last executing test programs: 6m45.947235745s ago: executing program 3 (id=417): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000010000003c000180060001000a00000008000500030000000c00070000000000000000000800090043000000090006006e6f6e6520"], 0x50}}, 0x50) 6m45.504329913s ago: executing program 3 (id=421): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 6m44.26896374s ago: executing program 3 (id=425): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="3b000300010006", 0x7) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000000)={r4, 0x7f}, 0x8) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_io_uring_setup(0x6fe4, &(0x7f0000000940)={0x0, 0xed41, 0x81, 0x2}, &(0x7f0000000240)=0x0, 0x0) io_uring_enter(r5, 0x0, 0xe38e, 0x5, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) r7 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x5) renameat2(r7, &(0x7f0000000100)='./file0\x00', r7, 0x0, 0x3) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r6], 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000002440), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000002740)={0x0, 0x100f, 0x2, @discrete={0x8, 0x1}}) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x48001, 0x0) openat$incfs(r9, &(0x7f00000000c0)='.log\x00', 0x200900, 0xb0) 6m40.970168985s ago: executing program 3 (id=432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr/keycreate\x00') write$UHID_DESTROY(r1, 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) syz_open_dev$sndctrl(&(0x7f0000000340), 0x4, 0x8000) (async) unshare(0x600) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}}}, &(0x7f0000000040)=0xe8) r8 = syz_open_dev$swradio(&(0x7f0000000380), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_EDID(r8, 0xc0285629, &(0x7f0000000040)={0x0, 0x1ff, 0xfffffffd, '\x00', 0x0}) (async) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x40010, r4, 0x8000000) syz_io_uring_submit(r9, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0xc, 0x0, r1, 0x1, &(0x7f00000008c0)="0224a052fbb886e76f3b3a4ff63bb90facc435eb966b1b75b161385524a8289c7a7f0d02ad69fa001e928bb5a0bba7b16b3e502291e5ce9f677ee549c9df6d95fd5b099af751ea04f799f188a064e3f0237258", 0x53, 0x1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setresuid(0xee01, r10, 0xffffffffffffffff) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000b40)=@delpolicy={0x4a0, 0x14, 0x400, 0x70bd28, 0x25dfdbfc, {{@in=@broadcast, @in=@rand_addr=0x64010100, 0x4e22, 0x0, 0x4e23, 0x1, 0x1, 0x0, 0xa0, 0x5c, r5, r7}, 0x6e6bb8}, [@tmpl={0x144, 0x5, [{{@in=@remote, 0x4d3, 0x33}, 0x2, @in6=@mcast2, 0x3506, 0x2, 0x0, 0x7, 0x53, 0x587, 0x6563}, {{@in=@multicast2, 0x4d4, 0xff}, 0x0, @in6=@mcast1, 0x3507, 0x0, 0x2, 0x3, 0x101, 0x8e, 0x2}, {{@in=@multicast1, 0x4d5, 0x3c}, 0xa, @in6=@mcast1, 0x34ff, 0x2, 0x1, 0x8, 0x2, 0xad0, 0xff}, {{@in6=@private0, 0x4d3, 0x33}, 0x2, @in6=@empty, 0x3506, 0x1, 0x3, 0x94, 0xd, 0x200, 0xfcc}, {{@in=@empty, 0x4d6, 0x2b}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x32}, 0x3504, 0x2, 0x3, 0x4, 0x4, 0x0, 0x8}]}, @coaddr={0x14, 0xe, @in=@local}, @algo_aead={0xbf, 0x12, {{'echainiv(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x398, 0x0, "99883a7e4bf0a283d83e609d3534c3b57e7e9b402966ff5e76e4bd281cc3811b33045b64e3593c2652f9938fe72c52a1fb56addb96f58d56c0883bf40699706acc01bee7e7d0bcac6b0f838dc9c5903f48be579ee2843b3d5ff4b20e137b8ef09b643d2cd9b6430f55b5cfbc1d2a65fd20812d"}}, @lifetime_val={0x24, 0x9, {0x4, 0x5c, 0x2, 0xffffffffffffffd9}}, @lifetime_val={0x24, 0x9, {0xc3d, 0x3, 0xfffffffffffffffa, 0x1}}, @sec_ctx={0xda, 0x8, {0xd6, 0x8, 0x0, 0x4, 0xce, "18430622011650ece2f5fb3fab8e3d8c674a2d855f4a63384ad3f680a44312a7fc9a089b848e196fe7731b20c84d75e047f851efd75bf9f5bfe14eb05b07a7a26f459410d00b4cbd31f3a4a68486d81451b36e2aeb2e829ab85a4a1211e9fa7a4eb745bf7b14fcd716adec8f6c0d9bc36dd59ffbb2cce30e57ee1558bbdf849ab655653171ec0073d5572a3409e5088a9f605452215bf5f5e61ba90f38505697c3cf5c246dff73b1cd6705d09ab826f11d89b58eb34a1c1b3cbe0d6020937d223b577500561a4b3095101c106278"}}, @etimer_thresh={0x8}, @sa={0xe4, 0x6, {{@in6=@mcast2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x5, 0x4e21, 0x2, 0xa, 0x20, 0x80, 0x3a, r6, r10}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d5, 0xcc}, @in6=@mcast1, {0x0, 0x8, 0x401, 0x6fdd, 0x3, 0x5, 0x38de, 0xe}, {0x10001, 0x0, 0x1ff, 0x80000001}, {0xd, 0x6, 0x6}, 0x70bd2d, 0x3501, 0x2, 0x2, 0x6, 0x21}}, @address_filter={0x28, 0x1a, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@local, 0x2, 0x8, 0x3}}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x4}, 0x4000814) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x2b, 0x9, 0x70bd27, 0x0, {0x5}}, 0x14}}, 0x84) 6m40.094825026s ago: executing program 3 (id=441): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$IPC_RMID(0x0, 0x300) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m36.916896443s ago: executing program 3 (id=448): r0 = socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f00000000c0)=0x1) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000340)={0x1, @raw_data="a43024e4c0c4ff9f62dc2cf374ac83740782766f5f3a3ecf482e7178f63a25015a6da7a9d3d54276c46d192b474606a9a8c6fdaff5c1f080a2a57cf6d3be15855ace77f595869143f705adfd6d4792df429f0c8ea8d5dbf69bd0e81b8d446358f269e168ef02db7c86b0be0b0f19a4a27a82889dddf5601210673c3c93b916253b38732980696071793c86e88ee4ad5514b19eb7b55c6b61f3c136c15ae4c16b1107a8903c6afe363d995950818643eb3d8e1c8bc22b72200f694cd71be183be6e8d9eae45f4499c"}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) r8 = syz_io_uring_setup(0x5706, &(0x7f00000004c0)={0x0, 0x932c, 0x400, 0x1}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_RECVMSG={0xa, 0x22, 0x1, r6, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@tipc=@name, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000540)=""/230, 0xe6}, 0x0, 0x10001, 0x0, {0x3, r2}}) io_uring_enter(r8, 0x47f6, 0x880e, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB='(wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) signalfd4(r7, &(0x7f0000000080), 0x8, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x28, 0x0, @fd=r6, 0x4, 0x0, 0x5, 0x7, 0x1, {0x0, r11}}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r12) 6m20.281214734s ago: executing program 32 (id=448): r0 = socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f00000000c0)=0x1) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000340)={0x1, @raw_data="a43024e4c0c4ff9f62dc2cf374ac83740782766f5f3a3ecf482e7178f63a25015a6da7a9d3d54276c46d192b474606a9a8c6fdaff5c1f080a2a57cf6d3be15855ace77f595869143f705adfd6d4792df429f0c8ea8d5dbf69bd0e81b8d446358f269e168ef02db7c86b0be0b0f19a4a27a82889dddf5601210673c3c93b916253b38732980696071793c86e88ee4ad5514b19eb7b55c6b61f3c136c15ae4c16b1107a8903c6afe363d995950818643eb3d8e1c8bc22b72200f694cd71be183be6e8d9eae45f4499c"}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) r8 = syz_io_uring_setup(0x5706, &(0x7f00000004c0)={0x0, 0x932c, 0x400, 0x1}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_RECVMSG={0xa, 0x22, 0x1, r6, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@tipc=@name, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000540)=""/230, 0xe6}, 0x0, 0x10001, 0x0, {0x3, r2}}) io_uring_enter(r8, 0x47f6, 0x880e, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB='(wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) signalfd4(r7, &(0x7f0000000080), 0x8, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x28, 0x0, @fd=r6, 0x4, 0x0, 0x5, 0x7, 0x1, {0x0, r11}}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r12) 15.414760653s ago: executing program 0 (id=1631): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040ef17476000000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$full(0xffffffffffffff9c, 0x0, 0x18080, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_macvtap\x00', 0x0}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240), 0x4) 10.513216422s ago: executing program 0 (id=1641): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113700000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) openat$binderfs_ctrl(0xffffff9c, &(0x7f00000005c0)='./binderfs/binder-control\x00', 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x21, &(0x7f0000000240)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000b01000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sync_file_range(r0, 0x0, 0x400, 0x1) socket$inet(0x2, 0x3, 0xff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000000)={0x2a, 0x2}, 0xc) bind$qrtr(r2, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) 9.141144383s ago: executing program 1 (id=1645): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0xee01, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000010a306cb0c000000000001090224000100000000090400000103000000092100000001220200090581030000000000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00a202000000012b5ec9de603654a400b31257f465806ee94800000000827b7a1733719f76b8cd35f95f2d3c59b42b6c561ce1dd96ab2676605b0c1f9367867493e6cf5501020efa4200"/91], 0x0}, 0x0) 8.707292258s ago: executing program 0 (id=1652): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e08864110005a600210283ac141440e0", 0x0, 0x11, 0x60000600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 6.896393773s ago: executing program 0 (id=1654): prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock2(&(0x7f0000f69000/0x1000)=nil, 0x1000, 0x1) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407"], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) mremap(&(0x7f000027f000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) munlockall() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r1, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x0, 0x0) 6.283091403s ago: executing program 4 (id=1657): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/100, 0x64}, {&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f0000000fc0)=""/4083, 0xff3}, {&(0x7f0000000a00)=""/202, 0xca}, {&(0x7f0000000140)=""/95, 0x5f}, {&(0x7f0000000540)=""/65, 0x41}, {&(0x7f0000000200)=""/93, 0x5d}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000440)=""/200, 0xc8}, {&(0x7f0000000000)=""/122, 0x7a}, {&(0x7f0000000080)=""/35, 0x23}], 0xc, 0x0, 0x0, 0xb00}, 0x40d60b73}], 0x1, 0x0, 0x0) 5.81729663s ago: executing program 4 (id=1658): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x9, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000009902"]) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 5.757304653s ago: executing program 1 (id=1659): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init() r5 = epoll_create(0x200008) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0xb000001d}) geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000180)=0x5, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r8 = syz_io_uring_complete(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e00000006000000010000000500000001000000", @ANYRES32=r0, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18000d0003003f0000000000090000ee14773c558c75f23116c70f77a81e2cad78958c1162a9128332ef3aaad78f4890a09e3e3182dfa46937fbc670b930c5e8740b79b7cbe186567cd01e1fbc0047511a938679eb0ad2d94fe7d4aacd457b2b9d0dde574665a037a0e4c62875237f980d014fbae4c1a545bd7ef03780f17428913f3297cb12949abe0c7c119d95d0"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @xdp=0x25, r8, 0x8, &(0x7f0000000400)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xd, 0x0, 0xc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000500)=[0xffffffffffffffff, r0, r0, r0, r0, r0, r0, r0, r6], &(0x7f0000000540)=[{0x4, 0x5, 0x8, 0xc}, {0x1, 0x5, 0xd, 0x1}], 0x10, 0x5, @void, @value}, 0x94) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000300)=0x2) read(r9, 0x0, 0x2) 4.623202348s ago: executing program 4 (id=1662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000d2351539dc489dc100000800", @ANYRES32=r2], 0x30}}, 0x300) 4.541246243s ago: executing program 4 (id=1664): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x10000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x100, 0x2, 0x0, 0x1, 0xc, 0x10, "90e29d93250de17afc0fecf927e4564236bbfc81d48796a00c7eb482cd1161b3761786196f3f9b3847618ecf4fea29e096697a8469c3ce80dceccba20b53ba20", "2e906cce8ccc965cd56b053154a909e373eb584e671aee75e28964b39f45fdcc5474af0a048eb940de5e14e6d019eec5157a69fcbe5034913ad675a0848f2c5f", "bd2217ed94694b6e1cc42063fc6464c97fd6085d5a2fc8d7dd4f173c8ecce6a2", [0x8001000000, 0x1]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x94, r4, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x56, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0xc97f, @void, @val, @void, @void, @val={0x6, 0x2, 0x3f16}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0x9, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0xb, 0x79, 0x4}}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x20}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xffffffff}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}]]}, 0x94}, 0x1, 0x0, 0x0, 0x3b517560ae7f6dc7}, 0x0) r6 = socket$inet6(0xa, 0x2, 0xfffffffd) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8982, &(0x7f0000000000)={0x8, 'vlan1\x00', {'geneve1\x00'}, 0x5}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x1df) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) readv(r7, &(0x7f0000000000)=[{&(0x7f0000000200)=""/215, 0x7ffff000}], 0x6) getdents64(r7, &(0x7f0000000340)=""/125, 0x7d) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) chdir(&(0x7f0000000300)='./file0\x00') select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)="36ee18235992590d1814c9cf9c8ac49b2eb287eb7f9a5b301effe42c1ae6a9f2c4b1190bc88047695601c3435d2586dd6e7588742393f94dae58cfc0ab207ad65b4b51c951deb1dd4e60a76beffb1f6995beada3320cbee77559d680ee8b6f52b669419cd400cb7924c5a5e357282ea4ac65fb", 0x73) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x8, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875320a1a93c5235f45f819e01177d3d458dd4992861ac000000000000000000000000000000000000000000000800", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 4.484407173s ago: executing program 1 (id=1665): mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x44) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4008010}, 0x4040000) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xffffffff, @mcast1}}}, 0x108) r1 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00', @ANYRES16=r1, @ANYBLOB="db1a0000000000000000030000002c00070073797374656d5f753a6f626a65637457723a696e6574645f6368696c645f657865635f743a7330001400060076657468305f746f5f7465"], 0x64}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1000000, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$inet(r2, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) 4.002558735s ago: executing program 2 (id=1670): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040ef17476000000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$full(0xffffffffffffff9c, 0x0, 0x18080, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_macvtap\x00', 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240), 0x4) 3.579128144s ago: executing program 4 (id=1671): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x7, 0xffff, 0x0, 0x9, 0x0, 0x5}, 0x0, &(0x7f0000000300)={0x1ff, 0xfffffffffffffffd, 0x0, 0x7, 0x300}, 0x0, 0x0) syz_usb_disconnect(r0) 3.516555454s ago: executing program 1 (id=1672): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113700000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) openat$binderfs_ctrl(0xffffff9c, &(0x7f00000005c0)='./binderfs/binder-control\x00', 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x21, &(0x7f0000000240)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000b01000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sync_file_range(r0, 0x0, 0x400, 0x1) socket$inet(0x2, 0x3, 0xff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000000)={0x2a, 0x2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000200)=0x3) bind$qrtr(r2, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) 2.572924327s ago: executing program 0 (id=1676): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffe, 0x10}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = mq_open(&(0x7f00000011c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0xc0800) ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x3014, 0x0, 0x3, 0x0, 0x3, 0x300}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r8) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000fcdbdf251500000008000300", @ANYRES32=0x0, @ANYBLOB="0500290000000000"], 0x24}}, 0x20048004) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x1, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) memfd_create(&(0x7f0000000080)='clsact\x00', 0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xe}}}, 0x24}}, 0x0) sendmmsg$sock(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="99", 0x1}], 0x1}}], 0x1, 0x40000) 2.399248707s ago: executing program 5 (id=1677): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000300010008", 0x4d}, {&(0x7f0000000700)="a71c8c32b6e7a23977bead", 0xb}], 0x2) 2.398724203s ago: executing program 2 (id=1678): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x840000000002, 0x3, 0xff) socket$inet6(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) (fail_nth: 3) 2.293377283s ago: executing program 5 (id=1679): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$inet_sctp(0x2, 0x1, 0x84) r0 = landlock_create_ruleset(&(0x7f00000004c0)={0x0, 0x1}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000500)={0x1}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000000)={0x1}, 0x0) socket(0x840000000002, 0x3, 0xff) socket$inet6(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}}, 0x802) 2.221212729s ago: executing program 5 (id=1680): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$dsp1(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000e9ff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x22020600) r3 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001140)=ANY=[], 0xff2e) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff00000000000000000000000000000000000000000000007870476e0000000000ffffffffffffffff000000000000000000000000000000000c00150059073500290b0000"], 0xc4}}, 0x4004) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001500192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) sendmsg$802154_raw(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f00000003c0)={&(0x7f0000000440)="e0ecd344b8ed23807f3a8a5fa7225487dc028e911e15fd75bac104e540ea31e2f22f7acccf82f75a1ce716135749b7dbc247dfe7de5400854a33d5f3bca85f080fb0253c85c3b21572634d2a43f0794784e85917a7e61a72066013c80d433fde7e14cc6f978236461aeb3447d130b19934f7f6842376ed6f08af246937f1b0a554a32e11bc6aba9d4b55b49ff9651e12d98333b1559117e63a8b2a9cd93b4aee043796cfadecdb49ee69d4fe1bdcb15c260cc73b4dd60907e457db516cd5d41dba1bb32f92c9b8717062da72a1c0edd7a6ff4e6f1d", 0xd5}, 0x1, 0x0, 0x0, 0x20044881}, 0x4) clock_adjtime(0x0, 0x0) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r6) read$FUSE(r6, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8001, 0x0, r7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}}, 0x50) syz_fuse_handle_req(r8, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000008340)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4716e26b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb4f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0010000801964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x3, {0xc, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x101, 0x5, 0x0, 0x0, 0x8000, 0x0, 0x0, r10, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_clone(0x8181b00, &(0x7f0000000f40)="2ec7b5fc2f8f130d0a5a4b25c98b001ffce36b266194", 0x16, &(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000)="0677aaa37ec3785553ef911fb08799971b4b228d1ce841a16be144b706e20fad2f65dd963c57") stat(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080)) getgroups(0x4, &(0x7f0000001100)=[0x0, 0xffffffffffffffff, 0x0, 0x0]) r13 = syz_open_dev$sg(&(0x7f0000001140), 0x8, 0x4200) sendmsg$netlink(r3, &(0x7f0000001280)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc, &(0x7f0000000f00)=[{&(0x7f00000006c0)=ANY=[@ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0x90}, {&(0x7f00000012c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="540035800e8ca3fe0ab568c9e8247262d236ba761f87625c4b71f54e089b44db4a20a286589bb3c8614acfb721b7100f2335538c47058b2ed9aea335ddca5d1c98d1616a5511952bae4be026d27340e50400cb807fd920a593bc5e1d003a1a8a5d4cd6b41ed7224e36bd9ac0e095101c1437cffbad919a425669ed3ca2befc255383d88bf7c838f64a6d1033c9c95b12971310c91697d763281057140c4f1967d4d82588e6bc4518e6e205a9a76c516c6797f58fbc2b1a552f1923c5fed923cd08004400", @ANYRES32=0x0, @ANYBLOB="417db7fdcb996b2612a9c147fa790120b68d03ccadeeb211a39019a692a8955513501ad85dd242c75e03afb3ebe78354f5a1df8c97dff30687c7e709dbbefbc94c0b2e858721a504a185e2b971da4a650138040113800400fd8004002e8004006d800800da00", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x37c}], 0x2, &(0x7f0000000780)=[@rights={{0x18, 0x1, 0x1, [r2, r4]}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r3]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, r5, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r7, r12}}}, @rights={{0x20, 0x1, 0x1, [r13, r5, r2, r4]}}], 0xe8, 0x4080}, 0x4044) r14 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r14, 0x89ff, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x4}}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 2.139198213s ago: executing program 2 (id=1681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0xfff1, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0xa0600}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12032}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xf2ff0000}, 0x0) 2.088590918s ago: executing program 5 (id=1682): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113700000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) openat$binderfs_ctrl(0xffffff9c, &(0x7f00000005c0)='./binderfs/binder-control\x00', 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x21, &(0x7f0000000240)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000b01000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sync_file_range(r0, 0x0, 0x400, 0x1) socket$inet(0x2, 0x3, 0xff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r2, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) 2.014369365s ago: executing program 1 (id=1683): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c0e}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/192, 0xc0}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f00000018c0)=""/4100, 0x1004}, {&(0x7f0000000640)=""/65, 0x41}, {&(0x7f00000000c0)=""/237, 0xed}], 0x6}, 0x7ffffffc}], 0x4, 0x4022, 0x0) 1.951042441s ago: executing program 2 (id=1684): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) r1 = socket(0x2, 0x80805, 0x0) modify_ldt$write(0x1, &(0x7f0000000180)={0x9, 0x20000000}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) syslog(0x2, &(0x7f0000000700)=""/31, 0x1f) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)={r2}, &(0x7f0000000180)=0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f00000001c0)=""/39, 0x27) 1.906856086s ago: executing program 1 (id=1685): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0xff00) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000001300)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x9, "8daf"}, @global=@item_012={0x1, 0x1, 0x4, ','}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.732420785s ago: executing program 4 (id=1686): prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock2(&(0x7f0000f69000/0x1000)=nil, 0x1000, 0x1) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407"], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) mremap(&(0x7f000027f000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) munlockall() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r1, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x0, 0x0) 1.515288059s ago: executing program 0 (id=1687): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b, 0x25, 0x0, 0x0, 0x8dffffff}, 0x49d32d254ae22f79}}, 0x0) 1.06194213s ago: executing program 5 (id=1688): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000001580)={0x7, 0xffffffffffffffff}) r7 = memfd_create(&(0x7f00000015c0)='!>,,@\x00', 0x3) sendmmsg$unix(r4, &(0x7f00000016c0)=[{{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000580)="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", 0x1000}], 0x1, &(0x7f0000001600)=[@rights={{0x38, 0x1, 0x1, [r2, r5, r2, r2, 0xffffffffffffffff, r1, r2, r5, r4, r4]}}, @rights={{0x30, 0x1, 0x1, [r2, r5, r6, r0, r2, r5, r0, r4]}}, @rights={{0x1c, 0x1, 0x1, [r0, r2, r7]}}], 0x88, 0x40}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="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"}) 1.042844727s ago: executing program 2 (id=1689): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000038000180000000000000000b7080000000000007baaf0ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa420000000000007040000f0ffffffb70200000800000418230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 886.921775ms ago: executing program 2 (id=1690): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000097cafacd6f33100b828d25bb1fea1c3a05f35c138d378c2d85387fd8a657a45ceedb79c403c2c174f3c7545edf7d669f72482c4920969874310615a9a78610049f2c1df13dfd3e658db3b3d4f6efbc660981f2b03ea10b429785b7c632f733ef1bf1dcc16f6194e827ac599fc0d435c55c194af22e214538a6101df5d3f3a381ee37622655ed27e4fa99d72fd18d66efd8cead0b808c12a6ffd5b02e"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0)={r0}, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) openat$smackfs_change_rule(0xffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES8], 0xe4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=@allocspi={0xf8, 0x12, 0x401, 0x0, 0x0, {{{@in=@local, @in6=@mcast1, 0x0, 0xfd1, 0x0, 0x2, 0x2, 0x0, 0x0, 0xc}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x80000001}, {0x101, 0x0, 0x0, 0x800}, {0x4, 0x6, 0x400}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x94}, 0x0, 0x4ad}}, 0xf8}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) r2 = semget$private(0x0, 0x4, 0x29b) semtimedop(r2, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(r2, &(0x7f0000000180)=[{}, {}], 0x2) semctl$GETZCNT(r2, 0x0, 0xf, 0x0) syz_usb_connect(0x6, 0x6a8, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x29, 0x38, 0x1c, 0x8, 0xea0, 0x2168, 0x110, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x696, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfe, 0xfe, 0xe, 0x80, 0x15, 0x76, 0x0, [], [{{0x9, 0x5, 0x9, 0x8, 0x8, 0x9, 0x3, 0x7, [@generic={0xb0, 0xb, "da69f94636a67076e02d3855b75db05a0e45d5ef77f7146070f97eff49c4ea7b2afdbef68225b823431f3e700a02b721a71c224600616bc5f240292523e7cf9c828888d95a8e6f5f7bf92e1c34e13af25ff712b6fb1c44a7f487403da228ffb843404f33fcffdbd341dbc52900020b20502c6a605bec8933d3eea7de1175e3abdec50bae0da5f1e1203c75532aba3e65928c6c36b75fe6ebbb37dbd0b372547cb471a5af5623ec6a47b44d0b648e"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x8}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0xf3, 0xf, 0x0, [@generic={0xe2, 0x11, "86a6f42e1c81e94394112dab030e9d85a83b0aed9b81f80cd72af5fd201b90178ba6d2a4bafcd1e127a707aeb940c33fe0d9d5a4d6208873f8442e1801732f2b53b48cdac9f462ff5812cc60cc9095d1fd4622452e2685bd1543ce1e80f63007464e059b8d5828fecf67f26af27e21de21740a4fce8694e70a0410dcca73fae61010f3e672181f9f8c02ba186e3fe772cadb72c741856e704b5274fc5539d885a18d06b7feac043d50a911ab8e7c380dfb7f64f7d98423653ef73db48d14adb59688e7256f0c4bd98a4735e2cc1c19a31b3beb847933ccc0f1069703a5c56586"}, @generic={0x9d, 0x9, "9f41dcd6aa2d7084e8907df0cc6e8b5e47cc69347ef54160c105f6612bb50ae06584d4ac4755ad8fac6a3194083d30d99384a63d8f4a5ab21cd663edb16c244394e9d6e5ddd8a9854ab9851a29812ba13cf95714b5d53d7264016d1cfeded362cd8d9fc3cc5f2ac1f236d7ca12226cb2ddbfac0332d61b80a3236303a9d098ec879936a3c28771c61a971d52f267c22244060d62e0d2ac5a33d9d2"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x4, 0x6, 0x3, [@generic={0x15, 0x4, "a190b74bb3dfc1487902abc475d65480348c16"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x9, 0xb7, 0x3e}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x8, 0x9, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x6}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x57, 0x2, 0x8, [@generic={0x71, 0x23, "01536449f284750ade22c7b6334fcede7ab229f52b1bfa0e268a908f85989663f3e6cb4218b4955214bc535d0f9bf95149dfbbdff0b84ab067e664f44cfc6501c40a6bb012d05cc3bcad11fe84a1dc6f167d9757be539efc6cec3bd84fc449eaca4cb5c7a3a3128c33097da9db314f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x59, 0x100}]}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0x4, 0x9, 0xec, [@generic={0xaa, 0x21, "152bfe2ce896db357e2f267e1f853b2b15def55769acfee51f23fffd52d89ec89fb5509d81c2bb3fe3807c133aab899548485a0ffe559b6b553dae08b382dc0a587549efd865663c0a23407ac339efd1b3b964cdefc3a5199ae85729b9b1f7c49e74dd303125368695729360fc91529857090e580b01d3fd7a5f215b9a6d1f5688d3239c9fe39ea37b5dfd10f6de305c1a4a385a1557580a1e7f121a7c5ed61d8c02359e48f61a98"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x4, 0x5, 0x5}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0x5, 0xe9, 0x2, [@generic={0x91, 0x2, "c13f777a2d9d66a2cb1e51277fd008c3dce85a2e510b292dbb47b869576e03536af09fc30b026bf6feaa861c70adf0280bf2e8f507374f521862d04f06d3c381c114dbe8e7c63ada68aec464979969cd691da4f1f73d740a91d312a91a1041a9bee395ca2e148b637ebf560295c7dbf55bbbb0df730253103c00bae1fb5600779ba4c4c6383ed55483d50ffe41747d"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x0, 0xa, 0x8}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x4, 0xff, 0x9b, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x81}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x7f, 0xf5, 0x3, [@generic={0x85, 0x5, "90cf8d64b95871abe862e8805a44255692465217b3da6a10c0ca0e9a1037ba25ed56cc5a5bb895faa234e7be7e23fec23b7296465d82cc4a57bb3dacec093169b1a5ba3b10d5787861714bfce094645a7b1270263de789d34440898f6756313813f601737a41eb0a89e04967a5acb8c71b7aff74ee7d628fd7f325f10497ca3e25f5f9"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0xfff9}]}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0x9, 0x1, 0x0, [@generic={0x9a, 0x5, "b8f3bcd3c364ce699d858c70a5631b70a4f4c3928a724a6015c1f72aaca7a7b6ac56062b300d16a3eda37f9cf4cd0eb587f89dd435898c355161104f93e0d7fc88116157679d8d2cbac82c071920c6a7cd9349e5f6a07b2d70523a364a2bb25e0e5e93515942fa175cf7a0cd7c39bd8c712b67efb086c65b4b69de7bef790be2c30991a9ebd71a04ff8233d5bed7af6ab0f9875cfe148802"}, @generic={0xc6, 0x23, "a18f2d92b44aecd25dce7d60c601f28c3e3a3e341683c6de283c02f45b7048235adbf9ac37f4b28c8b9d3b1450d66429c9b25cd4b6682e64a7f25f17f168965e27301fe8b12a33111c9e0f921b54057f29d6fa2d867887b08ef6685bfc5fa5fab0a15110c255247361dd5452eadf23ffa60c7692e3c1a543e7d7c18008c240612a327786f8fa125e6093974bb840c1addaedf493afa604ff02bf5f78a57fab6a61c17d024b7c555c8b4cc049199ffb55db2ca2a0ef4aa5a125c972fed0f16cb15c0712ba"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x4, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xc296}]}}]}}]}}]}}, 0x0) 0s ago: executing program 5 (id=1691): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x85, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x3, '\x00', r1, 0xffffffffffffffff, 0x5, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_io_uring_setup(0x237, &(0x7f0000000400)={0x0, 0x80fd, 0x10, 0x5, 0x2cd}, &(0x7f0000000380), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f00000001c0)={0xc, 0x5}, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r4, &(0x7f0000001c40)=[{&(0x7f00000005c0)=""/88, 0x58}, {&(0x7f0000000840)=""/233, 0xe9}, {&(0x7f0000000940)=""/245, 0xf5}, {&(0x7f0000000640)=""/48, 0x30}, {&(0x7f0000000a40)=""/12, 0xc}, {&(0x7f0000000a80)=""/11, 0xb}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/170, 0xaa}, {&(0x7f0000001b80)=""/98, 0x62}, {&(0x7f0000001c00)=""/57, 0x39}], 0xa, 0x67e544cc, 0x5) futex(&(0x7f0000000240), 0xc, 0x2, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xf, &(0x7f0000000740)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x0, 0x1, 0x6, 0x4, 0x0, 0x2, 0x10}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x177}}], &(0x7f0000000080)='GPL\x00', 0x3, 0xfe, &(0x7f0000000300)=""/254, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2002, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xd, 0x6, 0xffff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000700)=[0xffffffffffffffff, r2, r2], &(0x7f0000000240)=[{0x4, 0x3, 0x7, 0xf}, {0x0, 0x4, 0x0, 0x4}, {0x0, 0x4, 0x10}, {0x0, 0x1, 0xa, 0x4}, {0x2, 0x2}], 0x10, 0x65d0, @void, @value}, 0x94) creat(&(0x7f0000000100)='./file0\x00', 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB="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", @ANYRESHEX=r8, @ANYBLOB=',\x00']) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r7, 0xf507, 0x0) getpgrp(0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103102, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r6, r11, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000007c0)="660fdaa249000000420f78d966ba200066ed400f019b0200000064f40fc76c55a60f209766baf80cb86cff0a87ef66bafc0ced0f20c035080000000f22c066b874000f00d0", 0x45}], 0x1, 0x6a, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000440)={0xdddd0000, 0x10000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa"], 0x0) kernel console output (not intermixed with test programs): 8576 comm="syz.5.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8565d8e969 code=0x7fc00000 [ 433.624386][ T8603] nfs: Unknown parameter '.' [ 433.777123][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 433.785541][ T8602] macvlan0: entered promiscuous mode [ 433.798853][ T8608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.815916][ T8608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.829868][ T8602] bridge0: entered promiscuous mode [ 433.841379][ T8609] 9pnet_fd: Insufficient options for proto=fd [ 433.956286][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.724'. [ 433.956414][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.724'. [ 434.032128][ T8053] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 435.256347][ T8053] usb 1-1: Using ep0 maxpacket: 8 [ 435.266485][ T8053] usb 1-1: unable to get BOS descriptor or descriptor too short [ 435.280441][ T8053] usb 1-1: config 4 interface 0 has no altsetting 0 [ 435.290609][ T8053] usb 1-1: string descriptor 0 read error: -22 [ 435.297334][ T8053] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 435.326632][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 435.911234][ T8053] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.958393][ T8053] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 435.972899][ T8053] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 435.992502][ T8053] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 436.001352][ T8053] usb 1-1: media controller created [ 437.196301][ T5887] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 437.204343][ T8053] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 437.588171][ T8053] zl10353_read_register: readreg error (reg=127, ret==0) [ 437.678268][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.806362][ T5887] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 438.495209][ T5887] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 438.542595][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.546857][ T8053] usb 1-1: USB disconnect, device number 17 [ 438.588009][ T5887] usb 3-1: config 0 descriptor?? [ 438.802139][ T8627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.812838][ T8627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.835512][ T5813] usb 3-1: USB disconnect, device number 23 [ 439.192321][ T8657] netlink: 'syz.5.736': attribute type 26 has an invalid length. [ 439.562317][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.739'. [ 441.229273][ T8677] 9pnet_fd: Insufficient options for proto=fd [ 441.633733][ T30] audit: type=1800 audit(1749005839.999:175): pid=8684 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.744" name="bus" dev="tmpfs" ino=828 res=0 errno=0 [ 442.314551][ T5887] kernel write not supported for file /539/attr/exec (pid: 5887 comm: kworker/0:4) [ 443.306326][ T5813] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 443.468970][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.497190][ T5813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.521282][ T5813] usb 5-1: New USB device found, idVendor=054c, idProduct=f04b, bcdDevice= 0.ff [ 443.552632][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.575286][ T5813] usb 5-1: config 0 descriptor?? [ 443.592643][ T5813] usbhid 5-1:0.0: can't add hid device: -22 [ 443.599106][ T5813] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 443.825577][ T8726] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 444.031566][ T30] audit: type=1326 audit(1749005842.399:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8709 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b718e969 code=0x7fc00000 [ 444.616631][ T5891] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 444.787057][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 444.802643][ T5891] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 445.763250][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.789602][ T5891] usb 2-1: Product: syz [ 445.794393][ T5891] usb 2-1: Manufacturer: syz [ 445.799249][ T5891] usb 2-1: SerialNumber: syz [ 445.807804][ T8740] syz.0.762: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 445.807979][ T5891] usb 2-1: config 0 descriptor?? [ 446.407837][ T8740] CPU: 1 UID: 0 PID: 8740 Comm: syz.0.762 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 446.407876][ T8740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 446.407895][ T8740] Call Trace: [ 446.407908][ T8740] [ 446.407919][ T8740] dump_stack_lvl+0x189/0x250 [ 446.407965][ T8740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.408002][ T8740] ? __pfx__printk+0x10/0x10 [ 446.408026][ T8740] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 446.408052][ T8740] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 446.408078][ T8740] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 446.408115][ T8740] warn_alloc+0x214/0x310 [ 446.408151][ T8740] ? stack_depot_save_flags+0x40/0x900 [ 446.408193][ T8740] ? __pfx_warn_alloc+0x10/0x10 [ 446.408229][ T8740] ? kasan_save_track+0x4f/0x80 [ 446.408256][ T8740] ? xskq_create+0x56/0x170 [ 446.408287][ T8740] ? xsk_init_queue+0xb0/0x110 [ 446.408315][ T8740] ? xsk_setsockopt+0x43f/0x710 [ 446.408341][ T8740] ? do_sock_setsockopt+0x257/0x3e0 [ 446.408361][ T8740] ? __x64_sys_setsockopt+0x18b/0x220 [ 446.408386][ T8740] ? do_syscall_64+0xfa/0x3b0 [ 446.408420][ T8740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.408452][ T8740] __vmalloc_node_range_noprof+0x125/0x12f0 [ 446.408521][ T8740] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 446.408561][ T8740] ? __kasan_kmalloc+0x93/0xb0 [ 446.408594][ T8740] vmalloc_user_noprof+0xad/0xf0 [ 446.408627][ T8740] ? xskq_create+0xbf/0x170 [ 446.408660][ T8740] xskq_create+0xbf/0x170 [ 446.408697][ T8740] xsk_init_queue+0xb0/0x110 [ 446.408732][ T8740] xsk_setsockopt+0x43f/0x710 [ 446.408765][ T8740] ? __pfx_xsk_setsockopt+0x10/0x10 [ 446.408794][ T8740] ? __lock_acquire+0xab9/0xd20 [ 446.408836][ T8740] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 446.408866][ T8740] ? __pfx_xsk_setsockopt+0x10/0x10 [ 446.408898][ T8740] do_sock_setsockopt+0x257/0x3e0 [ 446.408929][ T8740] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 446.408962][ T8740] ? __fget_files+0x2a/0x420 [ 446.409005][ T8740] __x64_sys_setsockopt+0x18b/0x220 [ 446.409040][ T8740] do_syscall_64+0xfa/0x3b0 [ 446.409074][ T8740] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.409115][ T8740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.409138][ T8740] ? clear_bhb_loop+0x60/0xb0 [ 446.409166][ T8740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.409188][ T8740] RIP: 0033:0x7fdb44d8e969 [ 446.409211][ T8740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.409231][ T8740] RSP: 002b:00007fdb45bfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 446.409257][ T8740] RAX: ffffffffffffffda RBX: 00007fdb44fb6080 RCX: 00007fdb44d8e969 [ 446.409273][ T8740] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 446.409288][ T8740] RBP: 00007fdb44e10ab1 R08: 0000000000000052 R09: 0000000000000000 [ 446.409303][ T8740] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.409318][ T8740] R13: 0000000000000000 R14: 00007fdb44fb6080 R15: 00007ffc0c164ba8 [ 446.409353][ T8740] [ 446.409431][ T8740] Mem-Info: [ 447.248137][ T5891] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 447.268212][ T5891] ssu100 2-1:0.0: probe with driver ssu100 failed with error -5 [ 447.276788][ T8740] active_anon:2101 inactive_anon:8198 isolated_anon:0 [ 447.276788][ T8740] active_file:6638 inactive_file:47251 isolated_file:0 [ 447.276788][ T8740] unevictable:768 dirty:256 writeback:30 [ 447.276788][ T8740] slab_reclaimable:10941 slab_unreclaimable:98219 [ 447.276788][ T8740] mapped:34031 shmem:7103 pagetables:1169 [ 447.276788][ T8740] sec_pagetables:0 bounce:0 [ 447.276788][ T8740] kernel_misc_reclaimable:0 [ 447.276788][ T8740] free:1314086 free_pcp:13339 free_cma:0 [ 447.280334][ T8051] usb 5-1: USB disconnect, device number 25 [ 447.465430][ T8740] Node 0 active_anon:8404kB inactive_anon:32792kB active_file:26352kB inactive_file:189004kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136124kB dirty:1024kB writeback:16kB shmem:26876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11560kB pagetables:4452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 447.711865][ T8750] binder: 8735:8750 ioctl c0306201 200000000540 returned -22 [ 447.720774][ T8740] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:4kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 447.768471][ T8736] binder: 8735:8736 ioctl c0306201 200000000640 returned -22 [ 447.775924][ T8740] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 447.823809][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.767'. [ 447.829410][ T8740] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 447.868438][ T8740] Node 0 DMA32 free:1344348kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1100kB inactive_anon:28472kB active_file:24600kB inactive_file:188936kB unevictable:1536kB writepending:988kB present:3129332kB managed:2561648kB mlocked:0kB bounce:0kB free_pcp:45064kB local_pcp:20172kB free_cma:0kB [ 447.876561][ T8753] tipc: Started in network mode [ 447.922327][ T8740] lowmem_reserve[]: 0 0 1 1 1 [ 447.929412][ T8758] netlink: 14 bytes leftover after parsing attributes in process `syz.4.767'. [ 447.934250][ T8753] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 447.948628][ T8759] overlay: Unknown parameter 'fowner<00000000000000000000' [ 447.955662][ T8740] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1752kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 447.960113][ T8753] tipc: Enabled bearer , priority 10 [ 447.991695][ T8740] lowmem_reserve[]: 0 0 0 0 0 [ 448.001581][ T8740] Node 1 Normal free:3908772kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:12672kB local_pcp:6080kB free_cma:0kB [ 448.037476][ T8740] lowmem_reserve[]: 0 0 0 0 0 [ 448.042599][ T8740] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 448.059725][ T8740] Node 0 DMA32: 2398*4kB (UM) 1788*8kB (UME) 669*16kB (UME) 645*32kB (UME) 454*64kB (UME) 124*128kB (UME) 75*256kB (UM) 51*512kB (UM) 17*1024kB (UM) 2*2048kB (UM) 287*4096kB (M) = 1342536kB [ 448.086079][ T8740] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 448.361137][ T8740] Node 1 Normal: 171*4kB (UME) 43*8kB (UME) 44*16kB (UME) 185*32kB (UME) 65*64kB (UME) 5*128kB (UME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 949*4096kB (M) = 3908772kB [ 448.388200][ T8740] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 448.400564][ T8758] tipc: Disabling bearer [ 448.407003][ T8740] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 448.419374][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.770'. [ 448.433296][ T8740] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 448.437605][ T8554] bond0: (slave bond_slave_0): interface is now down [ 448.444463][ T8740] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 448.461019][ T8764] netlink: 'syz.5.770': attribute type 10 has an invalid length. [ 448.468974][ T8554] bond0: (slave bond_slave_1): interface is now down [ 448.477962][ T8740] 60991 total pagecache pages [ 448.482787][ T8740] 0 pages in swap cache [ 448.490167][ T8764] bond0: (slave netdevsim0): no link monitoring support [ 448.506402][ T8764] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 449.254912][ T8740] Free swap = 124996kB [ 449.260209][ T8740] Total swap = 124996kB [ 449.264487][ T8740] 2097051 pages RAM [ 449.269764][ T8740] 0 pages HighMem/MovableOnly [ 449.277917][ T8740] 424532 pages reserved [ 449.282210][ T8740] 0 pages cma reserved [ 449.446871][ T8053] usb 2-1: USB disconnect, device number 17 [ 449.483974][ T30] audit: type=1326 audit(1749005847.849:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8769 comm="syz.5.773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8565d8e969 code=0x0 [ 450.433110][ T8552] bond0: (slave bond_slave_0): interface is now down [ 450.462927][ T8552] bond0: (slave bond_slave_1): interface is now down [ 450.473383][ T8796] netlink: 10 bytes leftover after parsing attributes in process `syz.2.779'. [ 450.500254][ T8552] bond0: now running without any active interface! [ 450.686682][ T8796] sg_write: data in/out 1048546/14 bytes for SCSI command 0x0-- guessing data in; [ 450.686682][ T8796] program syz.2.779 not setting count and/or reply_len properly [ 452.186278][ T8054] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 452.196922][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 452.203390][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.226150][ T5891] IPVS: starting estimator thread 0... [ 452.326529][ T8828] IPVS: using max 23 ests per chain, 55200 per kthread [ 452.523430][ T8054] usb 5-1: Using ep0 maxpacket: 32 [ 452.534749][ T8054] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.556312][ T8054] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.782082][ T8837] bridge0: port 3(syz_tun) entered blocking state [ 452.790244][ T8837] bridge0: port 3(syz_tun) entered disabled state [ 452.799353][ T8837] syz_tun: entered allmulticast mode [ 452.831007][ T8837] syz_tun: entered promiscuous mode [ 453.241065][ T8054] usb 5-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 453.250555][ T8054] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.261507][ T8054] usb 5-1: config 0 descriptor?? [ 453.366534][ T8053] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 453.651807][ T8843] netlink: 68 bytes leftover after parsing attributes in process `syz.5.798'. [ 454.466461][ T8053] usb 1-1: Using ep0 maxpacket: 16 [ 454.485268][ T8053] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 454.494834][ T8053] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 454.506822][ T8053] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 454.543907][ T8053] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 454.553472][ T8053] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.561814][ T8053] usb 1-1: Product: syz [ 454.566048][ T8053] usb 1-1: Manufacturer: syz [ 454.586317][ T8053] usb 1-1: SerialNumber: syz [ 455.284570][ T8053] usb 1-1: 0:2 : does not exist [ 455.303116][ T8053] usb 1-1: USB disconnect, device number 18 [ 455.375469][ T8054] usbhid 5-1:0.0: can't add hid device: -71 [ 455.388482][ T8054] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 455.407986][ T8054] usb 5-1: USB disconnect, device number 26 [ 457.691584][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 457.711319][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 458.268675][ T8872] netlink: 36 bytes leftover after parsing attributes in process `syz.1.806'. [ 458.447262][ T30] audit: type=1326 audit(1749005856.809:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8871 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 458.562807][ T8879] tmpfs: Unknown parameter 'usr|uota' [ 458.568642][ T30] audit: type=1326 audit(1749005856.809:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8871 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 458.633036][ T30] audit: type=1326 audit(1749005856.809:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8871 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 458.994726][ T30] audit: type=1326 audit(1749005856.809:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8871 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 459.017379][ T30] audit: type=1804 audit(1749005857.289:182): pid=8886 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.811" name="/newroot/166/bus/file0" dev="overlay" ino=923 res=1 errno=0 [ 460.222197][ T8914] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20002 [ 460.266649][ T8053] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 460.341576][ T8916] FAULT_INJECTION: forcing a failure. [ 460.341576][ T8916] name failslab, interval 1, probability 0, space 0, times 0 [ 460.359018][ T8916] CPU: 0 UID: 0 PID: 8916 Comm: syz.0.819 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 460.359053][ T8916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 460.359066][ T8916] Call Trace: [ 460.359076][ T8916] [ 460.359086][ T8916] dump_stack_lvl+0x189/0x250 [ 460.359123][ T8916] ? __pfx____ratelimit+0x10/0x10 [ 460.359157][ T8916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.359190][ T8916] ? __pfx__printk+0x10/0x10 [ 460.359219][ T8916] ? __pfx___might_resched+0x10/0x10 [ 460.359257][ T8916] should_fail_ex+0x414/0x560 [ 460.359297][ T8916] should_failslab+0xa8/0x100 [ 460.359329][ T8916] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 460.359357][ T8916] ? __alloc_skb+0x112/0x2d0 [ 460.359384][ T8916] __alloc_skb+0x112/0x2d0 [ 460.359410][ T8916] netlink_sendmsg+0x5c6/0xb30 [ 460.359444][ T8916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.359489][ T8916] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 460.359518][ T8916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.359544][ T8916] __sock_sendmsg+0x219/0x270 [ 460.359579][ T8916] ____sys_sendmsg+0x505/0x830 [ 460.359612][ T8916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.359641][ T8916] ? import_iovec+0x74/0xa0 [ 460.359667][ T8916] ___sys_sendmsg+0x21f/0x2a0 [ 460.359691][ T8916] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.359742][ T8916] ? __fget_files+0x2a/0x420 [ 460.359766][ T8916] ? __fget_files+0x3a0/0x420 [ 460.359800][ T8916] __x64_sys_sendmsg+0x19b/0x260 [ 460.359824][ T8916] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 460.359854][ T8916] ? __pfx_ksys_write+0x10/0x10 [ 460.359873][ T8916] ? rcu_is_watching+0x15/0xb0 [ 460.359914][ T8916] ? do_syscall_64+0xbe/0x3b0 [ 460.359944][ T8916] do_syscall_64+0xfa/0x3b0 [ 460.359969][ T8916] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.359994][ T8916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.360011][ T8916] ? clear_bhb_loop+0x60/0xb0 [ 460.360032][ T8916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.360048][ T8916] RIP: 0033:0x7fdb44d8e969 [ 460.360064][ T8916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.360079][ T8916] RSP: 002b:00007fdb45c1c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.360098][ T8916] RAX: ffffffffffffffda RBX: 00007fdb44fb5fa0 RCX: 00007fdb44d8e969 [ 460.360111][ T8916] RDX: 0000000000000802 RSI: 00002000000003c0 RDI: 000000000000000c [ 460.360123][ T8916] RBP: 00007fdb45c1c090 R08: 0000000000000000 R09: 0000000000000000 [ 460.360134][ T8916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.360144][ T8916] R13: 0000000000000000 R14: 00007fdb44fb5fa0 R15: 00007ffc0c164ba8 [ 460.360172][ T8916] [ 460.476544][ T8053] usb 5-1: Using ep0 maxpacket: 16 [ 460.709436][ T8053] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 460.719958][ T8053] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.731474][ T8053] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.745064][ T8053] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 460.765066][ T8053] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.785311][ T8053] usb 5-1: Product: syz [ 460.789655][ T8053] usb 5-1: Manufacturer: syz [ 460.794508][ T8053] usb 5-1: SerialNumber: syz [ 461.324013][ T8931] lo speed is unknown, defaulting to 1000 [ 461.338753][ T8053] usb 5-1: 0:2 : does not exist [ 461.375750][ T8053] usb 5-1: USB disconnect, device number 27 [ 461.535909][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.822'. [ 461.703484][ T30] audit: type=1326 audit(1749005860.069:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8943 comm="syz.0.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb44d8e969 code=0x7ffc0000 [ 461.745930][ T30] audit: type=1326 audit(1749005860.069:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8943 comm="syz.0.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb44d8e969 code=0x7ffc0000 [ 461.769070][ T30] audit: type=1326 audit(1749005860.069:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8943 comm="syz.0.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdb44d8d41f code=0x7ffc0000 [ 461.803500][ T30] audit: type=1326 audit(1749005860.069:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8943 comm="syz.0.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb44d8e969 code=0x7ffc0000 [ 462.141192][ T8053] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 462.248150][ T30] audit: type=1326 audit(1749005860.069:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8943 comm="syz.0.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb44d8e969 code=0x7ffc0000 [ 462.890856][ T8954] binder_alloc: 8950: binder_alloc_buf size 16408 failed, no address space [ 462.913014][ T8953] kAFS: unable to lookup cell '' [ 462.913283][ T8954] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 463.084396][ T51] Bluetooth: hci5: unexpected event for opcode 0x4156 [ 463.680876][ T8964] netlink: 76 bytes leftover after parsing attributes in process `syz.5.834'. [ 463.690299][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz.5.834'. [ 463.700590][ T8964] netlink: 20 bytes leftover after parsing attributes in process `syz.5.834'. [ 469.194833][ T8981] netlink: 256 bytes leftover after parsing attributes in process `syz.1.838'. [ 469.610869][ T5813] IPVS: starting estimator thread 0... [ 469.707960][ T9004] IPVS: using max 24 ests per chain, 57600 per kthread [ 470.070085][ T66] Bluetooth: Error in BCSP hdr checksum [ 470.342907][ T3509] Bluetooth: Error in BCSP hdr checksum [ 470.408403][ T9018] netlink: 'syz.2.847': attribute type 4 has an invalid length. [ 470.500822][ T9022] xt_NFQUEUE: number of total queues is 0 [ 470.534697][ T5843] Bluetooth: hci1: unexpected event for opcode 0x0c7a [ 470.727738][ T9025] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 470.748712][ T8552] Bluetooth: (null): Invalid header checksum [ 470.879019][ T66] Bluetooth: (null): Invalid header checksum [ 470.939438][ T8552] Bluetooth: (null): Invalid header checksum [ 471.453199][ T3509] Bluetooth: (null): Invalid header checksum [ 471.453321][ T3509] Bluetooth: (null): Invalid header checksum [ 471.453392][ T3509] Bluetooth: (null): Invalid header checksum [ 471.453493][ T3509] Bluetooth: (null): Invalid header checksum [ 471.501544][ T3509] Bluetooth: (null): Invalid header checksum [ 471.658978][ T3509] Bluetooth: (null): Invalid header checksum [ 471.720969][ T66] Bluetooth: (null): Invalid header checksum [ 471.844185][ T66] Bluetooth: (null): Invalid header checksum [ 471.868678][ T5843] Bluetooth: hci0: command 0x1003 tx timeout [ 471.871794][ T51] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 473.229674][ T9037] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 473.304456][ T9036] lo speed is unknown, defaulting to 1000 [ 474.380552][ T9050] netlink: 'syz.2.855': attribute type 4 has an invalid length. [ 474.663627][ T9061] loop2: detected capacity change from 0 to 7 [ 474.694297][ T9061] Dev loop2: unable to read RDB block 7 [ 474.714312][ T9061] loop2: unable to read partition table [ 474.736792][ T5843] Bluetooth: hci5: command 0x0405 tx timeout [ 474.737781][ T9061] loop2: partition table beyond EOD, truncated [ 474.776542][ T9061] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 474.879363][ T9068] syz.2.864: attempt to access beyond end of device [ 474.879363][ T9068] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 475.296949][ T9068] syz.2.864: attempt to access beyond end of device [ 475.296949][ T9068] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 475.361037][ T9068] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 475.419603][ T9073] netlink: 48 bytes leftover after parsing attributes in process `syz.4.865'. [ 475.498862][ T9068] syz.2.864: attempt to access beyond end of device [ 475.498862][ T9068] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 475.533033][ T9068] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 475.555785][ T9068] syz.2.864: attempt to access beyond end of device [ 475.555785][ T9068] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 475.591436][ T9068] syz.2.864: attempt to access beyond end of device [ 475.591436][ T9068] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 475.626502][ T9068] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 475.666357][ T9068] syz.2.864: attempt to access beyond end of device [ 475.666357][ T9068] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 475.926530][ T9068] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 476.392006][ T9068] syz.2.864: attempt to access beyond end of device [ 476.392006][ T9068] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 476.410919][ T9068] syz.2.864: attempt to access beyond end of device [ 476.410919][ T9068] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 476.428180][ T9068] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 476.442851][ T9068] syz.2.864: attempt to access beyond end of device [ 476.442851][ T9068] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 476.456709][ T9068] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 476.469200][ T9068] syz.2.864: attempt to access beyond end of device [ 476.469200][ T9068] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 476.484032][ T9068] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 476.676918][ T9068] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 476.696787][ T9068] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 476.998159][ T9096] netlink: 'syz.4.870': attribute type 4 has an invalid length. [ 477.443057][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 477.443081][ T30] audit: type=1326 audit(1749005875.809:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9099 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 477.558256][ T30] audit: type=1326 audit(1749005875.849:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9099 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 477.580289][ T30] audit: type=1326 audit(1749005875.849:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9099 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 477.602223][ T30] audit: type=1326 audit(1749005875.849:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9099 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 477.628662][ T30] audit: type=1326 audit(1749005875.849:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9099 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 477.670461][ T30] audit: type=1326 audit(1749005875.849:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9099 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 477.986477][ T30] audit: type=1326 audit(1749005875.849:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9099 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 479.045379][ T30] audit: type=1326 audit(1749005875.849:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9099 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 479.272363][ T9119] 9pnet_fd: Insufficient options for proto=fd [ 479.430866][ T30] audit: type=1326 audit(1749005875.849:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9099 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 479.453126][ T30] audit: type=1326 audit(1749005875.849:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9099 comm="syz.1.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 479.474870][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.044279][ T9126] netlink: 36 bytes leftover after parsing attributes in process `syz.2.879'. [ 480.862231][ T9136] netlink: 'syz.2.879': attribute type 21 has an invalid length. [ 480.864273][ T9136] netlink: 'syz.2.879': attribute type 6 has an invalid length. [ 480.864453][ T9136] netlink: 132 bytes leftover after parsing attributes in process `syz.2.879'. [ 483.635516][ T9155] netlink: 48 bytes leftover after parsing attributes in process `syz.5.887'. [ 485.087364][ T9173] netlink: 132 bytes leftover after parsing attributes in process `syz.5.892'. [ 485.383910][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.5.896'. [ 485.407878][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.5.896'. [ 485.462920][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.896'. [ 485.636564][ T9186] vlan2: entered promiscuous mode [ 485.650940][ T9186] bridge2: entered promiscuous mode [ 486.020581][ T9192] netlink: 'syz.4.897': attribute type 4 has an invalid length. [ 486.694186][ T9199] fuse: Bad value for 'fd' [ 486.826025][ T9203] tc_dump_action: action bad kind [ 487.386351][ T8054] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 487.483783][ T9219] lo speed is unknown, defaulting to 1000 [ 487.552355][ T8054] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 487.562782][ T8054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.578197][ T8054] usb 5-1: Product: syz [ 487.586490][ T8054] usb 5-1: Manufacturer: syz [ 487.593563][ T8054] usb 5-1: SerialNumber: syz [ 487.608359][ T8054] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 487.908270][ T8051] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 488.706581][ T5891] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 488.749868][ T5887] usb 5-1: USB disconnect, device number 28 [ 488.794506][ T9241] binder: 9239:9241 ioctl c018620c 200000000380 returned -1 [ 488.837337][ T9241] trusted_key: syz.1.912 sent an empty control message without MSG_MORE. [ 488.866816][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 488.888050][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.922264][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.947402][ T5891] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 488.970272][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.987075][ T8051] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 489.008510][ T5891] usb 3-1: config 0 descriptor?? [ 489.011645][ T8051] ath9k_htc: Failed to initialize the device [ 489.032572][ T5887] usb 5-1: ath9k_htc: USB layer deinitialized [ 489.404007][ T9238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.500043][ T9238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.796813][ T5891] usbhid 3-1:0.0: can't add hid device: -71 [ 489.803192][ T5891] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 489.923557][ T9258] netlink: 88 bytes leftover after parsing attributes in process `syz.5.918'. [ 489.933410][ T5891] usb 3-1: USB disconnect, device number 24 [ 491.036750][ T9272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 491.122991][ T9273] netlink: 'syz.4.921': attribute type 11 has an invalid length. [ 492.726690][ T5891] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 492.776409][ T5813] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 492.901909][ T5891] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 492.923002][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.937241][ T5813] usb 5-1: Using ep0 maxpacket: 32 [ 492.953471][ T5813] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 492.970222][ T5891] usb 3-1: Product: syz [ 492.983073][ T5891] usb 3-1: Manufacturer: syz [ 492.989162][ T5813] usb 5-1: config 0 has no interface number 0 [ 493.006300][ T5891] usb 3-1: SerialNumber: syz [ 493.018496][ T5813] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 493.040558][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.070825][ T5813] usb 5-1: Product: syz [ 493.092177][ T5813] usb 5-1: Manufacturer: syz [ 493.103897][ T5813] usb 5-1: SerialNumber: syz [ 493.121913][ T5891] usb 3-1: config 0 descriptor?? [ 493.155457][ T5813] usb 5-1: config 0 descriptor?? [ 493.180895][ T5813] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 493.412649][ T5813] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 493.443452][ T5813] quatech2 5-1:0.51: probe with driver quatech2 failed with error -8 [ 493.768240][ T9280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.785932][ T9296] fuse: Bad value for 'fd' [ 493.789337][ T9280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.248825][ T5891] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 494.514109][ T5891] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 494.548031][ T5891] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 494.559563][ T5891] asix 3-1:0.0: probe with driver asix failed with error -71 [ 494.583504][ T5891] usb 3-1: USB disconnect, device number 25 [ 494.610138][ T5813] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 494.768793][ T5813] usb 2-1: not running at top speed; connect to a high speed hub [ 494.782778][ T5813] usb 2-1: config 5 has an invalid interface number: 148 but max is 0 [ 494.792045][ T5813] usb 2-1: config 5 has no interface number 0 [ 494.802925][ T5813] usb 2-1: config 5 interface 148 altsetting 1 endpoint 0xC has an invalid bInterval 250, changing to 4 [ 494.819218][ T5813] usb 2-1: config 5 interface 148 altsetting 1 endpoint 0xD has invalid wMaxPacketSize 0 [ 494.832317][ T5813] usb 2-1: config 5 interface 148 has no altsetting 0 [ 494.848113][ T5813] usb 2-1: New USB device found, idVendor=05ac, idProduct=d181, bcdDevice=b4.a2 [ 494.865405][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.874824][ T5813] usb 2-1: Product: syz [ 494.882523][ T5813] usb 2-1: Manufacturer: syz [ 494.888256][ T5813] usb 2-1: SerialNumber: syz [ 495.125429][ T5813] ipheth 2-1:5.148: Unable to find endpoints [ 495.182092][ T5813] usb 2-1: USB disconnect, device number 19 [ 495.549817][ T5813] usb 5-1: USB disconnect, device number 29 [ 497.476485][ T8051] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 497.666719][ T8054] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 497.684378][ T8051] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.718998][ T8051] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.736492][ T8051] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 497.764855][ T8051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.790134][ T8051] usb 3-1: config 0 descriptor?? [ 497.886134][ T8054] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.342294][ T8054] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 498.353417][ T8054] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 498.409324][ T8054] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 498.432411][ T8054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.455850][ T8054] usb 2-1: Product: syz [ 498.481724][ T8054] usb 2-1: Manufacturer: syz [ 498.509283][ T8054] usb 2-1: SerialNumber: syz [ 498.807244][ T9337] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 499.125984][ T9327] 9pnet_fd: Insufficient options for proto=fd [ 499.643696][ T9338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.656900][ T9338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.102828][ T9352] netlink: 'syz.5.944': attribute type 10 has an invalid length. [ 500.110929][ T9352] netlink: 40 bytes leftover after parsing attributes in process `syz.5.944'. [ 500.120468][ T9352] dummy0: entered promiscuous mode [ 500.128153][ T9352] bridge0: port 3(dummy0) entered blocking state [ 500.135091][ T9352] bridge0: port 3(dummy0) entered disabled state [ 500.142044][ T9352] dummy0: entered allmulticast mode [ 500.151706][ T9352] bridge0: port 3(dummy0) entered blocking state [ 500.158501][ T9352] bridge0: port 3(dummy0) entered forwarding state [ 500.977543][ T8051] usbhid 3-1:0.0: can't add hid device: -71 [ 501.099117][ T8051] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 501.464273][ T8051] usb 3-1: USB disconnect, device number 26 [ 502.186617][ T8054] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 502.193636][ T8054] cdc_ncm 2-1:1.0: bind() failure [ 502.321838][ T8054] usb 2-1: USB disconnect, device number 20 [ 504.644733][ T9399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.962'. [ 504.661932][ T9397] netlink: 28 bytes leftover after parsing attributes in process `syz.5.961'. [ 504.682474][ T9397] netlink: 28 bytes leftover after parsing attributes in process `syz.5.961'. [ 504.714817][ T9397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.229265][ T9414] FAULT_INJECTION: forcing a failure. [ 505.229265][ T9414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.258818][ T9414] CPU: 0 UID: 0 PID: 9414 Comm: syz.2.967 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 505.258853][ T9414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 505.258869][ T9414] Call Trace: [ 505.258880][ T9414] [ 505.258892][ T9414] dump_stack_lvl+0x189/0x250 [ 505.258932][ T9414] ? __pfx____ratelimit+0x10/0x10 [ 505.258965][ T9414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.258997][ T9414] ? __pfx__printk+0x10/0x10 [ 505.259020][ T9414] ? __might_fault+0xb0/0x130 [ 505.259063][ T9414] should_fail_ex+0x414/0x560 [ 505.259104][ T9414] _copy_from_user+0x2d/0xb0 [ 505.259134][ T9414] ___sys_sendmsg+0x158/0x2a0 [ 505.259166][ T9414] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.259237][ T9414] ? __fget_files+0x2a/0x420 [ 505.259268][ T9414] ? __fget_files+0x3a0/0x420 [ 505.259312][ T9414] __x64_sys_sendmsg+0x19b/0x260 [ 505.259343][ T9414] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 505.259382][ T9414] ? __pfx_ksys_write+0x10/0x10 [ 505.259407][ T9414] ? rcu_is_watching+0x15/0xb0 [ 505.259447][ T9414] ? do_syscall_64+0xbe/0x3b0 [ 505.259485][ T9414] do_syscall_64+0xfa/0x3b0 [ 505.259517][ T9414] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.259548][ T9414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.259579][ T9414] ? clear_bhb_loop+0x60/0xb0 [ 505.259606][ T9414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.259628][ T9414] RIP: 0033:0x7fa94238e969 [ 505.259648][ T9414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.259668][ T9414] RSP: 002b:00007fa94314f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.259691][ T9414] RAX: ffffffffffffffda RBX: 00007fa9425b5fa0 RCX: 00007fa94238e969 [ 505.259711][ T9414] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 505.259726][ T9414] RBP: 00007fa94314f090 R08: 0000000000000000 R09: 0000000000000000 [ 505.259739][ T9414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.259752][ T9414] R13: 0000000000000000 R14: 00007fa9425b5fa0 R15: 00007ffd32125098 [ 505.259786][ T9414] [ 505.614199][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 505.614224][ T30] audit: type=1326 audit(1749005903.979:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9402 comm="syz.1.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b718e969 code=0x7fc00000 [ 505.644010][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.004106][ T9428] netlink: 'syz.5.972': attribute type 3 has an invalid length. [ 506.324730][ T9434] binder_alloc: binder_alloc_mmap_handler: 9432 200000ffd000-200001000000 already mapped failed -16 [ 506.347821][ T9434] bridge0: entered allmulticast mode [ 506.355668][ T9434] pim6reg: entered allmulticast mode [ 506.640327][ T9443] overlayfs: failed to resolve './file1': -2 [ 506.890879][ T9446] macsec1: entered allmulticast mode [ 506.890949][ T9446] dummy0: entered allmulticast mode [ 506.903431][ T9446] dummy0: left allmulticast mode [ 507.985351][ T9464] afs: Unknown parameter 'q' [ 508.066436][ T30] audit: type=1326 audit(1749005906.429:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9450 comm="syz.0.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb44d8e969 code=0x7fc00000 [ 508.088545][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.946348][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 511.136407][ T10] usb 3-1: device descriptor read/64, error -71 [ 511.532055][ T9494] new mount options do not match the existing superblock, will be ignored [ 511.542432][ T9494] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 512.306903][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 512.446483][ T10] usb 3-1: device descriptor read/64, error -71 [ 512.503458][ T9503] batadv_slave_0: entered promiscuous mode [ 512.602894][ T10] usb usb3-port1: attempt power cycle [ 513.288638][ T30] audit: type=1326 audit(1749005911.649:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9495 comm="syz.5.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8565d8e969 code=0x7fc00000 [ 513.676980][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 515.993084][ T9533] tmpfs: Unknown parameter 'ussquota_block_hardlimit' [ 517.543043][ T9548] netlink: 'syz.0.1011': attribute type 2 has an invalid length. [ 517.645630][ T9548] : entered promiscuous mode [ 517.773322][ T9563] netlink: 'syz.4.1015': attribute type 1 has an invalid length. [ 517.935616][ T9569] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 518.026626][ T9572] x_tables: duplicate underflow at hook 1 [ 518.467320][ T30] audit: type=1326 audit(1749005916.799:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9549 comm="syz.5.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8565d8e969 code=0x7fc00000 [ 519.088723][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'. [ 519.088756][ T9588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'. [ 520.344257][ T9606] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 520.516364][ T8054] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 520.909381][ T8054] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.945742][ T8054] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 520.984906][ T8054] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 521.005870][ T8054] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.045657][ T8054] usb 1-1: config 0 descriptor?? [ 521.275158][ T9602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.284518][ T9602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.297684][ T8054] usb 1-1: USB disconnect, device number 19 [ 521.794019][ T9625] batadv0: entered promiscuous mode [ 521.800167][ T9625] batadv0: entered allmulticast mode [ 521.823637][ T9625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.032704][ T30] audit: type=1326 audit(1749005920.379:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9618 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94238e969 code=0x7fc00000 [ 522.861643][ T9641] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 523.569495][ T9646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1042'. [ 523.579139][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1042'. [ 524.305011][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1045'. [ 524.371871][ T9659] loop2: detected capacity change from 0 to 7 [ 524.420075][ T9659] Dev loop2: unable to read RDB block 7 [ 524.434523][ T9659] loop2: AHDI p1 p2 p3 [ 524.456698][ T9659] loop2: partition table partially beyond EOD, truncated [ 524.513442][ T9659] loop2: p1 start 1601398130 is beyond EOD, truncated [ 524.569595][ T9659] loop2: p2 start 1702059890 is beyond EOD, truncated [ 525.096507][ T8054] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 525.125805][ T9666] ieee802154 phy0 wpan0: encryption failed: -22 [ 525.303423][ T8054] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.350335][ T8054] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 525.379230][ T8054] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 525.397917][ T8054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.421651][ T8054] usb 2-1: config 0 descriptor?? [ 526.011139][ T9669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.023376][ T30] audit: type=1326 audit(1749005924.399:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9670 comm="syz.0.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb44d8e969 code=0x7fc00000 [ 526.029683][ T9669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.214615][ T8054] usb 2-1: USB disconnect, device number 21 [ 526.884135][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1058'. [ 526.894392][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1058'. [ 527.071552][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1057'. [ 528.039258][ T51] Bluetooth: hci1: unexpected event for opcode 0x080f [ 529.165231][ T8054] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 529.193350][ T30] audit: type=1326 audit(1749005927.469:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9718 comm="syz.1.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b718e969 code=0x7fc00000 [ 529.346444][ T8054] usb 5-1: Using ep0 maxpacket: 16 [ 529.395669][ T8054] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 529.680781][ T8054] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.734254][ T8054] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.757044][ T8054] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 529.768663][ T8054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.012222][ T8054] usb 5-1: Product: syz [ 530.016714][ T8054] usb 5-1: Manufacturer: syz [ 530.021424][ T8054] usb 5-1: SerialNumber: syz [ 530.870529][ T9732] ieee802154 phy0 wpan0: encryption failed: -22 [ 532.077900][ T30] audit: type=1400 audit(1749005930.449:254): lsm=SMACK fn=smack_task_setscheduler action=denied subject="y" object="_" requested=w pid=9711 comm="syz.4.1060" opid=9711 ocomm="syz.4.1060" [ 532.098144][ T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 532.108560][ T51] Bluetooth: hci1: Injecting HCI hardware error event [ 532.119032][ T51] Bluetooth: hci1: hardware error 0x00 [ 532.246757][ T8054] usb 5-1: 0:2 : does not exist [ 532.374951][ T8054] usb 5-1: USB disconnect, device number 30 [ 532.416030][ T9746] tc_dump_action: action bad kind [ 532.493245][ T9746] 9pnet_fd: Insufficient options for proto=fd [ 532.609744][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1071'. [ 532.702550][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 532.712256][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1073'. [ 532.772431][ T9751] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 533.600870][ T9760] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 534.187386][ T9775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.336331][ T51] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 534.432037][ T9782] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 534.933416][ T30] audit: type=1326 audit(1749005933.299:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9791 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe1b712ab39 code=0x7ffc0000 [ 534.955324][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.076694][ T30] audit: type=1326 audit(1749005933.299:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9791 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 537.115380][ T30] audit: type=1326 audit(1749005933.299:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9791 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe1b712ab39 code=0x7ffc0000 [ 537.253796][ T30] audit: type=1326 audit(1749005933.299:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9791 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe1b712ab39 code=0x7ffc0000 [ 537.325290][ T30] audit: type=1326 audit(1749005933.299:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9791 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe1b712ab39 code=0x7ffc0000 [ 537.388893][ T30] audit: type=1326 audit(1749005933.299:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9791 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe1b712ab39 code=0x7ffc0000 [ 537.416590][ T5887] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 537.486067][ T30] audit: type=1326 audit(1749005933.299:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9791 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe1b712ab39 code=0x7ffc0000 [ 537.594188][ T30] audit: type=1326 audit(1749005933.299:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9791 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe1b712ab39 code=0x7ffc0000 [ 537.626442][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 537.731817][ T5887] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 537.774548][ T30] audit: type=1326 audit(1749005933.299:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9791 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe1b712ab39 code=0x7ffc0000 [ 537.831629][ T5887] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.841783][ T30] audit: type=1326 audit(1749005933.299:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9791 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe1b712ab39 code=0x7ffc0000 [ 537.916399][ T5887] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 537.921453][ T30] audit: type=1326 audit(1749005933.299:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9791 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe1b712ab39 code=0x7ffc0000 [ 537.953502][ T30] audit: type=1326 audit(1749005933.299:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9791 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe1b712ab39 code=0x7ffc0000 [ 537.970457][ T5887] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 538.013700][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.037498][ T5887] usb 1-1: Product: syz [ 538.046261][ T5887] usb 1-1: Manufacturer: syz [ 538.051543][ T5887] usb 1-1: SerialNumber: syz [ 538.835425][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1088'. [ 538.846678][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1088'. [ 538.907762][ T9808] netlink: 'syz.1.1089': attribute type 1 has an invalid length. [ 538.918049][ T9808] netlink: 'syz.1.1089': attribute type 3 has an invalid length. [ 538.927648][ T9808] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1089'. [ 543.322480][ T5887] usb 1-1: can't set config #1, error -110 [ 544.663810][ T8051] usb 1-1: USB disconnect, device number 20 [ 544.801822][ T9820] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1091'. [ 548.118143][ T5887] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 548.306240][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 548.314574][ T5887] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 548.329461][ T5887] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 548.360719][ T5887] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 548.388994][ T5887] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 548.425442][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.444635][ T5887] usb 1-1: Product: syz [ 548.455568][ T5887] usb 1-1: Manufacturer: syz [ 548.466569][ T5887] usb 1-1: SerialNumber: syz [ 548.903362][ T5887] usb 1-1: 0:2 : does not exist [ 548.906480][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 548.906505][ T30] audit: type=1400 audit(1749005947.269:324): lsm=SMACK fn=smack_task_setscheduler action=denied subject="y" object="_" requested=w pid=9859 comm="syz.0.1102" opid=9859 ocomm="syz.0.1102" [ 548.944637][ T5887] usb 1-1: USB disconnect, device number 21 [ 552.153588][ T9906] @: renamed from vlan0 [ 552.744470][ T30] audit: type=1326 audit(1749005951.109:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bc98e969 code=0x7ffc0000 [ 552.767022][ C1] vkms_vblank_simulate: vblank timer overrun [ 552.850686][ T30] audit: type=1326 audit(1749005951.139:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f60bc98d2d0 code=0x7ffc0000 [ 552.917858][ T30] audit: type=1326 audit(1749005951.139:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f60bc98e56b code=0x7ffc0000 [ 552.984729][ T30] audit: type=1326 audit(1749005951.139:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f60bc98e56b code=0x7ffc0000 [ 553.057290][ T9918] tc_dump_action: action bad kind [ 553.066591][ T8054] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 553.106272][ T30] audit: type=1326 audit(1749005951.169:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f60bc98e56b code=0x7ffc0000 [ 553.136756][ T9904] Bluetooth: hci0: command 0x1003 tx timeout [ 553.145407][ T51] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 553.316731][ T30] audit: type=1326 audit(1749005951.169:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f60bc98e56b code=0x7ffc0000 [ 553.359088][ T8054] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.366726][ T5891] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 553.426542][ T8054] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 553.435961][ T8054] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.471217][ T30] audit: type=1326 audit(1749005951.289:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f60bc98e56b code=0x7ffc0000 [ 553.496604][ T8054] usb 5-1: config 0 descriptor?? [ 553.521528][ T30] audit: type=1326 audit(1749005951.379:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f60bc98e56b code=0x7ffc0000 [ 553.565453][ T30] audit: type=1326 audit(1749005951.459:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f60bc98e56b code=0x7ffc0000 [ 553.710927][ T9940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'. [ 553.920200][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 553.920222][ T30] audit: type=1326 audit(1749005952.289:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bc98e969 code=0x7ffc0000 [ 554.161447][ T30] audit: type=1326 audit(1749005952.289:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bc98e969 code=0x7ffc0000 [ 554.183318][ C1] vkms_vblank_simulate: vblank timer overrun [ 554.191569][ T30] audit: type=1326 audit(1749005952.289:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f60bc98d2d0 code=0x7ffc0000 [ 554.213531][ C1] vkms_vblank_simulate: vblank timer overrun [ 554.220681][ T30] audit: type=1326 audit(1749005952.289:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bc98e969 code=0x7ffc0000 [ 554.248213][ T30] audit: type=1326 audit(1749005952.289:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bc98e969 code=0x7ffc0000 [ 554.270655][ T30] audit: type=1326 audit(1749005952.289:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f60bc98e969 code=0x7ffc0000 [ 554.739858][ T30] audit: type=1326 audit(1749005953.009:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bc98e969 code=0x7ffc0000 [ 554.816805][ T30] audit: type=1326 audit(1749005953.029:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9909 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bc98e969 code=0x7ffc0000 [ 554.841527][ T5887] usb 5-1: USB disconnect, device number 31 [ 555.725530][ T9962] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1129'. [ 555.997224][ T5887] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 557.086402][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 557.594442][ T5887] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 557.603627][ T5887] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.617624][ T5887] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 557.622846][ T9976] No control pipe specified [ 557.630940][ T5887] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 557.640934][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.649669][ T5887] usb 1-1: Product: syz [ 557.654059][ T5887] usb 1-1: Manufacturer: syz [ 557.659337][ T5887] usb 1-1: SerialNumber: syz [ 557.693626][ T30] audit: type=1326 audit(1749005956.059:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9973 comm="syz.2.1133" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa94238e969 code=0x0 [ 558.040173][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1135'. [ 558.576812][ T30] audit: type=1400 audit(1749005956.949:361): lsm=SMACK fn=smack_task_setscheduler action=denied subject="y" object="_" requested=w pid=9954 comm="syz.0.1127" opid=9954 ocomm="syz.0.1127" [ 558.643581][ T5887] usb 1-1: 0:2 : does not exist [ 558.675086][ T5887] usb 1-1: USB disconnect, device number 23 [ 558.932176][ T9991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1138'. [ 559.177851][ T9904] Bluetooth: hci0: command 0x1003 tx timeout [ 559.184757][ T51] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 561.459286][ T5887] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 561.618697][ T5887] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 561.638190][ T5887] usb 3-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 561.713532][T10006] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1140'. [ 561.723516][T10006] unsupported nlmsg_type 40 [ 562.394259][ T5887] usb 3-1: config 0 interface 0 has no altsetting 1 [ 562.401050][ T5887] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 562.479614][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.582293][ T5887] usb 3-1: config 0 descriptor?? [ 562.602376][ T5887] usb 3-1: can't set config #0, error -71 [ 562.626733][ T5887] usb 3-1: USB disconnect, device number 30 [ 563.718048][T10030] ubi: mtd0 is already attached to ubi31 [ 565.969435][T10049] overlayfs: failed to clone lowerpath [ 567.186093][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1160'. [ 567.212900][T10071] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 567.256276][ T8054] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 568.095448][ T8552] Bluetooth: hci0: Frame reassembly failed (-84) [ 568.217146][ T8054] usb 5-1: Using ep0 maxpacket: 16 [ 568.227672][ T8054] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 568.245334][ T8054] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.256815][ T8054] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 568.272515][ T8054] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 568.283035][ T8054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.296538][ T8054] usb 5-1: Product: syz [ 568.301569][ T8054] usb 5-1: Manufacturer: syz [ 568.310839][ T8054] usb 5-1: SerialNumber: syz [ 569.207407][ T8054] usb 5-1: 0:2 : does not exist [ 569.246627][ T8054] usb 5-1: USB disconnect, device number 32 [ 569.542364][T10099] netlink: 'syz.5.1169': attribute type 2 has an invalid length. [ 569.558979][T10099] : entered promiscuous mode [ 569.856361][ T51] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 570.410413][T10106] netlink: 'syz.1.1171': attribute type 4 has an invalid length. [ 570.830446][T10114] tc_dump_action: action bad kind [ 574.643299][T10139] xt_CT: You must specify a L4 protocol and not use inversions on it [ 575.146935][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 576.560657][T10155] bridge0: port 4(syz_tun) entered blocking state [ 576.567504][T10155] bridge0: port 4(syz_tun) entered disabled state [ 576.574629][T10155] syz_tun: entered allmulticast mode [ 576.582072][T10155] syz_tun: entered promiscuous mode [ 576.589122][T10155] bridge0: port 4(syz_tun) entered blocking state [ 576.595701][T10155] bridge0: port 4(syz_tun) entered forwarding state [ 576.656515][ T8051] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 576.991756][ T8051] usb 1-1: Using ep0 maxpacket: 16 [ 577.017357][ T8051] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 577.030796][T10162] netlink: 'syz.1.1187': attribute type 4 has an invalid length. [ 577.037024][ T8051] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.066057][ T8051] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 577.085342][ T8051] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 577.095619][ T8051] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.104192][ T8051] usb 1-1: Product: syz [ 577.109495][ T8051] usb 1-1: Manufacturer: syz [ 577.114720][ T8051] usb 1-1: SerialNumber: syz [ 577.956105][ T9904] Bluetooth: hci0: command 0x1003 tx timeout [ 577.956638][ T51] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 579.051990][ T8051] usb 1-1: 0:2 : does not exist [ 579.085248][ T8051] usb 1-1: USB disconnect, device number 24 [ 579.316379][ T5887] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 579.490458][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 579.502994][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 580.298945][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 580.309925][ T5887] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 580.340231][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 580.381152][ T5887] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 580.444890][ T5887] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 580.769966][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.473927][ T5887] usb 3-1: config 0 descriptor?? [ 581.524681][ T51] Bluetooth: hci0: urb ffff88804b68ae00 submission failed (90) [ 581.723189][ T5887] usb 3-1: USB disconnect, device number 31 [ 585.582846][T10248] netlink: 'syz.1.1213': attribute type 4 has an invalid length. [ 588.656563][T10259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1217'. [ 588.671636][T10259] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.681046][T10259] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.690037][T10259] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.698988][T10259] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.290060][T10274] binder: 10266:10274 ioctl c0306201 200000000640 returned -22 [ 594.126385][ T8054] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 594.377404][ T8054] usb 5-1: Invalid ep0 maxpacket: 16 [ 594.836331][ T8054] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 595.036271][ T8054] usb 5-1: Invalid ep0 maxpacket: 16 [ 595.056395][ T8054] usb usb5-port1: attempt power cycle [ 595.336279][ T5891] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 595.416364][ T8054] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 595.492875][ T8054] usb 5-1: Invalid ep0 maxpacket: 16 [ 595.529057][ T8051] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 595.700550][ T8054] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 595.777636][ T8051] usb 2-1: Using ep0 maxpacket: 16 [ 595.801112][ T8054] usb 5-1: Invalid ep0 maxpacket: 16 [ 595.841088][ T8051] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 595.875186][ T8054] usb usb5-port1: unable to enumerate USB device [ 595.941235][ T8051] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.969318][ T8051] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 596.012159][ T8051] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 596.022330][ T8051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.034919][ T8051] usb 2-1: Product: syz [ 596.039551][ T8051] usb 2-1: Manufacturer: syz [ 596.044711][ T8051] usb 2-1: SerialNumber: syz [ 596.128465][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.145454][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.165302][ T5891] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 596.175029][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.187371][ T5891] usb 1-1: config 0 descriptor?? [ 596.339306][ T30] audit: type=1400 audit(1749005994.709:362): lsm=SMACK fn=smack_task_setscheduler action=denied subject="y" object="_" requested=w pid=10309 comm="syz.1.1233" opid=10309 ocomm="syz.1.1233" [ 596.616907][ T5891] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 596.641947][ T5891] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 596.674523][ T5891] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0006/input/input16 [ 596.685233][ T8051] usb 2-1: 0:2 : does not exist [ 596.714031][ T8051] usb 2-1: USB disconnect, device number 22 [ 596.728456][ T5891] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 596.817028][T10312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1234'. [ 597.880390][T10333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1239'. [ 597.976869][ T8054] usb 1-1: reset high-speed USB device number 25 using dummy_hcd [ 598.168638][T10334] sch_tbf: burst 511 is lower than device veth5 mtu (1514) ! [ 599.371344][T10356] netlink: 'syz.2.1242': attribute type 4 has an invalid length. [ 599.791529][ T8051] usb 1-1: USB disconnect, device number 25 [ 599.859962][T10365] netlink: 'syz.1.1246': attribute type 10 has an invalid length. [ 599.868136][T10365] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1246'. [ 599.877577][T10365] bond0: entered promiscuous mode [ 599.882776][T10365] bond_slave_0: entered promiscuous mode [ 599.889200][T10365] bond_slave_1: entered promiscuous mode [ 599.895425][T10365] bridge0: port 4(bond0) entered blocking state [ 599.902154][T10365] bridge0: port 4(bond0) entered disabled state [ 599.909319][T10365] bond0: entered allmulticast mode [ 599.914651][T10365] bond_slave_0: entered allmulticast mode [ 599.920648][T10365] bond_slave_1: entered allmulticast mode [ 599.965720][ T10] IPVS: starting estimator thread 0... [ 600.110194][T10371] IPVS: using max 27 ests per chain, 64800 per kthread [ 601.127549][T10383] fuse: Bad value for 'fd' [ 604.070728][T10404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 604.435518][T10417] netlink: 'syz.2.1260': attribute type 4 has an invalid length. [ 604.496876][ T8051] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 604.676491][ T8051] usb 1-1: Using ep0 maxpacket: 16 [ 604.702061][ T8051] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 604.724598][ T8051] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.748088][ T8051] usb 1-1: Product: syz [ 604.759221][ T8051] usb 1-1: Manufacturer: syz [ 604.775587][ T8051] usb 1-1: SerialNumber: syz [ 604.811831][ T8051] r8152-cfgselector 1-1: Unknown version 0x0000 [ 604.834956][ T8051] r8152-cfgselector 1-1: config 0 descriptor?? [ 604.864339][ T8051] hub 1-1:0.0: bad descriptor, ignoring hub [ 606.294975][ T8051] hub 1-1:0.0: probe with driver hub failed with error -5 [ 606.519370][ T8051] r8152-cfgselector 1-1: Unknown version 0x0000 [ 606.525985][ T8051] r8152-cfgselector 1-1: bad CDC descriptors [ 606.536539][ T5887] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 606.558711][ T8051] r8152-cfgselector 1-1: USB disconnect, device number 26 [ 606.710491][ T5887] usb 5-1: unable to get BOS descriptor or descriptor too short [ 606.727306][ T5887] usb 5-1: not running at top speed; connect to a high speed hub [ 606.763648][ T5887] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 606.786793][ T5887] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 606.834730][ T5887] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 606.845421][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.864224][ T5887] usb 5-1: Product: syz [ 606.869919][ T5887] usb 5-1: Manufacturer: syz [ 606.875596][ T5887] usb 5-1: SerialNumber: syz [ 607.117011][ T8053] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 607.163748][T10445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.173344][T10445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.284896][ T8053] usb 2-1: config 9 has an invalid interface number: 83 but max is 1 [ 607.311293][ T8053] usb 2-1: config 9 has an invalid interface number: 5 but max is 1 [ 607.326406][ T8053] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 607.344261][ T8053] usb 2-1: config 9 has no interface number 0 [ 607.351856][ T8053] usb 2-1: config 9 has no interface number 1 [ 607.405568][ T8053] usb 2-1: config 9 interface 83 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.424680][ T8053] usb 2-1: too many endpoints for config 9 interface 5 altsetting 253: 41, using maximum allowed: 30 [ 607.441853][ T8053] usb 2-1: config 9 interface 5 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 41 [ 607.532118][ T8053] usb 2-1: config 9 interface 83 has no altsetting 0 [ 607.611715][ T8053] usb 2-1: config 9 interface 5 has no altsetting 0 [ 607.730967][ T8053] usb 2-1: New USB device found, idVendor=050f, idProduct=0180, bcdDevice=83.a9 [ 607.793921][ T8053] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.921422][ T8053] usb 2-1: Product: 彾ℕ卿᥃ḏ韑ňླྀ䅀Ｘ抓位偸摑事ￎ嬢䅏瓝濐艺䙪꾘쮨濼솙粫ꐡĔ抭ꇽ砾∋┧咷ଅ僁ᬮ⳯杸ꯜ嶺賹귞׽堭 [ 607.994276][ T8053] usb 2-1: Manufacturer: 僆ᆹ寤羆呷땰犖㴬륶퐴鷑챃疞嫛빾䔚뜲❹꒶裒镴࣢歟肋뛫⮃鉈掙驫╮】˵뀅㮊ౡꢈ䭬䡞䚾爒➰閖⯡橷薖옿ꔂ혹녴종ڰ듽嶈ꩧ䰌ḭ憴큉雉ⱇ㕅脍ඇ턘᱘歠莙瀭㬑皌렻⋛螷꬈鑳郬鐕溬叇ܾ誶䐶⦶栢ﴽ䵃ﻗ♡Ȝ൭ѽ컗䷧প⏢ﻍ茸媎ᅎ꽡◅馮㉽蠃譙폨㊺ [ 608.124685][ T8053] usb 2-1: SerialNumber: Х [ 608.186535][T10457] ieee802154 phy0 wpan0: encryption failed: -22 [ 609.354821][ T8053] ir_usb 2-1:9.83: required endpoints missing [ 609.753971][ T8053] ir_usb 2-1:9.5: required endpoints missing [ 610.033342][ T8053] usb 2-1: USB disconnect, device number 23 [ 610.876909][ T5887] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 610.906525][ T5887] cdc_ncm 5-1:1.0: bind() failure [ 610.918583][ T5887] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 610.925898][ T5887] cdc_ncm 5-1:1.1: bind() failure [ 610.963586][ T5887] usb 5-1: USB disconnect, device number 37 [ 611.098867][T10477] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 611.176065][T10480] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 611.368175][T10486] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 612.920594][T10504] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1291'. [ 612.962282][T10504] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1291'. [ 613.045198][T10512] overlayfs: conflicting options: userxattr,metacopy=on [ 613.269571][T10528] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 614.653198][ T5887] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 614.673262][ T8053] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 614.756429][T10553] overlayfs: failed to clone upperpath [ 615.256317][ T8053] usb 3-1: Using ep0 maxpacket: 8 [ 615.281833][ T8053] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 615.337719][ T8053] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.359941][ T8053] usb 3-1: Product: syz [ 615.378597][ T8053] usb 3-1: Manufacturer: syz [ 615.384634][ T8053] usb 3-1: SerialNumber: syz [ 615.398126][ T8053] usb 3-1: config 0 descriptor?? [ 615.401485][ T5887] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 615.409547][ T8053] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 615.425139][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.434809][ T8053] usb 3-1: setting power ON [ 615.443581][ T5887] usb 2-1: Product: syz [ 615.452019][ T8053] dvb-usb: bulk message failed: -22 (2/0) [ 615.453324][ T5887] usb 2-1: Manufacturer: syz [ 615.483503][ T5887] usb 2-1: SerialNumber: syz [ 615.490302][ T8053] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 615.502949][ T5887] usb 2-1: config 0 descriptor?? [ 615.514278][ T5887] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 615.527290][ T8053] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 615.579308][ T8053] usb 3-1: media controller created [ 615.616696][ T8054] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 615.686032][ T8053] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 615.746762][ T8053] usb 3-1: selecting invalid altsetting 6 [ 615.764832][ T8053] usb 3-1: digital interface selection failed (-22) [ 615.785729][ T8053] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 615.785887][ T8054] usb 5-1: config index 0 descriptor too short (expected 2084, got 36) [ 615.807394][T10571] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1310'. [ 615.817258][ T8054] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.831199][ T8053] usb 3-1: setting power OFF [ 615.842281][ T8053] dvb-usb: bulk message failed: -22 (2/0) [ 615.849938][ T8053] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 615.863533][ T8054] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.875229][ T8053] (NULL device *): no alternate interface [ 615.893776][ T8054] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 615.923152][ T5887] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 615.945644][ T5887] sq905c 2-1:0.0: Reading version command failed [ 615.956450][ T8054] usb 5-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 615.973727][ T8053] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 615.976268][ T5887] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 615.984743][ T8054] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.014154][ T8054] usb 5-1: config 0 descriptor?? [ 616.237261][ T5887] usb 2-1: USB disconnect, device number 24 [ 616.450779][T10560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.467055][T10560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.512977][ T8054] itetech 0003:048D:8595.0007: item fetching failed at offset 5/7 [ 616.534192][ T8054] itetech 0003:048D:8595.0007: probe with driver itetech failed with error -22 [ 616.733708][ T8054] usb 5-1: USB disconnect, device number 38 [ 618.358659][ T8051] usb 3-1: USB disconnect, device number 32 [ 618.385508][ T66] Bluetooth: hci0: Frame reassembly failed (-84) [ 618.524114][T10598] random: crng reseeded on system resumption [ 618.612182][T10604] FAULT_INJECTION: forcing a failure. [ 618.612182][T10604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.613400][T10600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1320'. [ 618.643840][T10604] CPU: 0 UID: 0 PID: 10604 Comm: syz.2.1321 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 618.643870][T10604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 618.643884][T10604] Call Trace: [ 618.643893][T10604] [ 618.643903][T10604] dump_stack_lvl+0x189/0x250 [ 618.643943][T10604] ? __pfx____ratelimit+0x10/0x10 [ 618.643978][T10604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 618.644010][T10604] ? __pfx__printk+0x10/0x10 [ 618.644048][T10604] should_fail_ex+0x414/0x560 [ 618.644089][T10604] _copy_to_user+0x31/0xb0 [ 618.644120][T10604] simple_read_from_buffer+0xe1/0x170 [ 618.644157][T10604] proc_fail_nth_read+0x1df/0x250 [ 618.644197][T10604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 618.644248][T10604] ? rw_verify_area+0x258/0x650 [ 618.644274][T10604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 618.644311][T10604] vfs_read+0x200/0x980 [ 618.644344][T10604] ? __pfx___mutex_lock+0x10/0x10 [ 618.644379][T10604] ? __pfx_vfs_read+0x10/0x10 [ 618.644408][T10604] ? __fget_files+0x2a/0x420 [ 618.644445][T10604] ? __fget_files+0x3a0/0x420 [ 618.644475][T10604] ? __fget_files+0x2a/0x420 [ 618.644517][T10604] ksys_read+0x145/0x250 [ 618.644542][T10604] ? __fget_files+0x3a0/0x420 [ 618.644574][T10604] ? __pfx_ksys_read+0x10/0x10 [ 618.644608][T10604] ? do_syscall_64+0xbe/0x3b0 [ 618.644646][T10604] do_syscall_64+0xfa/0x3b0 [ 618.644678][T10604] ? lockdep_hardirqs_on+0x9c/0x150 [ 618.644709][T10604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.644731][T10604] ? clear_bhb_loop+0x60/0xb0 [ 618.644759][T10604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.644781][T10604] RIP: 0033:0x7fa94238d37c [ 618.644801][T10604] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 618.644820][T10604] RSP: 002b:00007fa94312e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 618.644844][T10604] RAX: ffffffffffffffda RBX: 00007fa9425b6080 RCX: 00007fa94238d37c [ 618.644861][T10604] RDX: 000000000000000f RSI: 00007fa94312e0a0 RDI: 0000000000000006 [ 618.644875][T10604] RBP: 00007fa94312e090 R08: 0000000000000000 R09: 0000000000000000 [ 618.644888][T10604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.644901][T10604] R13: 0000000000000001 R14: 00007fa9425b6080 R15: 00007ffd32125098 [ 618.644936][T10604] [ 620.416607][ T51] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 621.599546][T10631] tc_dump_action: action bad kind [ 621.647566][T10631] 9pnet_fd: Insufficient options for proto=fd [ 622.270026][ T9904] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 622.751282][T10634] No such timeout policy "syz0" [ 622.998630][ T8053] hid-generic C990:0003:0000.0008: item fetching failed at offset 0/2 [ 623.017060][ T8053] hid-generic C990:0003:0000.0008: probe with driver hid-generic failed with error -22 [ 624.062586][T10661] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 624.550941][T10664] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 624.578812][T10673] netlink: 'syz.4.1343': attribute type 7 has an invalid length. [ 625.263194][T10673] netlink: 'syz.4.1343': attribute type 8 has an invalid length. [ 625.277921][ T30] audit: type=1800 audit(1749006023.619:363): pid=10674 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1339" name="file0" dev="overlay" ino=1446 res=0 errno=0 [ 625.765803][T10683] tc_dump_action: action bad kind [ 625.777714][T10683] 9pnet_fd: Insufficient options for proto=fd [ 626.726408][T10688] geneve2: entered allmulticast mode [ 627.214239][T10691] tmpfs: Unknown parameter 'grpquota' [ 629.658278][ T51] Bluetooth: hci0: command 0x1003 tx timeout [ 629.686360][ T9904] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 630.562181][T10738] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.909259][T10762] random: crng reseeded on system resumption [ 636.495748][T10784] sctp: [Deprecated]: syz.1.1376 (pid 10784) Use of struct sctp_assoc_value in delayed_ack socket option. [ 636.495748][T10784] Use struct sctp_sack_info instead [ 636.517670][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 636.920653][T10784] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 639.855696][T10813] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1385'. [ 640.077752][T10813] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1385'. [ 640.159212][ T5887] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 640.267400][T10825] MTD: Couldn't look up '/dev/sg0': -15 [ 640.351019][T10816] batadv_slave_0: entered promiscuous mode [ 640.376334][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 640.401253][T10816] batadv_slave_0: left promiscuous mode [ 640.433673][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.616998][T10826] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 640.691031][ T5887] usb 5-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 640.807250][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.952549][ T5887] usb 5-1: config 0 descriptor?? [ 641.360766][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1393'. [ 641.360794][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1393'. [ 641.570688][ T5887] usbhid 5-1:0.0: can't add hid device: -71 [ 641.570817][ T5887] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 641.576616][ T5887] usb 5-1: USB disconnect, device number 39 [ 641.640018][ T8054] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 641.866960][ T8054] usb 1-1: Using ep0 maxpacket: 16 [ 641.919057][ T8054] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 641.919262][ T8054] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.919334][ T8054] usb 1-1: config 0 has no interface number 0 [ 641.919728][ T8054] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 641.919806][ T8054] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 641.919885][ T8054] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 641.919968][ T8054] usb 1-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 147 [ 641.920042][ T8054] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 641.920393][ T8054] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 641.920468][ T8054] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.002888][ T8054] usb 1-1: config 0 descriptor?? [ 642.016307][T10828] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 642.036190][T10828] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 642.099818][ T8054] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 642.362133][ T8054] usb 1-1: USB disconnect, device number 27 [ 643.636425][ T5887] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 643.806436][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 643.973444][ T5887] usb 2-1: config 0 has an invalid interface number: 92 but max is 0 [ 644.065275][ T5887] usb 2-1: config 0 has an invalid descriptor of length 193, skipping remainder of the config [ 644.116615][ T5887] usb 2-1: config 0 has no interface number 0 [ 644.138224][ T5887] usb 2-1: config 0 interface 92 altsetting 16 endpoint 0x6 has invalid maxpacket 57785, setting to 64 [ 644.192982][ T5887] usb 2-1: config 0 interface 92 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 644.260643][ T5887] usb 2-1: config 0 interface 92 has no altsetting 0 [ 644.485724][T10868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1403'. [ 644.562197][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1401'. [ 644.572136][T10871] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 644.580748][T10871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.461155][ T5887] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=a8.eb [ 645.470835][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.484456][ T5887] usb 2-1: Product: syz [ 645.489184][ T5887] usb 2-1: Manufacturer: syz [ 645.494030][ T5887] usb 2-1: SerialNumber: syz [ 646.404468][ T5887] usb 2-1: config 0 descriptor?? [ 646.491255][ T5887] usb 2-1: can't set config #0, error -71 [ 646.514051][ T5887] usb 2-1: USB disconnect, device number 25 [ 648.716391][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 649.372941][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.471669][T10919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1406'. [ 649.544912][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.555268][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 649.569123][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 649.590483][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.630342][ T10] usb 1-1: config 0 descriptor?? [ 649.646960][ T10] hub 1-1:0.0: USB hub found [ 649.876226][ T8051] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 649.925445][ T10] hub 1-1:0.0: 9 ports detected [ 649.931220][ T10] hub 1-1:0.0: insufficient power available to use all downstream ports [ 650.922640][ T8051] usb 2-1: device descriptor read/64, error -71 [ 650.990348][ T10] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 651.018437][ T10] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 652.247000][ T8051] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 654.229678][ T8053] usb 1-1: USB disconnect, device number 28 [ 655.526355][ T5887] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 655.544669][T10974] netlink: 'syz.2.1432': attribute type 4 has an invalid length. [ 655.566030][T10971] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 655.724590][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 655.748411][ T5887] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 655.768083][ T5887] usb 5-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 655.800307][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.823975][ T5887] usb 5-1: Product: syz [ 655.840931][ T5887] usb 5-1: Manufacturer: syz [ 655.856440][ T5887] usb 5-1: SerialNumber: syz [ 656.075893][ T5887] usb 5-1: USB disconnect, device number 40 [ 659.197686][T11019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 660.841694][T11033] ip6gre0: entered promiscuous mode [ 660.871370][T11033] ip6gre0: entered allmulticast mode [ 661.857147][T11046] input: syz0 as /devices/virtual/input/input17 [ 661.878806][ T9904] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 661.888579][ T9904] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 663.987126][T11061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1462'. [ 664.218648][ T8051] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 664.572944][ T8051] usb 3-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 664.676403][ T8052] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 664.713250][ T8051] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 664.823710][ T8051] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 664.871092][ T8051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 664.923143][ T8052] usb 5-1: Using ep0 maxpacket: 16 [ 664.947474][ T8051] usb 3-1: SerialNumber: syz [ 664.996005][ T8052] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.252124][ T8052] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 665.425657][ T8052] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 665.441836][ T8052] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.452691][ T8052] usb 5-1: Product: ш [ 665.465822][ T8051] usb 3-1: 0:2 : does not exist [ 665.471344][ T8052] usb 5-1: Manufacturer: 뀯㡫ɤﳻ츁৲邰뵩쮍奇濤錂ꊵ쓾⢇֞燑蕒堔ࢸ俫챧⣢搃럦ӑ꥔㏚ⴤ랫㤚Ⅺ⿜吅⥁뻑฻襥쟄跉ἠ⦒뷜謥抋忹്㵸␫骽僜氫퐬蜞᷼ꞎ片躡诅ﹳ飫헉㵾㐅Ꮥ暭全휅筝趚鄴瑬駓構皀〦葏퓸싵鞆侑᙮য絡 [ 665.502250][ T8051] usb 3-1: unit 255 not found! [ 665.529872][ T8051] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 665.550089][ T8051] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 665.570466][ T8051] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 665.600060][ T8051] usb 3-1: USB disconnect, device number 33 [ 665.635917][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1473'. [ 665.740148][T11091] bond0: (slave netdevsim0): Releasing backup interface [ 665.765692][T11091] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 665.988737][ T8052] usb 5-1: 0:2 : does not exist [ 666.013921][ T8052] usb 5-1: USB disconnect, device number 41 [ 666.851129][ T8052] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 668.017517][ T8052] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 668.195707][ T8052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.509003][ T8052] usb 1-1: config 0 descriptor?? [ 668.710621][T11117] could not allocate digest TFM handle poly1305-generic [ 668.851925][ T8052] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 669.678796][ T8052] [drm:udl_init] *ERROR* Selecting channel failed [ 669.847504][ T8052] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 669.854411][ T8052] [drm] Initialized udl on minor 2 [ 669.939353][ T8052] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 670.377811][ T8052] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 670.411848][ T8052] usb 1-1: USB disconnect, device number 29 [ 670.418222][ T8054] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 670.485821][ T8054] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 670.928588][ T8051] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 671.096760][ T8051] usb 5-1: Using ep0 maxpacket: 16 [ 671.185967][ T8051] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 671.671814][ T8051] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 671.756369][ T8051] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 671.773334][ T8051] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 671.783544][ T8051] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.796253][ T8051] usb 5-1: Product: syz [ 671.800744][ T8051] usb 5-1: Manufacturer: syz [ 671.817423][ T8051] usb 5-1: SerialNumber: syz [ 672.364938][ T8051] usb 5-1: 0:2 : does not exist [ 672.390920][ T8053] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 672.411320][ T8051] usb 5-1: USB disconnect, device number 42 [ 672.444068][T11191] netlink: 'syz.5.1505': attribute type 10 has an invalid length. [ 672.459985][T11191] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1505'. [ 672.551374][T11191] team0: Port device geneve0 added [ 672.566326][ T8053] usb 3-1: Using ep0 maxpacket: 16 [ 672.577327][ T8053] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.595168][ T8053] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.626270][ T8053] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 672.650609][ T8053] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 672.671355][ T8053] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.692063][ T8053] usb 3-1: config 0 descriptor?? [ 673.111417][ T8053] usbhid 3-1:0.0: can't add hid device: -71 [ 673.122880][ T8053] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 673.171411][ T8053] usb 3-1: USB disconnect, device number 34 [ 673.264954][T11217] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 675.656373][ T8051] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 675.816564][ T8051] usb 3-1: Using ep0 maxpacket: 16 [ 675.833383][ T8051] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 675.833416][ T8051] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 675.833438][ T8051] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 675.836863][ T8051] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 675.907312][ T8051] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.907480][T11261] FAULT_INJECTION: forcing a failure. [ 675.907480][T11261] name failslab, interval 1, probability 0, space 0, times 0 [ 675.928878][ T8051] usb 3-1: Product: syz [ 675.929026][T11261] CPU: 0 UID: 0 PID: 11261 Comm: syz.0.1529 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 675.929059][T11261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 675.929076][T11261] Call Trace: [ 675.929086][T11261] [ 675.929098][T11261] dump_stack_lvl+0x189/0x250 [ 675.929138][T11261] ? __pfx____ratelimit+0x10/0x10 [ 675.929174][T11261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 675.929209][T11261] ? __pfx__printk+0x10/0x10 [ 675.929236][T11261] ? __lock_acquire+0xab9/0xd20 [ 675.929279][T11261] should_fail_ex+0x414/0x560 [ 675.929323][T11261] should_failslab+0xa8/0x100 [ 675.929358][T11261] kmem_cache_alloc_noprof+0x73/0x3c0 [ 675.929388][T11261] ? __inet_hash_connect+0xdcc/0x2310 [ 675.929423][T11261] __inet_hash_connect+0xdcc/0x2310 [ 675.929456][T11261] ? __pfx___inet_check_established+0x10/0x10 [ 675.929497][T11261] ? __inet_hash_connect+0x4fa/0x2310 [ 675.929535][T11261] ? __pfx___inet_hash_connect+0x10/0x10 [ 675.929573][T11261] ? inet_hash_connect+0x12f/0x240 [ 675.929606][T11261] tcp_v4_connect+0xd42/0x19d0 [ 675.929654][T11261] ? __pfx_tcp_v4_connect+0x10/0x10 [ 675.929681][T11261] ? tcp_v6_connect+0x635/0x1880 [ 675.929712][T11261] tcp_v6_connect+0xab7/0x1880 [ 675.929752][T11261] ? __pfx_tcp_v6_connect+0x10/0x10 [ 675.929784][T11261] ? tomoyo_check_inet_address+0x275/0x8c0 [ 675.929825][T11261] ? smack_ipv6host_label+0x824/0x8e0 [ 675.929875][T11261] __inet_stream_connect+0x298/0xf10 [ 675.929925][T11261] ? __local_bh_enable_ip+0x12d/0x1c0 [ 675.929960][T11261] ? __pfx___inet_stream_connect+0x10/0x10 [ 675.929998][T11261] ? __local_bh_enable_ip+0x12d/0x1c0 [ 675.930031][T11261] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 675.930079][T11261] inet_stream_connect+0x66/0xa0 [ 675.930120][T11261] __sys_connect+0x313/0x440 [ 675.930146][T11261] ? __fget_files+0x3a0/0x420 [ 675.930180][T11261] ? __pfx___sys_connect+0x10/0x10 [ 675.930221][T11261] ? __pfx_ksys_write+0x10/0x10 [ 675.930248][T11261] ? rcu_is_watching+0x15/0xb0 [ 675.930292][T11261] __x64_sys_connect+0x7a/0x90 [ 675.930319][T11261] do_syscall_64+0xfa/0x3b0 [ 675.930353][T11261] ? lockdep_hardirqs_on+0x9c/0x150 [ 675.930387][T11261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.930411][T11261] ? clear_bhb_loop+0x60/0xb0 [ 675.930440][T11261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.930463][T11261] RIP: 0033:0x7fdb44d8e969 [ 675.930486][T11261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.930508][T11261] RSP: 002b:00007fdb45c1c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 675.930532][T11261] RAX: ffffffffffffffda RBX: 00007fdb44fb5fa0 RCX: 00007fdb44d8e969 [ 675.930550][T11261] RDX: 000000000000001c RSI: 0000200000000200 RDI: 0000000000000003 [ 675.930565][T11261] RBP: 00007fdb45c1c090 R08: 0000000000000000 R09: 0000000000000000 [ 675.930580][T11261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.930594][T11261] R13: 0000000000000000 R14: 00007fdb44fb5fa0 R15: 00007ffc0c164ba8 [ 675.930631][T11261] [ 676.418883][ T8051] usb 3-1: Manufacturer: syz [ 676.434177][ T8051] usb 3-1: SerialNumber: syz [ 677.303451][ T30] audit: type=1400 audit(1749006075.669:364): lsm=SMACK fn=smack_task_setscheduler action=denied subject="y" object="_" requested=w pid=11240 comm="syz.2.1522" opid=11240 ocomm="syz.2.1522" [ 677.581746][ T8051] usb 3-1: 0:2 : does not exist [ 677.599938][ T8051] usb 3-1: USB disconnect, device number 35 [ 679.868989][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1539'. [ 680.718167][T11303] overlayfs: conflicting options: userxattr,metacopy=on [ 681.708885][ T8554] Bluetooth: hci0: Frame reassembly failed (-84) [ 683.128940][ T30] audit: type=1326 audit(1749006081.489:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11326 comm="syz.1.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 683.190910][ T30] audit: type=1326 audit(1749006081.489:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11326 comm="syz.1.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 683.235820][ T30] audit: type=1326 audit(1749006081.489:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11326 comm="syz.1.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 683.264055][T11332] netlink: 'syz.0.1547': attribute type 2 has an invalid length. [ 683.264410][ T30] audit: type=1326 audit(1749006081.489:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11326 comm="syz.1.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 683.302109][T11333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1550'. [ 683.317935][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1550'. [ 683.339177][T11332] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1547'. [ 683.368587][ T30] audit: type=1326 audit(1749006081.489:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11326 comm="syz.1.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 683.592609][ T30] audit: type=1326 audit(1749006081.489:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11326 comm="syz.1.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 683.959649][ T51] Bluetooth: hci0: command 0x1003 tx timeout [ 683.967861][ T9904] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 684.356044][ T10] page_pool_release_retry() stalled pool shutdown: id 39, 49 inflight 60 sec [ 684.371765][ T30] audit: type=1326 audit(1749006081.489:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11326 comm="syz.1.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe1b7190887 code=0x7ffc0000 [ 684.394423][ T30] audit: type=1326 audit(1749006081.489:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11326 comm="syz.1.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 684.432198][ T30] audit: type=1326 audit(1749006081.529:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11326 comm="syz.1.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 684.465481][ T30] audit: type=1326 audit(1749006081.529:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11326 comm="syz.1.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1b718e969 code=0x7ffc0000 [ 685.366199][ T8051] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 685.516299][ T8051] usb 2-1: Using ep0 maxpacket: 16 [ 685.519176][ T8051] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 685.519208][ T8051] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.519231][ T8051] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 685.522597][ T8051] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 685.522632][ T8051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.522655][ T8051] usb 2-1: Product: syz [ 685.522673][ T8051] usb 2-1: Manufacturer: syz [ 685.522691][ T8051] usb 2-1: SerialNumber: syz [ 685.971397][ T8051] usb 2-1: 0:2 : does not exist [ 686.000380][ T8051] usb 2-1: USB disconnect, device number 28 [ 686.603655][T11365] bridge0: port 3(syz_tun) entered blocking state [ 686.610563][T11365] bridge0: port 3(syz_tun) entered disabled state [ 686.617766][T11365] syz_tun: entered allmulticast mode [ 686.624929][T11365] syz_tun: entered promiscuous mode [ 686.630907][T11365] bridge0: port 3(syz_tun) entered blocking state [ 686.637554][T11365] bridge0: port 3(syz_tun) entered forwarding state [ 686.791143][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 687.006233][ T10] usb 3-1: device descriptor read/64, error -71 [ 687.021822][T11373] syzkaller1: entered promiscuous mode [ 687.035138][T11373] syzkaller1: entered allmulticast mode [ 688.086634][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 688.260788][ T10] usb 3-1: device descriptor read/64, error -71 [ 688.329530][T11390] netlink: 'syz.5.1568': attribute type 1 has an invalid length. [ 688.337802][T11390] netlink: 'syz.5.1568': attribute type 2 has an invalid length. [ 688.367768][ T10] usb usb3-port1: attempt power cycle [ 688.706295][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 688.746759][ T10] usb 3-1: device descriptor read/8, error -71 [ 688.782508][T11389] binder: 11385:11389 ioctl c018620c 0 returned -14 [ 689.036545][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 689.096792][ T10] usb 3-1: device descriptor read/8, error -71 [ 689.220948][ T10] usb usb3-port1: unable to enumerate USB device [ 689.706806][T11400] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 689.923903][T11403] FAULT_INJECTION: forcing a failure. [ 689.923903][T11403] name failslab, interval 1, probability 0, space 0, times 0 [ 689.938897][T11403] CPU: 0 UID: 0 PID: 11403 Comm: syz.2.1572 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 689.938923][T11403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 689.938934][T11403] Call Trace: [ 689.938945][T11403] [ 689.938954][T11403] dump_stack_lvl+0x189/0x250 [ 689.938986][T11403] ? __pfx____ratelimit+0x10/0x10 [ 689.939011][T11403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 689.939036][T11403] ? __pfx__printk+0x10/0x10 [ 689.939053][T11403] ? _raw_write_lock_irq+0xae/0xf0 [ 689.939077][T11403] ? __pfx__raw_write_lock_irq+0x10/0x10 [ 689.939108][T11403] should_fail_ex+0x414/0x560 [ 689.939139][T11403] should_failslab+0xa8/0x100 [ 689.939165][T11403] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 689.939188][T11403] ? netlink_realloc_groups+0x11b/0x340 [ 689.939213][T11403] ? netlink_realloc_groups+0x11b/0x340 [ 689.939233][T11403] krealloc_noprof+0x124/0x340 [ 689.939253][T11403] ? netlink_realloc_groups+0xd4/0x340 [ 689.939276][T11403] netlink_realloc_groups+0x11b/0x340 [ 689.939302][T11403] netlink_setsockopt+0x37a/0x770 [ 689.939327][T11403] ? __pfx_netlink_setsockopt+0x10/0x10 [ 689.939351][T11403] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 689.939383][T11403] ? __pfx_netlink_setsockopt+0x10/0x10 [ 689.939404][T11403] do_sock_setsockopt+0x257/0x3e0 [ 689.939427][T11403] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 689.939451][T11403] ? __fget_files+0x2a/0x420 [ 689.939483][T11403] __x64_sys_setsockopt+0x18b/0x220 [ 689.939508][T11403] do_syscall_64+0xfa/0x3b0 [ 689.939533][T11403] ? lockdep_hardirqs_on+0x9c/0x150 [ 689.939557][T11403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.939574][T11403] ? clear_bhb_loop+0x60/0xb0 [ 689.939595][T11403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.939611][T11403] RIP: 0033:0x7fa94238e969 [ 689.939629][T11403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.939644][T11403] RSP: 002b:00007fa94314f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 689.939662][T11403] RAX: ffffffffffffffda RBX: 00007fa9425b5fa0 RCX: 00007fa94238e969 [ 689.939674][T11403] RDX: 0000000000000001 RSI: 000000000000010e RDI: 0000000000000003 [ 689.939684][T11403] RBP: 00007fa94314f090 R08: 0000000000000004 R09: 0000000000000000 [ 689.939694][T11403] R10: 00002000000026c0 R11: 0000000000000246 R12: 0000000000000001 [ 689.939705][T11403] R13: 0000000000000000 R14: 00007fa9425b5fa0 R15: 00007ffd32125098 [ 689.939730][T11403] [ 691.246229][ T8558] Bluetooth: hci0: Frame reassembly failed (-84) [ 693.140172][ T9904] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 696.229346][T11473] netlink: 'syz.0.1591': attribute type 1 has an invalid length. [ 696.271084][T11473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1591'. [ 698.927380][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 698.953160][ T6302] Bluetooth: hci0: Frame reassembly failed (-84) [ 700.646405][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 700.798558][ T10] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.810929][ T10] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.821241][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 700.829364][ T10] usb 3-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00 [ 700.839043][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.849816][ T10] usb 3-1: config 0 descriptor?? [ 700.896439][ T51] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 701.297697][ T10] hid-generic 0003:0463:1215.0009: hidraw0: USB HID v0.04 Device [HID 0463:1215] on usb-dummy_hcd.2-1/input0 [ 702.162601][T11527] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 702.608454][ T8052] usb 3-1: USB disconnect, device number 40 [ 707.216511][ T51] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 707.217579][ T9904] Bluetooth: hci0: command 0x1003 tx timeout [ 708.157658][T11580] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 710.496013][ T8052] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 710.889303][ T8052] usb 2-1: unable to get BOS descriptor or descriptor too short [ 710.971395][ T8052] usb 2-1: not running at top speed; connect to a high speed hub [ 711.008524][ T8052] usb 2-1: config 0 has an invalid interface number: 93 but max is 0 [ 711.028385][ T8052] usb 2-1: config 0 has no interface number 0 [ 711.034578][ T8052] usb 2-1: config 0 interface 93 has no altsetting 0 [ 711.069859][ T8052] usb 2-1: New USB device found, idVendor=2040, idProduct=721e, bcdDevice=5e.2b [ 711.086197][ T8052] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.094349][ T8052] usb 2-1: Product: syz [ 711.118624][ T8052] usb 2-1: Manufacturer: syz [ 711.123331][ T8052] usb 2-1: SerialNumber: syz [ 711.198470][T11606] ieee802154 phy0 wpan0: encryption failed: -22 [ 711.220331][ T8052] usb 2-1: config 0 descriptor?? [ 712.298423][T11595] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1625'. [ 712.437357][T11595] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 713.286571][T11612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 713.417422][T11595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 713.755927][ T8051] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 714.021520][ T8051] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.112060][ T8051] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.376687][ T8051] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 714.386245][ T8051] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.402248][ T8051] usb 1-1: config 0 descriptor?? [ 715.225251][ T8052] usb 2-1: unknown interface protocol 0x1a, assuming v1 [ 715.273912][ C1] hrtimer: interrupt took 57710 ns [ 715.406009][ T8052] usb 2-1: cannot find UAC_HEADER [ 715.500617][ T8052] snd-usb-audio 2-1:0.93: probe with driver snd-usb-audio failed with error -22 [ 715.535247][ T8052] usb 2-1: USB disconnect, device number 29 [ 715.774149][T11644] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1639'. [ 716.505878][ T8051] usbhid 1-1:0.0: can't add hid device: -71 [ 716.512463][ T8051] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 716.541000][ T8051] usb 1-1: USB disconnect, device number 30 [ 717.069525][T11656] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1643'. [ 717.299026][T11656] bridge0: port 3(syz_tun) entered disabled state [ 717.308771][T11656] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.317698][T11656] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.052677][T11666] netlink: 'syz.2.1646': attribute type 3 has an invalid length. [ 718.055617][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1647'. [ 718.196545][ T8050] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 718.211768][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1648'. [ 718.346366][ T8050] usb 2-1: device descriptor read/64, error -71 [ 718.611247][ T8050] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 718.949047][ T8050] usb 2-1: device descriptor read/64, error -71 [ 720.240168][ T8050] usb usb2-port1: attempt power cycle [ 720.320899][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 720.320922][ T30] audit: type=1326 audit(1749006118.679:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11681 comm="syz.2.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94238e969 code=0x7fc00000 [ 720.683362][T11695] bio_check_eod: 2 callbacks suppressed [ 720.683407][T11695] syz.2.1655: attempt to access beyond end of device [ 720.683407][T11695] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 720.703063][T11695] hfs: can't find a HFS filesystem on dev nbd2 [ 720.743403][ T8050] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 720.864884][ T8050] usb 2-1: device descriptor read/8, error -71 [ 721.176229][ T8050] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 721.258479][ T8050] usb 2-1: device descriptor read/8, error -71 [ 721.397107][ T8050] usb usb2-port1: unable to enumerate USB device [ 721.823166][ T8052] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 722.026361][ T8052] usb 1-1: Using ep0 maxpacket: 16 [ 722.112899][ T8052] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 722.344306][ T8052] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 722.368257][ T8052] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 722.543173][ T8052] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 722.553078][ T8052] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.565566][ T8052] usb 1-1: Product: syz [ 722.569967][ T8052] usb 1-1: Manufacturer: syz [ 722.574872][ T8052] usb 1-1: SerialNumber: syz [ 722.608179][T11717] loop6: detected capacity change from 0 to 63 [ 722.671359][T11719] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 722.687777][T11717] support for the xor transformation has been removed. [ 722.719488][ T30] audit: type=1326 audit(1749006121.089:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11716 comm="syz.4.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bc98e969 code=0x7ffc0000 [ 722.746701][ T30] audit: type=1326 audit(1749006121.089:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11716 comm="syz.4.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f60bc98e969 code=0x7ffc0000 [ 722.769021][ T30] audit: type=1326 audit(1749006121.089:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11716 comm="syz.4.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60bc98e969 code=0x7ffc0000 [ 722.792160][ T30] audit: type=1326 audit(1749006121.089:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11716 comm="syz.4.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f60bc98e969 code=0x7ffc0000 [ 722.905308][ T30] audit: type=1400 audit(1749006121.269:403): lsm=SMACK fn=smack_task_setscheduler action=denied subject="y" object="_" requested=w pid=11688 comm="syz.0.1654" opid=11688 ocomm="syz.0.1654" [ 722.957268][T11729] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1668'. [ 723.204483][ T8052] usb 1-1: 0:2 : does not exist [ 723.217580][ T8052] usb 1-1: USB disconnect, device number 31 [ 723.316352][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 723.478493][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.495725][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.507198][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 723.526506][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.567142][ T10] usb 3-1: config 0 descriptor?? [ 723.786423][ T5813] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 723.965970][T11742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1674'. [ 724.030509][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 724.046162][ T5813] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 724.075266][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 724.094531][ T5813] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 724.119686][ T10] usb 3-1: USB disconnect, device number 41 [ 724.126262][ T5813] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 724.148478][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.178273][T11735] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 724.211043][ T5813] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 724.566565][ T5887] usb 5-1: USB disconnect, device number 43 [ 724.768022][T11754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1676'. [ 724.879334][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1676'. [ 725.457141][ T5887] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 725.662080][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.673773][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.704498][ T5887] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 725.728557][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.985847][ T5887] usb 2-1: config 0 descriptor?? [ 726.424255][T11794] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1690'. [ 726.516714][ T8052] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 726.532953][T11796] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 726.532953][T11796] The task syz.2.1690 (11796) triggered the difference, watch for misbehavior. [ 726.676934][ T8052] usb 5-1: Using ep0 maxpacket: 16 [ 726.683843][ T5887] hid (null): invalid report_count 44941 [ 726.695875][ T5887] hid-led 0003:27B8:01ED.000A: invalid report_count 44941 [ 726.697594][ T8052] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 726.749949][ T5887] hid-led 0003:27B8:01ED.000A: item 0 2 1 9 parsing failed [ 726.752965][ T8052] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 726.775628][ T8052] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 726.786818][ T5887] hid-led 0003:27B8:01ED.000A: probe with driver hid-led failed with error -22 [ 726.791882][ T8052] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 726.806460][ T8052] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.822432][ T8052] usb 5-1: Product: syz [ 726.834669][ T8052] usb 5-1: Manufacturer: syz [ 726.844197][ T8052] usb 5-1: SerialNumber: syz [ 727.093360][T11799] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1691'. [ 727.137575][ T8552] ------------[ cut here ]------------ [ 727.144822][ T8552] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 727.172011][ T8552] WARNING: CPU: 0 PID: 8552 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x303/0x350 [ 727.182761][ T8552] Modules linked in: [ 727.187738][ T8552] CPU: 0 UID: 0 PID: 8552 Comm: kworker/u8:16 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 727.199761][ T8552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 727.209906][ T8552] Workqueue: bond0 bond_mii_monitor [ 727.215183][ T8552] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 727.221273][ T8552] Code: 7c fe ff ff e8 ae 76 72 f8 c6 05 15 ea 3b 06 01 90 48 c7 c7 80 eb 90 8c 48 c7 c6 0f 45 9a 8d ba 48 00 00 00 e8 5e 23 36 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 727.241248][ T8552] RSP: 0018:ffffc90003827670 EFLAGS: 00010246 [ 727.247477][ T8552] RAX: 526af8dff0faa500 RBX: ffff88805586e000 RCX: ffff888056c9bc00 [ 727.255685][ T8552] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 727.264000][ T8552] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 727.272144][ T8552] R10: dffffc0000000000 R11: fffffbfff1bfaa44 R12: 1ffff1100ab0dc5d [ 727.280447][ T8552] R13: dffffc0000000000 R14: ffffffff8c1a8d08 R15: 0000000000000000 [ 727.288560][ T8552] FS: 0000000000000000(0000) GS:ffff888125c93000(0000) knlGS:0000000000000000 [ 727.297744][ T8552] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 727.304382][ T8552] CR2: 000000110c3c002e CR3: 000000003224a000 CR4: 00000000003526f0 [ 727.312533][ T8552] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 727.320688][ T8552] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 727.328859][ T8552] Call Trace: [ 727.332190][ T8552] [ 727.335160][ T8552] ? ethtool_op_get_link+0xd/0x70 [ 727.340403][ T8552] ethtool_op_get_link+0x15/0x70 [ 727.345519][ T8552] bond_check_dev_link+0x447/0x6c0 [ 727.350941][ T8552] ? __pfx_bond_check_dev_link+0x10/0x10 [ 727.356775][ T8552] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 727.363252][ T8552] bond_mii_monitor+0x428/0x2e00 [ 727.368309][ T8552] ? bond_mii_monitor+0x153/0x2e00 [ 727.373553][ T8552] ? __lock_acquire+0xab9/0xd20 [ 727.378650][ T8552] ? __pfx_bond_mii_monitor+0x10/0x10 [ 727.384074][ T8552] ? register_lock_class+0x51/0x320 [ 727.389398][ T8552] ? __lock_acquire+0xab9/0xd20 [ 727.394521][ T8552] ? process_scheduled_works+0x9ef/0x17b0 [ 727.400724][ T8552] ? _raw_spin_unlock_irq+0x23/0x50 [ 727.405982][ T8552] ? process_scheduled_works+0x9ef/0x17b0 [ 727.411838][ T8552] ? process_scheduled_works+0x9ef/0x17b0 [ 727.417750][ T8552] process_scheduled_works+0xae1/0x17b0 [ 727.423577][ T8552] ? __pfx_process_scheduled_works+0x10/0x10 [ 727.429689][ T8552] worker_thread+0x8a0/0xda0 [ 727.434366][ T8552] kthread+0x711/0x8a0 [ 727.438945][ T8552] ? __pfx_worker_thread+0x10/0x10 [ 727.444205][ T8552] ? __pfx_kthread+0x10/0x10 [ 727.449028][ T8552] ? _raw_spin_unlock_irq+0x23/0x50 [ 727.454379][ T8552] ? lockdep_hardirqs_on+0x9c/0x150 [ 727.459740][ T8552] ? __pfx_kthread+0x10/0x10 [ 727.464477][ T8552] ret_from_fork+0x3f9/0x770 [ 727.469231][ T8552] ? __pfx_ret_from_fork+0x10/0x10 [ 727.474416][ T8552] ? __switch_to_asm+0x39/0x70 [ 727.479283][ T8552] ? __switch_to_asm+0x33/0x70 [ 727.484347][ T8552] ? __pfx_kthread+0x10/0x10 [ 727.489209][ T8552] ret_from_fork_asm+0x1a/0x30 [ 727.494383][ T8552] [ 727.497498][ T8552] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 727.504820][ T8552] CPU: 0 UID: 0 PID: 8552 Comm: kworker/u8:16 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 727.516921][ T8552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 727.527360][ T8552] Workqueue: bond0 bond_mii_monitor [ 727.532697][ T8552] Call Trace: [ 727.536175][ T8552] [ 727.539165][ T8552] dump_stack_lvl+0x99/0x250 [ 727.543799][ T8552] ? __asan_memcpy+0x40/0x70 [ 727.548434][ T8552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 727.553869][ T8552] ? __pfx__printk+0x10/0x10 [ 727.558544][ T8552] panic+0x2db/0x790 [ 727.562495][ T8552] ? __pfx_panic+0x10/0x10 [ 727.567071][ T8552] ? ret_from_fork_asm+0x1a/0x30 [ 727.572155][ T8552] __warn+0x31b/0x4b0 [ 727.576270][ T8552] ? __linkwatch_sync_dev+0x303/0x350 [ 727.581706][ T8552] ? __linkwatch_sync_dev+0x303/0x350 [ 727.587196][ T8552] report_bug+0x2be/0x4f0 [ 727.591597][ T8552] ? __linkwatch_sync_dev+0x303/0x350 [ 727.597120][ T8552] ? __linkwatch_sync_dev+0x303/0x350 [ 727.602900][ T8552] ? __linkwatch_sync_dev+0x305/0x350 [ 727.608319][ T8552] handle_bug+0x84/0x160 [ 727.612697][ T8552] exc_invalid_op+0x1a/0x50 [ 727.617248][ T8552] asm_exc_invalid_op+0x1a/0x20 [ 727.622144][ T8552] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 727.628170][ T8552] Code: 7c fe ff ff e8 ae 76 72 f8 c6 05 15 ea 3b 06 01 90 48 c7 c7 80 eb 90 8c 48 c7 c6 0f 45 9a 8d ba 48 00 00 00 e8 5e 23 36 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 727.647989][ T8552] RSP: 0018:ffffc90003827670 EFLAGS: 00010246 [ 727.654100][ T8552] RAX: 526af8dff0faa500 RBX: ffff88805586e000 RCX: ffff888056c9bc00 [ 727.662099][ T8552] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 727.670240][ T8552] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 727.678329][ T8552] R10: dffffc0000000000 R11: fffffbfff1bfaa44 R12: 1ffff1100ab0dc5d [ 727.686354][ T8552] R13: dffffc0000000000 R14: ffffffff8c1a8d08 R15: 0000000000000000 [ 727.694385][ T8552] ? ethtool_op_get_link+0xd/0x70 [ 727.699471][ T8552] ethtool_op_get_link+0x15/0x70 [ 727.704457][ T8552] bond_check_dev_link+0x447/0x6c0 [ 727.709718][ T8552] ? __pfx_bond_check_dev_link+0x10/0x10 [ 727.715585][ T8552] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 727.722041][ T8552] bond_mii_monitor+0x428/0x2e00 [ 727.727031][ T8552] ? bond_mii_monitor+0x153/0x2e00 [ 727.732182][ T8552] ? __lock_acquire+0xab9/0xd20 [ 727.737393][ T8552] ? __pfx_bond_mii_monitor+0x10/0x10 [ 727.742798][ T8552] ? register_lock_class+0x51/0x320 [ 727.748032][ T8552] ? __lock_acquire+0xab9/0xd20 [ 727.753131][ T8552] ? process_scheduled_works+0x9ef/0x17b0 [ 727.759091][ T8552] ? _raw_spin_unlock_irq+0x23/0x50 [ 727.764331][ T8552] ? process_scheduled_works+0x9ef/0x17b0 [ 727.770092][ T8552] ? process_scheduled_works+0x9ef/0x17b0 [ 727.775859][ T8552] process_scheduled_works+0xae1/0x17b0 [ 727.781482][ T8552] ? __pfx_process_scheduled_works+0x10/0x10 [ 727.787528][ T8552] worker_thread+0x8a0/0xda0 [ 727.792194][ T8552] kthread+0x711/0x8a0 [ 727.796306][ T8552] ? __pfx_worker_thread+0x10/0x10 [ 727.801561][ T8552] ? __pfx_kthread+0x10/0x10 [ 727.806388][ T8552] ? _raw_spin_unlock_irq+0x23/0x50 [ 727.811743][ T8552] ? lockdep_hardirqs_on+0x9c/0x150 [ 727.817202][ T8552] ? __pfx_kthread+0x10/0x10 [ 727.821926][ T8552] ret_from_fork+0x3f9/0x770 [ 727.826648][ T8552] ? __pfx_ret_from_fork+0x10/0x10 [ 727.831878][ T8552] ? __switch_to_asm+0x39/0x70 [ 727.836849][ T8552] ? __switch_to_asm+0x33/0x70 [ 727.841770][ T8552] ? __pfx_kthread+0x10/0x10 [ 727.846492][ T8552] ret_from_fork_asm+0x1a/0x30 [ 727.851838][ T8552] [ 727.855312][ T8552] Kernel Offset: disabled [ 727.859722][ T8552] Rebooting in 86400 seconds..