136.579639][T13233] usb 8-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1136.787575][ T5886] usb 4-1: USB disconnect, device number 59 [ 1136.834869][T13233] usb 8-1: USB disconnect, device number 3 [ 1136.853472][T13233] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1136.884183][T13233] option 8-1:0.89: device disconnected [ 1137.650685][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1137.818349][T18012] FAULT_INJECTION: forcing a failure. [ 1137.818349][T18012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1137.831843][T18012] CPU: 1 UID: 0 PID: 18012 Comm: syz.8.3319 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1137.842275][T18012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1137.852322][T18012] Call Trace: [ 1137.855594][T18012] [ 1137.858520][T18012] dump_stack_lvl+0x241/0x360 [ 1137.863197][T18012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1137.868389][T18012] ? __pfx__printk+0x10/0x10 [ 1137.872986][T18012] ? __pfx_lock_release+0x10/0x10 [ 1137.878022][T18012] should_fail_ex+0x3b0/0x4e0 [ 1137.882706][T18012] _copy_from_user+0x2f/0xc0 [ 1137.887291][T18012] copy_msghdr_from_user+0xae/0x680 [ 1137.892494][T18012] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1137.898300][T18012] ? __fget_files+0x2a/0x410 [ 1137.902892][T18012] ? __fget_files+0x2a/0x410 [ 1137.907487][T18012] __sys_sendmsg+0x209/0x350 [ 1137.912070][T18012] ? __pfx_lock_release+0x10/0x10 [ 1137.917091][T18012] ? __pfx___sys_sendmsg+0x10/0x10 [ 1137.922201][T18012] ? __pfx_vfs_write+0x10/0x10 [ 1137.926976][T18012] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1137.933300][T18012] ? do_syscall_64+0x100/0x230 [ 1137.938057][T18012] ? do_syscall_64+0xb6/0x230 [ 1137.942732][T18012] do_syscall_64+0xf3/0x230 [ 1137.947227][T18012] ? clear_bhb_loop+0x35/0x90 [ 1137.951898][T18012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.957789][T18012] RIP: 0033:0x7fe44477e759 [ 1137.962198][T18012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1137.981798][T18012] RSP: 002b:00007fe445521038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1137.990208][T18012] RAX: ffffffffffffffda RBX: 00007fe444935f80 RCX: 00007fe44477e759 [ 1137.998181][T18012] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005 [ 1138.006145][T18012] RBP: 00007fe445521090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.014107][T18012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.022069][T18012] R13: 0000000000000000 R14: 00007fe444935f80 R15: 00007ffd56aa4798 [ 1138.030042][T18012] [ 1138.223596][T18024] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3317'. [ 1138.524205][T18025] netlink: 5312 bytes leftover after parsing attributes in process `syz.8.3321'. [ 1138.765818][T18015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3318'. [ 1138.815918][T18015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3318'. [ 1138.827484][T18015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3318'. [ 1138.901294][T18034] FAULT_INJECTION: forcing a failure. [ 1138.901294][T18034] name failslab, interval 1, probability 0, space 0, times 0 [ 1138.942494][T18034] CPU: 1 UID: 0 PID: 18034 Comm: syz.5.3323 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1138.952935][T18034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1138.963007][T18034] Call Trace: [ 1138.966304][T18034] [ 1138.969255][T18034] dump_stack_lvl+0x241/0x360 [ 1138.973953][T18034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1138.979175][T18034] ? __pfx__printk+0x10/0x10 [ 1138.983799][T18034] ? fs_reclaim_acquire+0x93/0x130 [ 1138.988936][T18034] ? __pfx___might_resched+0x10/0x10 [ 1138.994251][T18034] should_fail_ex+0x3b0/0x4e0 [ 1138.998955][T18034] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1139.004702][T18034] should_failslab+0xac/0x100 [ 1139.009394][T18034] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1139.015125][T18034] __kmalloc_noprof+0xd8/0x400 [ 1139.019893][T18034] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1139.025444][T18034] tomoyo_path_number_perm+0x236/0x860 [ 1139.030893][T18034] ? __lock_acquire+0x1397/0x2100 [ 1139.035911][T18034] ? tomoyo_path_number_perm+0x206/0x860 [ 1139.041540][T18034] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1139.047540][T18034] ? __fget_files+0x2a/0x410 [ 1139.052126][T18034] ? __fget_files+0x2a/0x410 [ 1139.056715][T18034] security_file_ioctl+0xc6/0x2a0 [ 1139.061739][T18034] __se_sys_ioctl+0x46/0x170 [ 1139.066329][T18034] do_syscall_64+0xf3/0x230 [ 1139.070828][T18034] ? clear_bhb_loop+0x35/0x90 [ 1139.075500][T18034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.081390][T18034] RIP: 0033:0x7fde8777e759 [ 1139.085801][T18034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1139.105405][T18034] RSP: 002b:00007fde885d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1139.113816][T18034] RAX: ffffffffffffffda RBX: 00007fde87935f80 RCX: 00007fde8777e759 [ 1139.121783][T18034] RDX: 0000000020000440 RSI: 00000000c0185500 RDI: 0000000000000005 [ 1139.129750][T18034] RBP: 00007fde885d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.137714][T18034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.145676][T18034] R13: 0000000000000000 R14: 00007fde87935f80 R15: 00007ffe99a1c508 [ 1139.153655][T18034] [ 1139.156809][ C1] vkms_vblank_simulate: vblank timer overrun [ 1139.249064][T18034] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1139.623927][ T5832] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1139.632710][ T5832] Bluetooth: hci5: Injecting HCI hardware error event [ 1139.646189][ T5832] Bluetooth: hci5: hardware error 0x00 [ 1140.263070][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 1140.263087][ T29] audit: type=1326 audit(1732093535.260:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18051 comm="syz.7.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7709b7e759 code=0x7ffc0000 [ 1140.294837][ T29] audit: type=1326 audit(1732093535.260:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18051 comm="syz.7.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f7709b7e759 code=0x7ffc0000 [ 1140.338108][T18054] FAULT_INJECTION: forcing a failure. [ 1140.338108][T18054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1140.372575][ T29] audit: type=1326 audit(1732093535.260:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18051 comm="syz.7.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7709b75727 code=0x7ffc0000 [ 1140.397369][ T29] audit: type=1326 audit(1732093535.260:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18051 comm="syz.7.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7709b1a0f9 code=0x7ffc0000 [ 1140.408095][T18054] CPU: 1 UID: 0 PID: 18054 Comm: syz.8.3327 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1140.428290][ T29] audit: type=1326 audit(1732093535.260:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18051 comm="syz.7.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7709b7e759 code=0x7ffc0000 [ 1140.429283][T18054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1140.429298][T18054] Call Trace: [ 1140.429306][T18054] [ 1140.429315][T18054] dump_stack_lvl+0x241/0x360 [ 1140.429343][T18054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1140.429364][T18054] ? __pfx__printk+0x10/0x10 [ 1140.429393][T18054] ? __pfx_lock_release+0x10/0x10 [ 1140.429419][T18054] should_fail_ex+0x3b0/0x4e0 [ 1140.429452][T18054] _copy_from_user+0x2f/0xc0 [ 1140.429474][T18054] core_sys_select+0x508/0x910 [ 1140.456150][ T29] audit: type=1326 audit(1732093535.260:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18051 comm="syz.7.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7709b7e759 code=0x7ffc0000 [ 1140.461090][T18054] ? __pfx_core_sys_select+0x10/0x10 [ 1140.461118][T18054] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1140.461164][T18054] ? __pfx_vfs_write+0x10/0x10 [ 1140.461190][T18054] ? __pfx_set_user_sigmask+0x10/0x10 [ 1140.461215][T18054] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1140.461234][T18054] ? __fget_files+0x2a/0x410 [ 1140.461261][T18054] __se_sys_pselect6+0x323/0x3f0 [ 1140.461291][T18054] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1140.461312][T18054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1140.461340][T18054] ? do_syscall_64+0x100/0x230 [ 1140.461362][T18054] ? __x64_sys_pselect6+0x21/0xf0 [ 1140.461385][T18054] do_syscall_64+0xf3/0x230 [ 1140.467863][ T29] audit: type=1326 audit(1732093535.260:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18051 comm="syz.7.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7709b7e759 code=0x7ffc0000 [ 1140.472233][T18054] ? clear_bhb_loop+0x35/0x90 [ 1140.472260][T18054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.472286][T18054] RIP: 0033:0x7fe44477e759 [ 1140.472303][T18054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1140.472318][T18054] RSP: 002b:00007fe445500038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1140.472340][T18054] RAX: ffffffffffffffda RBX: 00007fe444936058 RCX: 00007fe44477e759 [ 1140.472354][T18054] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 1140.472367][T18054] RBP: 00007fe445500090 R08: 0000000000000000 R09: 0000000000000000 [ 1140.472380][T18054] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1140.472392][T18054] R13: 0000000000000000 R14: 00007fe444936058 R15: 00007ffd56aa4798 [ 1140.472419][T18054] [ 1140.472436][ C1] vkms_vblank_simulate: vblank timer overrun [ 1140.532622][ T25] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 1140.613230][ C1] vkms_vblank_simulate: vblank timer overrun [ 1140.639730][ T29] audit: type=1326 audit(1732093535.260:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18051 comm="syz.7.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7709b7e759 code=0x7ffc0000 [ 1140.752751][ T29] audit: type=1326 audit(1732093535.260:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18051 comm="syz.7.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7709b7e759 code=0x7ffc0000 [ 1140.774790][ T29] audit: type=1326 audit(1732093535.260:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18051 comm="syz.7.3330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7709b7e759 code=0x7ffc0000 [ 1140.841716][ T25] usb 5-1: device descriptor read/64, error -71 [ 1140.881623][ T1200] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1141.062537][ T1200] usb 6-1: Using ep0 maxpacket: 32 [ 1141.101775][ T25] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 1141.242402][ T25] usb 5-1: device descriptor read/64, error -71 [ 1141.259491][ T1200] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1141.310923][ T1200] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1141.334925][ T1200] usb 6-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1141.353555][ T25] usb usb5-port1: attempt power cycle [ 1141.353703][ T1200] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1141.425764][ T1200] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1141.437482][ T1200] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.568525][ T1200] usb 6-1: config 0 descriptor?? [ 1141.713714][ T5832] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1141.721684][ T25] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 1141.742766][ T25] usb 5-1: device descriptor read/8, error -71 [ 1141.857101][T18075] netlink: 5312 bytes leftover after parsing attributes in process `syz.8.3338'. [ 1141.981784][ T25] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 1142.001488][ T1200] hid (null): invalid report_count 593612431 [ 1142.002330][ T25] usb 5-1: device descriptor read/8, error -71 [ 1142.022054][ T1200] creative-sb0540 0003:041E:3100.000E: invalid report_count 593612431 [ 1142.030229][ T1200] creative-sb0540 0003:041E:3100.000E: item 0 4 1 9 parsing failed [ 1142.047350][ T1200] creative-sb0540 0003:041E:3100.000E: parse failed [ 1142.054401][ T1200] creative-sb0540 0003:041E:3100.000E: probe with driver creative-sb0540 failed with error -22 [ 1142.126524][ T25] usb usb5-port1: unable to enumerate USB device [ 1142.242710][T18058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.262019][T18058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.627178][T15715] IPVS: starting estimator thread 0... [ 1142.701097][T18095] loop5: detected capacity change from 0 to 7 [ 1142.725107][T18095] buffer_io_error: 4 callbacks suppressed [ 1142.725224][T18095] Buffer I/O error on dev loop5, logical block 0, async page read [ 1142.811819][T18090] IPVS: using max 16 ests per chain, 38400 per kthread [ 1142.940651][T18096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.115453][T18096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1143.237566][T18095] Buffer I/O error on dev loop5, logical block 0, async page read [ 1143.420133][T18095] Buffer I/O error on dev loop5, logical block 0, async page read [ 1143.482297][T18095] Buffer I/O error on dev loop5, logical block 0, async page read [ 1143.490243][T18095] Buffer I/O error on dev loop5, logical block 0, async page read [ 1143.505987][T18095] Buffer I/O error on dev loop5, logical block 0, async page read [ 1143.519545][T18095] Buffer I/O error on dev loop5, logical block 0, async page read [ 1143.538997][T18095] ldm_validate_partition_table(): Disk read failed. [ 1143.549844][T18095] Buffer I/O error on dev loop5, logical block 0, async page read [ 1143.557835][T18095] Buffer I/O error on dev loop5, logical block 0, async page read [ 1143.568672][T18095] Buffer I/O error on dev loop5, logical block 0, async page read [ 1143.578273][T18095] Dev loop5: unable to read RDB block 0 [ 1143.584216][T18095] loop5: unable to read partition table [ 1143.600549][T18095] loop5: partition table beyond EOD, truncated [ 1143.609368][T18095] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 1143.609368][T18095] ) failed (rc=-5) [ 1143.613126][T18108] team0: entered promiscuous mode [ 1143.651671][T18108] team_slave_0: entered promiscuous mode [ 1143.657485][T18108] team_slave_1: entered promiscuous mode [ 1143.684318][T18107] team0: left promiscuous mode [ 1143.689116][T18107] team_slave_0: left promiscuous mode [ 1143.700144][T18107] team_slave_1: left promiscuous mode [ 1143.760135][T18091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.786683][T18091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1143.797322][T18115] FAULT_INJECTION: forcing a failure. [ 1143.797322][T18115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1143.824707][T18115] CPU: 0 UID: 0 PID: 18115 Comm: syz.3.3349 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1143.835156][T18115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1143.845226][T18115] Call Trace: [ 1143.848522][T18115] [ 1143.851471][T18115] dump_stack_lvl+0x241/0x360 [ 1143.856177][T18115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1143.861397][T18115] ? __pfx__printk+0x10/0x10 [ 1143.866021][T18115] ? snprintf+0xda/0x120 [ 1143.870291][T18115] should_fail_ex+0x3b0/0x4e0 [ 1143.874995][T18115] _copy_to_user+0x31/0xb0 [ 1143.879433][T18115] simple_read_from_buffer+0xca/0x150 [ 1143.884831][T18115] proc_fail_nth_read+0x1e9/0x250 [ 1143.889881][T18115] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1143.895451][T18115] ? rw_verify_area+0x568/0x6f0 [ 1143.900327][T18115] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1143.905895][T18115] vfs_read+0x1fc/0xb70 [ 1143.910085][T18115] ? __pfx___mutex_lock+0x10/0x10 [ 1143.915145][T18115] ? __pfx_vfs_read+0x10/0x10 [ 1143.919849][T18115] ? __fget_files+0x2a/0x410 [ 1143.924469][T18115] ? __fget_files+0x395/0x410 [ 1143.929167][T18115] ? __fget_files+0x2a/0x410 [ 1143.933788][T18115] ksys_read+0x18f/0x2b0 [ 1143.938060][T18115] ? __pfx_ksys_read+0x10/0x10 [ 1143.942858][T18115] ? do_syscall_64+0x100/0x230 [ 1143.947644][T18115] ? do_syscall_64+0xb6/0x230 [ 1143.952343][T18115] do_syscall_64+0xf3/0x230 [ 1143.956862][T18115] ? clear_bhb_loop+0x35/0x90 [ 1143.961562][T18115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.967470][T18115] RIP: 0033:0x7fc73ef7d19c [ 1143.971885][T18115] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1143.991499][T18115] RSP: 002b:00007fc73fe22030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1143.999937][T18115] RAX: ffffffffffffffda RBX: 00007fc73f136058 RCX: 00007fc73ef7d19c [ 1144.007910][T18115] RDX: 000000000000000f RSI: 00007fc73fe220a0 RDI: 0000000000000004 [ 1144.015884][T18115] RBP: 00007fc73fe22090 R08: 0000000000000000 R09: 0000000000000000 [ 1144.023872][T18115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1144.031860][T18115] R13: 0000000000000000 R14: 00007fc73f136058 R15: 00007ffce25feda8 [ 1144.039849][T18115] [ 1144.045536][T15715] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1144.093396][ T25] usb 9-1: USB disconnect, device number 3 [ 1144.280484][T15715] usb 8-1: config 0 has an invalid interface number: 156 but max is 0 [ 1144.289244][T15715] usb 8-1: config 0 has no interface number 0 [ 1144.301616][T15715] usb 8-1: config 0 interface 156 has no altsetting 0 [ 1144.309522][T15715] usb 8-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22 [ 1144.436715][T15715] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.462640][ T5945] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.617917][T15715] usb 8-1: config 0 descriptor?? [ 1144.774684][T15715] hub 8-1:0.156: bad descriptor, ignoring hub [ 1144.784091][T15715] hub 8-1:0.156: probe with driver hub failed with error -5 [ 1144.793843][T15715] option 8-1:0.156: GSM modem (1-port) converter detected [ 1144.861718][ T5945] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.893041][ T25] usb 6-1: USB disconnect, device number 33 [ 1145.009798][ T5945] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.092017][T15715] usb 8-1: USB disconnect, device number 4 [ 1145.098910][T15715] option 8-1:0.156: device disconnected [ 1145.138779][T18127] FAULT_INJECTION: forcing a failure. [ 1145.138779][T18127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1145.161698][T18127] CPU: 1 UID: 0 PID: 18127 Comm: syz.5.3357 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1145.172138][T18127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1145.182190][T18127] Call Trace: [ 1145.185463][T18127] [ 1145.188390][T18127] dump_stack_lvl+0x241/0x360 [ 1145.193065][T18127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1145.198255][T18127] ? __pfx__printk+0x10/0x10 [ 1145.202846][T18127] ? __pfx_lock_release+0x10/0x10 [ 1145.207865][T18127] should_fail_ex+0x3b0/0x4e0 [ 1145.212542][T18127] _copy_from_user+0x2f/0xc0 [ 1145.217124][T18127] core_sys_select+0x508/0x910 [ 1145.221886][T18127] ? __pfx_core_sys_select+0x10/0x10 [ 1145.227167][T18127] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1145.233073][T18127] ? __pfx_vfs_write+0x10/0x10 [ 1145.237833][T18127] ? __pfx_set_user_sigmask+0x10/0x10 [ 1145.243199][T18127] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1145.249177][T18127] ? __fget_files+0x2a/0x410 [ 1145.253771][T18127] __se_sys_pselect6+0x323/0x3f0 [ 1145.258708][T18127] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1145.264160][T18127] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1145.270485][T18127] ? do_syscall_64+0x100/0x230 [ 1145.275256][T18127] ? __x64_sys_pselect6+0x21/0xf0 [ 1145.280284][T18127] do_syscall_64+0xf3/0x230 [ 1145.284782][T18127] ? clear_bhb_loop+0x35/0x90 [ 1145.289456][T18127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.295347][T18127] RIP: 0033:0x7fde8777e759 [ 1145.299755][T18127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1145.319354][T18127] RSP: 002b:00007fde885d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1145.327767][T18127] RAX: ffffffffffffffda RBX: 00007fde87935f80 RCX: 00007fde8777e759 [ 1145.335744][T18127] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 1145.343717][T18127] RBP: 00007fde885d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.351686][T18127] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1145.359657][T18127] R13: 0000000000000000 R14: 00007fde87935f80 R15: 00007ffe99a1c508 [ 1145.367632][T18127] [ 1145.473771][ T5945] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.505217][ T5849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1145.608782][ T5849] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1145.620308][ T5849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1145.631620][ T5849] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1145.642502][ T5849] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1145.651336][ T5849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1146.163910][ T5945] bridge_slave_1: left allmulticast mode [ 1146.179597][ T5945] bridge_slave_1: left promiscuous mode [ 1146.186550][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.207493][ T5945] bridge_slave_0: left allmulticast mode [ 1146.213829][ T5945] bridge_slave_0: left promiscuous mode [ 1146.219519][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.608906][ T2146] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1146.616645][ T47] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1146.777703][ T2146] usb 5-1: Using ep0 maxpacket: 16 [ 1146.789474][ T2146] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.807001][ T2146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1146.818205][ T2146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1146.837268][ T47] usb 8-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 1146.846844][ T47] usb 8-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 1146.855487][ T2146] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1146.873497][ T47] usb 8-1: Manufacturer: syz [ 1146.888714][ T47] usb 8-1: config 0 descriptor?? [ 1146.893982][ T2146] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1146.915072][ T47] hub 8-1:0.0: bad descriptor, ignoring hub [ 1146.921013][ T47] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1146.929332][ T47] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 1146.939361][ T2146] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1146.949228][ T47] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 1146.956510][ T2146] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1146.966087][ T2146] usb 5-1: Manufacturer: syz [ 1146.979006][ T2146] usb 5-1: config 0 descriptor?? [ 1146.984603][ T5945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1147.006807][ T5945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1147.017855][ T5945] bond0 (unregistering): Released all slaves [ 1147.031739][ T1200] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1147.047373][T18143] netlink: 'syz.5.3362': attribute type 10 has an invalid length. [ 1147.235264][ T5887] usb 8-1: USB disconnect, device number 5 [ 1147.242211][ T5887] ftdi_sio 8-1:0.0: device disconnected [ 1147.248549][ T1200] usb 4-1: Using ep0 maxpacket: 32 [ 1147.265235][ T1200] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.292030][ T1200] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1147.328939][ T1200] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1147.371915][ T2146] rc_core: IR keymap rc-hauppauge not found [ 1147.372729][ T1200] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1147.377830][ T2146] Registered IR keymap rc-empty [ 1147.400617][ T2146] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1147.418107][ T1200] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1147.441915][ T2146] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1147.441978][ T1200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.475429][ T1200] usb 4-1: config 0 descriptor?? [ 1147.483188][ T2146] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1147.515971][ T2146] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input77 [ 1147.520595][T18131] chnl_net:caif_netlink_parms(): no params data found [ 1147.538124][T18160] FAULT_INJECTION: forcing a failure. [ 1147.538124][T18160] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.570679][ T2146] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1147.584605][T18160] CPU: 1 UID: 0 PID: 18160 Comm: syz.5.3366 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1147.595045][T18160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1147.605117][T18160] Call Trace: [ 1147.608401][T18160] [ 1147.611326][T18160] dump_stack_lvl+0x241/0x360 [ 1147.615998][T18160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1147.621192][T18160] ? __pfx__printk+0x10/0x10 [ 1147.625784][T18160] ? fs_reclaim_acquire+0x93/0x130 [ 1147.630889][T18160] ? __pfx___might_resched+0x10/0x10 [ 1147.636191][T18160] should_fail_ex+0x3b0/0x4e0 [ 1147.640895][T18160] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1147.646642][T18160] should_failslab+0xac/0x100 [ 1147.651341][T18160] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1147.657083][T18160] __kmalloc_noprof+0xd8/0x400 [ 1147.661877][T18160] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1147.667464][T18160] tomoyo_path_number_perm+0x236/0x860 [ 1147.672951][T18160] ? __lock_acquire+0x1397/0x2100 [ 1147.677995][T18160] ? tomoyo_path_number_perm+0x206/0x860 [ 1147.683651][T18160] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1147.689695][T18160] ? __fget_files+0x2a/0x410 [ 1147.694312][T18160] ? __fget_files+0x2a/0x410 [ 1147.698928][T18160] security_file_ioctl+0xc6/0x2a0 [ 1147.703975][T18160] __se_sys_ioctl+0x46/0x170 [ 1147.708594][T18160] do_syscall_64+0xf3/0x230 [ 1147.713115][T18160] ? clear_bhb_loop+0x35/0x90 [ 1147.717816][T18160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.723734][T18160] RIP: 0033:0x7fde8777e759 [ 1147.728169][T18160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1147.741910][ T5832] Bluetooth: hci7: command tx timeout [ 1147.747766][T18160] RSP: 002b:00007fde885b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1147.747794][T18160] RAX: ffffffffffffffda RBX: 00007fde87936058 RCX: 00007fde8777e759 [ 1147.747811][T18160] RDX: 0000000020000140 RSI: 00000000c004510e RDI: 0000000000000003 [ 1147.747825][T18160] RBP: 00007fde885b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1147.747837][T18160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1147.793712][T18160] R13: 0000000000000000 R14: 00007fde87936058 R15: 00007ffe99a1c508 [ 1147.801714][T18160] [ 1147.836131][T18160] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1147.836187][ T2146] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1147.885401][ T5945] hsr_slave_0: left promiscuous mode [ 1147.902900][ T5945] hsr_slave_1: left promiscuous mode [ 1147.913373][ T5945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1147.920894][ T5945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1147.932708][ T1200] hid (null): invalid report_count 593612431 [ 1147.944586][ T5945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1147.955323][ T1200] creative-sb0540 0003:041E:3100.000F: invalid report_count 593612431 [ 1147.971851][ T5945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1147.981714][ T1200] creative-sb0540 0003:041E:3100.000F: item 0 4 1 9 parsing failed [ 1148.004802][ T1200] creative-sb0540 0003:041E:3100.000F: parse failed [ 1148.039783][ T1200] creative-sb0540 0003:041E:3100.000F: probe with driver creative-sb0540 failed with error -22 [ 1148.068589][ T5945] veth1_macvtap: left promiscuous mode [ 1148.084015][ T2146] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1148.090128][ T5945] veth0_macvtap: left promiscuous mode [ 1148.104488][ T5945] veth1_vlan: left promiscuous mode [ 1148.110011][ T5945] veth0_vlan: left promiscuous mode [ 1148.111690][ T2146] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1148.141667][ T2146] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1148.148815][T18150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.148992][T18150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.609950][T18171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.682522][T18171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.769204][ T2146] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1148.792725][ T2146] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1148.811697][ T2146] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1148.841685][ T2146] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1148.862935][ T2146] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1148.882835][ T2146] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1148.890906][ T2146] mceusb 5-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 1149.071783][ T5886] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1149.076844][T18169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.088558][T18169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1149.214289][ T2146] usb 5-1: USB disconnect, device number 40 [ 1149.224258][ T5886] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1149.234056][ T5886] usb 8-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.246346][ T5886] usb 8-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 1149.260271][ T5886] usb 8-1: config 66 interface 0 altsetting 16 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1149.285208][ T5886] usb 8-1: config 66 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1149.299897][ T5886] usb 8-1: config 66 interface 0 has no altsetting 0 [ 1149.313412][ T5886] usb 8-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1149.322935][ T5886] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.330951][ T5886] usb 8-1: Product: syz [ 1149.335579][ T5886] usb 8-1: Manufacturer: syz [ 1149.340254][ T5886] usb 8-1: SerialNumber: syz [ 1149.389149][ T5945] team0 (unregistering): Port device team_slave_1 removed [ 1149.459095][ T5945] team0 (unregistering): Port device team_slave_0 removed [ 1149.786691][ T5832] Bluetooth: hci7: command tx timeout [ 1150.148981][T18178] netlink: 'syz.4.3370': attribute type 21 has an invalid length. [ 1150.163252][T18178] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3370'. [ 1150.201994][T18179] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1150.231228][ T1200] usb 4-1: USB disconnect, device number 60 [ 1150.996184][T18131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.011778][T18131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.020080][T18193] FAULT_INJECTION: forcing a failure. [ 1151.020080][T18193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1151.040829][T18131] bridge_slave_0: entered allmulticast mode [ 1151.078544][T18131] bridge_slave_0: entered promiscuous mode [ 1151.088307][T18193] CPU: 0 UID: 0 PID: 18193 Comm: syz.4.3373 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1151.098750][T18193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1151.108821][T18193] Call Trace: [ 1151.112116][T18193] [ 1151.115069][T18193] dump_stack_lvl+0x241/0x360 [ 1151.119783][T18193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1151.125004][T18193] ? __pfx__printk+0x10/0x10 [ 1151.129621][T18193] ? __pfx_lock_release+0x10/0x10 [ 1151.134674][T18193] should_fail_ex+0x3b0/0x4e0 [ 1151.139376][T18193] _copy_from_user+0x2f/0xc0 [ 1151.143986][T18193] ucma_write+0x17d/0x420 [ 1151.148345][T18193] ? __pfx_ucma_write+0x10/0x10 [ 1151.153218][T18193] ? bpf_lsm_file_permission+0x9/0x10 [ 1151.158608][T18193] ? security_file_permission+0x74/0x280 [ 1151.164269][T18193] ? rw_verify_area+0x1c3/0x6f0 [ 1151.169154][T18193] vfs_writev+0x5a9/0xba0 [ 1151.173525][T18193] ? __pfx_ucma_write+0x10/0x10 [ 1151.178405][T18193] ? __pfx_vfs_writev+0x10/0x10 [ 1151.183287][T18193] ? __pfx_vfs_write+0x10/0x10 [ 1151.188081][T18193] ? __fget_files+0x2a/0x410 [ 1151.192698][T18193] ? __fget_files+0x395/0x410 [ 1151.197395][T18193] ? __fget_files+0x2a/0x410 [ 1151.202013][T18193] do_writev+0x1b6/0x360 [ 1151.206279][T18193] ? __pfx_do_writev+0x10/0x10 [ 1151.211067][T18193] ? do_syscall_64+0x100/0x230 [ 1151.214129][T18131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.215831][T18193] ? do_syscall_64+0xb6/0x230 [ 1151.215859][T18193] do_syscall_64+0xf3/0x230 [ 1151.226868][T18131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.227507][T18193] ? clear_bhb_loop+0x35/0x90 [ 1151.227535][T18193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.243151][T18131] bridge_slave_1: entered allmulticast mode [ 1151.243694][T18193] RIP: 0033:0x7f16b6d7e759 [ 1151.243716][T18193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1151.243733][T18193] RSP: 002b:00007f16b7b58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1151.243756][T18193] RAX: ffffffffffffffda RBX: 00007f16b6f35f80 RCX: 00007f16b6d7e759 [ 1151.266084][T18131] bridge_slave_1: entered promiscuous mode [ 1151.279481][T18193] RDX: 0000000000000003 RSI: 0000000020000000 RDI: 0000000000000003 [ 1151.279499][T18193] RBP: 00007f16b7b58090 R08: 0000000000000000 R09: 0000000000000000 [ 1151.279513][T18193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1151.279526][T18193] R13: 0000000000000000 R14: 00007f16b6f35f80 R15: 00007ffcc8425ed8 [ 1151.279554][T18193] [ 1151.351790][ T2146] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1151.464378][T18131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.567853][T18131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1151.606989][ T2146] usb 6-1: Using ep0 maxpacket: 16 [ 1151.625604][ T2146] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.635350][T18200] FAULT_INJECTION: forcing a failure. [ 1151.635350][T18200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1151.700418][ T2146] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1151.706914][T18131] team0: Port device team_slave_0 added [ 1151.721714][T18200] CPU: 1 UID: 0 PID: 18200 Comm: syz.3.3376 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1151.732147][T18200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1151.742188][T18200] Call Trace: [ 1151.745454][T18200] [ 1151.748371][T18200] dump_stack_lvl+0x241/0x360 [ 1151.753038][T18200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1151.758309][T18200] ? __pfx__printk+0x10/0x10 [ 1151.762891][T18200] ? __pfx_lock_release+0x10/0x10 [ 1151.767901][T18200] should_fail_ex+0x3b0/0x4e0 [ 1151.772566][T18200] _copy_from_user+0x2f/0xc0 [ 1151.777142][T18200] copy_msghdr_from_user+0xae/0x680 [ 1151.782347][T18200] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1151.788171][T18200] ? __fget_files+0x2a/0x410 [ 1151.792786][T18200] ? __fget_files+0x2a/0x410 [ 1151.797408][T18200] __sys_sendmsg+0x209/0x350 [ 1151.801994][T18200] ? __pfx_lock_release+0x10/0x10 [ 1151.807004][T18200] ? __pfx___sys_sendmsg+0x10/0x10 [ 1151.812109][T18200] ? __pfx_vfs_write+0x10/0x10 [ 1151.816871][T18200] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1151.823186][T18200] ? do_syscall_64+0x100/0x230 [ 1151.827936][T18200] ? do_syscall_64+0xb6/0x230 [ 1151.832615][T18200] do_syscall_64+0xf3/0x230 [ 1151.837125][T18200] ? clear_bhb_loop+0x35/0x90 [ 1151.841791][T18200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.847671][T18200] RIP: 0033:0x7fc73ef7e759 [ 1151.852076][T18200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1151.871667][T18200] RSP: 002b:00007fc73fe43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1151.880071][T18200] RAX: ffffffffffffffda RBX: 00007fc73f135f80 RCX: 00007fc73ef7e759 [ 1151.881748][ T5832] Bluetooth: hci7: command tx timeout [ 1151.888021][T18200] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 1151.901363][T18200] RBP: 00007fc73fe43090 R08: 0000000000000000 R09: 0000000000000000 [ 1151.909339][T18200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1151.917297][T18200] R13: 0000000000000000 R14: 00007fc73f135f80 R15: 00007ffce25feda8 [ 1151.925261][T18200] [ 1151.939972][T18131] team0: Port device team_slave_1 added [ 1151.972267][ T2146] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1151.991389][ T2146] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1152.011487][ T2146] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1152.054602][ T2146] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1152.063903][ T2146] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1152.072175][ T2146] usb 6-1: Manufacturer: syz [ 1152.079570][ T2146] usb 6-1: config 0 descriptor?? [ 1152.079640][T18131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1152.104819][T18131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1152.149322][T18131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1152.174476][T18131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1152.181803][T18131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1152.209499][T18131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1152.350596][T18131] hsr_slave_0: entered promiscuous mode [ 1152.392304][T18131] hsr_slave_1: entered promiscuous mode [ 1152.419484][T18131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1152.465736][T18131] Cannot create hsr debugfs directory [ 1152.506102][ T2146] rc_core: IR keymap rc-hauppauge not found [ 1152.543324][ T2146] Registered IR keymap rc-empty [ 1152.660696][ T2146] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1152.863023][ T2146] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1153.204718][ T2146] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1153.217749][ T2146] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input81 [ 1153.234758][ T2146] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1153.273762][ T2146] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1153.301885][ T2146] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1153.341671][ T2146] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1153.436917][ T2146] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1153.445610][T18217] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3379'. [ 1153.505769][ T2146] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1153.608287][T18131] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1153.644849][T18131] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1153.736937][T18131] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1153.777575][T18131] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1153.951885][ T5832] Bluetooth: hci7: command tx timeout [ 1154.080768][T18131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1154.146711][T18131] 8021q: adding VLAN 0 to HW filter on device team0 [ 1154.224817][ T964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.232003][ T964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1154.617449][ T2146] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1154.661733][ T5886] ati_remote2 8-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 1154.667495][ T964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.671860][ T2146] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1154.677232][ T964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.701674][ T2146] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1154.721764][ T2146] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1154.959150][ T2146] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1154.967293][ T2146] mceusb 6-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 1154.980169][ T2146] usb 6-1: USB disconnect, device number 34 [ 1155.354249][ T5886] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1155.690855][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 1155.711327][ T5886] usb 5-1: config index 0 descriptor too short (expected 22, got 18) [ 1155.762934][ T5886] usb 5-1: config 0 has an invalid interface number: 250 but max is 0 [ 1155.771139][ T5886] usb 5-1: config 0 has no interface number 0 [ 1155.849211][ T5886] usb 5-1: too many endpoints for config 0 interface 250 altsetting 171: 107, using maximum allowed: 30 [ 1155.872349][ T5886] usb 5-1: config 0 interface 250 altsetting 171 has 0 endpoint descriptors, different from the interface descriptor's value: 107 [ 1155.937279][ T5886] usb 5-1: config 0 interface 250 has no altsetting 0 [ 1155.963652][ T5886] usb 5-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63 [ 1155.973718][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.981824][ T5886] usb 5-1: Product: syz [ 1155.986000][ T5886] usb 5-1: Manufacturer: syz [ 1155.990609][ T5886] usb 5-1: SerialNumber: syz [ 1155.998741][ T5886] usb 5-1: config 0 descriptor?? [ 1156.007435][ T5886] gspca_main: sunplus-2.14.0 probing 04f1:1001 [ 1156.042403][T18131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1156.970602][T18241] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1157.563019][ T5886] gspca_sunplus: reg_w_riv err -110 [ 1157.563090][ T5886] sunplus 5-1:0.250: probe with driver sunplus failed with error -110 [ 1157.572856][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 1157.572873][ T29] audit: type=1326 audit(1732093552.550:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18251 comm="syz.5.3385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde8777e759 code=0x0 [ 1157.699265][T18131] veth0_vlan: entered promiscuous mode [ 1157.733257][ T2146] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1157.745577][T18131] veth1_vlan: entered promiscuous mode [ 1157.804566][T18131] veth0_macvtap: entered promiscuous mode [ 1157.836627][T18131] veth1_macvtap: entered promiscuous mode [ 1157.850037][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.850060][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.850074][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.850089][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.850102][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.850116][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.850130][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.850144][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.850157][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.850171][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.850183][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.850197][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.850210][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1157.850224][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.852716][T18131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1157.854905][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.854926][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.854939][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.854953][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.854966][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.854980][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.854992][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.855006][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.855018][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.855031][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.855044][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.855058][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.855070][T18131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1157.855083][T18131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1157.856026][T18131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1157.858542][T18131] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.858575][T18131] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.858603][T18131] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.858630][T18131] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.027051][ T2146] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1158.027083][ T2146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.028921][ T2146] usb 4-1: config 0 descriptor?? [ 1158.450855][ T47] usb 5-1: USB disconnect, device number 41 [ 1158.536613][ T2146] usb 4-1: Cannot set autoneg [ 1158.536750][ T2146] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1158.539604][ T2146] usb 4-1: USB disconnect, device number 61 [ 1158.737357][T18261] IPv6: sit1: Disabled Multicast RS [ 1158.755436][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.793952][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.013745][T18271] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3389'. [ 1160.115425][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.152498][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.421801][T18271] 9pnet_fd: Insufficient options for proto=fd [ 1160.770199][T18287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.952614][T18287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.962650][ T25] usb 8-1: USB disconnect, device number 6 [ 1161.146403][T18286] ubi: mtd0 is already attached to ubi0 [ 1161.291667][T15715] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1162.069253][T15715] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1162.091705][T15715] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1162.132752][T15715] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 1162.184751][T15715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.246544][T15715] usb 6-1: config 0 descriptor?? [ 1162.441894][T18313] syz.7.3394: attempt to access beyond end of device [ 1162.441894][T18313] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1163.078136][T15715] itetech 0003:06CB:73F5.0010: unbalanced collection at end of report description [ 1163.092130][T15715] itetech 0003:06CB:73F5.0010: probe with driver itetech failed with error -22 [ 1163.396262][ T25] usb 6-1: USB disconnect, device number 35 [ 1164.055729][ T29] audit: type=1326 audit(1732093559.010:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18350 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73ef7e759 code=0x7ffc0000 [ 1164.381575][ T29] audit: type=1326 audit(1732093559.040:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18350 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73ef7e759 code=0x7ffc0000 [ 1164.523842][ T29] audit: type=1326 audit(1732093559.040:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18350 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fc73ef7e759 code=0x7ffc0000 [ 1164.592700][T18358] FAULT_INJECTION: forcing a failure. [ 1164.592700][T18358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1164.609103][ T29] audit: type=1326 audit(1732093559.040:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18350 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73ef7e759 code=0x7ffc0000 [ 1164.622177][T18357] FAULT_INJECTION: forcing a failure. [ 1164.622177][T18357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1164.630778][ C0] vkms_vblank_simulate: vblank timer overrun [ 1164.650853][T18358] CPU: 0 UID: 0 PID: 18358 Comm: syz.5.3403 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1164.661297][T18358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1164.671369][T18358] Call Trace: [ 1164.674667][T18358] [ 1164.677617][T18358] dump_stack_lvl+0x241/0x360 [ 1164.682320][T18358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1164.687535][T18358] ? __pfx__printk+0x10/0x10 [ 1164.692153][T18358] ? snprintf+0xda/0x120 [ 1164.696413][T18358] should_fail_ex+0x3b0/0x4e0 [ 1164.701107][T18358] _copy_to_user+0x31/0xb0 [ 1164.705539][T18358] simple_read_from_buffer+0xca/0x150 [ 1164.710931][T18358] proc_fail_nth_read+0x1e9/0x250 [ 1164.715987][T18358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1164.721562][T18358] ? rw_verify_area+0x55e/0x6f0 [ 1164.726431][T18358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1164.731995][T18358] vfs_read+0x1fc/0xb70 [ 1164.736173][T18358] ? __pfx___mutex_lock+0x10/0x10 [ 1164.741201][T18358] ? __pfx_vfs_read+0x10/0x10 [ 1164.745889][T18358] ? __fget_files+0x2a/0x410 [ 1164.750493][T18358] ? __fget_files+0x395/0x410 [ 1164.755190][T18358] ? __fget_files+0x2a/0x410 [ 1164.759820][T18358] ksys_read+0x18f/0x2b0 [ 1164.764096][T18358] ? __pfx_ksys_read+0x10/0x10 [ 1164.768890][T18358] ? do_syscall_64+0x100/0x230 [ 1164.773674][T18358] ? do_syscall_64+0xb6/0x230 [ 1164.778376][T18358] do_syscall_64+0xf3/0x230 [ 1164.782908][T18358] ? clear_bhb_loop+0x35/0x90 [ 1164.787612][T18358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.793536][T18358] RIP: 0033:0x7fde8777d19c [ 1164.797970][T18358] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1164.817597][T18358] RSP: 002b:00007fde885d6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1164.826037][T18358] RAX: ffffffffffffffda RBX: 00007fde87935f80 RCX: 00007fde8777d19c [ 1164.834030][T18358] RDX: 000000000000000f RSI: 00007fde885d60a0 RDI: 0000000000000003 [ 1164.842022][T18358] RBP: 00007fde885d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1164.850011][T18358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1164.855252][ T47] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1164.857980][T18358] R13: 0000000000000000 R14: 00007fde87935f80 R15: 00007ffe99a1c508 [ 1164.873520][T18358] [ 1164.876680][ C0] vkms_vblank_simulate: vblank timer overrun [ 1164.880116][T18357] CPU: 1 UID: 0 PID: 18357 Comm: syz.7.3404 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1164.884136][ T29] audit: type=1326 audit(1732093559.040:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18350 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73ef7e759 code=0x7ffc0000 [ 1164.893042][T18357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1164.893056][T18357] Call Trace: [ 1164.893064][T18357] [ 1164.893074][T18357] dump_stack_lvl+0x241/0x360 [ 1164.893101][T18357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1164.893119][T18357] ? __pfx__printk+0x10/0x10 [ 1164.893146][T18357] ? __pfx_lock_release+0x10/0x10 [ 1164.893169][T18357] should_fail_ex+0x3b0/0x4e0 [ 1164.893191][T18357] _copy_from_user+0x2f/0xc0 [ 1164.893209][T18357] copy_msghdr_from_user+0xae/0x680 [ 1164.893238][T18357] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1164.893258][T18357] ? __fget_files+0x2a/0x410 [ 1164.893281][T18357] ? __fget_files+0x2a/0x410 [ 1164.893308][T18357] __sys_sendmsg+0x209/0x350 [ 1164.893327][T18357] ? __pfx_lock_release+0x10/0x10 [ 1164.893345][T18357] ? __pfx___sys_sendmsg+0x10/0x10 [ 1164.893375][T18357] ? __pfx_vfs_write+0x10/0x10 [ 1164.893424][T18357] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1164.893453][T18357] ? do_syscall_64+0x100/0x230 [ 1164.893475][T18357] ? do_syscall_64+0xb6/0x230 [ 1164.893497][T18357] do_syscall_64+0xf3/0x230 [ 1164.893515][T18357] ? clear_bhb_loop+0x35/0x90 [ 1164.893538][T18357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.893564][T18357] RIP: 0033:0x7f7709b7e759 [ 1164.893582][T18357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1164.893600][T18357] RSP: 002b:00007f770a9bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1164.893623][T18357] RAX: ffffffffffffffda RBX: 00007f7709d35f80 RCX: 00007f7709b7e759 [ 1164.893638][T18357] RDX: 0000000000000000 RSI: 000000002000bf00 RDI: 0000000000000003 [ 1164.893651][T18357] RBP: 00007f770a9bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1164.893664][T18357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1164.893676][T18357] R13: 0000000000000000 R14: 00007f7709d35f80 R15: 00007ffcb5c405a8 [ 1164.893702][T18357] [ 1164.915919][ T29] audit: type=1326 audit(1732093559.080:4253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18350 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc73ef7e759 code=0x7ffc0000 [ 1164.991813][ T47] usb 5-1: device descriptor read/64, error -71 [ 1165.068563][ T29] audit: type=1326 audit(1732093559.080:4254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18350 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73ef7e759 code=0x7ffc0000 [ 1165.131005][ C0] vkms_vblank_simulate: vblank timer overrun [ 1165.171727][ T2146] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1165.260936][ T29] audit: type=1326 audit(1732093559.150:4255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18350 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73ef7e759 code=0x7ffc0000 [ 1165.282844][ T29] audit: type=1326 audit(1732093559.150:4256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18350 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc73ef7e759 code=0x7ffc0000 [ 1165.325360][ T29] audit: type=1326 audit(1732093559.170:4257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18350 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73ef7e759 code=0x7ffc0000 [ 1165.347010][ C0] vkms_vblank_simulate: vblank timer overrun [ 1165.351830][ T47] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1165.385383][ T2146] usb 10-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1165.395070][ T2146] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.407846][ T2146] usb 10-1: config 0 descriptor?? [ 1165.543567][ T47] usb 5-1: device descriptor read/64, error -71 [ 1165.621256][T18375] fuse: Invalid rootmode [ 1165.630034][ T2146] kaweth 10-1:0.0: Firmware present in device. [ 1165.642874][ T2146] kaweth 10-1:0.0: Statistics collection: 0 [ 1165.648906][ T2146] kaweth 10-1:0.0: Multicast filter limit: 0 [ 1165.655233][ T2146] kaweth 10-1:0.0: MTU: 0 [ 1165.659595][ T2146] kaweth 10-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1165.734618][ T47] usb usb5-port1: attempt power cycle [ 1166.129579][ T2146] kaweth 10-1:0.0: Error setting SOFS wait [ 1166.136917][ T2146] kaweth 10-1:0.0: probe with driver kaweth failed with error -5 [ 1166.149114][ T2146] usb 10-1: USB disconnect, device number 2 [ 1166.164021][T18383] FAULT_INJECTION: forcing a failure. [ 1166.164021][T18383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1166.177251][T18383] CPU: 0 UID: 0 PID: 18383 Comm: syz.9.3411 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1166.181963][ T47] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1166.187662][T18383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1166.187677][T18383] Call Trace: [ 1166.187687][T18383] [ 1166.187697][T18383] dump_stack_lvl+0x241/0x360 [ 1166.187724][T18383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1166.187743][T18383] ? __pfx__printk+0x10/0x10 [ 1166.187771][T18383] ? __pfx_lock_release+0x10/0x10 [ 1166.187796][T18383] should_fail_ex+0x3b0/0x4e0 [ 1166.187821][T18383] _copy_from_user+0x2f/0xc0 [ 1166.187841][T18383] copy_msghdr_from_user+0xae/0x680 [ 1166.187863][T18383] ? __lock_acquire+0x1397/0x2100 [ 1166.187886][T18383] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1166.187908][T18383] ? __fget_files+0x2a/0x410 [ 1166.187931][T18383] ? __fget_files+0x2a/0x410 [ 1166.187959][T18383] do_recvmmsg+0x3bd/0xab0 [ 1166.187988][T18383] ? __pfx_do_recvmmsg+0x10/0x10 [ 1166.188027][T18383] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1166.188050][T18383] ? ksys_write+0x22a/0x2b0 [ 1166.188076][T18383] ? __pfx_lock_release+0x10/0x10 [ 1166.290317][T18383] ? vfs_write+0x730/0xd30 [ 1166.294755][T18383] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1166.300728][T18383] ? __fget_files+0x2a/0x410 [ 1166.305323][T18383] __x64_sys_recvmmsg+0x199/0x250 [ 1166.310347][T18383] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1166.315892][T18383] ? do_syscall_64+0x100/0x230 [ 1166.320650][T18383] ? do_syscall_64+0xb6/0x230 [ 1166.325321][T18383] do_syscall_64+0xf3/0x230 [ 1166.329820][T18383] ? clear_bhb_loop+0x35/0x90 [ 1166.334494][T18383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.340387][T18383] RIP: 0033:0x7f6acc97e759 [ 1166.344802][T18383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1166.364407][T18383] RSP: 002b:00007f6acd82d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1166.372820][T18383] RAX: ffffffffffffffda RBX: 00007f6accb35f80 RCX: 00007f6acc97e759 [ 1166.380786][T18383] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000004 [ 1166.388752][T18383] RBP: 00007f6acd82d090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.396729][T18383] R10: 0000000000010025 R11: 0000000000000246 R12: 0000000000000001 [ 1166.404702][T18383] R13: 0000000000000000 R14: 00007f6accb35f80 R15: 00007ffd9e03b0b8 [ 1166.412681][T18383] [ 1166.431739][ T47] usb 5-1: device descriptor read/8, error -71 [ 1166.692284][ T47] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1167.086682][ T47] usb 5-1: device descriptor read/8, error -71 [ 1167.239218][ T47] usb usb5-port1: unable to enumerate USB device [ 1167.345669][T18384] vxcan2: entered allmulticast mode [ 1167.447210][T18403] netlink: 203452 bytes leftover after parsing attributes in process `syz.5.3415'. [ 1168.641684][ T47] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1168.821894][ T47] usb 5-1: device descriptor read/64, error -71 [ 1169.101929][ T47] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1169.422689][ T47] usb 5-1: device descriptor read/64, error -71 [ 1169.471588][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 1169.471607][ T29] audit: type=1326 audit(1732093564.440:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18435 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8777e759 code=0x7ffc0000 [ 1169.499578][ T29] audit: type=1326 audit(1732093564.440:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18435 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8777e759 code=0x7ffc0000 [ 1169.521835][ T29] audit: type=1326 audit(1732093564.440:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18435 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fde8777e759 code=0x7ffc0000 [ 1169.544307][ T29] audit: type=1326 audit(1732093564.440:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18435 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8777e759 code=0x7ffc0000 [ 1169.566104][ T29] audit: type=1326 audit(1732093564.440:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18435 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fde8777e759 code=0x7ffc0000 [ 1169.566162][ T47] usb usb5-port1: attempt power cycle [ 1169.587754][ T29] audit: type=1326 audit(1732093564.440:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18435 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8777e759 code=0x7ffc0000 [ 1169.587791][ T29] audit: type=1326 audit(1732093564.440:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18435 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde8777e759 code=0x7ffc0000 [ 1169.587822][ T29] audit: type=1326 audit(1732093564.440:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18435 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8777e759 code=0x7ffc0000 [ 1169.659157][ T29] audit: type=1326 audit(1732093564.440:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18435 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde8777e759 code=0x7ffc0000 [ 1169.680919][ T29] audit: type=1326 audit(1732093564.440:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18435 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8777e759 code=0x7ffc0000 [ 1170.092258][ T47] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1171.258835][ T47] usb 5-1: device descriptor read/8, error -71 [ 1171.571576][T18458] FAULT_INJECTION: forcing a failure. [ 1171.571576][T18458] name failslab, interval 1, probability 0, space 0, times 0 [ 1171.792035][T18458] CPU: 1 UID: 0 PID: 18458 Comm: syz.3.3433 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1171.802515][T18458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1171.812582][T18458] Call Trace: [ 1171.815870][T18458] [ 1171.818812][T18458] dump_stack_lvl+0x241/0x360 [ 1171.823512][T18458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1171.828723][T18458] ? __pfx__printk+0x10/0x10 [ 1171.833337][T18458] ? fs_reclaim_acquire+0x93/0x130 [ 1171.838466][T18458] ? __pfx___might_resched+0x10/0x10 [ 1171.843775][T18458] should_fail_ex+0x3b0/0x4e0 [ 1171.848470][T18458] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1171.854206][T18458] should_failslab+0xac/0x100 [ 1171.858897][T18458] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1171.864635][T18458] __kmalloc_noprof+0xd8/0x400 [ 1171.869425][T18458] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1171.875008][T18458] tomoyo_path_number_perm+0x236/0x860 [ 1171.880489][T18458] ? __lock_acquire+0x1397/0x2100 [ 1171.885528][T18458] ? tomoyo_path_number_perm+0x206/0x860 [ 1171.891180][T18458] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1171.897219][T18458] ? __fget_files+0x2a/0x410 [ 1171.901829][T18458] ? __fget_files+0x2a/0x410 [ 1171.906439][T18458] security_file_ioctl+0xc6/0x2a0 [ 1171.911483][T18458] __se_sys_ioctl+0x46/0x170 [ 1171.916094][T18458] do_syscall_64+0xf3/0x230 [ 1171.920609][T18458] ? clear_bhb_loop+0x35/0x90 [ 1171.925307][T18458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.931219][T18458] RIP: 0033:0x7fc73ef7e759 [ 1171.935642][T18458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1171.955265][T18458] RSP: 002b:00007fc73fe43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1171.963704][T18458] RAX: ffffffffffffffda RBX: 00007fc73f135f80 RCX: 00007fc73ef7e759 [ 1171.971678][T18458] RDX: 00000000200000c0 RSI: 0000000000008991 RDI: 0000000000000003 [ 1171.979648][T18458] RBP: 00007fc73fe43090 R08: 0000000000000000 R09: 0000000000000000 [ 1171.987604][T18458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1171.995558][T18458] R13: 0000000000000000 R14: 00007fc73f135f80 R15: 00007ffce25feda8 [ 1172.003541][T18458] [ 1172.037055][T18458] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1172.422366][T18467] ubi: mtd0 is already attached to ubi0 [ 1173.961783][T18486] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3439'. [ 1174.014917][T18489] FAULT_INJECTION: forcing a failure. [ 1174.014917][T18489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1174.040450][T18490] 9pnet_fd: Insufficient options for proto=fd [ 1174.058882][T18489] CPU: 1 UID: 0 PID: 18489 Comm: syz.7.3441 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1174.069344][T18489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1174.079425][T18489] Call Trace: [ 1174.082722][T18489] [ 1174.085666][T18489] dump_stack_lvl+0x241/0x360 [ 1174.090366][T18489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1174.095587][T18489] ? __pfx__printk+0x10/0x10 [ 1174.100215][T18489] ? __pfx_lock_release+0x10/0x10 [ 1174.105264][T18489] ? vfs_write+0x730/0xd30 [ 1174.109711][T18489] should_fail_ex+0x3b0/0x4e0 [ 1174.114416][T18489] _copy_from_user+0x2f/0xc0 [ 1174.119034][T18489] get_timespec64+0x97/0x280 [ 1174.123653][T18489] ? __pfx_get_timespec64+0x10/0x10 [ 1174.128880][T18489] ? __fget_files+0x2a/0x410 [ 1174.133513][T18489] __x64_sys_recvmmsg+0x140/0x250 [ 1174.138562][T18489] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1174.144131][T18489] ? do_syscall_64+0x100/0x230 [ 1174.148920][T18489] ? do_syscall_64+0xb6/0x230 [ 1174.153622][T18489] do_syscall_64+0xf3/0x230 [ 1174.158141][T18489] ? clear_bhb_loop+0x35/0x90 [ 1174.162819][T18489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.168718][T18489] RIP: 0033:0x7f7709b7e759 [ 1174.173129][T18489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1174.192734][T18489] RSP: 002b:00007f770a9bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1174.201147][T18489] RAX: ffffffffffffffda RBX: 00007f7709d35f80 RCX: 00007f7709b7e759 [ 1174.209115][T18489] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 1174.217082][T18489] RBP: 00007f770a9bd090 R08: 0000000020003700 R09: 0000000000000000 [ 1174.225051][T18489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1174.233018][T18489] R13: 0000000000000000 R14: 00007f7709d35f80 R15: 00007ffcb5c405a8 [ 1174.241001][T18489] [ 1174.732689][T18504] FAULT_INJECTION: forcing a failure. [ 1174.732689][T18504] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.848870][T18504] CPU: 0 UID: 0 PID: 18504 Comm: syz.3.3448 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1174.859347][T18504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1174.869417][T18504] Call Trace: [ 1174.872687][T18504] [ 1174.875622][T18504] dump_stack_lvl+0x241/0x360 [ 1174.880294][T18504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1174.885478][T18504] ? __pfx__printk+0x10/0x10 [ 1174.890062][T18504] ? fs_reclaim_acquire+0x93/0x130 [ 1174.895166][T18504] ? __pfx___might_resched+0x10/0x10 [ 1174.900445][T18504] should_fail_ex+0x3b0/0x4e0 [ 1174.905114][T18504] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1174.910823][T18504] should_failslab+0xac/0x100 [ 1174.915500][T18504] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1174.921228][T18504] __kmalloc_noprof+0xd8/0x400 [ 1174.926015][T18504] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1174.931560][T18504] tomoyo_path_number_perm+0x236/0x860 [ 1174.937006][T18504] ? __lock_acquire+0x1397/0x2100 [ 1174.942033][T18504] ? tomoyo_path_number_perm+0x206/0x860 [ 1174.947689][T18504] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1174.953703][T18504] ? __fget_files+0x2a/0x410 [ 1174.958284][T18504] ? __fget_files+0x2a/0x410 [ 1174.962867][T18504] security_file_ioctl+0xc6/0x2a0 [ 1174.967901][T18504] __se_sys_ioctl+0x46/0x170 [ 1174.972509][T18504] do_syscall_64+0xf3/0x230 [ 1174.976998][T18504] ? clear_bhb_loop+0x35/0x90 [ 1174.981661][T18504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.987542][T18504] RIP: 0033:0x7fc73ef7e759 [ 1174.991955][T18504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1175.011578][T18504] RSP: 002b:00007fc73fe22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1175.019994][T18504] RAX: ffffffffffffffda RBX: 00007fc73f136058 RCX: 00007fc73ef7e759 [ 1175.027960][T18504] RDX: 0000000020000180 RSI: 000000004040534e RDI: 0000000000000003 [ 1175.036449][T18504] RBP: 00007fc73fe22090 R08: 0000000000000000 R09: 0000000000000000 [ 1175.044416][T18504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1175.052382][T18504] R13: 0000000000000001 R14: 00007fc73f136058 R15: 00007ffce25feda8 [ 1175.060361][T18504] [ 1175.063473][ C0] vkms_vblank_simulate: vblank timer overrun [ 1175.120694][T18503] ubi: mtd0 is already attached to ubi0 [ 1175.203828][ T5886] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1175.219095][T18504] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1176.321651][ T5886] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1176.611722][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.634281][ T5886] usb 6-1: config 0 descriptor?? [ 1176.691825][ T47] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1176.767291][T18530] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3452'. [ 1176.862995][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 1176.934735][ T5886] cp210x 6-1:0.0: cp210x converter detected [ 1176.974171][ T47] usb 5-1: New USB device found, idVendor=0c45, idProduct=6100, bcdDevice=c4.6d [ 1176.985009][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.024240][ T47] usb 5-1: Product: syz [ 1177.028483][ T47] usb 5-1: Manufacturer: syz [ 1177.156999][ T47] usb 5-1: SerialNumber: syz [ 1177.164438][ T47] usb 5-1: config 0 descriptor?? [ 1177.176765][ T47] gspca_main: sonixj-2.14.0 probing 0c45:6100 [ 1177.242542][ T5886] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1177.250281][ T5886] cp210x 6-1:0.0: querying part number failed [ 1177.274437][ T5886] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1177.479636][T18540] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3454'. [ 1177.550899][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.564705][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.660687][ T47] gspca_sonixj: reg_r err -71 [ 1178.665823][ T47] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1178.815600][T18557] ubi: mtd0 is already attached to ubi0 [ 1179.432063][ C0] dccp_check_seqno: Step 6 failed for CLOSE packet, (LSWL(173011573650249) <= P.seqno(173011573650248) <= S.SWH(173011573650323)) and (P.ackno exists or LAWL(100539902535405) <= P.ackno(100539902535405) <= S.AWH(100539902535405), sending SYNC... [ 1179.446460][ T47] usb 5-1: USB disconnect, device number 50 [ 1179.508082][ T5886] usb 6-1: USB disconnect, device number 36 [ 1179.516896][ T5886] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1179.535325][ T5886] cp210x 6-1:0.0: device disconnected [ 1180.328714][T18577] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3466'. [ 1180.883247][T13233] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1181.066828][T13233] usb 8-1: Using ep0 maxpacket: 32 [ 1181.090454][T18581] NILFS (nullb0): couldn't find nilfs on the device [ 1181.132237][T13233] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.143374][T13233] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1181.302120][T13233] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1181.314129][T13233] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.537488][T13233] usb 8-1: config 0 descriptor?? [ 1182.185245][T13233] hub 8-1:0.0: USB hub found [ 1182.762234][T13233] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 1182.789943][T13233] usbhid 8-1:0.0: can't add hid device: -71 [ 1182.796502][T13233] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1182.822443][T13233] usb 8-1: USB disconnect, device number 7 [ 1182.877482][T18604] FAULT_INJECTION: forcing a failure. [ 1182.877482][T18604] name failslab, interval 1, probability 0, space 0, times 0 [ 1182.894873][T18604] CPU: 0 UID: 0 PID: 18604 Comm: syz.5.3475 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1182.905323][T18604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1182.915392][T18604] Call Trace: [ 1182.918670][T18604] [ 1182.921597][T18604] dump_stack_lvl+0x241/0x360 [ 1182.926275][T18604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1182.931469][T18604] ? __pfx__printk+0x10/0x10 [ 1182.936073][T18604] ? __lock_acquire+0x1397/0x2100 [ 1182.941097][T18604] should_fail_ex+0x3b0/0x4e0 [ 1182.945776][T18604] should_failslab+0xac/0x100 [ 1182.950448][T18604] ? __alloc_skb+0x1c3/0x440 [ 1182.955042][T18604] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1182.960851][T18604] __alloc_skb+0x1c3/0x440 [ 1182.965275][T18604] ? __pfx___alloc_skb+0x10/0x10 [ 1182.970212][T18604] ? __lock_acquire+0x2100/0x2100 [ 1182.975237][T18604] tipc_msg_reverse+0x235/0x930 [ 1182.980092][T18604] tipc_sk_respond+0x117/0x340 [ 1182.984851][T18604] ? __pfx_tipc_sk_respond+0x10/0x10 [ 1182.990127][T18604] ? __tipc_shutdown+0x114c/0x1680 [ 1182.995231][T18604] ? kmem_cache_free+0x1a2/0x420 [ 1183.000164][T18604] ? __tipc_shutdown+0x114c/0x1680 [ 1183.005272][T18604] __tipc_shutdown+0x12c6/0x1680 [ 1183.010216][T18604] ? __pfx___tipc_shutdown+0x10/0x10 [ 1183.015494][T18604] ? __local_bh_enable_ip+0x168/0x200 [ 1183.020859][T18604] ? __pfx_woken_wake_function+0x10/0x10 [ 1183.026486][T18604] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1183.032214][T18604] tipc_release+0x19c/0x1870 [ 1183.036806][T18604] ? __pfx_ima_file_free+0x10/0x10 [ 1183.041920][T18604] ? __pfx_tipc_release+0x10/0x10 [ 1183.046949][T18604] ? down_write+0x18c/0x220 [ 1183.051446][T18604] ? __pfx_down_write+0x10/0x10 [ 1183.056301][T18604] sock_close+0xbc/0x240 [ 1183.060540][T18604] ? __pfx_sock_close+0x10/0x10 [ 1183.065386][T18604] __fput+0x23c/0xa50 [ 1183.069377][T18604] __x64_sys_close+0x7f/0x110 [ 1183.074055][T18604] do_syscall_64+0xf3/0x230 [ 1183.078551][T18604] ? clear_bhb_loop+0x35/0x90 [ 1183.083223][T18604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.089111][T18604] RIP: 0033:0x7fde8777e759 [ 1183.093522][T18604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1183.113121][T18604] RSP: 002b:00007fde885d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1183.121534][T18604] RAX: ffffffffffffffda RBX: 00007fde87935f80 RCX: 00007fde8777e759 [ 1183.129499][T18604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1183.137465][T18604] RBP: 00007fde885d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.145432][T18604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.153398][T18604] R13: 0000000000000000 R14: 00007fde87935f80 R15: 00007ffe99a1c508 [ 1183.161377][T18604] [ 1183.164528][ C0] vkms_vblank_simulate: vblank timer overrun [ 1183.501620][T13233] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1183.662490][T13233] usb 8-1: Using ep0 maxpacket: 16 [ 1183.735707][T13233] usb 8-1: config 0 has too many interfaces: 250, using maximum allowed: 32 [ 1183.759781][T13233] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.771866][T13233] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 250 [ 1183.793361][T13233] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1183.802653][T13233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.811226][T13233] usb 8-1: Product: syz [ 1183.815611][T13233] usb 8-1: Manufacturer: syz [ 1183.820216][T13233] usb 8-1: SerialNumber: syz [ 1183.827065][T13233] usb 8-1: config 0 descriptor?? [ 1187.112005][T13233] usb 8-1: USB disconnect, device number 8 [ 1187.195011][T18630] overlayfs: failed to resolve './file0': -2 [ 1187.429054][T18636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3485'. [ 1188.290426][T18648] ubi: mtd0 is already attached to ubi0 [ 1189.765174][T18661] bridge0: port 3(syz_tun) entered blocking state [ 1189.816500][T18661] bridge0: port 3(syz_tun) entered disabled state [ 1190.147908][T18680] overlayfs: failed to resolve './file1': -2 [ 1190.163058][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 1190.163073][ T29] audit: type=1326 audit(1732093585.160:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18681 comm="syz.7.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7709b7e759 code=0x7ffc0000 [ 1190.315318][ T29] audit: type=1326 audit(1732093585.190:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18681 comm="syz.7.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7709b7e759 code=0x7ffc0000 [ 1190.461753][ T29] audit: type=1326 audit(1732093585.190:4442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18681 comm="syz.7.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f7709b7e759 code=0x7ffc0000 [ 1190.511632][ T29] audit: type=1326 audit(1732093585.190:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18681 comm="syz.7.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7709b7e759 code=0x7ffc0000 [ 1190.974091][ T29] audit: type=1326 audit(1732093585.190:4444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18681 comm="syz.7.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7709b7e759 code=0x7ffc0000 [ 1191.162040][ T29] audit: type=1326 audit(1732093585.190:4445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18681 comm="syz.7.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7709b7e759 code=0x7ffc0000 [ 1191.183740][ T29] audit: type=1326 audit(1732093585.190:4446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18681 comm="syz.7.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7709b7e759 code=0x7ffc0000 [ 1191.205484][ T29] audit: type=1326 audit(1732093585.190:4447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18681 comm="syz.7.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7709b7e759 code=0x7ffc0000 [ 1191.227705][ T29] audit: type=1326 audit(1732093585.190:4448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18681 comm="syz.7.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7709b7e759 code=0x7ffc0000 [ 1191.227741][ T29] audit: type=1326 audit(1732093585.190:4449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18681 comm="syz.7.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7709b7e759 code=0x7ffc0000 [ 1191.782372][T18710] 9pnet_fd: Insufficient options for proto=fd [ 1191.886587][T18717] ubi: mtd0 is already attached to ubi0 [ 1192.591646][ T25] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1192.641891][T18730] overlayfs: failed to resolve './file1': -2 [ 1192.741866][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 1192.749233][ T25] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1192.790788][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1192.812145][ T25] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1192.821314][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.834784][ T25] usb 6-1: Product: syz [ 1192.855393][ T25] usb 6-1: Manufacturer: syz [ 1192.874572][ T25] usb 6-1: SerialNumber: syz [ 1192.894524][ T25] usb 6-1: config 0 descriptor?? [ 1192.918369][ T25] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1192.940006][ T25] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1193.536761][ T25] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1193.562728][ T25] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1193.822053][ T5886] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1194.229447][ T25] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1194.250144][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1194.321733][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 1194.342972][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1194.390682][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.426867][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1194.466776][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1194.525586][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1194.689188][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1194.797692][ T5886] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1194.892666][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1194.928337][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1195.189301][ T5886] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1195.291824][ T5886] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1195.307123][ T5886] usb 5-1: Manufacturer: syz [ 1195.314434][ T5886] usb 5-1: config 0 descriptor?? [ 1195.766199][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1195.786467][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1195.801758][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 1195.801777][ T29] audit: type=1326 audit(1732093590.790:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18757 comm="syz.3.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73ef7e759 code=0x7ffc0000 [ 1195.834324][ T29] audit: type=1326 audit(1732093590.790:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18757 comm="syz.3.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fc73ef7e759 code=0x7ffc0000 [ 1195.856728][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1195.863642][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1195.870182][ T25] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1195.879433][ T29] audit: type=1326 audit(1732093590.790:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18757 comm="syz.3.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73ef7e759 code=0x7ffc0000 [ 1195.923122][ T25] usb 6-1: USB disconnect, device number 37 [ 1195.951310][ T29] audit: type=1326 audit(1732093590.790:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18757 comm="syz.3.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc73ef7e759 code=0x7ffc0000 [ 1196.009409][T18764] netlink: 'syz.7.3519': attribute type 12 has an invalid length. [ 1196.029166][ T29] audit: type=1326 audit(1732093590.790:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18757 comm="syz.3.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73ef7e759 code=0x7ffc0000 [ 1196.053547][ T29] audit: type=1326 audit(1732093590.800:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18757 comm="syz.3.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc73ef7e759 code=0x7ffc0000 [ 1196.098875][ T29] audit: type=1326 audit(1732093590.800:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18757 comm="syz.3.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73ef7e759 code=0x7ffc0000 [ 1197.966840][ T29] audit: type=1326 audit(1732093590.800:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18757 comm="syz.3.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc73ef7e759 code=0x7ffc0000 [ 1198.082072][ T5886] rc_core: IR keymap rc-hauppauge not found [ 1198.089793][ T5886] Registered IR keymap rc-empty [ 1198.094920][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1198.116934][ T29] audit: type=1326 audit(1732093590.800:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18757 comm="syz.3.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc73ef7e759 code=0x7ffc0000 [ 1198.152028][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1198.178393][ T5886] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1198.184458][ T29] audit: type=1326 audit(1732093590.800:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18757 comm="syz.3.3517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc73ef7e759 code=0x7ffc0000 [ 1198.192815][ T5886] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input87 [ 1198.282057][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1198.303335][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1198.334994][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1198.383173][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1198.401736][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1198.472846][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1198.497979][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1198.574610][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1200.546783][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1201.297676][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1201.333314][ T5886] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1201.341920][ T5886] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1201.355308][ T5886] usb 5-1: USB disconnect, device number 51 [ 1201.756026][T18824] netlink: 'syz.3.3533': attribute type 12 has an invalid length. [ 1203.041936][T18853] netlink: 'syz.7.3544': attribute type 12 has an invalid length. [ 1203.653838][T18858] ubi: mtd0 is already attached to ubi0 [ 1205.738480][T18887] netlink: 'syz.3.3552': attribute type 12 has an invalid length. [ 1205.811646][ T5885] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1205.982463][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 1206.000433][ T5885] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 1206.015471][ T5885] usb 5-1: config 0 has no interface number 0 [ 1206.032239][ T5885] usb 5-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 1206.075546][ T5885] usb 5-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1206.875293][ T5885] usb 5-1: config 0 interface 48 has no altsetting 0 [ 1206.900353][ T5885] usb 5-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=b1.ff [ 1206.919028][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.934407][ T5885] usb 5-1: Product: syz [ 1206.939912][ T5885] usb 5-1: Manufacturer: syz [ 1206.948407][ T5885] usb 5-1: SerialNumber: syz [ 1206.961470][ T5885] usb 5-1: config 0 descriptor?? [ 1207.326944][ T5885] gspca_main: spca506-2.14.0 probing 0734:043b [ 1207.664350][T18914] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1207.975899][ T5885] usb 5-1: USB disconnect, device number 52 [ 1208.804989][T13233] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1209.141208][T18930] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3565'. [ 1209.171646][T13233] usb 8-1: Using ep0 maxpacket: 32 [ 1209.667339][T18928] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3564'. [ 1209.767399][T18935] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3564'. [ 1209.789336][T13233] usb 8-1: config 148 has an invalid interface number: 223 but max is 0 [ 1209.802740][T13233] usb 8-1: config 148 has no interface number 0 [ 1209.831816][T13233] usb 8-1: config 148 interface 223 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1209.864989][T13233] usb 8-1: config 148 interface 223 has no altsetting 0 [ 1209.918637][T13233] usb 8-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=27.b4 [ 1209.943036][T13233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.001890][T13233] usb 8-1: Product: syz [ 1210.016315][T13233] usb 8-1: Manufacturer: syz [ 1210.023728][T13233] usb 8-1: SerialNumber: syz [ 1210.211966][ T25] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1210.379579][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 1210.403061][T13233] usb 8-1: USB disconnect, device number 9 [ 1210.549247][T18933] netlink: 9412 bytes leftover after parsing attributes in process `syz.5.3567'. [ 1210.822554][ T25] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 1210.842606][ T30] INFO: task syz.6.2930:16633 blocked for more than 143 seconds. [ 1210.895383][ T25] usb 4-1: config 0 has no interface number 0 [ 1210.910953][ T30] Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1211.242441][ T25] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.254241][ T25] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1211.266127][ T25] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 1211.271573][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1211.278586][ T25] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1211.308061][ T25] usb 4-1: Manufacturer: syz [ 1211.314424][T18964] netlink: 'syz.7.3576': attribute type 12 has an invalid length. [ 1211.328400][ T25] usb 4-1: config 0 descriptor?? [ 1211.331607][ T30] task:syz.6.2930 state:D stack:23480 pid:16633 tgid:16632 ppid:16140 flags:0x00004004 [ 1211.364152][ T30] Call Trace: [ 1211.381764][ T30] [ 1211.391734][ T30] __schedule+0x17fb/0x4be0 [ 1211.407396][ T30] ? __pfx___schedule+0x10/0x10 [ 1211.420324][ T30] ? __pfx_lock_release+0x10/0x10 [ 1211.427578][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1211.441101][ T30] ? schedule+0x90/0x320 [ 1211.447075][ T30] schedule+0x14b/0x320 [ 1211.451433][ T30] super_lock+0x335/0x400 [ 1211.462000][ T30] ? __pfx_super_lock+0x10/0x10 [ 1211.467288][ T30] ? __pfx_var_wake_function+0x10/0x10 [ 1211.480397][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1211.493936][ T30] iterate_supers+0x8c/0x190 [ 1211.500879][ T30] ? __pfx_quota_sync_one+0x10/0x10 [ 1211.506685][ T30] __se_sys_quotactl+0x38e/0xa30 [ 1211.518619][ T30] ? __pfx___se_sys_quotactl+0x10/0x10 [ 1211.524836][ T30] ? do_syscall_64+0x100/0x230 [ 1211.529633][ T30] ? do_syscall_64+0xb6/0x230 [ 1211.538982][ T30] do_syscall_64+0xf3/0x230 [ 1211.557791][ T30] ? clear_bhb_loop+0x35/0x90 [ 1211.568429][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.585288][ T30] RIP: 0033:0x7fc52e57e759 [ 1211.589912][ T30] RSP: 002b:00007fc52f447038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 1211.621676][ T30] RAX: ffffffffffffffda RBX: 00007fc52e735f80 RCX: 00007fc52e57e759 [ 1211.630290][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000102 [ 1211.650040][ T30] RBP: 00007fc52e5f175e R08: 0000000000000000 R09: 0000000000000000 [ 1211.674585][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1211.708565][ T30] R13: 0000000000000000 R14: 00007fc52e735f80 R15: 00007fff4895bb18 [ 1211.737828][ T30] [ 1211.745662][ T30] [ 1211.745662][ T30] Showing all locks held in the system: [ 1211.756133][T18933] caif:caif_disconnect_client(): nothing to disconnect [ 1211.821702][ T30] 5 locks held by kworker/1:0/25: [ 1211.828846][ T30] #0: ffff8881442dc548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1211.852118][ T30] #1: ffffc900001f7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1211.871667][ T30] #2: ffff888144ff3190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 [ 1211.880614][ T30] #3: ffff88803474b190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 [ 1211.890017][ T30] #4: ffff888060ee7160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x8e/0x520 [ 1211.900605][ T30] 1 lock held by khungtaskd/30: [ 1211.905631][ T30] #0: ffffffff8e93a5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 1211.916092][ T30] 2 locks held by kworker/u8:5/964: [ 1211.921317][ T30] #0: ffff88801e7e9948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1211.933991][ T30] #1: ffffc90003c97d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1211.947487][ T30] 2 locks held by getty/5592: [ 1211.961642][ T30] #0: ffff888034e7a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1211.971460][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 1211.995728][ T25] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.18/0003:054C:03D5.0011/input/input90 [ 1212.001667][ T30] 3 locks held by kworker/u8:8/5945: [ 1212.022066][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1212.033942][ T30] #1: ffffc90004627d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1212.045890][ T30] #2: ffffffff8e93fa00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1212.056018][ T30] 1 lock held by syz-executor/9177: [ 1212.061232][ T30] #0: ffff8880b863ea58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 1212.071440][ T30] 2 locks held by kworker/u8:0/9301: [ 1212.079151][ T30] #0: ffff88801e7e9948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1212.090861][ T30] #1: ffffc9000c51fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1212.094491][ T25] sony 0003:054C:03D5.0011: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.3-1/input18 [ 1212.111678][ T30] 3 locks held by kworker/u8:10/9542: [ 1212.120333][ T30] 3 locks held by kworker/0:0/13233: [ 1212.128646][ T30] #0: ffff8880b863ea58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 1212.141624][ T30] #1: ffff8880b8628948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 1212.153355][ T30] #2: ffffffff9a66a240 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0x234/0x580 [ 1212.164198][ T30] 1 lock held by syz.0.2705/15857: [ 1212.167888][ T25] usb 4-1: USB disconnect, device number 62 [ 1212.169302][ T30] #0: ffff88805ddb80e0 (&type->s_umount_key#79/1){+.+.}-{4:4}, at: alloc_super+0x221/0x9d0 [ 1212.185856][ T30] 1 lock held by syz-executor/16837: [ 1212.191157][ T30] #0: ffff88805e5d40e0 (&type->s_umount_key#82){+.+.}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 1212.201658][ T30] 3 locks held by kworker/u8:2/16975: [ 1212.207045][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1212.219325][ T30] #1: ffffc90010a27d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1212.231630][ T30] #2: ffffffff8e93fb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 1212.242652][ T30] 3 locks held by syz.5.3567/18933: [ 1212.247860][ T30] #0: ffff88805d817408 (&sb->s_type->i_mutex_key#9){+.+.}-{4:4}, at: sock_close+0x90/0x240 [ 1212.261786][ T30] #1: ffff8880212e0258 (sk_lock-AF_CAIF){+.+.}-{0:0}, at: caif_release+0x104/0x370 [ 1212.271252][ T30] #2: ffffffff8e93fb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 1212.291616][ T30] 1 lock held by syz.7.3576/18955: [ 1212.296852][ T30] [ 1212.299217][ T30] ============================================= [ 1212.299217][ T30] [ 1212.311680][ T30] NMI backtrace for cpu 0 [ 1212.316035][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1212.326205][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1212.336349][ T30] Call Trace: [ 1212.339624][ T30] [ 1212.342549][ T30] dump_stack_lvl+0x241/0x360 [ 1212.347232][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1212.352427][ T30] ? __pfx__printk+0x10/0x10 [ 1212.357024][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1212.361969][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1212.367429][ T30] ? _printk+0xd5/0x120 [ 1212.371593][ T30] ? __pfx__printk+0x10/0x10 [ 1212.376186][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1212.381043][ T30] ? __pfx__printk+0x10/0x10 [ 1212.385640][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1212.390667][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1212.396648][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1212.402647][ T30] watchdog+0xff4/0x1040 [ 1212.406932][ T30] ? watchdog+0x1ea/0x1040 [ 1212.411364][ T30] ? __pfx_watchdog+0x10/0x10 [ 1212.416164][ T30] kthread+0x2f0/0x390 [ 1212.420321][ T30] ? __pfx_watchdog+0x10/0x10 [ 1212.425014][ T30] ? __pfx_kthread+0x10/0x10 [ 1212.429604][ T30] ret_from_fork+0x4b/0x80 [ 1212.434024][ T30] ? __pfx_kthread+0x10/0x10 [ 1212.438607][ T30] ret_from_fork_asm+0x1a/0x30 [ 1212.443398][ T30] [ 1212.446810][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1212.453474][ C1] NMI backtrace for cpu 1 [ 1212.453488][ C1] CPU: 1 UID: 0 PID: 18933 Comm: syz.5.3567 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1212.453507][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1212.453517][ C1] RIP: 0010:find_lock_entries+0x75e/0xef0 [ 1212.453539][ C1] Code: 01 0f 85 27 07 00 00 0f 1f 44 00 00 e8 6b 92 c7 ff 4c 8b 3c 24 4c 89 ff be 08 00 00 00 e8 da 7c 2e 00 31 db f0 49 0f ba 2f 00 <41> 0f 93 c7 0f 92 c3 bf 02 00 00 00 89 de e8 3f 95 c7 ff 31 ff 89 [ 1212.453552][ C1] RSP: 0018:ffffc900037af100 EFLAGS: 00000246 [ 1212.453567][ C1] RAX: ffffffff81cd4e01 RBX: 0000000000000000 RCX: ffffffff81cd4ef6 [ 1212.453579][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffea00016f1c80 [ 1212.453590][ C1] RBP: ffffc900037af250 R08: ffffea00016f1c87 R09: 1ffffd40002de390 [ 1212.453602][ C1] R10: dffffc0000000000 R11: fffff940002de391 R12: 00000000000001d7 [ 1212.453614][ C1] R13: 0000000000000001 R14: ffffea00016f1c80 R15: ffffea00016f1c80 [ 1212.453625][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1212.453639][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1212.453651][ C1] CR2: 0000001b33503ff8 CR3: 000000002e108000 CR4: 00000000003526f0 [ 1212.453666][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1212.453676][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1212.453687][ C1] Call Trace: [ 1212.453693][ C1] [ 1212.453700][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1212.453719][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1212.453742][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1212.453759][ C1] ? nmi_handle+0x2a/0x5a0 [ 1212.453782][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1212.453801][ C1] ? nmi_handle+0x14f/0x5a0 [ 1212.453816][ C1] ? nmi_handle+0x2a/0x5a0 [ 1212.453832][ C1] ? find_lock_entries+0x75e/0xef0 [ 1212.453848][ C1] ? default_do_nmi+0x63/0x160 [ 1212.453866][ C1] ? exc_nmi+0x123/0x1f0 [ 1212.453883][ C1] ? end_repeat_nmi+0xf/0x53 [ 1212.453901][ C1] ? find_lock_entries+0x661/0xef0 [ 1212.453915][ C1] ? find_lock_entries+0x756/0xef0 [ 1212.453932][ C1] ? find_lock_entries+0x75e/0xef0 [ 1212.453948][ C1] ? find_lock_entries+0x75e/0xef0 [ 1212.453965][ C1] ? find_lock_entries+0x75e/0xef0 [ 1212.453982][ C1] [ 1212.453988][ C1] [ 1212.453995][ C1] ? find_lock_entries+0x1b4/0xef0 [ 1212.454014][ C1] ? __pfx_find_lock_entries+0x10/0x10 [ 1212.454035][ C1] ? folio_batch_remove_exceptionals+0x18a/0x1f0 [ 1212.454057][ C1] shmem_undo_range+0x2c2/0x1cf0 [ 1212.454078][ C1] ? validate_chain+0x11e/0x5920 [ 1212.454097][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1212.454119][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 1212.454150][ C1] ? kernel_text_address+0xa7/0xe0 [ 1212.454168][ C1] ? __kernel_text_address+0xd/0x40 [ 1212.454184][ C1] ? unwind_get_return_address+0x4d/0x90 [ 1212.454216][ C1] ? mark_lock+0x9a/0x360 [ 1212.454233][ C1] ? percpu_counter_add_batch+0xff/0x1f0 [ 1212.454253][ C1] shmem_evict_inode+0x29b/0xa80 [ 1212.454274][ C1] ? inode_wait_for_writeback+0x111/0x2a0 [ 1212.454292][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1212.454314][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1212.454334][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1212.454353][ C1] evict+0x4e8/0x9a0 [ 1212.454376][ C1] ? __pfx_evict+0x10/0x10 [ 1212.454397][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1212.454416][ C1] ? iput+0x713/0xa50 [ 1212.454436][ C1] __dentry_kill+0x20d/0x630 [ 1212.454454][ C1] ? dput+0x37/0x2b0 [ 1212.454470][ C1] dput+0x19f/0x2b0 [ 1212.454486][ C1] __fput+0x5ba/0xa50 [ 1212.454509][ C1] task_work_run+0x24f/0x310 [ 1212.454525][ C1] ? kasan_quarantine_put+0xdc/0x230 [ 1212.454547][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1212.454564][ C1] ? do_exit+0xa2a/0x28e0 [ 1212.454578][ C1] ? kmem_cache_free+0x1a2/0x420 [ 1212.454596][ C1] ? do_exit+0xa2a/0x28e0 [ 1212.454612][ C1] do_exit+0xa2f/0x28e0 [ 1212.454630][ C1] ? __pfx_do_exit+0x10/0x10 [ 1212.454645][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1212.454665][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1212.454687][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1212.454706][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1212.454727][ C1] do_group_exit+0x207/0x2c0 [ 1212.454741][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1212.454760][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1212.454781][ C1] get_signal+0x16a3/0x1740 [ 1212.454805][ C1] ? __pfx_get_signal+0x10/0x10 [ 1212.454826][ C1] arch_do_signal_or_restart+0x96/0x860 [ 1212.454847][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1212.454865][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1212.454891][ C1] ? syscall_exit_to_user_mode+0xa3/0x340 [ 1212.454913][ C1] syscall_exit_to_user_mode+0xce/0x340 [ 1212.454935][ C1] do_syscall_64+0x100/0x230 [ 1212.454950][ C1] ? clear_bhb_loop+0x35/0x90 [ 1212.454965][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.454986][ C1] RIP: 0033:0x7fde8777e759 [ 1212.454999][ C1] Code: Unable to access opcode bytes at 0x7fde8777e72f. [ 1212.455007][ C1] RSP: 002b:00007fde885d60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1212.455022][ C1] RAX: fffffffffffffe00 RBX: 00007fde87935f88 RCX: 00007fde8777e759 [ 1212.455034][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fde87935f88 [ 1212.455045][ C1] RBP: 00007fde87935f80 R08: 0000000000000000 R09: 0000000000000000 [ 1212.455055][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fde87935f8c [ 1212.455066][ C1] R13: 0000000000000000 R14: 00007ffe99a1c420 R15: 00007ffe99a1c508 [ 1212.455083][ C1] [ 1212.550214][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1212.550233][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 1212.550255][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1212.550266][ T30] Call Trace: [ 1212.550275][ T30] [ 1212.550284][ T30] dump_stack_lvl+0x241/0x360 [ 1212.550310][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1212.550329][ T30] ? __pfx__printk+0x10/0x10 [ 1212.550353][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1212.550386][ T30] ? vscnprintf+0x5d/0x90 [ 1212.550409][ T30] panic+0x349/0x880 [ 1212.550435][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1212.550458][ T30] ? __pfx_panic+0x10/0x10 [ 1212.550481][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1212.550503][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1212.550528][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1212.550548][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1212.550570][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1212.550593][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1212.550617][ T30] watchdog+0x1033/0x1040 [ 1212.550642][ T30] ? watchdog+0x1ea/0x1040 [ 1212.550670][ T30] ? __pfx_watchdog+0x10/0x10 [ 1212.550693][ T30] kthread+0x2f0/0x390 [ 1212.550711][ T30] ? __pfx_watchdog+0x10/0x10 [ 1212.550733][ T30] ? __pfx_kthread+0x10/0x10 [ 1212.550753][ T30] ret_from_fork+0x4b/0x80 [ 1212.550777][ T30] ? __pfx_kthread+0x10/0x10 [ 1212.550795][ T30] ret_from_fork_asm+0x1a/0x30 [ 1212.550829][ T30] [ 1213.151068][ T30] Kernel Offset: disabled [ 1213.155381][ T30] Rebooting in 86400 seconds..